chore(deps): bump the python-packages group across 1 directory with 23 updates by dependabot[bot] · Pull Request #77 · AlexanderZug/Blog-Api

dependabot · 2026-06-01T22:54:23Z

Bumps the python-packages group with 23 updates in the / directory:

Package	From	To
django	`5.2.7`	`5.2.14`
djangorestframework	`3.16.1`	`3.17.1`
drf-yasg	`1.21.11`	`1.21.15`
python-dotenv	`1.1.1`	`1.2.2`
django-grappelli	`4.0.3`	`5.0.0`
celery	`5.6.2`	`5.6.3`
redis	`6.4.0`	`8.0.0`
django-celery-beat	`2.8.1`	`2.9.0`
psycopg2-binary	`2.9.11`	`2.9.12`
pre-commit	`4.5.1`	`4.6.0`
ruff	`0.15.4`	`0.15.15`
mypy	`1.19.1`	`2.1.0`
django-stubs	`5.2.9`	`6.0.5`
djangorestframework-stubs	`3.16.8`	`3.17.0`
pytest-cov	`7.0.0`	`7.1.0`
attrs	`25.4.0`	`26.1.0`
click	`8.3.1`	`8.4.1`
cron-descriptor	`2.0.6`	`2.0.8`
packaging	`26.0`	`26.2`
pytz	`2025.2`	`2026.2`
rpds-py	`0.30.0`	`2026.5.1`
tzdata	`2025.3`	`2026.2`
wcwidth	`0.6.0`	`0.7.0`

Updates django from 5.2.7 to 5.2.14

Commits

024c26b [5.2.x] Bumped version for 5.2.14 release.
2115d4e [5.2.x] Fixed CVE-2026-6907 -- Prevented caching of requests when Vary header...
47cf968 [5.2.x] Fixed CVE-2026-35192 -- Ensured Vary header is sent when setting sess...
2ec27ed [5.2.x] Fixed CVE-2026-5766 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE in Memory...
ed18840 [5.2.x] Fixed typo in stub release notes for 5.2.14.
de3f622 [5.2.x] Added stub release notes and release date for 5.2.14.
fb61c8a [5.2.x] Refs CVE-2026-4292 -- Isolated new test in AdminViewListEditable.
bd1a758 [5.2.x] Fixed two issues in release helper scripts/verify_release.sh.
da57aaa [5.2.x] Added CVE-2026-3902, CVE-2026-4277, CVE-2026-4292, CVE-2026-33033, an...
c9a8bdb [5.2.x] Post-release version bump.
Additional commits viewable in compare view

Updates djangorestframework from 3.16.1 to 3.17.1

Release notes

Sourced from djangorestframework's releases.

3.17.1

What's Changed

Bug fixes

Fix HTMLFormRenderer with empty datetime values by @p-r-a-v-i-n in encode/django-rest-framework#9928

Full Changelog: encode/django-rest-framework@3.17.0...3.17.1

3.17.0

What's Changed

Breaking changes

Drop support for Python 3.9 by @auvipy in encode/django-rest-framework#9781

Drop deprecated coreapi support by @browniebroke in encode/django-rest-framework#9895

Features

Add ability to specify output format for DurationField by @sevdog in encode/django-rest-framework#8532

Add missing decorators: @versioning_class(), @content_negotiation_class(), @metadata_class() for function-based views by @qqii in encode/django-rest-framework#9719

Add support for Python 3.14 by @cclauss in encode/django-rest-framework#9780

Support violation_error_code and violation_error_message from UniqueConstraint in UniqueTogetherValidator by @s-aleshin in encode/django-rest-framework#9766

Add support for ipaddress objects in JSONEncoder by @corenting in encode/django-rest-framework#9087

Add optional support to serialize BigInteger to string by @HoodyH in encode/django-rest-framework#9775

Add Django 6.0 support by @MehrazRumman in encode/django-rest-framework#9819

Bug fixes

Prevent small risk of Token overwrite by @mahdirahimi1999 in encode/django-rest-framework#9754

Fix UniqueTogetherValidator validation when condition references a read-only field by @ticosax in encode/django-rest-framework#9764

Fix validation on many to many field when default=None by @Genarito in encode/django-rest-framework#9790

Fix invalid SPDX license expression in __init__.py by @TheFunctionalGuy in encode/django-rest-framework#9799

Fix HTMLFormRenderer to ensure a valid datetime-local format by @mgaligniana in encode/django-rest-framework#9365

Fix mutable default arguments in OrderingFilter methods by @killerdevildog in encode/django-rest-framework#9742

Update TokenAdmin to respect USERNAME_FIELD of the user model by @m000 in encode/django-rest-framework#9836

Preserve ordering in MultipleChoiceField by @fbozhang in encode/django-rest-framework#9735

Translations

Update French translation by @SebCorbin in encode/django-rest-framework#9770

Update Brazilian Portuguese translations by @JVPinheiroReis in encode/django-rest-framework#9828

Fix and improve French translations by @deronnax in encode/django-rest-framework#9896

Add missing Russian translation by @minorytanaka in encode/django-rest-framework#9903

Packaging

Migrate packaging to pyproject.toml by @deronnax in encode/django-rest-framework#9056

Move package data rules from MANIFEST.in to pyproject.toml by @p-r-a-v-i-n in encode/django-rest-framework#9825

Set up release workflow with trusted publisher by @browniebroke in encode/django-rest-framework#9852

Other changes

Refactor token generation to use the secrets module by @mahdirahimi1999 in encode/django-rest-framework#9760

Add validation for decorator out-of-order with @api_view by @kernelshard in encode/django-rest-framework#9821

Switch to mkdocs material theme for documentation by @browniebroke in encode/django-rest-framework#9849

New Contributors

@khaledsukkar2 made their first contribution in encode/django-rest-framework#9717

... (truncated)

Commits

22e231c Prepare bug fix release 3.17.1 (#9931)
8e99b53 Add condition to skip pushed tags from forks (#9924)
c0407de Fix HTMLFormRenderer with empty datetime values (#9928)
30d58a7 Fix the book sizing in the documentation (#9926)
6f03b79 Tweak order of changes in release notes
021ab56 Bump version and update release notes for 3.17.0 (#9921)
19ebad7 Bump mkdocs-material[imaging] from 9.7.4 to 9.7.5 (#9923)
f222c55 Correct requires-python key in pyproject.toml
7e7de6f Remove code fences from release checklist
c599d30 Update release process
Additional commits viewable in compare view

Updates drf-yasg from 1.21.11 to 1.21.15

Release notes

Sourced from drf-yasg's releases.

1.21.15

IMPROVED: Use Python's native dict instead of OrderedDict (#954) FIXED: Fix Python 3.12 type parameter syntax with from __future__ import annotations (#921)

1.21.14

FIXED: Fix missing swagger-ui sourcemaps (#950)

1.21.12

FIXED: Bring the bundled swagger ui up to date (#944) IMPROVED: Update the logout button to use a POST request. (#945) ADDED: Add a live demo domain (#946) ADDED: Handle annotations that are not available at runtime (#941)

Changelog

Sourced from drf-yasg's changelog.

######### Changelog #########

1.21.15

IMPROVED: Use Python's native dict instead of OrderedDict (:pr:954) FIXED: Fix Python 3.12 type parameter syntax with from __future__ import annotations (:pr:921)

1.21.14

1.21.13

FIXED: Fix missing swagger-ui sourcemaps (:pr:950)

1.21.12

FIXED: Bring the bundled swagger ui up to date (:pr:944) IMPROVED: Update the logout button to use a POST request. (:pr:945) ADDED: Add a live demo domain (:pr:946) ADDED: Handle annotations that are not available at runtime (:pr:941)

1.21.11

FIXED: Fix list views with parameters in last path segment not named "list" views (:pr:917) ADDED: Allow overriding produces/consumes with @swagger_auto_schema decorator (:pr:916) FIXED: Fix filter parameters not appearing in swagger with django-filter>=25 (:pr:926) IMPROVED: Update Python, Django, and DRF versions and packaging configuration (:pr:922) IMPROVED: Remove usage of pkg_resources (:pr:928) FIXED: Fix call_view_method warning to include the method name again (:pr:923) ADDED: Add a hide download button option (:pr:848) ADDED: Add ruff linters (:pr:903)

1.21.10

FIXED: Fix type hints when using postponed evaluation of annotations (PEP-563) (:pr:840) IMPROVED: Update JSON & YAML renderers to not use a "." in their format string (:pr:911) FIXED: Fix lint errors when comparing types with == instead of is (:pr:868)

... (truncated)

Commits

d40c97f Add version 1.21.15 details to the changelog (#956)
2e37afd Modernise and add .DS_Store to the .gitignore (#955)
76a138a Use Python's native dict instead of OrderedDict (#954)
b55ba0f fix Python 3.12 type parameter syntax with ``from future import annotatio...
7dceb27 Add version 1.21.14 details to the changelog (#952)
763cdd6 Add version 1.21.13 details to the changelog (#951)
a0559fc Add missing swagger-ui sourcemaps (#950)
2bf74d0 Add version 1.21.12 details to the changelog (#948)
b421e89 swagger ui fix (#944)
40fee2b Add live demo domain and environment variables (#946)
Additional commits viewable in compare view

Updates python-dotenv from 1.1.1 to 1.2.2

Release notes

Sourced from python-dotenv's releases.

v1.2.2

Added

Support for Python 3.14, including the free-threaded (3.14t) build. (#)

Changed

The dotenv run command now forwards flags directly to the specified command by @bbc2 in theskumar/python-dotenv#607

Improved documentation clarity regarding override behavior and the reference page.

Updated PyPy support to version 3.11.

Documentation for FIFO file support.

Support for Python 3.9.

Fixed

Improved set_key and unset_key behavior when interacting with symlinks by @bbc2 in #790c5

Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by @JYOuyang in theskumar/python-dotenv#590

Breaking Changes

dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

Misc

skip 000 permission tests for root user by @burnout-projects in theskumar/python-dotenv#561

Bump actions/checkout from 5 to 6 in the github-actions group by @dependabot[bot] in theskumar/python-dotenv#593

Add Windows testing to CI by @bbc2 in theskumar/python-dotenv#604

Improve workflow efficiency with best practices by @theskumar in theskumar/python-dotenv#609

Remove the use of sh in tests by @bbc2 in theskumar/python-dotenv#612

New Contributors

@JYOuyang made their first contribution in theskumar/python-dotenv#590

@burnout-projects made their first contribution in theskumar/python-dotenv#561

@cpackham-atlnz made their first contribution in theskumar/python-dotenv#597

Full Changelog: theskumar/python-dotenv@v1.2.1...v1.2.2

v1.2.1

What's Changed

... (truncated)

Changelog

Sourced from python-dotenv's changelog.

[1.2.2] - 2026-03-01

Added

Support for Python 3.14, including the free-threaded (3.14t) build. (#588)

Changed

The dotenv run command now forwards flags directly to the specified command by [@bbc2] in #607

Improved documentation clarity regarding override behavior and the reference page.

Updated PyPy support to version 3.11.

Documentation for FIFO file support.

Dropped Support for Python 3.9.

Fixed

Improved set_key and unset_key behavior when interacting with symlinks by [@bbc2] in [790c5c0]

Corrected the license specifier and added missing Python 3.14 classifiers in package metadata by [@JYOuyang] in #590

Breaking Changes

dotenv.set_key and dotenv.unset_key used to follow symlinks in some situations. This is no longer the case. For that behavior to be restored in all cases, follow_symlinks=True should be used.

In the CLI, set and unset used to follow symlinks in some situations. This is no longer the case.

dotenv.set_key, dotenv.unset_key and the CLI commands set and unset used to reset the file mode of the modified .env file to 0o600 in some situations. This is no longer the case: The original mode of the file is now preserved. Is the file needed to be created or wasn't a regular file, mode 0o600 is used.

[1.2.1] - 2025-10-26

Move more config to pyproject.toml, removed setup.cfg

Add support for reading .env from FIFOs (Unix) by [@sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Upgrade build system to use PEP 517 & PEP 518 to use build and pyproject.toml by [@EpicWink] in #583

Add support for Python 3.14 by [@23f3001135] in #579

Add support for disabling of load_dotenv() using PYTHON_DOTENV_DISABLED env var. by [@matthewfranglen] in #569

Commits

36004e0 Bump version: 1.2.1 → 1.2.2
eb20252 docs: update changelog for v1.2.2
790c5c0 Merge commit from fork
43340da Remove the use of sh in tests (#612)
09d7cee docs: clarify override behavior and document FIFO support (#610)
c8de288 ci: improve workflow efficiency with best practices (#609)
7bd9e3d Add Windows testing to CI (#604)
1baaf04 Drop Python 3.9 support and update to PyPy 3.11 (#608)
4a22cf8 ci: enable testing on Python 3.14t (free-threaded) (#588)
e2e8e77 Fix license specifier (#597)
Additional commits viewable in compare view

Updates django-grappelli from 4.0.3 to 5.0.0

Changelog

Sourced from django-grappelli's changelog.

5.0.0 (April 29th, 2026)

Compatibility with Django 6.x

4.0.5 (not yet released)

4.0.4 (April 28th, 2026)

Improved: raised margins within radiolists

Improved: layout for multiple inputs in related widget

Improved: layout for related widget display in change list

Commits

98c98e7 docs for upcoming release (5.0.0)
fa9fdbd fix with dashboard modules
fd0552f Merge branch 'master' into stable/5.0.x
be75293 docs for upcoming release (4.0.4)
dec6e41 apply label styles to legends in grp-rows, #1077
0208cce hide datetime inline labels, #1077
84d070b improving layout for related widget display in change list, related to #1072
9e52129 improving layout for multiple inputs in related widget, #1072
6622c4b improving layout for related widget display in change list, related to #1072
1edb009 improving layout for multiple inputs in related widget, #1072
Additional commits viewable in compare view

Updates celery from 5.6.2 to 5.6.3

Release notes

Sourced from celery's releases.

v5.6.3

What's Changed

Fix Django worker recursion bug + defensive checks for pool_cls.module by @maycuatroi1 in celery/celery#10048

Docs: Update user_preload_options example to use click. by @jorsyk in celery/celery#10056

Fix invalid configuration key "bootstrap_servers" in Kafka demo by @jorsyk in celery/celery#10060

Fix broken images on PyPI page by @Timour-Ilyas in celery/celery#10066

Remove broken reference. by @sueannioanis in celery/celery#10071

Removed --dist=loadscope from smoke tests by @Nusnus in celery/celery#10073

Docs: Clarify task_retry signal args may be None by @GangEunzzang in celery/celery#10076

Update example for Django by @sbc-khacnha in celery/celery#10081

Make tests compatible with pymongo >= 4.16 by @cjwatson in celery/celery#10074

fix: source install of cassandra-driver by @Izzette in celery/celery#10105

fix: register task cross-reference role in Sphinx extension by @veeceey in celery/celery#10100

fix: avoid cycle detection in native delayed delivery by @Izzette in celery/celery#10095

fix(asynpool): avoid AttributeError when proc lacks _sentinel_poll by @mriddle in celery/celery#10086

fix dusk_astronomical horizon sign (+18 -> -18) by @Mr-Neutr0n in celery/celery#10121

Fix/10106 onupdate col use lambda func by @ChickenBenny in celery/celery#10108

Fix warm shutdown RuntimeError with eventlet>=0.37.0 (#10083) by @ChickenBenny in celery/celery#10123

Fix 10109 db backend connection health by @ChickenBenny in celery/celery#10124

Database Backend filter unsupport sql engine arguments with nullpool #7355 by @ChickenBenny in celery/celery#10134

fix(beat): correct argument order in Service.reduce by @bysiber in celery/celery#10137

ci: declare explicit read-only token permissions in workflow jobs by @Rohan5commit in celery/celery#10139

chore: 'boto3to' to 'boto3 to' by @cuiweixie in celery/celery#10133

Database Backend: Add missing index on date_done (Fixes #10097) by @ChickenBenny in celery/celery#10098

docs: fix typo in CONTRIBUTING.rst by @Rohan5commit in celery/celery#10141

Refer to Flower / Prometheus for monitoring by @WilliamDEdwards in celery/celery#10140

docs: remove duplicated words in broker and routing docs by @Rohan5commit in celery/celery#10146

docs: fix stale version reference and grammar in README by @kelsonbrito50 in celery/celery#10145

docs: fix wording in Celery 5.3 worker pool notes by @Rohan5commit in celery/celery#10149

docs: fix duplicated wording in 3.1 changelog entry by @Rohan5commit in celery/celery#10152

docs: fix changelog typo in context manager wording by @Rohan5commit in celery/celery#10144

Fix/10096 worker fails to reconnect after redis failover by @ChickenBenny in celery/celery#10151

Improve on_after_finalize signal documentation by @Br1an67 in celery/celery#10155

Add non-commutative example to clarify partial arg ordering in canvas docs by @Br1an67 in celery/celery#10157

Remove redundant test_isa_mapping test (fixes #10077) by @daniel7an in celery/celery#10103

Upgrade pytest-celery to >=1.3.0 and adopt PYTEST_CELERY_PKG build arg by @Nusnus in celery/celery#10162

Remove deprecated args from redis get_connection call by @JaeHyuckSa in celery/celery#10036

Fix #6912 rpc backend reconnection error by @ChickenBenny in celery/celery#10179

Fix NameError with TYPE_CHECKING annotations on Python 3.14+ (PEP 649) by @drichardson in celery/celery#10165

docs: Add elaboration on prefetch multiplier settings (worker_prefetch_multiplier) and worker_eta_task_limit by @tsangwailam in celery/celery#10181

Fix O(K²) message bloat in a chain of chords by @Borzik in celery/celery#10171

Fix mock connection interfaces to prevent TypeError during exception handling by @ChickenBenny in celery/celery#10178

fix(trace): dispatch chain/callbacks on dedup fast-path for redelivered tasks by @aurangzaib048 in celery/celery#10159

Extract reconnect_on_error to BaseResultConsumer by @ChickenBenny in celery/celery#10189

pep 649 by @ericbuehl in celery/celery#10187

Fix#9722 friendly status errors for CLI by @ChickenBenny in celery/celery#10190

docs: clarify after_return behavior for retried tasks by @KianAnbarestani in celery/celery#10192

Add compression header to message protocol docs by @Br1an67 in celery/celery#10156

docs: fix duplicated word in bootsteps comment by @Rohan5commit in celery/celery#10153

Remove outdated autoreloader section from extending docs by @Br1an67 in celery/celery#10154

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.3

:release-date: 2026-03-26 :release-by: Tomer Nosrati

What's Changed


- Fix Django worker recursion bug + defensive checks for pool_cls.__module__ ([#10048](https://github.com/celery/celery/issues/10048))
- Docs: Update user_preload_options example to use click. ([#10056](https://github.com/celery/celery/issues/10056))
- Fix invalid configuration key "bootstrap_servers" in Kafka demo ([#10060](https://github.com/celery/celery/issues/10060))
- Fix broken images on PyPI page ([#10066](https://github.com/celery/celery/issues/10066))
- Remove broken reference. ([#10071](https://github.com/celery/celery/issues/10071))
- Removed --dist=loadscope from smoke tests ([#10073](https://github.com/celery/celery/issues/10073))
- Docs: Clarify task_retry signal args may be None ([#10076](https://github.com/celery/celery/issues/10076))
- Update example for Django ([#10081](https://github.com/celery/celery/issues/10081))
- Make tests compatible with pymongo >= 4.16 ([#10074](https://github.com/celery/celery/issues/10074))
- fix: source install of cassandra-driver ([#10105](https://github.com/celery/celery/issues/10105))
- fix: register task cross-reference role in Sphinx extension ([#10100](https://github.com/celery/celery/issues/10100))
- fix: avoid cycle detection in native delayed delivery ([#10095](https://github.com/celery/celery/issues/10095))
- fix(asynpool): avoid AttributeError when proc lacks _sentinel_poll ([#10086](https://github.com/celery/celery/issues/10086))
- fix dusk_astronomical horizon sign (+18 -> -18) ([#10121](https://github.com/celery/celery/issues/10121))
- Fix/10106 onupdate col use lambda func ([#10108](https://github.com/celery/celery/issues/10108))
- Fix warm shutdown RuntimeError with eventlet>=0.37.0 ([#10083](https://github.com/celery/celery/issues/10083)) ([#10123](https://github.com/celery/celery/issues/10123))
- Fix 10109 db backend connection health ([#10124](https://github.com/celery/celery/issues/10124))
- Database Backend filter unsupport sql engine arguments with nullpool [#7355](https://github.com/celery/celery/issues/7355) ([#10134](https://github.com/celery/celery/issues/10134))
- fix(beat): correct argument order in Service.__reduce__ ([#10137](https://github.com/celery/celery/issues/10137))
- ci: declare explicit read-only token permissions in workflow jobs ([#10139](https://github.com/celery/celery/issues/10139))
- chore: 'boto3to' to 'boto3 to' ([#10133](https://github.com/celery/celery/issues/10133))
- Database Backend: Add missing index on date_done (Fixes [#10097](https://github.com/celery/celery/issues/10097)) ([#10098](https://github.com/celery/celery/issues/10098))
- docs: fix typo in CONTRIBUTING.rst ([#10141](https://github.com/celery/celery/issues/10141))
- Refer to Flower / Prometheus for monitoring ([#10140](https://github.com/celery/celery/issues/10140))
- docs: remove duplicated words in broker and routing docs ([#10146](https://github.com/celery/celery/issues/10146))
- docs: fix stale version reference and grammar in README ([#10145](https://github.com/celery/celery/issues/10145))
- docs: fix wording in Celery 5.3 worker pool notes ([#10149](https://github.com/celery/celery/issues/10149))
- docs: fix duplicated wording in 3.1 changelog entry ([#10152](https://github.com/celery/celery/issues/10152))
- docs: fix changelog typo in context manager wording ([#10144](https://github.com/celery/celery/issues/10144))
- Fix/10096 worker fails to reconnect after redis failover ([#10151](https://github.com/celery/celery/issues/10151))
- Improve on_after_finalize signal documentation ([#10155](https://github.com/celery/celery/issues/10155))
- Add non-commutative example to clarify partial arg ordering in canvas docs ([#10157](https://github.com/celery/celery/issues/10157))
- Remove redundant test_isa_mapping test (fixes [#10077](https://github.com/celery/celery/issues/10077)) ([#10103](https://github.com/celery/celery/issues/10103))
- Upgrade pytest-celery to >=1.3.0 and adopt PYTEST_CELERY_PKG build arg ([#10162](https://github.com/celery/celery/issues/10162))
- Remove deprecated args from redis get_connection call ([#10036](https://github.com/celery/celery/issues/10036))
- Fix [#6912](https://github.com/celery/celery/issues/6912) rpc backend reconnection error ([#10179](https://github.com/celery/celery/issues/10179))
- Fix NameError with TYPE_CHECKING annotations on Python 3.14+ (PEP 649) ([#10165](https://github.com/celery/celery/issues/10165))
- docs: Add elaboration on prefetch multiplier settings (worker_prefetch_multiplier) and worker_eta_task_limit ([#10181](https://github.com/celery/celery/issues/10181))
- Fix O(K²) message bloat in a chain of chords ([#10171](https://github.com/celery/celery/issues/10171))
- Fix mock connection interfaces to prevent `TypeError` during exception handling ([#10178](https://github.com/celery/celery/issues/10178))
- fix(trace): dispatch chain/callbacks on dedup fast-path for redelivered tasks ([#10159](https://github.com/celery/celery/issues/10159))
</tr></table>

... (truncated)

Commits

3f4d8d7 Prepare for release: v5.6.3 (#10221)
a989e8c fix: clear the timer while catch the exception (#10218)
d06de5f Chore(deps): Bump nick-fields/retry from 3 to 4 (#10213)
c3c19c3 Fix: prioritize request ignore_result over task definition (#10184)
d23be53 Remove outdated autoreloader section from extending docs (#10154)
ada2da7 docs: fix duplicated word in bootsteps comment\n\nSigned-off-by: Rohan Santho...
f45f62b Add compression header to message protocol docs (#10156)
9a27092 docs: clarify after_return behavior for retried tasks (#10192)
6ee6230 Fix#9722 friendly status errors for CLI (#10190)
a9a2d4c [pre-commit.ci] pre-commit autoupdate (#10186)
Additional commits viewable in compare view

Updates redis from 6.4.0 to 8.0.0

Release notes

Sourced from redis's releases.

8.0.0

Changes

🚀 Highlights

Async Cluster PubSub

This release introduces full asyncio Cluster PubSub support, bringing shard-channel capabilities (SSUBSCRIBE, SUNSUBSCRIBE, SPUBLISH) to the async RedisCluster client. The new ClusterPubSub class in redis.asyncio.cluster automatically routes shard-channel subscriptions to the correct cluster node based on key-slot hashing, manages per-node PubSub connections, and supports round-robin message retrieval across nodes. Users can create a cluster pubsub instance via RedisCluster.pubsub() and use ssubscribe(), sunsubscribe(), and get_sharded_message() just as they would with the sync cluster client.

Keyspace and subkey notifications

Redis Keyspace Notifications are now supported for standalone and cluster deployments in both sync and async modes. New classes — KeyspaceNotifications, ClusterKeyspaceNotifications, AsyncKeyspaceNotifications, and AsyncClusterKeyspaceNotifications — provide a high-level API for keyspace/keyevent subscriptions and subkey notification families: subkeyspace, subkeyevent, subkeyspaceitem, and subkeyspaceevent. Convenience methods like subscribe_keyspace(), subscribe_keyevent(), subscribe_subkeyspace(), subscribe_subkeyevent(), subscribe_subkeyspaceitem(), and subscribe_subkeyspaceevent() simplify common patterns, with channel classes for both key and subkey channels.

In cluster mode, subscriptions are managed across primary nodes because each node emits notifications only for keys it owns, with built-in topology-change handling. Sync run_in_thread() and async listen() workflows are supported.

Redis Array commands(https://redis.io/docs/latest/develop/data-types/arrays/)

redis-py now supports Redis Arrays, a preview Redis data type for sparse, index-addressable sequences of strings. New AR* command helpers cover indexed reads/writes, range scans, deletion, cursor-based insertion, ring-buffer writes, metadata, text search, and aggregation, including ARGET, ARSET, ARMGET, ARMSET, ARSCAN, ARGREP, ARRING, and AROP.

Type Hints Improvements (breaking changes)

The @overload pattern has been applied systematically across core commands (core.py), VectorSet commands, and module commands (Search, JSON, TimeSeries, Bloom filters) to provide distinct return types for sync and async clients. Previously, methods returned a combined ResponseT (i.e., Union[Awaitable[Any], Any]), which caused static analysis tools like mypy and Pyright to flag false positives. Now, sync clients see concrete return types (e.g., int, bool, list[str]) while async clients see Awaitable[...] wrappers. This is a breaking change for type-checking only—runtime behavior is unchanged, but code relying on the old union return types in type annotations may need updates. Two new protocol types, SyncClientProtocol and AsyncClientProtocol, are used in overload signatures to enable this distinction.

RESP3 by default with opt-in unified responses

redis-py 8.0.0 now uses RESP3 on the wire by default while preserving legacy RESP2-compatible Python response shapes for existing applications (#4052). Protocol-independent unified response shapes are available by setting legacy_responses=False, so affected commands return the same Python structure with RESP2 or RESP3.

Use protocol=2 to force RESP2 on the wire, protocol=3 to opt into native RESP3 response shapes, or legacy_responses=False to migrate to unified responses. See https://github.com/redis/redis-py/blob/HEAD/docs/unified_responses.rst and https://github.com/redis/redis-py/blob/HEAD/specs/unified_responses_migration_guide.md for the affected commands and migration details.

Connection and retry defaults

Default connection settings were updated: socket_timeout and socket_connect_timeout now default to 5 seconds, TCP keepalive is enabled by default, socket reads use a 32 KB buffer, connection pools default to max_connections=100, and retry defaults now use 10 attempts with exponential jitter backoff.

Note: socket_timeout can affect blocking commands such as BLPOP/BRPOP; if a command blocks longer than the client socket timeout, it may raise TimeoutError before the command timeout elapses (#2807).

🧪 Experimental Features

Added support for new array commands (#4055)

🚀 New Features

Support Cluster PubSub in asyncio (#3736)

Add Redis Keyspace Notifications Support for Redis Cluster (#3962)

Add random load balancing strategy which allows for use of the primary (#4027)

Add FPHA (floating-point homogeneous array) arg support to JSON.SET (#4011)

Added custom Claude command + XNACK command support (#4030)

Adding Time Series Multiple Aggregators support (#4035)

Adding support for new COUNT aggregator for some sorted set commands - ZINTER, ZINTERSTORE, ZUNION, ZUNIONSTORE (#4034)

Adding support for new INCREX command (#4067 #4077)

Add support for PubSub subscriptions with binary channel names and handlers (#4068)

... (truncated)

Commits

733f80e Updates in default connection and retry settings (#4082)
a68a16c Updating Redis supported versions in README.md and lib version to 8.0.0
43a41d3 Updating INCREX command arg - SATURATE now controls overflow behaviour (#4077)
1496deb Preserve explicit None for client metadata config (#4081)
57dc08c Avoid zero-timeout async reads in hiredis connections readiness checks and re...
cd54ddd fix(typing): correct type annotation for XReadResponse (#4046)
ab2d41f Add support for PubSub subscriptions with binary channel names and handlers (...
ef24dc9 Randomize cluster startup node order during topology refresh (#4060)
b604015 Add CLAUDE.md and /sync-claude-md skill for managing (#4066)
2b8b4fc Fix flaky tests (#4071)
Additional commits viewable in compare view

Updates django-celery-beat from 2.8.1 to 2.9.0

Release notes

Sourced from django-celery-beat's releases.

v2.9.0

What's Changed

Added DeepWiki to README by @Nusnus in celery/django-celery-beat#893

refactor: use in operator instead of regex operator in crontab query to fix mssql regression by

…3 updates Bumps the python-packages group with 23 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `5.2.7` | `5.2.14` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.16.1` | `3.17.1` | | [drf-yasg](https://github.com/axnsan12/drf-yasg) | `1.21.11` | `1.21.15` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.2` | | [django-grappelli](https://github.com/sehmaschine/django-grappelli) | `4.0.3` | `5.0.0` | | [celery](https://github.com/celery/celery) | `5.6.2` | `5.6.3` | | [redis](https://github.com/redis/redis-py) | `6.4.0` | `8.0.0` | | [django-celery-beat](https://github.com/celery/django-celery-beat) | `2.8.1` | `2.9.0` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.11` | `2.9.12` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.1` | `4.6.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.4` | `0.15.15` | | [mypy](https://github.com/python/mypy) | `1.19.1` | `2.1.0` | | [django-stubs](https://github.com/typeddjango/django-stubs) | `5.2.9` | `6.0.5` | | [djangorestframework-stubs](https://github.com/typeddjango/djangorestframework-stubs) | `3.16.8` | `3.17.0` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` | | [attrs](https://github.com/python-attrs/attrs) | `25.4.0` | `26.1.0` | | [click](https://github.com/pallets/click) | `8.3.1` | `8.4.1` | | [cron-descriptor](https://github.com/Salamek/cron-descriptor) | `2.0.6` | `2.0.8` | | [packaging](https://github.com/pypa/packaging) | `26.0` | `26.2` | | [pytz](https://github.com/stub42/pytz) | `2025.2` | `2026.2` | | [rpds-py](https://github.com/crate-py/rpds) | `0.30.0` | `2026.5.1` | | [tzdata](https://github.com/python/tzdata) | `2025.3` | `2026.2` | | [wcwidth](https://github.com/jquast/wcwidth) | `0.6.0` | `0.7.0` | Updates `django` from 5.2.7 to 5.2.14 - [Commits](django/django@5.2.7...5.2.14) Updates `djangorestframework` from 3.16.1 to 3.17.1 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.16.1...3.17.1) Updates `drf-yasg` from 1.21.11 to 1.21.15 - [Release notes](https://github.com/axnsan12/drf-yasg/releases) - [Changelog](https://github.com/axnsan12/drf-yasg/blob/master/docs/changelog.rst) - [Commits](axnsan12/drf-yasg@1.21.11...1.21.15) Updates `python-dotenv` from 1.1.1 to 1.2.2 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.1.1...v1.2.2) Updates `django-grappelli` from 4.0.3 to 5.0.0 - [Changelog](https://github.com/sehmaschine/django-grappelli/blob/master/docs/changelog.rst) - [Commits](sehmaschine/django-grappelli@4.0.3...5.0.0) Updates `celery` from 5.6.2 to 5.6.3 - [Release notes](https://github.com/celery/celery/releases) - [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst) - [Commits](celery/celery@v5.6.2...v5.6.3) Updates `redis` from 6.4.0 to 8.0.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v6.4.0...v8.0.0) Updates `django-celery-beat` from 2.8.1 to 2.9.0 - [Release notes](https://github.com/celery/django-celery-beat/releases) - [Changelog](https://github.com/celery/django-celery-beat/blob/main/Changelog) - [Commits](celery/django-celery-beat@v2.8.1...v2.9.0) Updates `psycopg2-binary` from 2.9.11 to 2.9.12 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.11...2.9.12) Updates `pre-commit` from 4.5.1 to 4.6.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.5.1...v4.6.0) Updates `ruff` from 0.15.4 to 0.15.15 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.4...0.15.15) Updates `mypy` from 1.19.1 to 2.1.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.19.1...v2.1.0) Updates `django-stubs` from 5.2.9 to 6.0.5 - [Release notes](https://github.com/typeddjango/django-stubs/releases) - [Commits](typeddjango/django-stubs@5.2.9...6.0.5) Updates `djangorestframework-stubs` from 3.16.8 to 3.17.0 - [Release notes](https://github.com/typeddjango/djangorestframework-stubs/releases) - [Commits](typeddjango/djangorestframework-stubs@3.16.8...3.17.0) Updates `pytest-cov` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0) Updates `attrs` from 25.4.0 to 26.1.0 - [Release notes](https://github.com/python-attrs/attrs/releases) - [Changelog](https://github.com/python-attrs/attrs/blob/main/CHANGELOG.md) - [Commits](python-attrs/attrs@25.4.0...26.1.0) Updates `click` from 8.3.1 to 8.4.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst) - [Commits](pallets/click@8.3.1...8.4.1) Updates `cron-descriptor` from 2.0.6 to 2.0.8 - [Release notes](https://github.com/Salamek/cron-descriptor/releases) - [Commits](Salamek/cron-descriptor@2.0.6...2.0.8) Updates `packaging` from 26.0 to 26.2 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.0...26.2) Updates `pytz` from 2025.2 to 2026.2 - [Release notes](https://github.com/stub42/pytz/releases) - [Commits](stub42/pytz@release_2025.2...release_2026.2) Updates `rpds-py` from 0.30.0 to 2026.5.1 - [Release notes](https://github.com/crate-py/rpds/releases) - [Changelog](https://github.com/crate-py/rpds/blob/main/release.toml) - [Commits](crate-py/rpds@v0.30.0...v2026.5.1) Updates `tzdata` from 2025.3 to 2026.2 - [Release notes](https://github.com/python/tzdata/releases) - [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md) - [Commits](python/tzdata@2025.3...2026.2) Updates `wcwidth` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/jquast/wcwidth/releases) - [Commits](jquast/wcwidth@0.6.0...0.7.0) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.14 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: djangorestframework dependency-version: 3.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: drf-yasg dependency-version: 1.21.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: python-dotenv dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: django-grappelli dependency-version: 5.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: celery dependency-version: 5.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: redis dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: django-celery-beat dependency-version: 2.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: psycopg2-binary dependency-version: 2.9.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: pre-commit dependency-version: 4.6.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: ruff dependency-version: 0.15.15 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: mypy dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python-packages - dependency-name: django-stubs dependency-version: 6.0.5 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python-packages - dependency-name: djangorestframework-stubs dependency-version: 3.17.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pytest-cov dependency-version: 7.1.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: attrs dependency-version: 26.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: click dependency-version: 8.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: cron-descriptor dependency-version: 2.0.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: packaging dependency-version: '26.2' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: pytz dependency-version: '2026.2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: rpds-py dependency-version: 2026.5.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: tzdata dependency-version: '2026.2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: wcwidth dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the python-packages group across 1 directory with 23 updates - #77

chore(deps): bump the python-packages group across 1 directory with 23 updates#77
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-packages-19022cb54b

dependabot Bot commented on behalf of github Jun 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 1, 2026

3.17.1

What's Changed

Bug fixes

3.17.0

What's Changed

Breaking changes

Features

Bug fixes

Translations

Packaging

Other changes

New Contributors

1.21.15

1.21.14

1.21.12

v1.2.2

Added

Changed

Fixed

Breaking Changes

Misc

New Contributors

v1.2.1

What's Changed

[1.2.2] - 2026-03-01

Added

Changed

Fixed

Breaking Changes

[1.2.1] - 2025-10-26

[1.2.0] - 2025-10-26

5.0.0 (April 29th, 2026)

4.0.5 (not yet released)

4.0.4 (April 28th, 2026)

v5.6.3

What's Changed

5.6.3

8.0.0

Changes

🚀 Highlights

Async Cluster PubSub

Keyspace and subkey notifications

Redis Array commands(https://redis.io/docs/latest/develop/data-types/arrays/)

Type Hints Improvements (breaking changes)

RESP3 by default with opt-in unified responses

Connection and retry defaults

🧪 Experimental Features

🚀 New Features

v2.9.0

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants