Skip to content

Bump the dependencies group across 1 directory with 16 updates#537

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/master/dependencies-0a21872013
Closed

Bump the dependencies group across 1 directory with 16 updates#537
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/master/dependencies-0a21872013

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025 •
edited
Loading

Bumps the dependencies group with 16 updates in the / directory:

Package From To
django 5.2.3 5.2.6
djangorestframework 3.16.0 3.16.1
boto3 1.38.41 1.40.25
sentry-sdk 2.30.0 2.37.0
requests 2.32.4 2.32.5
google-api-python-client 2.173.0 2.181.0
pytest 8.4.1 8.4.2
faker 37.4.0 37.6.0
ipython 9.3.0 9.5.0
django-debug-toolbar 5.2.0 6.0.0
mypy 1.16.1 1.17.1
django-stubs 5.2.1 5.2.2
djangorestframework-stubs 3.16.0 3.16.2
boto3-stubs 1.38.41 1.40.25
ruff 0.12.0 0.12.12
pre-commit 4.2.0 4.3.0

Updates django from 5.2.3 to 5.2.6

Commits
  • 75c4403 [5.2.x] Bumped version for 5.2.6 release.
  • 4c044fc [5.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL inject...
  • e87ca3d [5.2.x] Made cosmetic edits to 5.2.6 release notes.
  • ebec2c9 [5.2.x] Removed unused import in docs/ref/models/expressions.txt example.
  • ace59cb [5.2.x] Fixed #36431 -- Returned tuples for multi-column ForeignObject in val...
  • 16a12a9 [5.2.x] Fixed #35831 -- Documented the model form meta API in model form refe...
  • 51753bc [5.2.x] Added stub release notes and release date for 5.2.6, 5.1.12, and 4.2.24.
  • a486455 [5.2.x] Corrected definition of "needsinfo" triage stage in contributing guide.
  • f8e572e [5.2.x] Removed reference to flake8 file exclusions.
  • 9c9ed6f [5.2.x] Refs #35530 -- Corrected deprecation message in auth.alogin().
  • Additional commits viewable in compare view

Updates djangorestframework from 3.16.0 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

  • Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

  • Fix regression in unique_together validation with SerializerMethodField in #9712
  • Fix UniqueTogetherValidator to handle fields with source attribute in #9688
  • Drop HTML line breaks on long headers in browsable API in #9438

Translations

  • Add Kazakh locale support in #9713
  • Update translations for Korean translations in #9571
  • Update German translations in #9676
  • Update Chinese translations in #9675
  • Update Arabic translations-sal in #9595
  • Update Persian translations in #9576
  • Update Spanish translations in #9701
  • Update Turkish Translations in #9749
  • Fix some typos in Brazilian Portuguese translations in #9673

Documentation

  • Removed reference to GitHub Issues and Discussions in #9660
  • Add drf-restwind and update outdated images in browsable-api.md in #9680
  • Updated funding page to represent current scope in #9686
  • Fix broken Heroku JSON Schema link in #9693
  • Update Django documentation links to use stable version in #9698
  • Expand docs on unique constraints cause 'required=True' in #9725
  • Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734
  • Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

  • Update GitHub Actions to use Ubuntu 24.04 for testing in #9677
  • Update test matrix to use Django 5.2 stable version in #9679
  • Add pyupgrade to pre-commit hooks in #9682
  • Fix test with Django 5 when pytz is available in #9715

New Contributors

... (truncated)

Commits
  • de018df Prepare 3.16.1 release (#9752)
  • a7d050f Turkish Translation updates (#9749)
  • 853969c Fix test with Django 5 when pytz is available (#9715)
  • 2ae8c11 Add note to tutorial about required request in serializer context when using ...
  • 70e54f4 Revert docs back to djangorestframework-guardian (#9734)
  • 3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
  • 4bb46c2 Add Kazakh(kk) locale support (#9713)
  • e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
  • 33d59fe Update Spanish translations (#9701)
  • c0202a0 Update Django documentation links to use stable version (#9698)
  • Additional commits viewable in compare view

