Skip to content

chore: bump the python-dependencies group across 1 directory with 13 updates - #245

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-c6b1285b18
Closed

chore: bump the python-dependencies group across 1 directory with 13 updates#245
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-c6b1285b18

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on django, pytz, django-environ, gunicorn, django-upgrade, whitenoise, django-structlog, django-allauth[socialaccount], djlint, sentry-sdk[django], pytest, pytest-django and django-import-export[all] to permit the latest version.
Updates django from 5.2.11 to 6.1

Commits

Updates pytz from 2025.2 to 2026.3.post1

Commits
  • 661bca9 Bump version numbers to 2026.3.post1 for python2 fix
  • 1e31a16 Log python version running tests, force python2
  • b3ca7c3 Unix line endings
  • b55039a Replace non-ASCII character in comment to fix build with Python 2
  • 5420ee2 Replace non-ASCII character in comment
  • 2c139e8 Merge branch 'fix/localize-overflow-at-datetime-extremes' of https://github.c...
  • c843864 Run zdump tests quietly
  • 518500c Reduce noise when collecting zdump info dumps
  • 081f935 Merge branch 'kytta-fix-dst' into 2026c
  • 8c9d69b Merge branch 'master' into 2026c
  • Additional commits viewable in compare view

Updates django-environ from 0.13.0 to 0.14.0

Release notes

Sourced from django-environ's releases.

v0.14.0

django-environ 0.14.0 improves type annotations across Env and updates Env.read_env() to support caller-owned file-like objects without closing them.

This is the final django-environ release supporting Python 3.9.

Added

  • Type annotations and matching docstring information for Env methods.
  • A conditional typing_extensions dependency providing TypeAlias on Python 3.9.

Changed

  • Env.read_env() now accepts path-like and file-like objects without closing file-like objects supplied by the caller.

Fixed

  • Env.read_env() now raises an explicit error when it cannot determine the caller frame used to resolve the default .env path.

Full changelog: joke2k/django-environ@v0.13.0...v0.14.0

PyPI: https://pypi.org/project/django-environ/0.14.0/

Changelog

Sourced from django-environ's changelog.

v0.14.0_ - 18-June-2026

Added +++++

  • Added type annotations and matching docstring information to Env methods [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.
  • Added a Python 3.9 compatibility dependency on typing_extensions for TypeAlias [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Changed +++++++

  • Updated Env.read_env() to accept path-like and file-like objects without closing file-like objects supplied by the caller [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Fixed +++++

  • Added an explicit error when Env.read_env() cannot determine its caller frame while resolving the default .env path [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.
Commits
  • 6e1b461 Merge pull request #635 from joke2k/release/0.14.0
  • b65f66e chore(release): prepare 0.14.0
  • 39f980a Merge pull request #633 from joke2k/hotfix/0.14-apply-pr-600
  • 020825c ci: allow release and hotfix PRs to target main
  • 6c1dd5b fix(typing): support TypeAlias on Python 3.9
  • c0d7b2b Ensure Env.read_env supports any file-like object
  • c41ee54 Guard against an inability to read stack frames
  • 64bfe4b Add type information to docstrings
  • 791df95 Add type annotations to str and bool parameters of methods in Env
  • 4370592 Merge branch 'develop' into main
  • See full diff in compare view

Updates gunicorn from 25.1.0 to 26.0.0

Release notes

Sourced from gunicorn's releases.

26.0.0

Breaking Changes

  • Eventlet worker removed: The eventlet worker class has been dropped. Migrate to gevent, gthread, or tornado.

New Features

  • ASGI Framework Compatibility Suite: New end-to-end compatibility test harness covering Starlette, FastAPI, Litestar, Quart, Sanic, and BlackSheep. Current grid passes 438/444 tests (98%).
  • ASGI Test Suite Expansion: 134 additional ASGI unit tests covering protocol semantics, lifespan, websockets, and chunked framing.

Security

  • HTTP/1.1 Request-Target Validation (RFC 9112 sections 3.2.3, 3.2.4):
    • Reject authority-form request-target outside CONNECT
    • Reject asterisk-form request-target outside OPTIONS
    • Reject relative-reference request-targets
  • Header Field Hardening (RFC 9110):
    • Reject control characters in header field-value (section 5.5)
    • Reject forbidden trailer field-names (section 6.5.1)
    • Reject Content-Length list form (RFC 9112 section 6.3)
  • Request Smuggling Hardening:
    • Tighten keepalive gate and scope finish_body byte cap
    • Keep _body_receiver alive across the keepalive smuggling gate so pipelined requests cannot re-enter a closed body
    • Address parser/protocol findings from a six-point WSGI/ASGI audit
  • PROXY Protocol (ASGI): Enforce proxy_allow_ips and tighten v1/v2 parsing in the ASGI callback parser.
  • Connection Draining: Drain the connection on close per RFC 9112 section 9.6 to prevent reset-on-close truncation.

Bug Fixes

  • Body Framing on HEAD/204/304:
    • Keep Content-Length on HEAD and 304 responses (#3621)
    • Drop body framing on HEAD/204/304 even when the framework set it
    • Warn once when an ASGI app emits a body for a no-body response
  • HTTP/2 ASGI:
    • Fix _handle_stream_ended to set _body_complete in the async HTTP/2 handler so request bodies finalize correctly on stream end
    • Add InvalidChunkExtension mapping and fast-parser support in ASGI tests (#3565)
  • HTTP/1.1 100-Continue: Stop adding Transfer-Encoding: chunked to 100-Continue interim responses.
  • WebSocket Close Handshake (RFC 6455):
    • Comply with the close handshake state machine
    • Close the transport after the close handshake completes
    • Fix binary send when the text key is None
  • Early Hints: Validate headers in the early_hints callback to match process_headers; pass only the header name to InvalidHeader (#3588).
  • ASGI Framework Fixes:
    • Fix ASGI disconnect handling for Django-style apps
    • Fix Litestar request handling (use raw ASGI receive for body/headers)
    • Fix Litestar HTTP endpoints for compatibility tests
    • Fix Quart headers endpoint to normalize keys to lowercase
    • Fix Quart WebSocket close test app (missing accept())
    • Fix duplicate Transfer-Encoding header for BlackSheep streaming

... (truncated)

Commits
  • 5d819cf release: 26.0.0
  • b45c70d Merge pull request #3611 from zc-mattcen/docs-typo
  • 99c8d48 Merge pull request #3623 from benoitc/chore/drop-eventlet-add-h2-uvloop-test-...
  • 5a655af Merge pull request #3622 from benoitc/test/docker-port-and-ipv4-fixes
  • 201df19 chore: remove eventlet worker; add h2 and uvloop to test deps
  • f4ac8e1 test: pass action name to dirty client and stabilize after TTOU spam
  • 54d38af test: unblock docker fixtures on macOS hosts
  • 68843c8 Merge pull request #3621 from benoitc/fix/asgi-preserve-content-length-on-hea...
  • 31f2618 Merge pull request #3620 from benoitc/fix/asgi-proxy-protocol-trust-and-parsing
  • 41ec752 fix: keep Content-Length on HEAD and 304 responses
  • Additional commits viewable in compare view

Updates django-upgrade from 1.29.1 to 1.31.1

Changelog

Sourced from django-upgrade's changelog.

1.31.1 (2026-06-26)

  • Remove the settings_logging_admin_email_handler fixer because it made an incorrect change and cannot be salvaged.

    Thanks to Mike Edmunds for spotting the mistake in this GitHub comment <https://github.com/adamchainz/django-upgrade/pull/662#discussion_r3463198673>. PR [#671](https://github.com/adamchainz/django-upgrade/issues/671) <https://github.com/adamchainz/django-upgrade/pull/671>.

1.31.0 (2026-06-25)

  • Support Django 6.1 as a target version.

    PR [#646](https://github.com/adamchainz/django-upgrade/issues/646) <https://github.com/adamchainz/django-upgrade/pull/646>__.

  • Add Django 6.1+ :ref:mail_get_connection <mail_get_connection> fixer to replace no-argument mail get_connection() calls with mailers.default, and remove inline connection=get_connection() kwargs from mail sending functions.

    PR [#666](https://github.com/adamchainz/django-upgrade/issues/666) <https://github.com/adamchainz/django-upgrade/pull/666>__.

  • Add Django 6.1+ :ref:mail_fail_silently <mail_fail_silently> fixer to remove fail_silently=False keyword arguments from mail sending function calls.

    PR [#668](https://github.com/adamchainz/django-upgrade/issues/668) <https://github.com/adamchainz/django-upgrade/pull/668>__.

  • Add Django 6.1+ settings_logging_admin_email_handler fixer to rename the email_backend argument of AdminEmailHandler in the LOGGING setting to using.

    PR [#662](https://github.com/adamchainz/django-upgrade/issues/662) <https://github.com/adamchainz/django-upgrade/pull/662>__.

  • Add Django 6.1+ compatibility_imports :ref:fixer entries <postgres_bit_aggregates> to move BitAnd, BitOr, and BitXor imports from django.contrib.postgres.aggregates to django.db.models.

    PR [#658](https://github.com/adamchainz/django-upgrade/issues/658) <https://github.com/adamchainz/django-upgrade/pull/658>__.

  • Add Django 6.1+ :ref:transaction_savepoint <transaction_savepoint> fixer to rename django.db.transaction\’s savepoint to savepoint_create.

    PR [#660](https://github.com/adamchainz/django-upgrade/issues/660) <https://github.com/adamchainz/django-upgrade/pull/660>__.

  • Add Django 2.0+ :ref:render_to_response <render_to_response> fixer to rewrite render_to_response() calls to render(), inserting request as the first argument.

    PR [#669](https://github.com/adamchainz/django-upgrade/issues/669) <https://github.com/adamchainz/django-upgrade/pull/669>__.

  • Extend :ref:test_http_headers <test_http_headers> fixer to cover AsyncClient, AsyncRequestFactory, and self.async_client.*() calls.

    Thanks to Benjamin Aduo in PR [#633](https://github.com/adamchainz/django-upgrade/issues/633) <https://github.com/adamchainz/django-upgrade/pull/633>__.

  • Extend :ref:django_urls <django_urls> fixer to convert translated URL patterns wrapped in translation functions, like _(r'^about/$'), when the pattern is convertible.

    PR [#667](https://github.com/adamchainz/django-upgrade/issues/667) <https://github.com/adamchainz/django-upgrade/pull/667>__.

  • Extend :ref:utils_timezone fixer to work when no import datetime statement exists, by inserting import datetime as dt when the name dt is unused.

    Thanks to Ryan Siemens for the report in Issue [#568](https://github.com/adamchainz/django-upgrade/issues/568) <https://github.com/adamchainz/django-upgrade/issues/568>__ and Benjamin Aduo for the implementation in PR [#631](https://github.com/adamchainz/django-upgrade/issues/631) <https://github.com/adamchainz/django-upgrade/pull/631>__.

... (truncated)

Commits
  • 5adcd26 Version 1.31.1
  • 8e6b2e7 Remove settings_logging_admin_email_handler fixer (#671)
  • 1dc5977 Version 1.31.0
  • b8ac97f Fix some fixers to correctly handle calls with starred arguments (#670)
  • b39db9a Add Django 2.0+ fixer for render_to_response() (#669)
  • dce3062 Add Django 6.1+ fixer for email function mail_fail_silently arg (#668)
  • a0efd95 Add Django 6.1+ fixer for django.core.mail.get_connection() changes (#666)
  • ecc46a3 Extend django_urls to handle translated URL patterns (#667)
  • d6dbffa Fix versioned_branches fixer to avoid emptying parent block (#665)
  • f682a9e Fix null_boolean_field fixer when NullBooleanField used as base class (#664)
  • Additional commits viewable in compare view

Updates whitenoise from 6.11.0 to 6.12.0

Changelog

Sourced from whitenoise's changelog.

6.12.0 (2026-02-27)

  • Drop Python 3.9 support.
  • Fix potential unauthorised file access vulnerability in "autorefesh" mode. See PR [#684](https://github.com/evansd/whitenoise/issues/684) <https://github.com/evansd/whitenoise/pull/684>__ for details, and a reminder that autorefresh mode has always been documented as unsuitable for production use. Thanks Seth Larson for reporting.
Commits

Updates django-structlog from 10.0.0 to 10.1.0

Changelog

Sourced from django-structlog's changelog.

10.1.0 (May 30, 2025)

New: - Add settings to configure the logging levels for the request middleware and celery task events. See [#1022](https://github.com/jrobichaud/django-structlog/issues/1022) <https://github.com/jrobichaud/django-structlog/issues/1022>_.

Commits
  • a53b04e Bump version
  • 4c2e49a Merge pull request #1024 from offbyone/push-tkpuvxrrvkvu
  • 770a6b2 Make the log level for the request middleware fully configurable
  • dd60535 Merge pull request #1001 from jrobichaud/dependabot/pip/docs/sphinx-9.1.0
  • 1cc4dc0 Merge pull request #1011 from jrobichaud/dependabot/pip/requirements/coverage...
  • e110580 Merge pull request #1012 from jrobichaud/dependabot/github_actions/peter-evan...
  • 960a1ea Merge pull request #1014 from jrobichaud/dependabot/pip/docs/importlib-metada...
  • f0c6d5c Merge pull request #1015 from jrobichaud/dependabot/github_actions/codecov/co...
  • d3383c0 Merge pull request #1016 from jrobichaud/dependabot/pip/docs/celery-5.6.3
  • 944199e chore(deps): bump celery from 5.6.2 to 5.6.3 in /docs
  • Additional commits viewable in compare view

Updates django-allauth[socialaccount] to 65.19.0

Commits

Updates djlint from 1.36.4 to 1.44.1

Release notes

Sourced from djlint's releases.

v1.44.1

Fix

  • Formatting no longer changes what the page renders. A space that shows was dropped (<span>a</span><span> b </span> rendered as ab, a{% if x %} b {% endif %}c as abc), a space that shows nothing was added (<span> </span> became <span> </span>), and moving a tag onto its own line could add one (x<img>y, or across a comment as in a{# c #}<img>). Whitespace is now kept where it renders and dropped where it does not.
  • A line break inside an attribute value is kept, so a title tooltip no longer loses a line and a data- value read by script no longer comes back different. Line breaks in class, style, srcset and sizes mean nothing and are still joined.
  • Indentation inside <pre> and <textarea> is left alone when the closing tag has something after it on its line (<pre> a\n b</pre> tail).
  • Whitespace css does not collapse, such as U+2005, is text, and is no longer stripped from the edges of an element or of the file.
  • Two indenting fixes: a line that closes one tag and opens another (</b><i>) indents its contents again, and a line that closes more tags than it opens unindents even when a whole tag ends it (</b><small></small>). Both left the lines after them at the wrong level.
  • --line-break-after-multiline-tag now applies only to tags actually written over several lines, as its help says. It was holding back the content of every element, splitting tags that fit on one line.
  • A class value is tidied wherever it was written: class=" a b " becomes class="a b". A tag whose attribute value holds a line break is spread over lines, since it cannot fit on one.

v1.44.0

Feature

  • New --allow-empty-input option, and the matching allow_empty_input config key, exits 0 instead of 2 when the given paths match no files.

Fix

  • An html close tag inside an inline {% if %}...{% endif %} no longer dedents everything that follows it by one level, collapsing nested structures toward column 0 - a regression in 1.43.0. A close tag already at the content level of the template block it sits in is held there, but the level it was denied was then taken off the end of the line instead, so {% if r %}</strong>{% endif %} moved the rest of the block left. The matching open tag never took a level to give back, since {% endif %} had already returned it.
  • A run where every file found was skipped by exclude, extend_exclude, use_gitignore or require_pragma now exits 0 instead of 1. Skipping them is the configuration doing its job, and it is what lets exclude work under pre-commit, which passes the names of every staged file. Paths that match no files at all now exit 2 rather than 1, so exit 1 means only that djLint found something to report.
  • An unhandled error exits 2 instead of 1, so a crash is no longer indistinguishable from a lint error. The traceback is still printed.
  • An unrecognized --profile, or profile in a config file, is now a usage error. A typo used to lint with a silently different rule set and exit 0, and raised KeyError with --require-pragma.
  • A directory whose name matches the file extension (build.html/) is no longer picked up as a template and opened as a file, crashing the run.
  • No files to check! is written to stderr instead of stdout, where formatted code is written.
  • Input piped to djlint - --reformat that --require-pragma skips is handed back byte for byte instead of being replaced by No files to check!.

v1.43.2

Fix

  • blank_line_before_tag no longer inserts a blank line when the previous line opens a block and increases the indentation, e.g. between <div> and {% block %}. Since 1.41.0 blank_line_after_tag has left the closing edge of a block alone ({% endblock %} before </div>), while the opening edge kept its padding, so a template using both options came out lopsided.

v1.43.1

Fix

  • H025 no longer reports the closing tag of a multi-line <script> or <style> as an orphan - a regression in 1.43.0. A genuinely unmatched </script> is still reported.

v1.43.0

Feature

  • New --stdin-filename option gives content piped in on stdin (djlint -) its real path, so per-file-ignores matches against that name and linter messages report it. Per-file ignores were previously dead for piped input, since nothing matches the name -. Path separators are normalized as they are for files on disk.

Fix

  • An apostrophe inside a template tag nested in an attribute value (title="{% translate "You don't have permission" %}") no longer swallows the rest of the document, which made H025 report every enclosing element as an orphan. A template tag in a value is now skipped whole unless it holds a >, so a quoted literal like a="{{" is still left alone.
  • A line that starts with a closing tag and ends with a whole tag (</span>tail<textarea>y</textarea>) unindents again; everything after it stayed one level too deep.
  • A template block tag followed by a whole html tag on the same line ({% endif %} <td class="x">y</td>) indents as a block tag again, so {% endif %} unindents and {% else %} aligns with its {% if %}. A line only takes that shape once the tag fits on one line, so reformatting an already formatted file moved it.
  • A tag opened after the end of a verbatim block on the same line (</pre> <span>x) is tracked again; its closing tag took a level from a tag opened before the block, dedenting that tag's siblings.
  • A template control block written across lines is kept that way when it opens against a tag (<div>{% if x %}), and the choice is no longer applied to the wrong block. Blocks were paired with the source by position, which does not line up with the expanded html; they are now matched by tag and contents.
  • A tag whose style, srcset, data-srcset or sizes value was written over several lines is no longer spread over multiple lines and pulled back together on the next run. max_attribute_length is now measured against what is written out, not against padding that the rewrite drops.
  • A <pre> or <textarea> opened on a line that also holds a self-contained comment (<pre>x<!--c-->) is recognized as opening a verbatim block again. Its contents were re-indented instead of left alone, and the closing </pre> gained an indent level on every run - unbounded whitespace growth inside preformatted text.

... (truncated)

Changelog

Sourced from djlint's changelog.

[1.44.1] - 2026-08-07

Fix

  • Formatting no longer changes what the page renders. A space that shows was dropped (<span>a</span><span> b </span> rendered as ab, a{% if x %} b {% endif %}c as abc), a space that shows nothing was added (<span> </span> became <span> </span>), and moving a tag onto its own line could add one (x<img>y, or across a comment as in a{# c #}<img>). Whitespace is now kept where it renders and dropped where it does not.
  • A line break inside an attribute value is kept, so a title tooltip no longer loses a line and a data- value read by script no longer comes back different. Line breaks in class, style, srcset and sizes mean nothing and are still joined.
  • Indentation inside <pre> and <textarea> is left alone when the closing tag has something after it on its line (<pre> a\n b</pre> tail).
  • Whitespace css does not collapse, such as U+2005, is text, and is no longer stripped from the edges of an element or of the file.
  • Two indenting fixes: a line that closes one tag and opens another (</b><i>) indents its contents again, and a line that closes more tags than it opens unindents even when a whole tag ends it (</b><small></small>). Both left the lines after them at the wrong level.
  • --line-break-after-multiline-tag now applies only to tags actually written over several lines, as its help says. It was holding back the content of every element, splitting tags that fit on one line.
  • A class value is tidied wherever it was written: class=" a b " becomes class="a b". A tag whose attribute value holds a line break is spread over lines, since it cannot fit on one.

[1.44.0] - 2026-08-04

Feature

  • New --allow-empty-input option, and the matching allow_empty_input config key, exits 0 instead of 2 when the given paths match no files.

Fix

  • An html close tag inside an inline {% if %}...{% endif %} no longer dedents everything that follows it by one level, collapsing nested structures toward column 0 - a regression in 1.43.0. A close tag already at the content level of the template block it sits in is held there, but the level it was denied was then taken off the end of the line instead, so {% if r %}</strong>{% endif %} moved the rest of the block left. The matching open tag never took a level to give back, since {% endif %} had already returned it.
  • A run where every file found was skipped by exclude, extend_exclude, use_gitignore or require_pragma now exits 0 instead of 1. Skipping them is the configuration doing its job, and it is what lets exclude work under pre-commit, which passes the names of every staged file. Paths that match no files at all now exit 2 rather than 1, so exit 1 means only that djLint found something to report.
  • An unhandled error exits 2 instead of 1, so a crash is no longer indistinguishable from a lint error. The traceback is still printed.
  • An unrecognized --profile, or profile in a config file, is now a usage error. A typo used to lint with a silently different rule set and exit 0, and raised KeyError with --require-pragma.
  • A directory whose name matches the file extension (build.html/) is no longer picked up as a template and opened as a file, crashing the run.
  • No files to check! is written to stderr instead of stdout, where formatted code is written.
  • Input piped to djlint - --reformat that --require-pragma skips is handed back byte for byte instead of being replaced by No files to check!.

[1.43.2] - 2026-08-01

Fix

  • blank_line_before_tag no longer inserts a blank line when the previous line opens a block and increases the indentation, e.g. between <div> and {% block %}. Since 1.41.0 blank_line_after_tag has left the closing edge of a block alone ({% endblock %} before </div>), while the opening edge kept its padding, so a template using both options came out lopsided.

[1.43.1] - 2026-07-28

Fix

  • H025 no longer reports the closing tag of a multi-line <script> or <style> as an orphan - a regression in 1.43.0. A genuinely unmatched </script> is still reported.

[1.43.0] - 2026-07-27

Feature

  • New --stdin-filename option gives content piped in on stdin (djlint -) its real path, so per-file-ignores matches against that name and linter messages report it. Per-file ignores were previously dead for piped input, since nothing matches the name -. Path separators are normalized as they are for files on disk.

Fix

  • An apostrophe inside a template tag nested in an attribute value (title="{% translate "You don't have permission" %}") no longer swallows the rest of the document, which made H025 report every enclosing element as an orphan. A template tag in a value is now skipped whole unless it holds a >, so a quoted literal like a="{{" is still left alone.
  • A line that starts with a closing tag and ends with a whole tag (</span>tail<textarea>y</textarea>) unindents again; everything after it stayed one level too deep.

... (truncated)

Commits
  • a1f8e71 v1.44.1
  • 785082a fix(formatter): stop formatting from changing what the page renders
  • ae29201 chore(deps): lock file maintenance (#2344)
  • d2af875 chore(deps): update pre-commit hook tombi-toml/tombi-pre-commit to v1.2.6 (#2...
  • c13a92e chore(deps): update dependency postcss-nested to v8.0.1 (#2341)
  • 5df1eea chore(deps): lock file maintenance (#2340)
  • 7511f95 chore(deps): update pre-commit hook zizmorcore/zizmor-pre-commit to v1.29.0 (...
  • 71def5c fix: use typing_extensions.NamedTuple
  • 31e4cfb perf: don't stat candidates the exclude pattern drops
  • 1537d9f v1.44.0
  • Additional commits viewable in compare view

Updates sentry-sdk[django] to 2.66.1

Release notes

Sourced from sentry-sdk[django]'s releases.

2.66.1

Bug Fixes 🐛

Tracing

Internal Changes 🔧

Changelog

Sourced from sentry-sdk[django]'s changelog.

2.66.1

Bug Fixes 🐛

Tracing

Internal Changes 🔧

2.66.0

New Features ✨

  • (tracing) Promote trace_lifecycle and ignore_spans to top-level options by @​ericapisani in #6821

Bug Fixes 🐛

Tracing

  • Skip child span creation in streaming path when no current span (HTTP clients) by @​sentrivana in #6811
  • Skip child span creation in streaming path when no current span (task queues) by @​sentrivana in #6814
  • Skip child span creation in streaming path when no current span (misc) by @​sentrivana in #6815
  • Skip child span creation in streaming path when no current span (databases) by @​sentrivana in #6808
  • Skip child span creation in streaming path when no current span (web frameworks) by @​sentrivana in #6810
  • Skip child span creation in streaming path when no current span (django) by @​sentrivana in #6809

Internal Changes 🔧

2.65.0

New Features ✨

Huey

Other

... (truncated)

Commits
  • 653a292 Update CHANGELOG.md
  • e20c226 release: 2.66.1
  • 4524b65 fix(tracing): Stop setting NoOpSpan on scope in the streaming trace lifecyc...
  • 2e9f26e ref(tracing): No-op and emit warning in start_transaction with the streamin...
  • 3a50950 fix(tracing): handle exceptions raised within traces_sampler and other callba...
  • b5171b7 ref: Use top-level trace_lifecycle and ignore_spans options in tests (#6855)
  • 17e0348 ref: Use old sampling context format in span streaming (#6848)
  • 2e09497 test: Add streaming tests to test_http_headers (#6785)
  • 9996734 feat(tracing): Send sentry.segment.name.source instead of `sentry.span.sour...
  • 00224f7 remove span streaming docs in changelog (#6831)
  • Additional commits viewable in compare view

Updates pytest from 9.0.2 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

  • #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

    If this is undesirable, move the fixture definition to a conftest.py file if possible.

    Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

  • #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

    See 10819 and 14011.

  • #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

    See dynamic-fixture-request-during-teardown for details.

  • #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

    These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

    See parametrize-iterators for details and suggestions.

  • #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

    See config-inicfg for more details.

  • #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates pytest-django from 4.12.0 to 4.13.0

Release notes

Sourced from pytest-django's releases.

v4.13.0

https://pytest-django.readthedocs.io/en/latest/changelog.html#v4-13-0-2026-08-06

Changelog

Sourced from pytest-django's changelog.

v4.13.0 (2026-08-06)

Compatibility ^^^^^^^^^^^^^

  • Dropped support for Django 4.2 and 5.1.

Improvements ^^^^^^^^^^^^

  • Export pytest_django.Settings from the top-level pytest_django module so the :fixture:settings fixture can be type-annotated ([#1257](https://github.com/pytest-dev/pytest-django/issues/1257) <https://github.com/pytest-dev/pytest-django/issues/1257>__).

Bugfixes ^^^^^^^^

  • Fixed type hints of assert methods to match actual...

    Description has been truncated

@dependabot
chore: bump the python-dependencies group across 1 directory with 13 …
1bf12a5 
…updates

Updates the requirements on [django](https://github.com/django/django), [pytz](https://github.com/stub42/pytz), [django-environ](https://github.com/joke2k/django-environ), [gunicorn](https://github.com/benoitc/gunicorn), [django-upgrade](https://github.com/adamchainz/django-upgrade), [whitenoise](https://github.com/evansd/whitenoise), [django-structlog](https://github.com/jrobichaud/django-structlog), [django-allauth[socialaccount]](https://github.com/sponsors/pennersr), [djlint](https://github.com/djlint/djLint), [sentry-sdk[django]](https://github.com/getsentry/sentry-python), [pytest](https://github.com/pytest-dev/pytest), [pytest-django](https://github.com/pytest-dev/pytest-django) and [django-import-export[all]](https://github.com/django-import-export/django-import-export) to permit the latest version.

Updates `django` from 5.2.11 to 6.1
- [Commits](django/django@5.2.11...6.1)

Updates `pytz` from 2025.2 to 2026.3.post1
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2025.2...release_2026.3.post1)

Updates `django-environ` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/joke2k/django-environ/releases)
- [Changelog](https://github.com/joke2k/django-environ/blob/v0.14.0/CHANGELOG.rst)
- [Commits](joke2k/django-environ@v0.13.0...v0.14.0)

Updates `gunicorn` from 25.1.0 to 26.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@25.1.0...26.0.0)

Updates `django-upgrade` from 1.29.1 to 1.31.1
- [Changelog](https://github.com/adamchainz/django-upgrade/blob/main/docs/changelog.rst)
- [Commits](adamchainz/django-upgrade@1.29.1...1.31.1)

Updates `whitenoise` from 6.11.0 to 6.12.0
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.11.0...6.12.0)

Updates `django-structlog` from 10.0.0 to 10.1.0
- [Changelog](https://github.com/jrobichaud/django-structlog/blob/main/docs/changelog.rst)
- [Commits](jrobichaud/django-structlog@10.0.0...10.1.0)

Updates `django-allauth[socialaccount]` to 65.19.0
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `djlint` from 1.36.4 to 1.44.1
- [Release notes](https://github.com/djlint/djLint/releases)
- [Changelog](https://github.com/djlint/djLint/blob/master/CHANGELOG.md)
- [Commits](djlint/djLint@v1.36.4...v1.44.1)

Updates `sentry-sdk[django]` to 2.66.1
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.8.0...2.66.1)

Updates `pytest` from 9.0.2 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.1.1)

Updates `pytest-django` from 4.12.0 to 4.13.0
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
- [Commits](pytest-dev/pytest-django@v4.12.0...v4.13.0)

Updates `django-import-export[all]` to 4.4.1
- [Release notes](https://github.com/django-import-export/django-import-export/releases)
- [Changelog](https://github.com/django-import-export/django-import-export/blob/main/docs/changelog.rst)
- [Commits](django-import-export/django-import-export@4.3.4...4.4.1)

---
updated-dependencies:
- dependency-name: django
  dependency-version: '6.1'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pytz
  dependency-version: 2026.3.post1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: django-environ
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: gunicorn
  dependency-version: 26.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: django-upgrade
  dependency-version: 1.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: whitenoise
  dependency-version: 6.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: django-structlog
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: django-allauth[socialaccount]
  dependency-version: 65.19.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: djlint
  dependency-version: 1.44.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: sentry-sdk[django]
  dependency-version: 2.66.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest-django
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: django-import-export[all]
  dependency-version: 4.4.1
  dependency-type: direct:production
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Aug 10, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 21, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 21, 2026
@dependabot
dependabot Bot deleted the dependabot/uv/python-dependencies-c6b1285b18 branch August 21, 2026 10:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants