⬆️(dependencies) update python dependencies #1101
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
5 times, most recently
from
fd6837e to
7f65bb2
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
6 times, most recently
from
542c78f to
1dad9e2
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
4 times, most recently
from
8abe0b4 to
f5ab4f3
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
8 times, most recently
from
2fa3851 to
2b26e89
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
6 times, most recently
from
c37a8f7 to
0065e9a
Compare
renovate
bot
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
ea64b2b to
675f6c0
Compare
jonathanreveille
force-pushed
the
renovate/python-dependencies
branch
from
828775e to
1ce4041
Compare
Contributor
Author
Edited/Blocked NotificationRenovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR. You can manually request rebase by checking the rebase/retry box above. |
jonathanreveille
force-pushed
the
renovate/python-dependencies
branch
4 times, most recently
from
3956e86 to
b161222
Compare
jonathanreveille
force-pushed
the
renovate/python-dependencies
branch
3 times, most recently
from
26a8511 to
f3476f7
Compare
kernicPanel
reviewed
Oct 1, 2025
Member
kernicPanel
left a comment
kernicPanel
left a comment
There was a problem hiding this comment.
Issue links in the commits are wrong.
jonathanreveille
force-pushed
the
renovate/python-dependencies
branch
2 times, most recently
from
b2d92f6 to
f57ad8a
Compare
kernicPanel
approved these changes
Oct 1, 2025
kernicPanel
reviewed
Oct 1, 2025
jonathanreveille
force-pushed
the
renovate/python-dependencies
branch
from
e95b3a7 to
7f97bca
Compare
The dependency sqlacodegen depends on SQLAlchemy less than 2.0.42 version. There has been a bug report in the repository of sqlacodegen 3.1.x versions that requires a fix to support breaking change in SQLAlchemy 2.0.42 version already. The upgrade of SQLAlchemy to 2.0.43 or 2.0.42 is not yet possible. We have to wait for a newer release of sqlacodegen to be compatible with at least SQLAlchemy 2.0.42 version. Issue: agronholm/sqlacodegen#416 Sor for now we will pin those versions.
When upgrading this dependency at 0.14.2, the execution of tests would cause generate lot of errors that you don't have when set in the version 0.14.1. There is a regression between the latest version and previous one. The error found was : "execnet.gateway_base.DumpError: can't serialize " Issue: pytest-dev/pytest-subtests#202
Due to the upgrade of `djangorestframework` to 3.16.1 version the swagger file evolved. It added the default choice of the Order State enums that is `draft`.
jonathanreveille
force-pushed
the
renovate/python-dependencies
branch
from
7f97bca to
ed607f5
Compare
Upgrading this dependency removed all unused ruff disable rules from our codebase. This commit reflects the diff produced after running `make lint`.
jonathanreveille
force-pushed
the
renovate/python-dependencies
branch
from
ed607f5 to
595569e
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Coming soon: The Renovate bot (GitHub App) will be renamed to Mend. PRs from Renovate will soon appear from 'Mend'. Learn more here.
This PR contains the following updates:
==2.0.40->==2.0.43==65.1->==66.0==5.5.2->==5.5.3==44.0.3->==46.0.1==2.2.6->==2.2.8==4.7.0->==4.9.0==4.28.0->==4.31.0==5.4.0->==6.0.0==2.2.10->==2.2.13==3.16.0->==3.16.1==5.5.0->==5.5.1==2025.5.1->==2025.9.1==2.10->==2.10.1==5.4.0->==6.0.2==3.8->==3.9==1.5.0->==1.6.0==0.11.6->==0.11.7==3.2.9->==3.2.10==5.8.0->==5.9.3==3.3.7->==3.3.8==1.1.1->==1.1.2==8.3.5->==8.4.2==6.1.1->==7.0.0==0.14.1->==0.14.2==3.6.1->==3.8.0==2.32.3->==2.32.5==0.25.7->==0.25.8==14.0.0->==14.1.0==0.11.9->==0.13.2==2.28.0->==2.39.0==3.0.0->==3.1.1==2.32.0.20250328->==2.32.4.20250913==6.9.0->==6.11.0Release Notes
Kozea/WeasyPrint (WeasyPrint)
v66.0Compare Source
Read about this release on our blog.
Features
Bug fixes
Contributors
Backers and sponsors
celery/celery (celery)
v5.5.3Compare Source
=====
:release-date: 2025-06-01
:release-by: Tomer Nosrati
What's Changed
pyca/cryptography (cryptography)
v46.0.1Compare Source
v46.0.0Compare Source
v45.0.7Compare Source
v45.0.6Compare Source
v45.0.5Compare Source
v45.0.4Compare Source
v45.0.3Compare Source
v45.0.2Compare Source
v45.0.1Compare Source
v45.0.0Compare Source
jrief/django-admin-sortable2 (django-admin-sortable2)
v2.2.8Compare Source
docsandparler_examplefrom installable package.v2.2.7Compare Source
adamchainz/django-cors-headers (django-cors-headers)
v4.9.0Compare Source
v4.8.0Compare Source
adamchainz/django-perf-rec (django-perf-rec)
v4.31.0Compare Source
v4.30.0Compare Source
v4.29.0Compare Source
Support fingerprinting SQL strings containing multiple queries.
Thanks to q0w in
PR #​669 <https://github.com/adamchainz/django-perf-rec/pull/669>__.Fix test name detection when a test function contains a variable called
request.Thanks to Konstantin Alekseev for the initial patch in
PR #​659 <https://github.com/adamchainz/django-perf-rec/pull/659>__.jazzband/django-redis (django-redis)
v6.0.0Compare Source
===============================
Features
#​598 <https://github.com/jazzband/django-redis/issues/598>_)#​688 <https://github.com/jazzband/django-redis/issues/688>_)#​730 <https://github.com/jazzband/django-redis/issues/730>_)Bug Fixes
#​724 <https://github.com/jazzband/django-redis/issues/724>_)#​749 <https://github.com/jazzband/django-redis/issues/749>_)cache.lock(#​752 <https://github.com/jazzband/django-redis/issues/752>_)Miscellaneous
#​689 <https://github.com/jazzband/django-redis/issues/689>_)#​690 <https://github.com/jazzband/django-redis/issues/690>_)#​692 <https://github.com/jazzband/django-redis/issues/692>_)#​693 <https://github.com/jazzband/django-redis/issues/693>_)#​695 <https://github.com/jazzband/django-redis/issues/695>_)#​696 <https://github.com/jazzband/django-redis/issues/696>_)#​697 <https://github.com/jazzband/django-redis/issues/697>_)#​699 <https://github.com/jazzband/django-redis/issues/699>_)#​701 <https://github.com/jazzband/django-redis/issues/701>_)#​702 <https://github.com/jazzband/django-redis/issues/702>_)#​703 <https://github.com/jazzband/django-redis/issues/703>_)#​729 <https://github.com/jazzband/django-redis/issues/729>_)#​754 <https://github.com/jazzband/django-redis/issues/754>_)#​755 <https://github.com/jazzband/django-redis/issues/755>_)#​756 <https://github.com/jazzband/django-redis/issues/756>_)pytest-xdistand separating settings on different redis databases.Dropped
pytest-djangoUsing
docker-composefor setting up redis containers for testingUse
tox-uv(#​757 <https://github.com/jazzband/django-redis/issues/757>_)Fix shadowing builtin Python exceptions. (
#​824 <https://github.com/jazzband/django-redis/issues/824>_)Deprecations and Removals
#​852 <https://github.com/jazzband/django-redis/issues/852>_)encode/django-rest-framework (djangorestframework)
v3.16.1Compare Source
This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.
Minor changes
backports.zoneinfodependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.Bug fixes
unique_togethervalidation withSerializerMethodFieldin #9712UniqueTogetherValidatorto handle fields withsourceattribute in #9688Translations
Documentation
drf-restwindand update outdated images inbrowsable-api.mdin #9680djangorestframework-guardian2todjangorestframework-guardianin #9734requestin serializer context when usingHyperlinkedModelSerializerin #9732Internal changes
pyupgradetopre-commithooks in #9682pytzis available in #9715New Contributors
Full Changelog: encode/django-rest-framework@3.16.0...3.16.1
jazzband/djangorestframework-simplejwt (djangorestframework-simplejwt)
v5.5.1Compare Source
Missing Migration for rest_framework_simplejwt.token_blacklist app. A previously missing migration (0013_blacklist) has now been added. This issue arose because the migration file was mistakenly not generated earlier. This migration was never part of an official release, but users following the latest master branch may have encountered it.
Notes for Users
If you previously ran makemigrations in production and have a 0013_blacklist migration in your django_migrations table, follow these steps before upgrading:
Important: If other migrations depend on 0013_blacklist, be cautious when removing it. You may need to adjust or regenerate dependent migrations to ensure database integrity.
for_userusage by @vgrozdanic in #872iatclaim from refresh token by @vgrozdanic in #888tfranzel/drf-spectacular-sidecar (drf-spectacular-sidecar)
v2025.9.1Compare Source
v2025.8.1Compare Source
v2025.7.1Compare Source
v2025.6.1Compare Source
SmileyChris/easy-thumbnails (easy_thumbnails)
v2.10.1Compare Source
lxml/lxml (lxml)
v6.0.2Compare Source
==================
Bugs fixed
LP#2125278: Compilation with libxml2 2.15.0 failed.
Original patch by Xi Ruoyao.
Setting
decompress=Truein the parser had no effect in libxml2 2.15.Binary wheels on Linux and macOS use the library version libxml2 2.14.6.
See https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.6
Test failures in libxml2 2.15.0 were fixed.
Other changes
Binary wheels for Py3.9-3.11 on the
riscv64architecture were added.Error constants were updated to match libxml2 2.15.0.
Built using Cython 3.1.4.
v6.0.1Compare Source
==================
Bugs fixed
LP#2116333:
lxml.sax._getNsTag()could fail with an exception on malformed input.GH#467: Some test adaptations were made for libxml2 2.15.
Patch by Nick Wellnhofer.
LP2119510, GH#473: A Python compatibility test was fixed for Python 3.14+.
Patch by Lumír Balhar.
GH#471: Wheels for "riscv64" on recent Python versions were added.
Patch by ffgan.
GH#469: The wheel build no longer requires the
wheelpackage unconditionally.Patch by Miro Hrončok.
Binary wheels use the library version libxml2 2.14.5.
See https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.5
Windows binary wheels continue to use a security patched library version libxml2 2.11.9.
v6.0.0Compare Source
==================
Features added
GH#463:
lxml.html.diffis faster and provides structurally better diffs.Original patch by Steven Fernandez.
GH#405: The factories
ElementandElementTreecan now be used in type hints.GH#448: Parsing from
memoryviewand other buffers is supported to allow zero-copy parsing.GH#437:
lxml.html.builderwas missing several HTML5 tag names.Patch by Nick Tarleton.
GH#458:
CDATAcan now be written into the incrementalxmlfile()writer.Original patch by Lane Shaw.
A new parser option
decompress=Falsewas added that controls the automaticinput decompression when using libxml2 2.15.0 or later. Disabling this option
by default will effectively prevent decompression bombs when handling untrusted
input. Code that depends on automatic decompression must enable this option.
Note that libxml2 2.15.0 was not released yet, so this option currently has no
effect but can already be used.
The set of compile time / runtime supported libxml2 feature names is available as
etree.LIBXML_COMPILED_FEATURESandetree.LIBXML_FEATURES.This currently includes
catalog,ftp,html,http,iconv,icu,lzma,regexp,schematron,xmlschema,xpath,zlib.Bugs fixed
GH#353: Predicates in
.find*()could mishandle tag indices if a default namespace is provided.Original patch by Luise K.
GH#272: The
headandbodyproperties oflxml.htmlelements failed if no such elementwas found. They now return
Noneinstead.Original patch by FVolral.
Tag names provided by code (API, not data) that are longer than
INT_MAXcould be truncated or mishandled in other ways.
.text_content()onlxml.htmlelements accidentally returned a "smart string"without additional information. It now returns a plain string.
LP#2109931: When building lxml with coverage reporting, it now disables the
sys.monitoringsupport due to the lack of support in nedbat/coveragepy#1790
Other changes
Support for Python < 3.8 was removed.
Parsing directly from zlib (or lzma) compressed data is now considered an optional
feature in lxml. It may get removed from libxml2 at some point for security reasons
(compression bombs) and is therefore no longer guaranteed to be available in lxml.
As of this release, zlib support is still normally available in the binary wheels
but may get disabled or removed in later (x.y.0) releases. To test the availability,
use
"zlib" in etree.LIBXML_FEATURES.The
Schematronclass is deprecated and will become non-functional in a future lxml version.The feature will soon be removed from libxml2 and stop being available.
GH#438: Wheels include the
arm7ltarget.GH#465: Windows wheels include the
arm64target.Patch by Finn Womack.
Binary wheels use the library versions libxml2 2.14.4 and libxslt 1.1.43.
Note that this disables direct HTTP and FTP support for parsing from URLs.
Use Python URL request tools instead (which usually also support HTTPS).
To test the availability, use
"http" in etree.LIBXML_FEATURES.Windows binary wheels use the library versions libxml2 2.11.9, libxslt 1.1.39 and libiconv 1.17.
They are now based on VS-2022.
Built using Cython 3.1.2.
The debug methods
MemDebug.dump()andMemDebug.show()were removed completely.libxml2 2.13.0 discarded this feature.
Python-Markdown/markdown (markdown)
v3.9Compare Source
v3.8.2Compare Source
Fixed
codecsdeprecation in Python 3.14.<fooand Python 3.14.v3.8.1Compare Source
Fixed
md_in_html(#1526).remigermain/nested-multipart-parser (nested-multipart-parser)
v1.6.0Compare Source
What's Changed
Full Changelog: remigermain/nested-multipart-parser@1.5.0...v1.5.0
bretello/pdbpp (pdbpp)
v0.11.7Compare Source
What’s Changed
Fixes
Pdbppinstances with breakpoint(): breakpoints, conditionals and more will persist during a session (#50) @bretelloMisc
psycopg/psycopg (psycopg)
v3.2.10Compare Source
pytest-dev/pyfakefs (pyfakefs)
v5.9.3Compare Source
Fixes a utility method.
Changes
(custom arguments are ignored in this case, as the existing fake filesystem is used)
Fixes
fake_filesystem.add_package_metadatathat had never worked correctly(see #1205)
Infrastructure
v5.9.2Compare Source
Fixes interaction with pytest.
Fixes
fswith other pytest fixtures (see #1200)Infrastructure
v5.9.1Compare Source
Fixes regression in packaging in version 5.9.0.
Fixes
strictargument in Python 3.9.23v5.9.0Compare Source
Adds support for an API change in latest Python patch releases.
Changes
OSErrorraised in the fake filesystem has no longer the postfix"in the fake filesystem" (see #1159)
FakeShutilModuleto prepare it for usage without the patcher(see #1171)
Enhancements
add_package_metadatato add the metadata of a givenpackage to the fake filesystem (see #1155)
Fixes
(see #1121)
of pytest executable (see #1096)
modeproperty to fake file wrapper (see #1162)FakePathlibModulefor Python >= 3.11(see #1169)
strictargument inos.path.realpath(introduced in latest patch version of Python >= 3.10, see #1180)
Infrastructure
run pytest over all tests in docker containers
(see #1151)
setup.pyandsetup.cfgin favor ofpyproject.tomlpylint-dev/pylint (pylint)
v3.3.8Compare Source
What's new in Pylint 3.3.8?
Release date: 2025-08-09
This patch release includes an exceptional fix for a false negative issue. For details, see: #10482 (comment)
False Positives Fixed
Fix false positives for
possibly-used-before-assignmentwhen variables are exhaustivelyassigned within a
matchblock.Closes #9668
Fix false positive for
missing-raises-docandmissing-yield-docwhen the method length is less than docstring-min-length.Refs #10104
Fix a false positive for
unused-variablewhen multiple except handlers bind the same name under a try block.Closes #10426
False Negatives Fixed
Fix false-negative for
used-before-assignmentwithfrom __future__ import annotationsin function definitions.Refs #10482
Other Bug Fixes
Fix a bug in Pyreverse where aggregations and associations were included in diagrams regardless of the selected --filter-mode (such as PUB_ONLY, ALL, etc.).
Closes #10373
Fix double underscores erroneously rendering as bold in pyreverse's Mermaid output.
Closes #10402
PyMySQL/PyMySQL (pymysql)
v1.1.2Compare Source
Release date: 2025-08-24
SocketIOsoon when Connection is closed for PyPy. #1183getpass.getuser()raises OSEError. #1190Connection.kill()usesKILLquery instead ofCOM_KILLcommand to support MySQL 8.4. [#1197](https://redirect.github.com/PyMySQL/PyMySQL/pul