Updates boto3 from 1.38.41 to 1.40.25

Commits
  • c1c6044 Merge branch 'release-1.40.25'
  • faf7045 Bumping version to 1.40.25
  • 041cf03 Add changelog entries from botocore
  • d3129b6 Merge branch 'release-1.40.24'
  • f196479 Merge branch 'release-1.40.24' into develop
  • c503159 Bumping version to 1.40.24
  • 95fd165 Add changelog entries from botocore
  • dd74a1e Bump github/codeql-action from 3.29.0 to 3.30.0 (#4605)
  • 182b1ad Merge branch 'release-1.40.23'
  • 244d2f2 Merge branch 'release-1.40.23' into develop
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.30.0 to 2.37.0

Release notes

Sourced from sentry-sdk's releases.

2.37.0

2.36.0

Various fixes & improvements

import sentry_sdk
from sentry_sdk.integrations.unraisablehook import UnraisablehookIntegration
sentry_sdk.init(
dsn="...",
integrations=[
UnraisablehookIntegration(),
]
)

2.35.2

Various fixes & improvements

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.37.0

2.36.0

Various fixes & improvements

import sentry_sdk
from sentry_sdk.integrations.unraisablehook import UnraisablehookIntegration
sentry_sdk.init(
dsn="...",
integrations=[
UnraisablehookIntegration(),
]
)

2.35.2

... (truncated)

Commits

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates google-api-python-client from 2.173.0 to 2.181.0

Release notes

Sourced from google-api-python-client's releases.

v2.181.0

2.181.0 (2025-09-02)

Features

Bug Fixes

v2.180.0

2.180.0 (2025-08-26)

Features

... (truncated)

Commits

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Updates faker from 37.4.0 to 37.6.0

Release notes

Sourced from faker's releases.

Release v37.6.0

See CHANGELOG.md.

Release v37.5.3

See CHANGELOG.md.

Release v37.5.2

See CHANGELOG.md.

Release v37.5.1

See CHANGELOG.md.

Release v37.5.0

See CHANGELOG.md.

Release v37.4.3

See CHANGELOG.md.

Release v37.4.2

See CHANGELOG.md.

Release v37.4.1

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v37.6.0 - 2025-08-26

  • Add Automotive providers for ko_KR locale. Thanks @​ydj515.

v37.5.3 - 2025-07-30

  • Allow Decimal type for min_value and max_value in pydecimal. Thanks @​sshishov.

v37.5.2 - 2025-07-30

  • Fix Turkish Republic National Number (TCKN) provider. Thanks @​fleizean.

v37.5.1 - 2025-07-30

  • Fix unnatural Korean company names in ko_KR locale. Thanks @​r-4bb1t.

v37.5.0 - 2025-07-30

  • Add Spanish lorem provider for es_ES, es_AR and es_MX. Thanks @​Pandede.

v37.4.3 - 2025-07-30

  • Fix male names in sv_SE locale. Thanks @​peterk.

v37.4.2 - 2025-07-15

  • Fix the function for generating VIN, now the last 4 characters are digits. Thanks @​nesb1.

v37.4.1 - 2025-07-15

  • Fix leading 0s in building numbers for de_DE locale. Thanks @​KarelZe.
Commits

Updates ipython from 9.3.0 to 9.5.0

Commits

Updates django-debug-toolbar from 5.2.0 to 6.0.0

Release notes

Sourced from django-debug-toolbar's releases.

6.0.0

Description

The v6.0.0 release of Django Debug Toolbar significantly revamps how panels for the toolbar work. Each panel will now persist its data in a store. A store can either be backed by various backends. The toolbar will support a memory and database backend to start.

The toolbar is now using Django's SafeExceptionReporterFilter.cleanse_setting() function to filter out sensitive information. Some data will be replaced with "********************". This is because the toolbar could be configured to write the request information to a persistent store such as a cache or database.

Django applications with basic installations are backwards compatible with this change. If there are hooks into the internals of the toolbar, such as DebugToolbar.store_id then it will be backwards incompatible.

Third-party panels will need updating. Any data that is stored in record_stats will need to be fetched back out from self.get_stats() before being able to be rendered. This is to support loading an instance of the toolbar from persisted data. A simple example of this transition can be found in debug_toolbar/panels/cache.py in PR 2138

How to upgrade

  • Changes required if the toolbar isn't installed entirely programmatically
    • If you experience RuntimeError: Model class debug_toolbar.models.HistoryEntry doesn't declare an explicit app_label and isn't in an application in INSTALLED_APPS, you need to remove the reference to the toolbar's urls in your urls.py file and MIDDLEWARE setting when the toolbar isn't in INSTALLED_APPS
  • If you have a custom panel, you'll need to adjust record_stats and use self.get_stats() to fetch data for rendering...

    Description has been truncated

@dependabot
Bump the dependencies group across 1 directory with 16 updates
ac7d6a4 
Bumps the dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.2.3` | `5.2.6` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.16.0` | `3.16.1` |
| [boto3](https://github.com/boto/boto3) | `1.38.41` | `1.40.25` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.30.0` | `2.37.0` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.173.0` | `2.181.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.1` | `8.4.2` |
| [faker](https://github.com/joke2k/faker) | `37.4.0` | `37.6.0` |
| [ipython](https://github.com/ipython/ipython) | `9.3.0` | `9.5.0` |
| [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) | `5.2.0` | `6.0.0` |
| [mypy](https://github.com/python/mypy) | `1.16.1` | `1.17.1` |
| [django-stubs](https://github.com/sponsors/typeddjango) | `5.2.1` | `5.2.2` |
| [djangorestframework-stubs](https://github.com/typeddjango/djangorestframework-stubs) | `3.16.0` | `3.16.2` |
| [boto3-stubs](https://github.com/youtype/mypy_boto3_builder) | `1.38.41` | `1.40.25` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.0` | `0.12.12` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.3.0` |



Updates `django` from 5.2.3 to 5.2.6
- [Commits](django/django@5.2.3...5.2.6)

Updates `djangorestframework` from 3.16.0 to 3.16.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.16.0...3.16.1)

Updates `boto3` from 1.38.41 to 1.40.25
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.38.41...1.40.25)

Updates `sentry-sdk` from 2.30.0 to 2.37.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.30.0...2.37.0)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `google-api-python-client` from 2.173.0 to 2.181.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.173.0...v2.181.0)

Updates `pytest` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.1...8.4.2)

Updates `faker` from 37.4.0 to 37.6.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v37.4.0...v37.6.0)

Updates `ipython` from 9.3.0 to 9.5.0
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@9.3.0...9.5.0)

Updates `django-debug-toolbar` from 5.2.0 to 6.0.0
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@5.2.0...6.0.0)

Updates `mypy` from 1.16.1 to 1.17.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.16.1...v1.17.1)

Updates `django-stubs` from 5.2.1 to 5.2.2
- [Commits](https://github.com/sponsors/typeddjango/commits)

Updates `djangorestframework-stubs` from 3.16.0 to 3.16.2
- [Release notes](https://github.com/typeddjango/djangorestframework-stubs/releases)
- [Commits](typeddjango/djangorestframework-stubs@3.16.0...3.16.2)

Updates `boto3-stubs` from 1.38.41 to 1.40.25
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `ruff` from 0.12.0 to 0.12.12
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.0...0.12.12)

Updates `pre-commit` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.3.0)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: djangorestframework
  dependency-version: 3.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.40.25
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: google-api-python-client
  dependency-version: 2.181.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: faker
  dependency-version: 37.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ipython
  dependency-version: 9.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django-debug-toolbar
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: mypy
  dependency-version: 1.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django-stubs
  dependency-version: 5.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: djangorestframework-stubs
  dependency-version: 3.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: boto3-stubs
  dependency-version: 1.40.25
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ruff
  dependency-version: 0.12.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pre-commit
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 8, 2025
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Sep 15, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 15, 2025
@dependabot dependabot bot deleted the dependabot/pip/master/dependencies-0a21872013 branch September 15, 2025 09:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants