Skip to content

Bump the python group across 1 directory with 23 updates - #298

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-3995220720
Open

Bump the python group across 1 directory with 23 updates#298
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-3995220720

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Dec 19, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python group with 23 updates in the / directory:

Package From To
whitenoise 6.9.0 6.11.0
hiredis 3.2.1 3.3.0
celery 5.5.3 5.6.0
uvicorn[standard] 0.35.0 0.38.0
uvicorn-worker 0.3.0 0.4.0
django-allauth[mfa,socialaccount] 65.10.0 65.13.1
django-crispy-forms 2.4 2.5
django-cors-headers 4.7.0 4.9.0
drf-spectacular 0.28.0 0.29.0
django-webpack-loader 3.2.1 3.2.3
psycopg[c] 3.2.9 3.3.2
sentry-sdk 2.35.0 2.48.0
werkzeug[watchdog] 3.1.3 3.1.4
watchfiles 1.1.0 1.1.1
mypy 1.17.1 1.19.1
django-stubs[compatible-mypy] 5.2.2 5.2.8
pytest-sugar 1.0.0 1.1.1
djangorestframework-stubs 3.16.2 3.16.6
ruff 0.12.9 0.14.10
coverage 7.10.3 7.13.0
pre-commit 4.3.0 4.5.1
django-debug-toolbar 6.0.0 6.1.0
django-coverage-plugin 3.1.1 3.2.0

Updates whitenoise from 6.9.0 to 6.11.0

Changelog

Sourced from whitenoise's changelog.

6.11.0 (2025-09-18)

  • Support Django 6.0.

6.10.0 (2025-09-09)

  • Support Python 3.14.
Commits

Updates hiredis from 3.2.1 to 3.3.0

Release notes

Sourced from hiredis's releases.

3.3.0

Changes

Contributors

We'd like to thank all the contributors who worked on this release!

Commits

Updates celery from 5.5.3 to 5.6.0

Release notes

Sourced from celery's releases.

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

Contributed by @​auvipy in celery/celery#9620.

Security Fix: Broker Credential Leak Prevention

Fixed a security issue where broker URLs containing passwords were being logged in plaintext by the delayed delivery mechanism. Broker credentials are now properly sanitized in all log output.

Contributed by @​giancarloromeo in celery/celery#9997.

Memory Leak Fixes

Two significant memory leaks have been fixed in this release:

Exception Handling Memory Leak: Fixed a critical memory leak in task exception handling that was particularly severe on Python 3.11+ due to enhanced traceback data. The fix properly breaks reference cycles in tracebacks to allow garbage collection.

Contributed by @​jaiganeshs21 in celery/celery#9799.

Pending Result Memory Leak: Fixed a memory leak where AsyncResult subscriptions were not being cleaned up when results were forgotten.

Contributed by @​tsoos99dev in celery/celery#9806.

ETA Task Memory Limit

New configuration option worker_eta_task_limit to prevent out-of-memory crashes when workers fetch large numbers of ETA or countdown tasks. Previously, workers could exhaust available memory when the broker contained many scheduled tasks.

Example usage:

app.conf.worker_eta_task_limit = 1000

Contributed by @​sashu2310 in celery/celery#9853.

Queue Type Selection for Auto-created Queues

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.0

:release-date: 2025-11-30 :release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights


See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below.

Python 3.9 Minimum Version


Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python
version is now 3.9. Users still on Python 3.8 must upgrade their Python version
before upgrading to Celery 5.6.0.


Additionally, this release includes initial support for Python 3.14.


SQS: Reverted to pycurl from urllib3


The switch from pycurl to urllib3 for the SQS transport (introduced in
Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS
users:


    

  • Processing throughput dropped from ~100 tasks/sec to ~3/sec in some environments
    • 

  • UnknownOperationException errors causing container crash loops
    • 

  • Silent message processing failures with no error logs
    • 



Users of the SQS transport must ensure pycurl is installed. If you removed
pycurl after upgrading to Celery 5.5.0, you will need to reinstall it.


Contributed by @auvipy <https://github.com/auvipy>_ in
[#9620](https://github.com/celery/celery/issues/9620) <https://github.com/celery/celery/pull/9620>_.


Security Fix: Broker Credential Leak Prevention


Fixed a security issue where broker URLs containing passwords were being logged
in plaintext by the delayed delivery mechanism. Broker credentials are now
properly sanitized in all log output.


Contributed by @giancarloromeo <https://github.com/giancarloromeo>_ in
[#9997](https://github.com/celery/celery/issues/9997) <https://github.com/celery/celery/pull/9997>_.


Memory Leak Fixes
</tr></table>

... (truncated)

Commits

Updates uvicorn[standard] from 0.35.0 to 0.38.0

Release notes

Sourced from uvicorn[standard]'s releases.

Version 0.38.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.37.0...0.38.0

Version 0.37.0

What's Changed

New Contributors

Full Changelog: Kludex/uvicorn@0.36.1...0.37.0

Version 0.36.1

What's Changed

Full Changelog: Kludex/uvicorn@0.36.0...0.36.1

Version 0.36.0

Added

New Contributors

Full Changelog: Kludex/uvicorn@0.35.0...0.36.0

Changelog

Sourced from uvicorn[standard]'s changelog.

0.38.0 (October 18, 2025)

Added

  • Support Python 3.14 (#2723)

0.37.0 (September 23, 2025)

Added

  • Add --timeout-worker-healthcheck option (#2711)
  • Add os.PathLike[str] type to ssl_ca_certs (#2676)

0.36.1 (September 23, 2025)

Fixed

  • Raise an exception when calling removed Config.setup_event_loop() (#2709)

0.36.0 (September 20, 2025)

Added

  • Support custom IOLOOPs (#2435)
  • Allow to provide importable string in --http, --ws and --loop (#2658)
Commits

Updates uvicorn-worker from 0.3.0 to 0.4.0

Release notes

Sourced from uvicorn-worker's releases.

Version 0.4.0

What's Changed

Full Changelog: Kludex/uvicorn-worker@0.3.0...0.4.0

Commits

Updates django-allauth[mfa,socialaccount] from 65.10.0 to 65.13.1

Commits

Updates django-crispy-forms from 2.4 to 2.5

Release notes

Sourced from django-crispy-forms's releases.

2.5

  • Confirmed support for Python 3.14.
  • Confirmed support for Django 6.0.
  • Dropped support for Python 3.8.
Changelog

Sourced from django-crispy-forms's changelog.

2.5 (2025-11-06)

  • Confirmed support for Python 3.14.
  • Confirmed support for Django 6.0.
  • Dropped support for Python 3.8.
Commits

Updates django-cors-headers from 4.7.0 to 4.9.0

Changelog

Sourced from django-cors-headers's changelog.

4.9.0 (2025-09-18)

  • Support Django 6.0.

4.8.0 (2025-09-08)

  • Support Python 3.14.
Commits

Updates drf-spectacular from 0.28.0 to 0.29.0

Release notes

Sourced from drf-spectacular's releases.

0.29.0

Thank you for all the patience with the release!

Important notes

  • Finally fixed the memory leak thanks to @​artKucher.
  • Another performance improvement is the usage of the C versions of yaml, if available.
  • Apart from that, there are a lot of small improvements and bugfixes.

PRs

New Contributors

... (truncated)

Changelog

Sourced from drf-spectacular's changelog.

0.29.0 (2025-11-01)

  • Add l18n handling for Decimal field [#1466](https://github.com/tfranzel/drf-spectacular/issues/1466) <https://github.com/tfranzel/drf-spectacular/issues/1466>_
  • Fix LogoutSerializer for JWT/dj_rest_auth [#1392](https://github.com/tfranzel/drf-spectacular/issues/1392) <https://github.com/tfranzel/drf-spectacular/issues/1392>_
  • fix: support token blacklist feature in rest_auth [Bart van Andel]
  • [django-filter] Add null_label if set in ChoiceFilter ([#1450](https://github.com/tfranzel/drf-spectacular/issues/1450) <https://github.com/tfranzel/drf-spectacular/issues/1450>_) [Enric Pou]
  • fix: camelize tuples/fixed length array ([#1432](https://github.com/tfranzel/drf-spectacular/issues/1432) <https://github.com/tfranzel/drf-spectacular/issues/1432>_) [Chris Wesseling]
  • Fix items:False case in enum hook [#1432](https://github.com/tfranzel/drf-spectacular/issues/1432) <https://github.com/tfranzel/drf-spectacular/issues/1432>_
  • Add option to overwrite serializer description [#1463](https://github.com/tfranzel/drf-spectacular/issues/1463) <https://github.com/tfranzel/drf-spectacular/issues/1463>_
  • Fix OpenApiViewExtension not providing view instance under self.target ([#1405](https://github.com/tfranzel/drf-spectacular/issues/1405) <https://github.com/tfranzel/drf-spectacular/issues/1405>_) [astro-stan]
  • Move list default fix to source of the problem [#1436](https://github.com/tfranzel/drf-spectacular/issues/1436) <https://github.com/tfranzel/drf-spectacular/issues/1436>_
  • Improve confusing doc [#1461](https://github.com/tfranzel/drf-spectacular/issues/1461) <https://github.com/tfranzel/drf-spectacular/issues/1461>_
  • Add assert to pagination test [#1459](https://github.com/tfranzel/drf-spectacular/issues/1459) <https://github.com/tfranzel/drf-spectacular/issues/1459>_
  • fix SafeString handling for picky CDumper ([#1435](https://github.com/tfranzel/drf-spectacular/issues/1435) <https://github.com/tfranzel/drf-spectacular/issues/1435>_)
  • Remove EOL 3.7 from suite; pydantic not updated for <=3.8
  • Fix DecimalField with decimal_places and max_digits equal. [keter2002]
  • fix test for i18n changes on DRF ([#1444](https://github.com/tfranzel/drf-spectacular/issues/1444) <https://github.com/tfranzel/drf-spectacular/issues/1444>_)
  • Improve to_filter_name support for django_filter [Matwey V. Kornilov]
  • fixes prefix estimation on windows [Luis Nell]
  • Fix default for array types [Stanislav Khlud]
  • fix: use CSafeDumper for render yaml if available [florian]
  • fix: sort list to produce same hash [florian]
  • Add typing.Generic to default lib_doc_excludes [Max Howald]
  • Add get_doc test for class that inherits from Generic [Max Howald]
  • Add Django REST framework 3.16 support [Paolo Melchiorre]
  • Fix memory leak [artemkucher]
  • Fix python 3.11 slice index [Egor Litvinov]
  • fix: correct port mapping for the container in README [Maksym Bieńkowski]
  • Update docs [q0w]
  • Allow setting callable for ENUM_NAME_OVERRIDES [q0w]
  • Add allauth's DRF token auth [#1401](https://github.com/tfranzel/drf-spectacular/issues/1401) <https://github.com/tfranzel/drf-spectacular/issues/1401>_
  • update away from retired GH worker image
  • add condition to check, that serializer Meta has model attribute [aliev_vt]
  • Fix docs compile issue and update some old code ([#1389](https://github.com/tfranzel/drf-spectacular/issues/1389) <https://github.com/tfranzel/drf-spectacular/issues/1389>_) [Mike Manger]
  • Fix location of @​extend_schema_field [johnthagen]
  • Remove reference to non-exposed lazy_serializer [johnthagen]
  • Document how to lazily define a recursive SerializerMethod [johnthagen]
  • Link to SerializerMethod docs [johnthagen]
  • Document Django 5.1 support in README [johnthagen]
  • Bump django from 4.2.11 to 4.2.18 in /requirements [dependabot[bot]]
  • Enhance bug report template with instructions for better clarity [antoliny0919]
  • add pydantic computed field to tests [#1354](https://github.com/tfranzel/drf-spectacular/issues/1354) <https://github.com/tfranzel/drf-spectacular/issues/1354>_

Breaking changes / important additions:

  • Finally fixed the memory leak thanks to @​artKucher.
  • Another performance improvement is the usage of the C versions of yaml, if available.
  • Apart from that, there are a lot of small improvements and bugfixes.
Commits

Updates django-webpack-loader from 3.2.1 to 3.2.3

Release notes

Sourced from django-webpack-loader's releases.

3.2.3

What's Changed

New Contributors

Full Changelog: django-webpack/django-webpack-loader@3.2.2...3.2.3

3.2.2

What's Changed

Full Changelog: django-webpack/django-webpack-loader@3.2.1...3.2.2

Changelog

Sourced from django-webpack-loader's changelog.

[3.2.3] -- 2025-12-09

  • Add warning for default timeout usage

[3.2.2] -- 2025-10-30

  • Ensure parity with webpack-bundle-tracker
  • Update examples to always perform integrity calculation
Commits

Updates psycopg[c] from 3.2.9 to 3.3.2

Changelog

Sourced from psycopg[c]'s changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Current release

Psycopg 3.3.2 ^^^^^^^^^^^^^

Fix race condition in adapters at startup (:ticket:[#1230](https://github.com/psycopg/psycopg/issues/1230)).

Psycopg 3.3.1 ^^^^^^^^^^^^^

Fix iteration on server-side cursors (:ticket:[#1226](https://github.com/psycopg/psycopg/issues/1226)).

Psycopg 3.3.0

.. rubric:: New top-level features

  • Add :ref:template strings queries \<template-strings> (:ticket:[#1054](https://github.com/psycopg/psycopg/issues/1054)).
  • More flexible :ref:composite adaptation<adapt-composite>: it is now possible to adapt Python objects to PostgreSQL composites and back even if they are not sequences or if they take keyword arguments (:ticket:[#932](https://github.com/psycopg/psycopg/issues/932), 🎫[#1202](https://github.com/psycopg/psycopg/issues/1202)).
  • Cursors are now iterators_, not just iterables_. This means you can call next\ (cur) or anext\ (cur), which is useful as a :ref:type-safe expression <typing-fetchone> (:ticket:[#1064](https://github.com/psycopg/psycopg/issues/1064)).
  • Add Cursor.set_result() and Cursor.results() to move across the result sets of queries executed though ~Cursor.executemany() or ~Cursor.execute() with multiple statements (:tickets:[#1080](https://github.com/psycopg/psycopg/issues/1080), [#1170](https://github.com/psycopg/psycopg/issues/1170)).
  • Add :ref:transaction-status to report the status during and after a ~Connection.transaction() block (:ticket:[#969](https://github.com/psycopg/psycopg/issues/969)).
  • Allow to change loaders using ~adapt.AdaptersMap.register_loader() on Cursor.adapters after a query result has been already returned (:ticket:[#884](https://github.com/psycopg/psycopg/issues/884)).

.. rubric:: New libpq wrapper features

  • Add pq.PGconn.used_gssapi attribute and Capabilities.has_used_gssapi() function (:ticket:[#1138](https://github.com/psycopg/psycopg/issues/1138)).
  • Add ConnectionInfo.full_protocol_version attribute,

... (truncated)

Commits
  • bc9e7bd chore: bump psycopg package version to 3.3.2
  • 3bcabb4 Merge pull request #1231 from noirbee/fix/1230-adapter-get-dumper-race-condition
  • 08bfe00 fix(adapters): avoid race condition when replacing class name with itself
  • 7be710e fix: mark external libpq C functions as noexcept nogil
  • 6a24300 docs: larger font for 3.3.0 release
  • 5a60a1e chore: bump psycopg package version to 3.3.2.dev1
  • 9bdd78c chore: bump psycopg package version to 3.3.1
  • 4d27426 Merge branch 'fix/server-cursor-iter'
  • b9b82e8 fix: fix iteration on server-side cursor
  • 2a75357 fix: add test to verify iteration in server-side cursor broken
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.35.0 to 2.48.0

Release notes

Sourced from sentry-sdk's releases.

2.48.0

Middleware spans are now disabled by default in Django, Starlette and FastAPI integrations. Set the middleware_spans integration-level option to capture individual spans per middleware layer. To record Django middleware spans, for example, configure as follows

  import sentry_sdk
  from sentry_sdk.integrations.django import DjangoIntegration
sentry_sdk.init(
dsn="<your-dsn>",
integrations=[
DjangoIntegration(middleware_spans=True),
],
)

New Features ✨

Langgraph

OTLP

Bug Fixes 🐛

Integrations

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.48.0

Middleware spans are now disabled by default in Django, Starlette and FastAPI integrations. Set the middleware_spans integration-level option to capture individual spans per middleware layer. To record Django middleware spans, for example, configure as follows

  import sentry_sdk
  from sentry_sdk.integrations.django import DjangoIntegration
sentry_sdk.init(
dsn="<your-dsn>",
integrations=[
DjangoIntegration(middleware_spans=True),
],
)

New Features ✨

Langgraph

OTLP

Bug Fixes 🐛

Integrations

  • fix(django): Set active thread ID when middleware spans are disabled by @​alexander-alderman-webb in #5220

  • fix(integrations): openai-agents fixing the input messages structure which was wrapped too much in some cases by @​constantinius in #5203

  • fix(integrations): openai-agents fix multi-patching of get_model function by @​constantinius in #5195

  • fix(integrations): add values for pydantic-ai and openai-agents to _INTEGRATION_DEACTIVATES to prohibit double span creation by @​constantinius in #5196

  • fix(logs): Set span_id instead of sentry.trace.parent_span_id attribute by @​sentrivana<...

    Description has been truncated

@dependabot
Bump the python group across 1 directory with 23 updates
1804f92 
Bumps the python group with 23 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [whitenoise](https://github.com/evansd/whitenoise) | `6.9.0` | `6.11.0` |
| [hiredis](https://github.com/redis/hiredis-py) | `3.2.1` | `3.3.0` |
| [celery](https://github.com/celery/celery) | `5.5.3` | `5.6.0` |
| [uvicorn[standard]](https://github.com/Kludex/uvicorn) | `0.35.0` | `0.38.0` |
| [uvicorn-worker](https://github.com/Kludex/uvicorn-worker) | `0.3.0` | `0.4.0` |
| [django-allauth[mfa,socialaccount]](https://github.com/sponsors/pennersr) | `65.10.0` | `65.13.1` |
| [django-crispy-forms](https://github.com/django-crispy-forms/django-crispy-forms) | `2.4` | `2.5` |
| [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.7.0` | `4.9.0` |
| [drf-spectacular](https://github.com/tfranzel/drf-spectacular) | `0.28.0` | `0.29.0` |
| [django-webpack-loader](https://github.com/django-webpack/django-webpack-loader) | `3.2.1` | `3.2.3` |
| [psycopg[c]](https://github.com/psycopg/psycopg) | `3.2.9` | `3.3.2` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.35.0` | `2.48.0` |
| [werkzeug[watchdog]](https://github.com/pallets/werkzeug) | `3.1.3` | `3.1.4` |
| [watchfiles](https://github.com/samuelcolvin/watchfiles) | `1.1.0` | `1.1.1` |
| [mypy](https://github.com/python/mypy) | `1.17.1` | `1.19.1` |
| [django-stubs[compatible-mypy]](https://github.com/sponsors/typeddjango) | `5.2.2` | `5.2.8` |
| [pytest-sugar](https://github.com/Teemu/pytest-sugar) | `1.0.0` | `1.1.1` |
| [djangorestframework-stubs](https://github.com/sponsors/typeddjango) | `3.16.2` | `3.16.6` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.9` | `0.14.10` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.10.3` | `7.13.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.1` |
| [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) | `6.0.0` | `6.1.0` |
| [django-coverage-plugin](https://github.com/nedbat/django_coverage_plugin) | `3.1.1` | `3.2.0` |



Updates `whitenoise` from 6.9.0 to 6.11.0
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.9.0...6.11.0)

Updates `hiredis` from 3.2.1 to 3.3.0
- [Release notes](https://github.com/redis/hiredis-py/releases)
- [Changelog](https://github.com/redis/hiredis-py/blob/master/CHANGELOG.md)
- [Commits](redis/hiredis-py@v3.2.1...v3.3.0)

Updates `celery` from 5.5.3 to 5.6.0
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst)
- [Commits](celery/celery@v5.5.3...v5.6.0)

Updates `uvicorn[standard]` from 0.35.0 to 0.38.0
- [Release notes](https://github.com/Kludex/uvicorn/releases)
- [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md)
- [Commits](Kludex/uvicorn@0.35.0...0.38.0)

Updates `uvicorn-worker` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/Kludex/uvicorn-worker/releases)
- [Commits](Kludex/uvicorn-worker@0.3.0...0.4.0)

Updates `django-allauth[mfa,socialaccount]` from 65.10.0 to 65.13.1
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `django-crispy-forms` from 2.4 to 2.5
- [Release notes](https://github.com/django-crispy-forms/django-crispy-forms/releases)
- [Changelog](https://github.com/django-crispy-forms/django-crispy-forms/blob/main/CHANGELOG.md)
- [Commits](django-crispy-forms/django-crispy-forms@2.4...2.5)

Updates `django-cors-headers` from 4.7.0 to 4.9.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.7.0...4.9.0)

Updates `drf-spectacular` from 0.28.0 to 0.29.0
- [Release notes](https://github.com/tfranzel/drf-spectacular/releases)
- [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst)
- [Commits](tfranzel/drf-spectacular@0.28.0...0.29.0)

Updates `django-webpack-loader` from 3.2.1 to 3.2.3
- [Release notes](https://github.com/django-webpack/django-webpack-loader/releases)
- [Changelog](https://github.com/django-webpack/django-webpack-loader/blob/master/CHANGELOG.md)
- [Commits](django-webpack/django-webpack-loader@3.2.1...3.2.3)

Updates `psycopg[c]` from 3.2.9 to 3.3.2
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.2.9...3.3.2)

Updates `sentry-sdk` from 2.35.0 to 2.48.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.35.0...2.48.0)

Updates `werkzeug[watchdog]` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.3...3.1.4)

Updates `watchfiles` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v1.1.0...v1.1.1)

Updates `mypy` from 1.17.1 to 1.19.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.17.1...v1.19.1)

Updates `django-stubs[compatible-mypy]` from 5.2.2 to 5.2.8
- [Commits](https://github.com/sponsors/typeddjango/commits)

Updates `pytest-sugar` from 1.0.0 to 1.1.1
- [Release notes](https://github.com/Teemu/pytest-sugar/releases)
- [Changelog](https://github.com/Teemu/pytest-sugar/blob/main/CHANGES.rst)
- [Commits](Teemu/pytest-sugar@v1.0.0...v1.1.1)

Updates `djangorestframework-stubs` from 3.16.2 to 3.16.6
- [Commits](https://github.com/sponsors/typeddjango/commits)

Updates `ruff` from 0.12.9 to 0.14.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.9...0.14.10)

Updates `coverage` from 7.10.3 to 7.13.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.3...7.13.0)

Updates `pre-commit` from 4.3.0 to 4.5.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.5.1)

Updates `django-debug-toolbar` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@6.0.0...6.1.0)

Updates `django-coverage-plugin` from 3.1.1 to 3.2.0
- [Release notes](https://github.com/nedbat/django_coverage_plugin/releases)
- [Commits](coveragepy/django_coverage_plugin@v3.1.1...v3.2.0)

---
updated-dependencies:
- dependency-name: whitenoise
  dependency-version: 6.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: hiredis
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: celery
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: uvicorn[standard]
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: uvicorn-worker
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: django-allauth[mfa,socialaccount]
  dependency-version: 65.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: django-crispy-forms
  dependency-version: '2.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: django-cors-headers
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: drf-spectacular
  dependency-version: 0.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: django-webpack-loader
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: psycopg[c]
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: sentry-sdk
  dependency-version: 2.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: werkzeug[watchdog]
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: watchfiles
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: mypy
  dependency-version: 1.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: django-stubs[compatible-mypy]
  dependency-version: 5.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pytest-sugar
  dependency-version: 1.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: djangorestframework-stubs
  dependency-version: 3.16.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ruff
  dependency-version: 0.14.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: coverage
  dependency-version: 7.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: pre-commit
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: django-debug-toolbar
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: django-coverage-plugin
  dependency-version: 3.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code update labels Dec 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code update

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants