Skip to content

Bump the pip group across 3 directories with 6 updates#7

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-57129b51ab
Open

Bump the pip group across 3 directories with 6 updates#7
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/pip-57129b51ab

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 24, 2026

Copy link
Copy Markdown

Bumps the pip group with 6 updates in the / directory:

Package From To
configobj 5.0.6 5.0.9
cryptography 3.4.7 48.0.1
dynaconf 3.1.4 3.2.13
jinja2 2.11.3 3.1.6
requests 2.25.1 2.33.0
setuptools 54.2.0 78.1.1

Bumps the pip group with 6 updates in the /docs directory:

Package From To
configobj 5.0.6 5.0.9
cryptography 3.4.7 48.0.1
dynaconf 3.1.4 3.2.13
jinja2 2.11.3 3.1.6
requests 2.25.1 2.33.0
setuptools 54.2.0 78.1.1

Bumps the pip group with 6 updates in the /src/knox directory:

Package From To
configobj 5.0.6 5.0.9
cryptography 3.4.7 48.0.1
dynaconf 3.1.4 3.2.13
jinja2 2.11.3 3.1.6
requests 2.25.1 2.33.0
setuptools 54.2.0 78.1.1

Updates configobj from 5.0.6 to 5.0.9

Release notes

Sourced from configobj's releases.

5.0.9

What's Changed

New Contributors

Full Changelog: DiffSK/configobj@v5.0.8...v5.0.9

confirming things work in newer python versions

5.0.7 originally did this work, but 5.0.8 fixes a regression (#230)

Changelog

Sourced from configobj's changelog.

Changelog

Release 5.0.9 """""""""""""

Release 5.0.8 """""""""""""

  • fixing/test for a regression introduced in 5.0.7 that prevented import validate from working

Release 5.0.7 """""""""""""

  • update testing to validate against python version 2.7 and 3.5-3.11
  • update broken links / non-existent services and references

Older Releases """"""""""""""

  • Release 5.0.6 improves error messages in certain edge cases
  • Release 5.0.5 corrects a unicode-bug that still existed in writing files
  • Release 5.0.4 corrects a unicode-bug that still existed in reading files after fixing lists of string in 5.0.3
  • Release 5.0.3 corrects errors related to the incorrectly handling unicode encoding and writing out files
  • Release 5.0.2 adds a specific error message when trying to install on Python versions older than 2.5
  • Release 5.0.1 fixes a regression with unicode conversion not happening in certain cases PY2
  • Release 5.0.0 updates the supported Python versions to 2.6, 2.7, 3.2, 3.3 and is otherwise unchanged
  • Release 4.7.2 fixes several bugs in 4.7.1
  • Release 4.7.1 fixes a bug with the deprecated options keyword in 4.7.0.
  • Release 4.7.0 improves performance adds features for validation and fixes some bugs.
Commits
  • 242dfd0 release 5.0.9
  • 8857b08 Merge pull request #246 from DiffSK/python-version
  • d6f7597 Update minimum python to 3.7 everywhere, and add 3.12
  • 8ffcf0c Merge pull request #241 from yegorich/license
  • 5e2f143 Merge pull request #245 from jelmer/extra-2014
  • fdf3634 Drop extra '2014' in LICENSE file. Fixes #233
  • 3480a6e Merge pull request #237 from jelmer/drop-python2
  • 008165c Drop python 3.5 from GitHub action, since it now fails to download
  • 861383c Drop support for Python < 3.5
  • 7c618b0 Merge pull request #236 from cdcadman/cve_2023_26112
  • Additional commits viewable in compare view

Updates cryptography from 3.4.7 to 48.0.1

Changelog

Sourced from cryptography's changelog.

48.0.1 - 2026-06-09


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.1.

.. _v48-0-0:


48.0.0 - 2026-05-04

  • BACKWARDS INCOMPATIBLE: Support for Python 3.8 has been removed. cryptography now requires Python 3.9 or later.

  • BACKWARDS INCOMPATIBLE: Loading an X.509 CRL whose inner TBSCertList.signature algorithm does not match the outer signatureAlgorithm now raises ValueError. Previously, such CRLs were parsed successfully and only rejected during signature validation.

  • Added support for :doc:/hazmat/primitives/asymmetric/mlkem and :doc:/hazmat/primitives/asymmetric/mldsa when using OpenSSL 3.5.0 or later, in addition to the existing AWS-LC and BoringSSL support. This means post-quantum algorithms are now available to users of our wheels.

    • Note: Going forward, we do not guarantee that all functionality in cryptography will be available when building against OpenSSL. See :doc:/statements/state-of-openssl for more information.

.. _v47-0-0:

47.0.0 - 2026-04-24


* Support for Python 3.8 is deprecated and will be removed in the next
  ``cryptography`` release.
* **BACKWARDS INCOMPATIBLE:** Support for binary elliptic curves
  (``SECT*`` classes) has been removed. These curves are rarely used and
  have additional security considerations that make them undesirable.
* **BACKWARDS INCOMPATIBLE:** Support for OpenSSL 1.1.x has been removed.
  OpenSSL 3.0.0 or later is now required. LibreSSL, BoringSSL, and AWS-LC
  continue to be supported.
* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 4.1.
* **BACKWARDS INCOMPATIBLE:** Loading keys with unsupported algorithms or
  keys with unsupported explicit curve encodings now raises
  :class:`~cryptography.exceptions.UnsupportedAlgorithm` instead of
  ``ValueError``. This change affects
  :func:`~cryptography.hazmat.primitives.serialization.load_pem_private_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_der_private_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_pem_public_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_der_public_key`,
  and :meth:`~cryptography.x509.Certificate.public_key` when called on
  certificates with unsupported public key algorithms.
</tr></table>

... (truncated)

Commits

Updates dynaconf from 3.1.4 to 3.2.13

Release notes

Sourced from dynaconf's releases.

3.2.13

What's Changed

Bug Fixes

Full Changelog: dynaconf/dynaconf@3.2.12...3.2.13

3.2.12

What's Changed

Full Changelog: dynaconf/dynaconf@3.2.11...3.2.12

3.2.11

What's Changed

Release version 3.2.11

Shortlog of commits since last release:

  • Bruno Rocha (9): @​rochacbruno

    • fix(cli): handle empty hooks and boolean environments.
    • fix: Better way for CLI to find the Django Settings
    • fix: windows CI
    • feat: Run CLI as module with python -m dynaconf (#1290)
    • fix: use sys.argv instead of click.get_os_args (#1292)
    • fix: -k must exit code 1 when key do not exist (#1293)
    • feat: envless load file (#1295)
    • fix: add correct supported python version to 3.2.x

  • Fabricio Aguiar (1): @​fao89

    • fix: make raw variables private (#1287)

  • Pedro Brochado (1): @​pedro-psb

    • docs: clarification on redis hash title when using custom envvar prefixes (#1273)

Milestone https://github.com/dynaconf/dynaconf/milestone/31?closed=1

Full Changelog: dynaconf/dynaconf@3.2.10...3.2.11

3.2.10

Hot Fixes

  • Hotfix hook collector to avoid eager evaluation. (#1255). By Bruno Rocha.

... (truncated)

Changelog

Sourced from dynaconf's changelog.

3.2.13 - 2026-03-17

Chore

  • fix linting errors and pre-commit config. By Pedro Brochado.

3.2.12 - 2025-10-10

Bug Fixes

  • get method to return Any type.. By Bruno Rocha.
  • remove unnecessary recursive evaluation call on Settings.get. By Pedro Brochado.
  • improve performance of settings access in a loop (part 1). By Pedro Brochado.

3.2.11 - 2025-05-06

Bug Fixes

  • add correct supported python version to 3.2.x. By Bruno Rocha.
  • -k must exit code 1 when key do not exist (#1293). By Bruno Rocha.
  • use sys.argv instead of click.get_os_args (#1292). By Bruno Rocha.
  • windows CI. By Bruno Rocha.
  • make raw variables private (#1287). By Fabricio Aguiar.
  • Better way for CLI to find the Django Settings. By Bruno Rocha.
  • handle empty hooks and boolean environments.. By Bruno Rocha.

Features

  • envless load file (#1295). By Bruno Rocha.
  • Run CLI as module with python -m dynaconf (#1290). By Bruno Rocha.

Docs

  • clarification on redis hash title when using custom envvar prefixes (#1273). By Pedro Brochado.

3.2.10 - 2025-02-17

Bug Fixes

  • Hotfix hook collector to avoid eager evaluation. (#1255). By Bruno Rocha.

3.2.9 - 2025-02-16

3.2.8 - 2025-02-16

Bug Fixes

  • Parse data type on merge with comma separated value. By Bruno Rocha.

Features

... (truncated)

Commits

Updates jinja2 from 2.11.3 to 3.1.6

Release notes

Sourced from jinja2's releases.

3.1.6

This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. GHSA-cpwx-vrp4-4pq7

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. #2032
  • Calling sync render for an async template uses asyncio.run. #1952
  • Avoid unclosed auto_aiter warnings. #1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. #1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. #1960
  • The runtime uses the correct concat function for the current environment when calling block references. #1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
  • |int filter handles OverflowError from scientific notation. #1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025
  • Fix copy/pickle support for the internal missing object. #2027
  • Environment.overlay(enable_async) is applied correctly. #2061
  • The error message from FileSystemLoader includes the paths that were searched. #1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705
  • Improve annotations for methods returning copies. #1880
  • urlize does not add mailto: to values like @a@b. #1870
  • Tests decorated with @pass_context can be used with the |select filter. #1624
  • Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413
  • Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253

3.1.4

This is the Jinja 3.1.4 security release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Jinja2/3.1.4/ Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-4

  • The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. GHSA-h75v-3vvj-5mfj

3.1.3

This is a fix release for the 3.1.x feature branch.

  • Fix for GHSA-h5c8-rqwp-cp95. You are affected if you are using xmlattr and passing user input as attribute keys.

... (truncated)

Changelog

Sourced from jinja2's changelog.

Version 3.1.6

Released 2025-03-05

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

Version 3.1.5

Released 2024-12-21

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032
  • Calling sync render for an async template uses asyncio.run. :pr:1952
  • Avoid unclosed auto_aiter warnings. :pr:1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960
  • The runtime uses the correct concat function for the current environment when calling block references. :issue:1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781
  • |int filter handles OverflowError from scientific notation. :issue:1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025
  • Fix copy/pickle support for the internal missing object. :issue:2027
  • Environment.overlay(enable_async) is applied correctly. :pr:2061
  • The error message from FileSystemLoader includes the paths that were searched. :issue:1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705
  • Improve annotations for methods returning copies. :pr:1880
  • urlize does not add mailto: to values like @a@b. :pr:1870

... (truncated)

Commits

Updates requests from 2.25.1 to 2.33.0

Release notes

Sourced from requests's releases.

v2.33.0

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

v2.32.4

2.32.4 (2025-06-10)

... (truncated)

Changelog

Sourced from requests's changelog.

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

... (truncated)

Commits
  • bc04dfd v2.33.0
  • 66d21cb Merge commit from fork
  • 8b9bc8f Move badges to top of README (#7293)
  • e331a28 Remove unused extraction call (#7292)
  • 753fd08 docs: fix FAQ grammar in httplib2 example
  • 774a0b8 docs(socks): same block as other sections
  • 9c72a41 Bump github/codeql-action from 4.33.0 to 4.34.1
  • ebf7190 Bump github/codeql-action from 4.32.0 to 4.33.0
  • 0e4ae38 docs: exclude Response.is_permanent_redirect from API docs (#7244)
  • d568f47 docs: clarify Quickstart POST example (#6960)
  • Additional commits viewable in compare view

Updates setuptools from 54.2.0 to 78.1.1

Changelog

Sourced from setuptools's changelog.

v78.1.1

Bugfixes

  • More fully sanitized the filename in PackageIndex._download. (#4946)

v78.1.0

Features

  • Restore access to _get_vc_env with a warning. (#4874)

v78.0.2

Bugfixes

  • Postponed removals of deprecated dash-separated and uppercase fields in setup.cfg. All packages with deprecated configurations are advised to move before 2026. (#4911)

v78.0.1

Misc

v78.0.0

Bugfixes

  • Reverted distutils changes that broke the monkey patching of command classes. (#4902)

Deprecations and Removals

  • Setuptools no longer accepts options containing uppercase or dash characters in setup.cfg.

... (truncated)

Commits

Updates configobj from 5.0.6 to 5.0.9

Release notes

Sourced from configobj's releases.

5.0.9

What's Changed

New Contributors

Full Changelog: DiffSK/configobj@v5.0.8...v5.0.9

confirming things work in newer python versions

5.0.7 originally did this work, but 5.0.8 fixes a regression (#230)

Changelog

Sourced from configobj's changelog.

Changelog

Release 5.0.9 """""""""""""

Release 5.0.8 """""""""""""

  • fixing/test for a regression introduced in 5.0.7 that prevented import validate from working

Release 5.0.7 """""""""""""

  • update testing to validate against python version 2.7 and 3.5-3.11
  • update broken links / non-existent services and references

Older Releases """"""""""""""

  • Release 5.0.6 improves error messages in certain edge cases
  • Release 5.0.5 corrects a unicode-bug that still existed in writing files
  • Release 5.0.4 corrects a unicode-bug that still existed in reading files after fixing lists of string in 5.0.3
  • Release 5.0.3 corrects errors related to the incorrectly handling unicode encoding and writing out files
  • Release 5.0.2 adds a specific error message when trying to install on Python versions older than 2.5
  • Release 5.0.1 fixes a regression with unicode conversion not happening in certain cases PY2
  • Release 5.0.0 updates the supported Python versions to 2.6, 2.7, 3.2, 3.3 and is otherwise unchanged
  • Release 4.7.2 fixes several bugs in 4.7.1
  • Release 4.7.1 fixes a bug with the deprecated options keyword in 4.7.0.
  • Release 4.7.0 improves performance adds features for validation and fixes some bugs.
Commits
  • 242dfd0 release 5.0.9
  • 8857b08 Merge pull request #246 from DiffSK/python-version
  • d6f7597 Update minimum python to 3.7 everywhere, and add 3.12
  • 8ffcf0c Merge pull request #241 from yegorich/license
  • 5e2f143 Merge pull request #245 from jelmer/extra-2014
  • fdf3634 Drop extra '2014' in LICENSE file. Fixes #233
  • 3480a6e Merge pull request #237 from jelmer/drop-python2
  • 008165c Drop python 3.5 from GitHub action, since it now fails to download
  • 861383c Drop support for Python < 3.5
  • 7c618b0 Merge pull request #236 from cdcadman/cve_2023_26112
  • Additional commits viewable in compare view

Updates cryptography from 3.4.7 to 48.0.1

Changelog

Sourced from cryptography's changelog.

48.0.1 - 2026-06-09


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.1.

.. _v48-0-0:


48.0.0 - 2026-05-04

  • BACKWARDS INCOMPATIBLE: Support for Python 3.8 has been removed. cryptography now requires Python 3.9 or later.

  • BACKWARDS INCOMPATIBLE: Loading an X.509 CRL whose inner TBSCertList.signature algorithm does not match the outer signatureAlgorithm now raises ValueError. Previously, such CRLs were parsed successfully and only rejected during signature validation.

  • Added support for :doc:/hazmat/primitives/asymmetric/mlkem and :doc:/hazmat/primitives/asymmetric/mldsa when using OpenSSL 3.5.0 or later, in addition to the existing AWS-LC and BoringSSL support. This means post-quantum algorithms are now available to users of our wheels.

    • Note: Going forward, we do not guarantee that all functionality in cryptography will be available when building against OpenSSL. See :doc:/statements/state-of-openssl for more information.

.. _v47-0-0:

47.0.0 - 2026-04-24


* Support for Python 3.8 is deprecated and will be removed in the next
  ``cryptography`` release.
* **BACKWARDS INCOMPATIBLE:** Support for binary elliptic curves
  (``SECT*`` classes) has been removed. These curves are rarely used and
  have additional security considerations that make them undesirable.
* **BACKWARDS INCOMPATIBLE:** Support for OpenSSL 1.1.x has been removed.
  OpenSSL 3.0.0 or later is now required. LibreSSL, BoringSSL, and AWS-LC
  continue to be supported.
* **BACKWARDS INCOMPATIBLE:** Dropped support for LibreSSL < 4.1.
* **BACKWARDS INCOMPATIBLE:** Loading keys with unsupported algorithms or
  keys with unsupported explicit curve encodings now raises
  :class:`~cryptography.exceptions.UnsupportedAlgorithm` instead of
  ``ValueError``. This change affects
  :func:`~cryptography.hazmat.primitives.serialization.load_pem_private_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_der_private_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_pem_public_key`,
  :func:`~cryptography.hazmat.primitives.serialization.load_der_public_key`,
  and :meth:`~cryptography.x509.Certificate.public_key` when called on
  certificates with unsupported public key algorithms.
</tr></table>

... (truncated)

Commits

Updates dynaconf from 3.1.4 to 3.2.13

Release notes

Sourced from dynaconf's releases.

3.2.13

What's Changed

Bug Fixes

Full Changelog: dynaconf/dynaconf@3.2.12...3.2.13

3.2.12

What's Changed

Full Changelog: dynaconf/dynaconf@3.2.11...3.2.12

3.2.11

What's Changed

Release version 3.2.11

Shortlog of commits since last release:

  • Bruno Rocha (9): @​rochacbruno

    • fix(cli): handle empty hooks and boolean environments.
    • fix: Better way for CLI to find the Django Settings
    • fix: windows CI
    • feat: Run CLI as module with python -m dynaconf (#1290)
    • fix: use sys.argv instead of click.get_os_args (#1292)
    • fix: -k must exit code 1 when key do not exist (#1293)
    • feat: envless load file (#1295)
    • fix: add correct supported python version to 3.2.x

  • Fabricio Aguiar (1): @​fao89

    • fix: make raw variables private (#1287)

  • Pedro Brochado (1): @​pedro-psb

    • docs: clarification on redis hash title when using custom envvar prefixes (#1273)

Milestone https://github.com/dynaconf/dynaconf/milestone/31?closed=1

Full Changelog: dynaconf/dynaconf@3.2.10...3.2.11

3.2.10

Hot Fixes

  • Hotfix hook collector to avoid eager evaluation. (#1255). By Bruno Rocha.

... (truncated)

Changelog

Sourced from dynaconf's changelog.

3.2.13 - 2026-03-17

Chore

  • fix linting errors and pre-commit config. By Pedro Brochado.

3.2.12 - 2025-10-10

Bug Fixes

  • get method to return Any type.. By Bruno Rocha.
  • remove unnecessary recursive evaluation call on Settings.get. By Pedro Brochado.
  • improve performance of settings access in a loop (part 1). By Pedro Brochado.

3.2.11 - 2025-05-06

Bug Fixes

  • add correct supported python version to 3.2.x. By Bruno Rocha.
  • -k must exit code 1 when key do not exist (#1293). By Bruno Rocha.
  • use sys.argv instead of click.get_os_args (#1292). By Bruno Rocha.
  • windows CI. By Bruno Rocha.
  • make raw variables private (#1287). By Fabricio Aguiar.
  • Better way for CLI to find the Django Settings. By Bruno Rocha.
  • handle empty hooks and boolean environments.. By Bruno Rocha.

Features

  • envless load file (#1295). By Bruno Rocha.
  • Run CLI as module with python -m dynaconf (#1290). By Bruno Rocha.

Docs

  • clarification on redis hash title when using custom envvar prefixes (#1273). By Pedro Brochado.

3.2.10 - 2025-02-17

Bug Fixes

  • Hotfix hook collector to avoid eager evaluation. (#1255). By Bruno Rocha.

3.2.9 - 2025-02-16

3.2.8 - 2025-02-16

Bug Fixes

  • Parse data type on merge with comma separated value. By Bruno Rocha.

Features

... (truncated)

Commits

@dependabot
Bump the pip group across 3 directories with 6 updates
ec3655c 
Bumps the pip group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [configobj](https://github.com/DiffSK/configobj) | `5.0.6` | `5.0.9` |
| [cryptography](https://github.com/pyca/cryptography) | `3.4.7` | `48.0.1` |
| [dynaconf](https://github.com/dynaconf/dynaconf) | `3.1.4` | `3.2.13` |
| [jinja2](https://github.com/pallets/jinja) | `2.11.3` | `3.1.6` |
| [requests](https://github.com/psf/requests) | `2.25.1` | `2.33.0` |
| [setuptools](https://github.com/pypa/setuptools) | `54.2.0` | `78.1.1` |

Bumps the pip group with 6 updates in the /docs directory:

| Package | From | To |
| --- | --- | --- |
| [configobj](https://github.com/DiffSK/configobj) | `5.0.6` | `5.0.9` |
| [cryptography](https://github.com/pyca/cryptography) | `3.4.7` | `48.0.1` |
| [dynaconf](https://github.com/dynaconf/dynaconf) | `3.1.4` | `3.2.13` |
| [jinja2](https://github.com/pallets/jinja) | `2.11.3` | `3.1.6` |
| [requests](https://github.com/psf/requests) | `2.25.1` | `2.33.0` |
| [setuptools](https://github.com/pypa/setuptools) | `54.2.0` | `78.1.1` |

Bumps the pip group with 6 updates in the /src/knox directory:

| Package | From | To |
| --- | --- | --- |
| [configobj](https://github.com/DiffSK/configobj) | `5.0.6` | `5.0.9` |
| [cryptography](https://github.com/pyca/cryptography) | `3.4.7` | `48.0.1` |
| [dynaconf](https://github.com/dynaconf/dynaconf) | `3.1.4` | `3.2.13` |
| [jinja2](https://github.com/pallets/jinja) | `2.11.3` | `3.1.6` |
| [requests](https://github.com/psf/requests) | `2.25.1` | `2.33.0` |
| [setuptools](https://github.com/pypa/setuptools) | `54.2.0` | `78.1.1` |



Updates `configobj` from 5.0.6 to 5.0.9
- [Release notes](https://github.com/DiffSK/configobj/releases)
- [Changelog](https://github.com/DiffSK/configobj/blob/release/CHANGES.rst)
- [Commits](DiffSK/configobj@v5.0.6...v5.0.9)

Updates `cryptography` from 3.4.7 to 48.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@3.4.7...48.0.1)

Updates `dynaconf` from 3.1.4 to 3.2.13
- [Release notes](https://github.com/dynaconf/dynaconf/releases)
- [Changelog](https://github.com/dynaconf/dynaconf/blob/3.2.13/CHANGELOG.md)
- [Commits](dynaconf/dynaconf@3.1.4...3.2.13)

Updates `jinja2` from 2.11.3 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@2.11.3...3.1.6)

Updates `requests` from 2.25.1 to 2.33.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.25.1...v2.33.0)

Updates `setuptools` from 54.2.0 to 78.1.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v54.2.0...v78.1.1)

Updates `configobj` from 5.0.6 to 5.0.9
- [Release notes](https://github.com/DiffSK/configobj/releases)
- [Changelog](https://github.com/DiffSK/configobj/blob/release/CHANGES.rst)
- [Commits](DiffSK/configobj@v5.0.6...v5.0.9)

Updates `cryptography` from 3.4.7 to 48.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@3.4.7...48.0.1)

Updates `dynaconf` from 3.1.4 to 3.2.13
- [Release notes](https://github.com/dynaconf/dynaconf/releases)
- [Changelog](https://github.com/dynaconf/dynaconf/blob/3.2.13/CHANGELOG.md)
- [Commits](dynaconf/dynaconf@3.1.4...3.2.13)

Updates `jinja2` from 2.11.3 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@2.11.3...3.1.6)

Updates `requests` from 2.25.1 to 2.33.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.25.1...v2.33.0)

Updates `setuptools` from 54.2.0 to 78.1.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v54.2.0...v78.1.1)

Updates `configobj` from 5.0.6 to 5.0.9
- [Release notes](https://github.com/DiffSK/configobj/releases)
- [Changelog](https://github.com/DiffSK/configobj/blob/release/CHANGES.rst)
- [Commits](DiffSK/configobj@v5.0.6...v5.0.9)

Updates `cryptography` from 3.4.7 to 48.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@3.4.7...48.0.1)

Updates `dynaconf` from 3.1.4 to 3.2.13
- [Release notes](https://github.com/dynaconf/dynaconf/releases)
- [Changelog](https://github.com/dynaconf/dynaconf/blob/3.2.13/CHANGELOG.md)
- [Commits](dynaconf/dynaconf@3.1.4...3.2.13)

Updates `jinja2` from 2.11.3 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@2.11.3...3.1.6)

Updates `requests` from 2.25.1 to 2.33.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.25.1...v2.33.0)

Updates `setuptools` from 54.2.0 to 78.1.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v54.2.0...v78.1.1)

---
updated-dependencies:
- dependency-name: configobj
  dependency-version: 5.0.9
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: cryptography
  dependency-version: 48.0.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: dynaconf
  dependency-version: 3.2.13
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: setuptools
  dependency-version: 78.1.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: configobj
  dependency-version: 5.0.9
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: cryptography
  dependency-version: 48.0.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: dynaconf
  dependency-version: 3.2.13
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: setuptools
  dependency-version: 78.1.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: configobj
  dependency-version: 5.0.9
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: cryptography
  dependency-version: 48.0.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: dynaconf
  dependency-version: 3.2.13
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: setuptools
  dependency-version: 78.1.1
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants