Skip to content

Bump the dependencies group with 15 updates#536

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/master/dependencies-4655dc29dc
Closed

Bump the dependencies group with 15 updates#536
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/master/dependencies-4655dc29dc

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Aug 25, 2025 •
edited
Loading

Bumps the dependencies group with 15 updates:

Package From To
django 5.2.3 5.2.5
djangorestframework 3.16.0 3.16.1
boto3 1.38.41 1.40.16
sentry-sdk 2.30.0 2.35.0
requests 2.32.4 2.32.5
google-api-python-client 2.173.0 2.179.0
faker 37.4.0 37.5.3
ipython 9.3.0 9.4.0
django-debug-toolbar 5.2.0 6.0.0
mypy 1.16.1 1.17.1
django-stubs 5.2.1 5.2.2
djangorestframework-stubs 3.16.0 3.16.2
boto3-stubs 1.38.41 1.40.16
ruff 0.12.0 0.12.10
pre-commit 4.2.0 4.3.0

Updates django from 5.2.3 to 5.2.5

Commits
  • a3b1107 [5.2.x] Bumped version for 5.2.5 release.
  • 0489f54 [5.2.x] Added release date for 5.2.5.
  • a9c7d4b [5.2.x] Refs #36485 -- Grouped docs checks under a unified make check target.
  • 5ad6d43 [5.2.x] Refs #34140 -- Added dedicated code block formatting section in docs/...
  • bdc3f9e [5.2.x] Fixed #36530 -- Extended fields.E347 to check for ManyToManyField inv...
  • f01ceae [5.2.x] Fixed #36535 -- Ensured compatibility with docutils 0.19 through 0.22.
  • 5ca58ce [5.2.x] Corrected assertNumQueries() example in docs/topics/testing/tools.txt.
  • b3bb723 [5.2.x] Fixed #34871, #36518 -- Implemented unresolved lookups expression rep...
  • e5ccb69 [5.2.x] Fixed #36198 -- Implemented unresolved transform expression replacement.
  • 5aefd00 [5.2.x] Fixed writer_name deprecation warning in docutils 0.22+.
  • Additional commits viewable in compare view

Updates djangorestframework from 3.16.0 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

  • Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

  • Fix regression in unique_together validation with SerializerMethodField in #9712
  • Fix UniqueTogetherValidator to handle fields with source attribute in #9688
  • Drop HTML line breaks on long headers in browsable API in #9438

Translations

  • Add Kazakh locale support in #9713
  • Update translations for Korean translations in #9571
  • Update German translations in #9676
  • Update Chinese translations in #9675
  • Update Arabic translations-sal in #9595
  • Update Persian translations in #9576
  • Update Spanish translations in #9701
  • Update Turkish Translations in #9749
  • Fix some typos in Brazilian Portuguese translations in #9673

Documentation

  • Removed reference to GitHub Issues and Discussions in #9660
  • Add drf-restwind and update outdated images in browsable-api.md in #9680
  • Updated funding page to represent current scope in #9686
  • Fix broken Heroku JSON Schema link in #9693
  • Update Django documentation links to use stable version in #9698
  • Expand docs on unique constraints cause 'required=True' in #9725
  • Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734
  • Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

  • Update GitHub Actions to use Ubuntu 24.04 for testing in #9677
  • Update test matrix to use Django 5.2 stable version in #9679
  • Add pyupgrade to pre-commit hooks in #9682
  • Fix test with Django 5 when pytz is available in #9715

New Contributors

... (truncated)

Commits
  • de018df Prepare 3.16.1 release (#9752)
  • a7d050f Turkish Translation updates (#9749)
  • 853969c Fix test with Django 5 when pytz is available (#9715)
  • 2ae8c11 Add note to tutorial about required request in serializer context when using ...
  • 70e54f4 Revert docs back to djangorestframework-guardian (#9734)
  • 3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
  • 4bb46c2 Add Kazakh(kk) locale support (#9713)
  • e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
  • 33d59fe Update Spanish translations (#9701)
  • c0202a0 Update Django documentation links to use stable version (#9698)
  • Additional commits viewable in compare view

Updates boto3 from 1.38.41 to 1.40.16

Commits
  • fe7457e Merge branch 'release-1.40.16'
  • 3930259 Bumping version to 1.40.16
  • 0954e8f Add changelog entries from botocore
  • 8836e33 Merge branch 'release-1.40.15'
  • e1dfc5f Merge branch 'release-1.40.15' into develop
  • 14dbc58 Bumping version to 1.40.15
  • 679ec9a Add changelog entries from botocore
  • 9e5b34a Merge branch 'release-1.40.14'
  • e493970 Merge branch 'release-1.40.14' into develop
  • 07e80dd Bumping version to 1.40.14
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.30.0 to 2.35.0

Release notes

Sourced from sentry-sdk's releases.

2.35.0

Various fixes & improvements

2.34.1

Various fixes & improvements

2.34.0

Various fixes & improvements

  • Considerably raise DEFAULT_MAX_VALUE_LENGTH (#4632) by @​sentrivana

    We have increased the string trimming limit considerably, allowing you to see more data without it being truncated. Note that this might, in rare cases, result in issue regrouping, for example if you're capturing message events with very long messages (longer than the default 1024 characters/bytes).

    If you want to adjust the limit, you can set a max_value_length in your sentry_sdk.init().

  • OpenAI integration update (#4612) by @​antonpirker

    The OpenAIIntegration now supports OpenAI Responses API.

    The data captured will also show up in the new AI Agents Dashboard.

    This works out of the box, nothing to do on your side.

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.35.0

Various fixes & improvements

2.34.1

Various fixes & improvements

2.34.0

Various fixes & improvements

  • Considerably raise DEFAULT_MAX_VALUE_LENGTH (#4632) by @​sentrivana

    We have increased the string trimming limit considerably, allowing you to see more data without it being truncated. Note that this might, in rare cases, result in issue regrouping, for example if you're capturing message events with very long messages (longer than the default 1024 characters/bytes).

    If you want to adjust the limit, you can set a max_value_length in your sentry_sdk.init().

  • OpenAI integration update (#4612) by @​antonpirker

    The OpenAIIntegration now supports OpenAI Responses API.

... (truncated)

Commits

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates google-api-python-client from 2.173.0 to 2.179.0

Release notes

Sourced from google-api-python-client's releases.

v2.179.0

2.179.0 (2025-08-12)

Features

v2.178.0

2.178.0 (2025-08-05)

Features

... (truncated)

Commits

Updates faker from 37.4.0 to 37.5.3

Release notes

Sourced from faker's releases.

Release v37.5.3

See CHANGELOG.md.

Release v37.5.2

See CHANGELOG.md.

Release v37.5.1

See CHANGELOG.md.

Release v37.5.0

See CHANGELOG.md.

Release v37.4.3

See CHANGELOG.md.

Release v37.4.2

See CHANGELOG.md.

Release v37.4.1

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v37.5.3 - 2025-07-30

  • Allow Decimal type for min_value and max_value in pydecimal. Thanks @​sshishov.

v37.5.2 - 2025-07-30

  • Fix Turkish Republic National Number (TCKN) provider. Thanks @​fleizean.

v37.5.1 - 2025-07-30

  • Fix unnatural Korean company names in ko_KR locale. Thanks @​r-4bb1t.

v37.5.0 - 2025-07-30

  • Add Spanish lorem provider for es_ES, es_AR and es_MX. Thanks @​Pandede.

v37.4.3 - 2025-07-30

  • Fix male names in sv_SE locale. Thanks @​peterk.

v37.4.2 - 2025-07-15

  • Fix the function for generating VIN, now the last 4 characters are digits. Thanks @​nesb1.

v37.4.1 - 2025-07-15

  • Fix leading 0s in building numbers for de_DE locale. Thanks @​KarelZe.
Commits

Updates ipython from 9.3.0 to 9.4.0

Commits
  • 67f7d8b Fix release
  • e21e5d4 release 9.4.0
  • 8792c26 Add changelog for IPython 9.4 (#14935)
  • e03e20a Align formatting of section references with one used in 8.x series
  • b643713 Mention %script magic improvements
  • d0cda7d Add changelog for IPython 9.4
  • 10cb3b5 Do not always import * with autoreload3 (#14872)
  • 2197228 Backport Pdb closure evaluation fix (list comprehension, generators) from Pyt...
  • c6ac674 Add mypy ignore comments
  • efdec6c Lint with darker (black)
  • Additional commits viewable in compare view

Updates django-debug-toolbar from 5.2.0 to 6.0.0

Release notes

Sourced from django-debug-toolbar's releases.

6.0.0

Description

The v6.0.0 release of Django Debug Toolbar significantly revamps how panels for the toolbar work. Each panel will now persist its data in a store. A store can either be backed by various backends. The toolbar will support a memory and database backend to start.

The toolbar is now using Django's SafeExceptionReporterFilter.cleanse_setting() function to filter out sensitive information. Some data will be replaced with "********************". This is because the toolbar could be configured to write the request information to a persistent store such as a cache or database.

Django applications with basic installations are backwards compatible with this change. If there are hooks into the internals of the toolbar, such as DebugToolbar.store_id then it will be backwards incompatible.

Third-party panels will need updating. Any data that is stored in record_stats will need to be fetched back out from self.get_stats() before being able to be rendered. This is to support loading an instance of the toolbar from persisted data. A simple example of this transition can be found in debug_toolbar/panels/cache.py in PR 2138

How to upgrade

  • Changes required if the toolbar isn't installed entirely programmatically
    • If you experience RuntimeError: Model class debug_toolbar.models.HistoryEntry doesn't declare an explicit app_label and isn't in an application in INSTALLED_APPS, you need to remove the reference to the toolbar's urls in your urls.py file and MIDDLEWARE setting when the toolbar isn't in INSTALLED_APPS
  • If you have a custom panel, you'll need to adjust record_stats and use self.get_stats() to fetch data for rendering
  • If you'd like to use the database store, see TOOLBAR_STORE_CLASS for more info

Why did the internals change?

The Django Debug Toolbar is a popular package we did not want to block the community from pursuing the async path for Django applications. Writing the request data to a store better positions the toolbar for async projects. It also opens the door for it being usable in production as well with API integrations.

What's Changed

@dependabot
Bump the dependencies group with 15 updates
86255e9 
Bumps the dependencies group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.2.3` | `5.2.5` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.16.0` | `3.16.1` |
| [boto3](https://github.com/boto/boto3) | `1.38.41` | `1.40.16` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.30.0` | `2.35.0` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.173.0` | `2.179.0` |
| [faker](https://github.com/joke2k/faker) | `37.4.0` | `37.5.3` |
| [ipython](https://github.com/ipython/ipython) | `9.3.0` | `9.4.0` |
| [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) | `5.2.0` | `6.0.0` |
| [mypy](https://github.com/python/mypy) | `1.16.1` | `1.17.1` |
| [django-stubs](https://github.com/sponsors/typeddjango) | `5.2.1` | `5.2.2` |
| [djangorestframework-stubs](https://github.com/typeddjango/djangorestframework-stubs) | `3.16.0` | `3.16.2` |
| [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.38.41` | `1.40.16` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.0` | `0.12.10` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.3.0` |


Updates `django` from 5.2.3 to 5.2.5
- [Commits](django/django@5.2.3...5.2.5)

Updates `djangorestframework` from 3.16.0 to 3.16.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.16.0...3.16.1)

Updates `boto3` from 1.38.41 to 1.40.16
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.38.41...1.40.16)

Updates `sentry-sdk` from 2.30.0 to 2.35.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.30.0...2.35.0)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `google-api-python-client` from 2.173.0 to 2.179.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.173.0...v2.179.0)

Updates `faker` from 37.4.0 to 37.5.3
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v37.4.0...v37.5.3)

Updates `ipython` from 9.3.0 to 9.4.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.3.0...9.4.0)

Updates `django-debug-toolbar` from 5.2.0 to 6.0.0
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@5.2.0...6.0.0)

Updates `mypy` from 1.16.1 to 1.17.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.16.1...v1.17.1)

Updates `django-stubs` from 5.2.1 to 5.2.2
- [Commits](https://github.com/sponsors/typeddjango/commits)

Updates `djangorestframework-stubs` from 3.16.0 to 3.16.2
- [Release notes](https://github.com/typeddjango/djangorestframework-stubs/releases)
- [Commits](typeddjango/djangorestframework-stubs@3.16.0...3.16.2)

Updates `boto3-stubs` from 1.38.41 to 1.40.16
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `ruff` from 0.12.0 to 0.12.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.0...0.12.10)

Updates `pre-commit` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.3.0)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: djangorestframework
  dependency-version: 3.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.40.16
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: google-api-python-client
  dependency-version: 2.179.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: faker
  dependency-version: 37.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ipython
  dependency-version: 9.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django-debug-toolbar
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: mypy
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django-stubs
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: djangorestframework-stubs
  dependency-version: 3.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: boto3-stubs
  dependency-version: 1.40.16
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.12.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pre-commit
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 25, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Sep 8, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 8, 2025
@dependabot dependabot bot deleted the dependabot/pip/master/dependencies-4655dc29dc branch September 8, 2025 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants