deps: bump the prod-deps group across 1 directory with 4 updates

[dependabot]

Bumps the prod-deps group with 4 updates in the / directory: django-treebeard, sentry-sdk, pyotp and boto3.

Updates django-treebeard from 5.2.2 to 5.3.0

Changelog

Sourced from django-treebeard's changelog.

Release 5.3.0 (Jun 24, 2026)

Treebeard 5.3.0 is a minor release release.

• Added support for loading data for many-to-many relationships with load_bulk(). These were previously exported when using dump_bulk(), but were not handled when loading the same data.
• Fixed an exception arising when running delete() operations on querysets that had a prefetch.
• Added a warning when the default manager for a model extending a Treebeard Node class does not subclass the corresponding Treebeard model manager. This will raise an error in the next major release of Treebeard.

Commits

• 98ee4ac Bump to version 5.3.0
• 8f4db3f Fix related name conflicts in test models.
• bd8b248 Add checks to ensure manager methods subclass Treebeard managers
• b33a2fc Add regression test for #405
• decc4f9 Add support for many-to-many relationships to Node.load_bulk()
• 34fed3a fix: clear prefetch_related before iterator() in delete methods (fixes #405)
• See full diff in compare view

Updates sentry-sdk from 2.62.0 to 2.63.0

Release notes

Sourced from sentry-sdk's releases.

2.63.0

Bug Fixes 🐛

Fastapi

• Prevent double wrapping of sync handlers on FastAPI >= 0.137 by @​jhonny-on in #6569
• Use effective_route_context path for prefixed routers by @​ericapisani in #6572

Other

• (asgi) Gate query string and client IP behind send_default_pii by @​ericapisani in #6501
• (serializer) Avoid creating reference cycles on every call by @​Malkiz223 in #6563
• (user) Set user.ip_address on telemetry if present by @​sentrivana in #6555
• Remove 0000 trace_id fallbacks by @​sl0thentr0py in #6570
• MANIFEST.in: Graft tests directory. by @​charlesroelli in #6237

Internal Changes 🔧

• (fastapi) Verify request info capture with POST endpoints by @​alexander-alderman-webb in #6287
• (starlette) Verify request info capture with POST endpoints by @​alexander-alderman-webb in #6269

Changelog

Sourced from sentry-sdk's changelog.

2.63.0

Bug Fixes 🐛

Fastapi

• Prevent double wrapping of sync handlers on FastAPI >= 0.137 by @​jhonny-on in #6569
• Use effective_route_context path for prefixed routers by @​ericapisani in #6572

Other

• (asgi) Gate query string and client IP behind send_default_pii by @​ericapisani in #6501
• (serializer) Avoid creating reference cycles on every call by @​Malkiz223 in #6563
• (user) Set user.ip_address on telemetry if present by @​sentrivana in #6555
• Remove 0000 trace_id fallbacks by @​sl0thentr0py in #6570
• MANIFEST.in: Graft tests directory. by @​charlesroelli in #6237

Internal Changes 🔧

• (fastapi) Verify request info capture with POST endpoints by @​alexander-alderman-webb in #6287
• (starlette) Verify request info capture with POST endpoints by @​alexander-alderman-webb in #6269

Commits

• 44b008a update changelog
• 0b2af51 Update CHANGELOG.md
• 250caad release: 2.63.0
• 72a57de fix(flask): Set user data on scope at request start (#6566)
• 6a4c3a1 fix: Remove 0000 trace_id fallbacks (#6570)
• 1df9835 feat(falcon): Set name and source on request span when streaming (#6562)
• 77874bd test(falcon): Support span streaming (#6561)
• 6bcfb9c fix(fastapi): Prevent double wrapping of sync handlers on FastAPI >= 0.137 (#...
• 72d972c fix(fastapi): use effective_route_context path for prefixed routers (#6572)
• cc802f6 feat(chalice): Add span streaming support to Chalice integration (#6503)
• Additional commits viewable in compare view

Updates pyotp from 2.9.0 to 2.10.0

Release notes

Sourced from pyotp's releases.

v2.10.0

• Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)

  • Simplified and improved generate_otp() performance in Steam class (#179)

  • Check digest function to prevent error on OTP Generation (#170)

  • Ignore non-standard otpauth parameters

  • use strings as immutable default arguments (#162)

Changelog

Sourced from pyotp's changelog.

Changes for v2.10.0 (2026-06-13)

• Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)

• Simplified and improved generate_otp() performance in Steam class (#179)

• Check digest function to prevent error on OTP Generation (#170)

• Ignore non-standard otpauth parameters

• use strings as immutable default arguments (#162)

Commits

• 81ed54a v2.10.0
• d44e98a Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)
• a25dbbb Simplified and improved generate_otp() performance in Steam class (#179)
• 89ebf90 Update CI matrix
• 2c152d4 Replace ubuntu-20.04 with 22.04 in CI (#177)
• 6e25ce2 Replace license classifier with license expression (#176)
• 3419136 Use trusted publishing and hatch
• 0c3b765 Format files with ruff
• a398c80 Update CI configuration
• 92b1dbc docs: fix deprecated intersphinx_mapping format (#173)
• Additional commits viewable in compare view

Updates boto3 from 1.43.24 to 1.43.36

Commits

• 1d26f21 Merge branch 'release-1.43.36'
• 111333b Bumping version to 1.43.36
• 9d1fa23 Add changelog entries from botocore
• 6d7f3c2 Update security docs to use newer versions of openssl and python (#4796)
• c5b26ca Merge branch 'release-1.43.35'
• c3750ac Merge branch 'release-1.43.35' into develop
• 46e77cd Bumping version to 1.43.35
• 9919ede Add changelog entries from botocore
• 1820b7d Merge branch 'release-1.43.34'
• 0065dbe Merge branch 'release-1.43.34' into develop
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions