Skip to content

Bump the pip group across 2 directories with 8 updates - #2

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/pip-881a18c8f3
Open

Bump the pip group across 2 directories with 8 updates#2
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/pip-881a18c8f3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 18, 2026

Copy link
Copy Markdown

Bumps the pip group with 6 updates in the / directory:

Package From To
gevent 1.1.2 23.9.0
psutil 4.3.1 5.6.6
requests 2.11.1 2.33.0
twisted 16.4.1 26.4.0rc2
ujson 1.35 5.13.0
wheel 0.30 0.38.1

Bumps the pip group with 2 updates in the /services/core/OpenADRVenAgent directory: signxml and numpy.

Updates gevent from 1.1.2 to 23.9.0

Changelog

Sourced from gevent's changelog.

================== Changes for 1.1

.. currentmodule:: gevent

Commits
  • 693181e Preparing release 23.9.0
  • 6fc7898 Set the cython version; go back to default wheel tags.
  • 666e374 Had the constraint wrong.
  • 74ef876 Tweaking the build, and it seems like the greenlet stack issue should be fixed.
  • b652e2a Error handling adjustments from running under a debug build.
  • 70e7318 Tweaking tests and comments; temporary workarounds for 3.12 to enable builds.
  • 495e37a Workaround the 3.12 traceback issue again.
  • 2f53c85 gevent.pywsgi: Much improved handling of chunk trailers.
  • bb06d2d Test builds with greenlet assertions enabled.
  • 6b22af0 pyproject.toml: Bump to latest cython.
  • Additional commits viewable in compare view

Updates psutil from 4.3.1 to 5.6.6

Changelog

Sourced from psutil's changelog.

5.6.6 — 2019-11-25 ^^^^^^^^^^^^^^^^^^

Bug fixes

  • :gh:1179, [Linux]: :meth:Process.cmdline now handles processes that use inappropriate chars to separate args.
  • :gh:1616, [critical]: use of Py_DECREF instead of Py_CLEAR will result in double free() and segfault (CVE-2019-18874 <https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-18874>__). (patch by Riccardo Schirone)
  • :gh:1619, [OpenBSD], [critical]: compilation fails due to C syntax error. (patch by :user:Nathan Houghton <n1000>)

5.6.5 — 2019-11-06 ^^^^^^^^^^^^^^^^^^

Bug fixes

  • :gh:1615: remove pyproject.toml as it was causing installation issues.

5.6.4 — 2019-11-04 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:1527, [Linux]: added :meth:Process.cpu_times :field:iowait counter, which is the time spent waiting for blocking I/O to complete.
  • :gh:1565: add PEP 517/8 build backend and requirements specification for better pip integration. (patch by :user:Bernát Gábor <gaborbernat>)

Bug fixes

  • :gh:875, [Windows], [critical]: :meth:Process.cmdline, :meth:Process.environ or :meth:Process.cwd may occasionally fail with ERROR_PARTIAL_COPY which now gets translated to :exc:AccessDenied.
  • :gh:1126, [Linux], [critical]: :meth:Process.cpu_affinity segfaults on CentOS 5 / manylinux. :meth:Process.cpu_affinity support for CentOS 5 was removed.
  • :gh:1528, [AIX], [critical]: compilation error on AIX 7.2 due to 32 vs 64 bit differences. (patch by :user:Arnon Yaari <wiggin15>)
  • :gh:1535: :field:type and :field:family fields returned by :func:net_connections are not always turned into enums.
  • :gh:1536, [NetBSD]: :meth:Process.cmdline erroneously raise :exc:ZombieProcess error if cmdline has non encodable chars.
  • :gh:1546: usage percent may be rounded to 0 on Python 2.
  • :gh:1552, [Windows]: :func:getloadavg math for calculating 5 and 15 mins values is incorrect.
  • :gh:1568, [Linux]: use CC compiler env var if defined.
  • :gh:1570, [Windows]: NtWow64* syscalls fail to raise the proper error

... (truncated)

Commits
  • c6cd256 pre release
  • b2414b8 revert #1595
  • c63369e updat HISTORY
  • edb20f6 linux, cmdline(), fix for #1179, comment 552984549: sometimes string ends wit...
  • d739cbb use PROCESS_QUERY_LIMITED_INFORMATION
  • f7e898b #1595: use psutil_pid_is_running() instead of GetExitCodeProcess
  • 72c84cb #fix #1595 / windows: kill() may not raise AccessDenied
  • 1f8d432 Merge branch 'master' of github.com:giampaolo/psutil
  • e6faebc release gil around users()/BSD (#1425)
  • 5cb1b0b Merge branch 'master' of github.com:giampaolo/psutil
  • Additional commits viewable in compare view

Updates requests from 2.11.1 to 2.33.0

Release notes

Sourced from requests's releases.

v2.33.0

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2330-2026-03-25

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

v2.32.4

2.32.4 (2025-06-10)

... (truncated)

Changelog

Sourced from requests's changelog.

2.33.0 (2026-03-25)

Announcements

  • 📣 Requests is adding inline types. If you have a typed code base that uses Requests, please take a look at #7271. Give it a try, and report any gaps or feedback you may have in the issue. 📣

Security

  • CVE-2026-25645 requests.utils.extract_zipped_paths now extracts contents to a non-deterministic location to prevent malicious file replacement. This does not affect default usage of Requests, only applications calling the utility function directly.

Improvements

  • Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

  • Fixed an issue where an empty netrc entry could cause malformed authentication to be applied to Requests on Python 3.11+. (#7205)

Deprecations

  • Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

  • Various typo fixes and doc improvements.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

... (truncated)

Commits
  • bc04dfd v2.33.0
  • 66d21cb Merge commit from fork
  • 8b9bc8f Move badges to top of README (#7293)
  • e331a28 Remove unused extraction call (#7292)
  • 753fd08 docs: fix FAQ grammar in httplib2 example
  • 774a0b8 docs(socks): same block as other sections
  • 9c72a41 Bump github/codeql-action from 4.33.0 to 4.34.1
  • ebf7190 Bump github/codeql-action from 4.32.0 to 4.33.0
  • 0e4ae38 docs: exclude Response.is_permanent_redirect from API docs (#7244)
  • d568f47 docs: clarify Quickstart POST example (#6960)
  • Additional commits viewable in compare view

Updates twisted from 16.4.1 to 26.4.0rc2

Release notes

Sourced from twisted's releases.

Twisted 26.4.0rc2 (2026-04-29)

This is the last release with support for Python 3.9.

Security

  • twisted.names was fix for Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. Reported and fixed by Tomas Illuminati Balbin CVE-2026-42304 (#12626)

Features

  • twisted.internet.ssl.CertificateOptions has a new constructor argument, contextForServerName, which takes a callback that will get invoked when a client sends a server name indication, with the sent servername, and returns a new OpenSSL.SSL.Context that the connection will switch to. (#4887)
  • twisted.internet.endpoints.serverFromString now supports the tls endpoint type, which allows you to do twist web --listen=tls:.../certbot-dir/config/live pointed at a certbot live configuration directory and have your certbot certificates automatically discovered and served appropriately. (#9885)
  • twisted.internet.reactor now has type annotations and will appear to be an object of an appropriate type, allowing for idiomatic common usages with correct type information. (#9909)
  • twisted.conch.ssh.SSHUserAuthServer now supports the security key ssh types "sk-ecdsa-sha2-nistp256@openssh.com" and "sk-ssh-ed25519@openssh.com" and extracting the application property from these new key types. (#12212)

Bugfixes

  • twisted.internet.mail will now return a meaningful Failure when TLS validation fails. (#10210)
  • TLS version range constraints passed to twisted.internet.ssl.CertificateOptions are now properly respected rather than excluding the version being passed as the desired constraint. (#10232)
  • A potential reference cycle that might cause intermittent memory spikes while using twisted.internet.defer.inlineCallbacks was removed. (#12120)
  • Trial no longer emits the error RuntimeWarning: TestResult has no addDuration method when running PyUnit tests. (#12229)
  • twisted.python.rebuild.rebuild() now handles changes to sys.modules gracefully. Prior to the change, it could possibly raise a "dictionary changed size during iteration" error if the module list changed. (#12458)
  • twisted.internet.protocol.ReconnectingClientFactory: Don't multiply by factor for initial delay, but use initialDelay directly. (#12478)
  • twisted.internet.ssl and twisted.protocols.tls no longer mutate the pyOpenSSL context after creating pyOpenSSL connections, maintaining compatibility with an upcoming version of pyOpenSSL and increasing reliability (possibly even fixing a very rare segfault) (#12500)
  • twisted.internet.testing.MemoryReactor.callWhenRunning now invokes the callback immediately, if already started. (#12514)
  • Twisted now correctly detects EOF on OpenSSL 4. (#12632)

Improved Documentation

  • The example code from the documentation describing how to create a custom DNS server was updated to Python3. (#12480)
  • Type annotations now use modern PEP 585 built-in generics and PEP 604 union syntax throughout the project. (#12556)

Deprecations and Removals

... (truncated)

Changelog

Sourced from twisted's changelog.

This file contains the release notes for Twisted.

It only contains high-level changes that are of interest to Twisted library users. Users of Twisted should check the notes before planning an upgrade.

Ticket numbers in this file can be looked up by visiting https://twisted.org/trac/ticket/

.. towncrier release notes start

Twisted 26.4.0 (2026-05-11)

This is the last release with support for Python 3.9. No changes since 26.4.0rc2.

Security

  • twisted.names was fix for Denial of Service (DoS) attack via resource exhaustion during DNS name decompression. Reported and fixed by Tomas Illuminati Balbin CVE-2026-42304 (#12626)

Features

  • twisted.internet.ssl.CertificateOptions has a new constructor argument, contextForServerName, which takes a callback that will get invoked when a client sends a server name indication, with the sent servername, and returns a new OpenSSL.SSL.Context that the connection will switch to. (#4887)
  • twisted.internet.endpoints.serverFromString now supports the tls endpoint type, which allows you to do twist web --listen=tls:.../certbot-dir/config/live pointed at a certbot live configuration directory and have your certbot certificates automatically discovered and served appropriately. (#9885)
  • twisted.internet.reactor now has type annotations and will appear to be an object of an appropriate type, allowing for idiomatic common usages with correct type information. (#9909)
  • twisted.conch.ssh.SSHUserAuthServer now supports the security key ssh types "sk-ecdsa-sha2-nistp256@openssh.com" and "sk-ssh-ed25519@openssh.com" and extracting the application property from these new key types. (#12212)

Bugfixes

  • twisted.mail.smtp will now return a meaningful Failure when TLS validation fails. (#10210)
  • TLS version range constraints passed to twisted.internet.ssl.CertificateOptions are now properly respected rather than excluding the version being passed as the desired constraint. (#10232)
  • A potential reference cycle that might cause intermittent memory spikes while using twisted.internet.defer.inlineCallbacks was removed. (#12120)
  • Trial no longer emits the error RuntimeWarning: TestResult has no addDuration method when running PyUnit tests. (#12229)
  • twisted.python.rebuild.rebuild() now handles changes to sys.modules gracefully. Prior to the change, it could possibly raise a "dictionary changed size during iteration" error if the module list changed. (#12458)
  • twisted.internet.protocol.ReconnectingClientFactory: Don't multiply by factor for initial delay, but use initialDelay directly. (#12478)
  • twisted.internet.ssl and twisted.protocols.tls no longer mutate the pyOpenSSL context after creating pyOpenSSL connections, maintaining compatibility with an upcoming version of pyOpenSSL and increasing reliability (possibly even fixing a very rare segfault) (#12500)
  • twisted.internet.testing.MemoryReactor.callWhenRunning now invokes the callback immediately, if already started. (#12514)
  • Twisted now correctly detects EOF on OpenSSL 4. (#12632)

... (truncated)

Commits

Updates ujson from 1.35 to 5.13.0

Release notes

Sourced from ujson's releases.

5.13.0

Added

Changed

Fixed

  • Tighten UTF-8 validation for ujson.dumps(b"...", reject_bytes=False) (169eaf36b1116fece5034ee79a7a0ef3f6deedcf) @​bwoodsend
  • Replace generated version.h with macro (#735) @​hugovk

5.12.1

Fixed

  • Fix encoding ref leak with non-English character (#714) @​nhancdt2602
  • Fix memory leak when ujson.dump() is unable to write to its file (0bf630aaef59c0aafd0c8a4fc8bbe2a7bcefa853) @​bwoodsend

Note that pre-built wheels for graalpy on macOS have been omitted from this release due to infrastructural issues building them (#731).

5.12.0

Added

Changed

Fixed

5.11.0

Added

Changed

... (truncated)

Commits
  • 1a23a68 Create manylinux2014 wheels (#745)
  • bd943e8 Build separate manylinux2014 + modern wheels
  • 87ae2df Create manylinux2014 wheels
  • 209371e Verify expected number of dists (#743)
  • 6392258 Also check SHA of wheels in case manylinux version changes
  • a00edea Verify expected number of dists
  • e24aeb7 Fix utf-8 test for graalpy
  • 9122ebe Replace pre-commit with prek to fix deprecation warning (#744)
  • 0bbf9a3 Add support for Python 3.15 (#742)
  • 90ddea2 Replace pre-commit with prek to fix deprecation warning
  • Additional commits viewable in compare view

Updates wheel from 0.30 to 0.38.1

Changelog

Sourced from wheel's changelog.

Release Notes

0.47.0 (2026-04-22)

  • Added the wheel info subcommand to display metadata about wheel files without unpacking them ([#639](https://github.com/pypa/wheel/issues/639) <https://github.com/pypa/wheel/issues/639>_)
  • Fixed WheelFile raising Missing RECORD file when the wheel filename contains uppercase characters (e.g. Django-3.2.5.whl) but the .dist-info directory inside uses normalized lowercase naming ([#411](https://github.com/pypa/wheel/issues/411) <https://github.com/pypa/wheel/issues/411>_)

0.46.3 (2026-01-22)

  • Fixed ImportError: cannot import name '_setuptools_logging' from 'wheel' when installed alongside an old version of setuptools and running the bdist_wheel command ([#676](https://github.com/pypa/wheel/issues/676) <https://github.com/pypa/wheel/issues/676>_)

0.46.2 (2026-01-22)

  • Restored the bdist_wheel command for compatibility with setuptools older than v70.1
  • Importing wheel.bdist_wheel now emits a FutureWarning instead of a DeprecationWarning
  • Fixed wheel unpack potentially altering the permissions of files outside of the destination tree with maliciously crafted wheels (CVE-2026-24049)

0.46.1 (2025-04-08)

  • Temporarily restored the wheel.macosx_libfile module ([#659](https://github.com/pypa/wheel/issues/659) <https://github.com/pypa/wheel/issues/659>_)

0.46.0 (2025-04-03)

  • Dropped support for Python 3.8
  • Removed the bdist_wheel setuptools command implementation and entry point. The wheel.bdist_wheel module is now just an alias to setuptools.command.bdist_wheel, emitting a deprecation warning on import.
  • Removed vendored packaging in favor of a run-time dependency on it
  • Made the wheel.metadata module private (with a deprecation warning if it's imported
  • Made the wheel.cli package private (no deprecation warning)
  • Fixed an exception when calling the convert command with an empty description field

0.45.1 (2024-11-23)

  • Fixed pure Python wheels converted from eggs and wininst files having the ABI tag in the file name

... (truncated)

Commits
  • 6f1608d Created a new release
  • cf8f5ef Moved news item from PR #484 to its proper place
  • 9ec2016 Removed install dependency on setuptools (#483)
  • 747e1f6 Fixed PyPy SOABI parsing (#484)
  • 7627548 [pre-commit.ci] pre-commit autoupdate (#480)
  • 7b9e8e1 Test on Python 3.11 final
  • a04dfef Updated the pypi-publish action
  • 94bb62c Fixed docs not building due to code style changes
  • d635664 Updated the codecov action to the latest version
  • fcb94cd Updated version to match the release
  • Additional commits viewable in compare view

Updates signxml from 2.4 to 4.0.4

Release notes

Sourced from signxml's releases.

v4.0.4

This release contains security fixes for two security advisories:

  • Signature verification with HMAC is vulnerable to an algorithm confusion attack (GHSA-6vx8-pcwv-xhf4)

  • Signature verification with HMAC is vulnerable to a timing attack (GHSA-gmhf-gg8w-jw42)

v4.0.3

  • Fix issue with support for deprecated PyOpenSSL certificates

    • Fully remove the ca_path parameter; add docs for signature location pinning

v4.0.2

  • XAdES signing: remove duplicate timezone information from SigningTime (#266)

v4.0.1

  • Verifier: Accept PyOpenSSL cert input, add deprecation warning

v4.0.0

  • Replace PyOpenSSL with Cryptography (#260)

    - This is a major infrastructure change that replaces core
  certificate parsing, key processing, signature validation, and
  certificate chain validation functions previously provided by
  PyOpenSSL with those provided by Cryptography. Care was taken to
  preserve the exisitng API, including exception types, but many
  error messages raised in various error conditions have changed. If
  you see unexpected behavior and you have reason to believe it is
  incorrect, please file an issue.

      

    • Breaking change: the ca_path parameter, previously used to specify
      
CA certificate stores, is no longer supported. Use the ca_pem_file
      
parameter instead.

  • Raise error when invalid certificate string is passed as input to signer

  • Fix public key matching for ECDSA (#245)

v3.2.2

  • Update upper bound on lxml dependency to allow lxml 5

    • Bump minimum dependency versions to align with Ubuntu 20.04

    • Test and release infrastructure improvements

v3.2.1

  • Use dataclass.replace in SignatureReference construction. Fixes #231

... (truncated)

Changelog

Sourced from signxml's changelog.

Changes for v4.0.4 (2025-06-01)

This release contains security fixes for two security advisories:

  • Signature verification with HMAC is vulnerable to an algorithm confusion attack (GHSA-6vx8-pcwv-xhf4)

  • Signature verification with HMAC is vulnerable to a timing attack (GHSA-gmhf-gg8w-jw42)

Changes for v4.0.3 (2024-11-23)

  • Fix issue with support for deprecated PyOpenSSL certificates

  • Fully remove the ca_path parameter; add docs for signature location pinning

Changes for v4.0.2 (2024-09-10)

  • XAdES signing: remove duplicate timezone information from SigningTime (#266)

Changes for v4.0.1 (2024-08-30)

  • Verifier: Accept PyOpenSSL cert input, add deprecation warning

Changes for v4.0.0 (2024-08-21)

  • Replace PyOpenSSL with Cryptography (#260)

    • This is a major infrastructure change that replaces core certificate parsing, key processing, signature validation, and certificate chain validation functions previously provided by PyOpenSSL with those provided by Cryptography. Care was taken to preserve the exisitng API, including exception types, but many error messages raised in various error conditions have changed. If you see unexpected behavior and you have reason to believe it is incorrect, please file an issue.

    • Breaking change: the ca_path parameter, previously used to specify CA certificate stores, is no longer supported. Use the ca_pem_file parameter instead.

  • Raise error when invalid certificate string is passed as input to

... (truncated)

Commits

Updates numpy from 1.13.0 to 1.22.0

Release notes

Sourced from numpy's releases.

v1.22.0

NumPy 1.22.0 Release Notes

NumPy 1.22.0 is a big release featuring the work of 153 contributors spread over 609 pull requests. There have been many improvements, highlights are:

  • Annotations of the main namespace are essentially complete. Upstream is a moving target, so there will likely be further improvements, but the major work is done. This is probably the most user visible enhancement in this release.
  • A preliminary version of the proposed Array-API is provided. This is a step in creating a standard collection of functions that can be used across application such as CuPy and JAX.
  • NumPy now has a DLPack backend. DLPack provides a common interchange format for array (tensor) data.
  • New methods for quantile, percentile, and related functions. The new methods provide a complete set of the methods commonly found in the literature.
  • A new configurable allocator for use by downstream projects.

These are in addition to the ongoing work to provide SIMD support for commonly used functions, improvements to F2PY, and better documentation.

The Python versions supported in this release are 3.8-3.10, Python 3.7 has been dropped. Note that 32 bit wheels are only provided for Python 3.8 and 3.9 on Windows, all other wheels are 64 bits on account of Ubuntu, Fedora, and other Linux distributions dropping 32 bit support. All 64 bit wheels are also linked with 64 bit integer OpenBLAS, which should fix the occasional problems encountered by folks using truly huge arrays.

Expired deprecations

Deprecated numeric style dtype strings have been removed

Using the strings "Bytes0", "Datetime64", "Str0", "Uint32", and "Uint64" as a dtype will now raise a TypeError.

(gh-19539)

Expired deprecations for loads, ndfromtxt, and mafromtxt in npyio

numpy.loads was deprecated in v1.15, with the recommendation that users use pickle.loads instead. ndfromtxt and mafromtxt were both deprecated in v1.17 - users should use numpy.genfromtxt instead with the appropriate value for the usemask parameter.

(gh-19615)

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the pip group across 2 directories with 8 updates
47df81d 
Bumps the pip group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [gevent](https://github.com/gevent/gevent) | `1.1.2` | `23.9.0` |
| [psutil](https://github.com/giampaolo/psutil) | `4.3.1` | `5.6.6` |
| [requests](https://github.com/psf/requests) | `2.11.1` | `2.33.0` |
| [twisted](https://github.com/twisted/twisted) | `16.4.1` | `26.4.0rc2` |
| [ujson](https://github.com/ultrajson/ultrajson) | `1.35` | `5.13.0` |
| [wheel](https://github.com/pypa/wheel) | `0.30` | `0.38.1` |

Bumps the pip group with 2 updates in the /services/core/OpenADRVenAgent directory: [signxml](https://github.com/XML-Security/signxml) and [numpy](https://github.com/numpy/numpy).


Updates `gevent` from 1.1.2 to 23.9.0
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_1_1.rst)
- [Commits](gevent/gevent@v1.1.2...23.9.0)

Updates `psutil` from 4.3.1 to 5.6.6
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@v4.3.1...v5.6.6)

Updates `requests` from 2.11.1 to 2.33.0
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.11.1...v2.33.0)

Updates `twisted` from 16.4.1 to 26.4.0rc2
- [Release notes](https://github.com/twisted/twisted/releases)
- [Changelog](https://github.com/twisted/twisted/blob/trunk/NEWS.rst)
- [Commits](twisted/twisted@twisted-16.4.1...twisted-26.4.0rc2)

Updates `ujson` from 1.35 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@v1.35...5.13.0)

Updates `wheel` from 0.30 to 0.38.1
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.30.0...0.38.1)

Updates `signxml` from 2.4 to 4.0.4
- [Release notes](https://github.com/XML-Security/signxml/releases)
- [Changelog](https://github.com/XML-Security/signxml/blob/main/Changes.rst)
- [Commits](XML-Security/signxml@v2.4.0...v4.0.4)

Updates `numpy` from 1.13.0 to 1.22.0
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.13.0...v1.22.0)

---
updated-dependencies:
- dependency-name: gevent
  dependency-version: 23.9.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: psutil
  dependency-version: 5.6.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.33.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: twisted
  dependency-version: 26.4.0rc2
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: wheel
  dependency-version: 0.38.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: signxml
  dependency-version: 4.0.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: numpy
  dependency-version: 1.22.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants