chore(deps): bump the dependencies group across 1 directory with 24 updates#328
Open
dependabot[bot] wants to merge 1 commit into
Open
chore(deps): bump the dependencies group across 1 directory with 24 updates#328dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
…pdates Bumps the dependencies group with 24 updates in the /src/backend directory: | Package | From | To | | --- | --- | --- | | [bleach](https://github.com/mozilla/bleach) | `4.1.0` | `6.3.0` | | [boto3](https://github.com/boto/boto3) | `1.42.96` | `1.43.1` | | [botocore](https://github.com/boto/botocore) | `1.42.96` | `1.43.1` | | [django](https://github.com/django/django) | `5.2.13` | `6.0.4` | | [django-allauth](https://github.com/sponsors/pennersr) | `65.14.3` | `65.16.1` | | [django-otp](https://github.com/django-otp/django-otp) | `1.3.0` | `1.7.0` | | [dulwich](https://github.com/dulwich/dulwich) | `1.2.0` | `1.2.1` | | [icalendar](https://github.com/collective/icalendar) | `7.0.3` | `7.1.0` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `9.0.0` | | [nh3](https://github.com/messense/nh3) | `0.3.4` | `0.3.5` | | [opentelemetry-exporter-otlp-proto-common](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` | | [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` | | [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` | | [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` | | [opentelemetry-instrumentation-dbapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` | | [opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` | | [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.61b0` | `0.62b1` | | [opentelemetry-util-http](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.6` | `7.34.1` | | [s3transfer](https://github.com/boto/s3transfer) | `0.16.1` | `0.17.0` | | [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.3` | `2.1.2` | | [pytest-codspeed](https://github.com/CodSpeedHQ/pytest-codspeed) | `4.4.0` | `4.5.0` | | [ty](https://github.com/astral-sh/ty) | `0.0.1a21` | `0.0.33` | | [virtualenv](https://github.com/pypa/virtualenv) | `21.2.4` | `21.3.0` | Updates `bleach` from 4.1.0 to 6.3.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v4.1.0...v6.3.0) Updates `boto3` from 1.42.96 to 1.43.1 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.42.96...1.43.1) Updates `botocore` from 1.42.96 to 1.43.1 - [Commits](boto/botocore@1.42.96...1.43.1) Updates `django` from 5.2.13 to 6.0.4 - [Commits](django/django@5.2.13...6.0.4) Updates `django-allauth` from 65.14.3 to 65.16.1 - [Commits](https://github.com/sponsors/pennersr/commits) Updates `django-otp` from 1.3.0 to 1.7.0 - [Changelog](https://github.com/django-otp/django-otp/blob/master/CHANGES.rst) - [Commits](django-otp/django-otp@v1.3.0...v1.7.0) Updates `dulwich` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/dulwich/dulwich/releases) - [Changelog](https://github.com/jelmer/dulwich/blob/main/NEWS) - [Commits](jelmer/dulwich@dulwich-1.2.0...dulwich-1.2.1) Updates `icalendar` from 7.0.3 to 7.1.0 - [Release notes](https://github.com/collective/icalendar/releases) - [Changelog](https://github.com/collective/icalendar/blob/main/CHANGES.rst) - [Commits](collective/icalendar@v7.0.3...v7.1.0) Updates `importlib-metadata` from 8.7.1 to 9.0.0 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v8.7.1...v9.0.0) Updates `nh3` from 0.3.4 to 0.3.5 - [Release notes](https://github.com/messense/nh3/releases) - [Commits](messense/nh3@v0.3.4...v0.3.5) Updates `opentelemetry-exporter-otlp-proto-common` from 1.40.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1) Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.40.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1) Updates `opentelemetry-exporter-otlp-proto-http` from 1.40.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1) Updates `opentelemetry-instrumentation` from 0.61b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-dbapi` from 0.61b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-proto` from 1.40.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1) Updates `opentelemetry-semantic-conventions` from 0.61b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/commits) Updates `opentelemetry-util-http` from 0.61b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `protobuf` from 6.33.6 to 7.34.1 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `s3transfer` from 0.16.1 to 0.17.0 - [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst) - [Commits](boto/s3transfer@0.16.1...0.17.0) Updates `wrapt` from 1.17.3 to 2.1.2 - [Release notes](https://github.com/GrahamDumpleton/wrapt/releases) - [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst) - [Commits](GrahamDumpleton/wrapt@1.17.3...2.1.2) Updates `pytest-codspeed` from 4.4.0 to 4.5.0 - [Release notes](https://github.com/CodSpeedHQ/pytest-codspeed/releases) - [Changelog](https://github.com/CodSpeedHQ/pytest-codspeed/blob/master/CHANGELOG.md) - [Commits](CodSpeedHQ/pytest-codspeed@v4.4.0...v4.5.0) Updates `ty` from 0.0.1a21 to 0.0.33 - [Release notes](https://github.com/astral-sh/ty/releases) - [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md) - [Commits](astral-sh/ty@0.0.1-alpha.21...0.0.33) Updates `virtualenv` from 21.2.4 to 21.3.0 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.2.4...21.3.0) --- updated-dependencies: - dependency-name: bleach dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: boto3 dependency-version: 1.43.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: botocore dependency-version: 1.43.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: django dependency-version: 6.0.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: django-allauth dependency-version: 65.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: django-otp dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: dulwich dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: icalendar dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: importlib-metadata dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: nh3 dependency-version: 0.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: opentelemetry-exporter-otlp-proto-common dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: opentelemetry-exporter-otlp-proto-grpc dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: opentelemetry-instrumentation dependency-version: 0.62b1 dependency-type: direct:production dependency-group: dependencies - dependency-name: opentelemetry-instrumentation-dbapi dependency-version: 0.62b1 dependency-type: direct:production dependency-group: dependencies - dependency-name: opentelemetry-proto dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: opentelemetry-semantic-conventions dependency-version: 0.62b1 dependency-type: direct:production dependency-group: dependencies - dependency-name: opentelemetry-util-http dependency-version: 0.62b1 dependency-type: direct:production dependency-group: dependencies - dependency-name: protobuf dependency-version: 7.34.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: s3transfer dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: wrapt dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pytest-codspeed dependency-version: 4.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: ty dependency-version: 0.0.33 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: virtualenv dependency-version: 21.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.



Bumps the dependencies group with 24 updates in the /src/backend directory:
4.1.06.3.01.42.961.43.11.42.961.43.15.2.136.0.465.14.365.16.11.3.01.7.01.2.01.2.17.0.37.1.08.7.19.0.00.3.40.3.51.40.01.41.11.40.01.41.11.40.01.41.10.61b00.62b10.61b00.62b11.40.01.41.10.61b00.62b10.61b00.62b16.33.67.34.10.16.10.17.01.17.32.1.24.4.04.5.00.0.1a210.0.3321.2.421.3.0Updates
bleachfrom 4.1.0 to 6.3.0Changelog
Sourced from bleach's changelog.
... (truncated)
Commits
5546d5dchore: prep for 6.3.0 release88df3ffchore: fix readthedocsd8b2fb4fix: fix wbr handling (#488)55e48cechore: add support for Python 3.14 (#758)a4d6cddchore: drop support for Python 3.9 (#756)172d92fBump actions/setup-python from 5.6.0 to 6.0.0df88612Bump actions/checkout from 4.2.2 to 5.0.0cbcf6b1Bump actions/cache from 4.2.3 to 4.3.0d9aa7efSwitch from dependabot reviewers to CODEOWNERS06f0f76Update setuptools, wheel, and twine for devsUpdates
boto3from 1.42.96 to 1.43.1Commits
753bcabMerge branch 'release-1.43.1'dd5b3a6Bumping version to 1.43.1014f4adAdd changelog entries from botocore32edf1cBump requests from 2.32.4 to 2.33.1 (#4781)959ae84Merge branch 'release-1.43.0'146ede2Merge branch 'release-1.43.0' into develop048bf84Bumping version to 1.43.020381d5Add changelog entries from botocoreee6aa97Deprecate Python 3.9 support (#4770)1780d6bRemove CC-BY-NC-SA-4.0 license headers from docs files (#4778)Updates
botocorefrom 1.42.96 to 1.43.1Commits
7084f04Merge branch 'release-1.43.1'1dd07e0Bumping version to 1.43.1eebf815Update endpoints model98952d2Update to latest models3355956Bump requests from 2.32.4 to 2.33.1 (#3695)05dafeaMerge branch 'release-1.43.0'dc93123Merge branch 'release-1.43.0' into develop047f23fBumping version to 1.43.044df585Update endpoints model924fe63Update to latest modelsUpdates
djangofrom 5.2.13 to 6.0.4Commits
141e791[6.0.x] Bumped version for 6.0.4 release.393dbc5[6.0.x] Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body ...0910af6[6.0.x] Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.428c48f[6.0.x] Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.li...08a752c[6.0.x] Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelA...a623c39[6.0.x] Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.ffc83c5[6.0.x] Refs #36949 -- Removed hardcoded pks in modeladmin tests.4eb38f6[6.0.x] Fixed #36973 -- Made fields.E348 check detect further clashes between...640c431[6.0.x] Refs #36862 -- Reiterated security note on both variants of RemoteUse...ea8e293[6.0.x] Fixed #36949 -- Improved RelatedFieldWidgetWrapper <label>s.Updates
django-allauthfrom 65.14.3 to 65.16.1Commits
Updates
django-otpfrom 1.3.0 to 1.7.0Changelog
Sourced from django-otp's changelog.
... (truncated)
Commits
fc0d50bVersion 1.7.056e4ce3Refactor test utilities8c4d4c2Update test matrix for Django 6.00ac4ff3Cleanup and changelogb10df0dMake OTPMiddleware async capable. (#185)8121179Raise requires-python to 3.8.38b7ebaVersion 1.6.3b9026d7Correct Missing Spanish Translationsae18ba9Fix #181: misdocumented return type.c9eef89Version 1.6.2Updates
dulwichfrom 1.2.0 to 1.2.1Release notes
Sourced from dulwich's releases.
Changelog
Sourced from dulwich's changelog.
Commits
57806b8Release 1.2.1a127d33Honor GIT_PROTOCOL env var when picking default protocol version (#1862) (#2149)6c1697alfs: derive correct file:// LFS endpoint from local remote URL (#2161)6685fdelfs: use pathlib.Path.as_uri() for portable file:// URLs0d0b9f8Migrate from testrepository to inquest (#2160)a0dac57Migrate from testrepository to inquestcd6ebd9lfs: derive correct file:// LFS endpoint from local remote URLbfaf192Disable background processes to prevent issues with races (#2158)06d7afdMove GIT_SSH/GIT_SSH_COMMAND env lookup from client.py to cli.py (#2156)e60e0c1Disable background processes to prevent issues with racesUpdates
icalendarfrom 7.0.3 to 7.1.0Release notes
Sourced from icalendar's releases.
Changelog
Sourced from icalendar's changelog.