Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2025

Bumps the minor-updates group with 13 updates in the / directory:

Package From To
boto3 1.36.10 1.37.4
django 5.1.5 5.1.6
django-cors-headers 4.6.0 4.7.0
django-storages 1.14.4 1.14.5
djangorestframework-simplejwt 5.4.0 5.5.0
environs 14.1.0 14.1.1
psycopg 3.2.4 3.2.5
whitenoise 6.8.2 6.9.0
flake8 7.1.1 7.1.2
isort 6.0.0 6.0.1
locust 2.32.8 2.33.0
model-bakery 1.20.1 1.20.4
pytest-django 4.9.0 4.10.0

Updates boto3 from 1.36.10 to 1.37.4

Commits
  • 0c61b96 Merge branch 'release-1.37.4'
  • b474be9 Bumping version to 1.37.4
  • de332a9 Add changelog entries from botocore
  • b0cfdee Merge branch 'release-1.37.3'
  • 63a9bb2 Merge branch 'release-1.37.3' into develop
  • fd96968 Bumping version to 1.37.3
  • 8c09caa Add changelog entries from botocore
  • 474cfa0 Merge branch 'release-1.37.2'
  • 4245512 Merge branch 'release-1.37.2' into develop
  • d10ead8 Bumping version to 1.37.2
  • Additional commits viewable in compare view

Updates django from 5.1.5 to 5.1.6

Commits
  • 8c9973c [5.1.x] Bumped version for 5.1.6 release.
  • df27e43 [5.1.x] Added release date for 5.1.6, 5.0.12, and 4.2.19.
  • 4a04944 [5.1.x] Clarified docs for default email value in UserManager.create_user().
  • b814f4c [5.1.x] Refs #35612 -- Extended docs on how the security team evaluates reports.
  • 328d54f [5.1.x] Refs #36140 -- Added missing import in django/contrib/auth/forms.py.
  • 8552eef [5.1.x] Fixed #36140 -- Allowed BaseUserCreationForm to define non required p...
  • 76b4fb7 [5.1.x] Fixed #36162 -- Fixed the black Makefile docs rule to work on macOS.
  • 173edeb [5.1.x] Corrected ArrayAgg example for ordering usage.
  • 4f0169e [5.1.x] Tweaked docs to avoid reformatting given new black version.
  • 9d1945d [5.1.x] Clarified the Releaser's discretion for determining and postponing th...
  • Additional commits viewable in compare view

Updates django-cors-headers from 4.6.0 to 4.7.0

Changelog

Sourced from django-cors-headers's changelog.

4.7.0 (2025-02-06)

  • Support Django 5.2.
Commits

Updates django-storages from 1.14.4 to 1.14.5

Changelog

Sourced from django-storages's changelog.

1.14.5 (2025-02-15)


General

  • Revert exists() behavior to pre-1.14.4 semantics with additional hardening for Django versions < 4.2 to fix CVE-2024-39330. This change matches the eventual behavior Django itself shipped with. ([#1484](https://github.com/jschneier/django-storages/issues/1484), [#1486](https://github.com/jschneier/django-storages/issues/1486))
  • Add support for Django 5.1 ([#1444](https://github.com/jschneier/django-storages/issues/1444)_)

Azure

  • Deprecated: The setting AZURE_API_VERSION/api_version setting is deprecated in favor of the new AZURE_CLIENT_OPTIONS setting. A future version will remove support for this setting.
  • Add AZURE_CLIENT_OPTIONS settings to enable customization of all BlobServiceClient parameters such as api_version and all retry* options. ([#1432](https://github.com/jschneier/django-storages/issues/1432)_)

Dropbox

  • As part of the above hardening fix a bug was uncovered whereby a root_path setting would be applied multiple times during save() ([#1484](https://github.com/jschneier/django-storages/issues/1484)_)
  • Fix setting OAuth2 access token via env var ([#1452](https://github.com/jschneier/django-storages/issues/1452)_)

FTP

  • Fix incorrect exists() results due to an errant appended slash ([#1438](https://github.com/jschneier/django-storages/issues/1438)_)

Google Cloud

  • Switch checksum to crc32c to fix downloading when running in FIPS mode ([#1473](https://github.com/jschneier/django-storages/issues/1473)_)
  • Fix double decompression when using gzip ([#1457](https://github.com/jschneier/django-storages/issues/1457)_)

.. _#1484: jschneier/django-storages#1484 .. _#1486: jschneier/django-storages#1486 .. _#1444: jschneier/django-storages#1444 .. _#1432: jschneier/django-storages#1432 .. _#1473: jschneier/django-storages#1473 .. _#1457: jschneier/django-storages#1457 .. _#1452: jschneier/django-storages#1452 .. _#1438: jschneier/django-storages#1438

Commits

Updates djangorestframework-simplejwt from 5.4.0 to 5.5.0

Release notes

Sourced from djangorestframework-simplejwt's releases.

v5.5.0

Differing Behavior Change

What's Changed

Full Changelog: jazzband/djangorestframework-simplejwt@v5.4.0...v5.5.0

Changelog

Sourced from djangorestframework-simplejwt's changelog.

5.5.0

Commits

Updates environs from 14.1.0 to 14.1.1

Changelog

Sourced from environs's changelog.

14.1.1 (2025-02-10)

Bug fixes:

  • Typing: Fix typing for env.list and env.dict to properly handle default and subcast arguments (#406). Thanks lucas-bremond for the PR.
  • Add env to __all__ (#396). Thanks daveflr for reporting.

Changes:

  • Backwards-incompatible: recurse, verbose, override, and return_path parameters to Env.read_env are now keyword-only.
  • Backwards-incompatible: The required argument to parser methods is removed. Call a parser method without a default value to make it required.
Commits

Updates psycopg from 3.2.4 to 3.2.5

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Python 3.3.0 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^

  • Drop support for Python 3.8.

Current release

Psycopg 3.2.5 ^^^^^^^^^^^^^

  • 3x faster UUID loading thanks to C implementation (:tickets:[#447](https://github.com/psycopg/psycopg/issues/447), [#998](https://github.com/psycopg/psycopg/issues/998)).

Psycopg 3.2.4 ^^^^^^^^^^^^^

  • Don't lose notifies received whilst the ~Connection.notifies() iterator is not running (:ticket:[#962](https://github.com/psycopg/psycopg/issues/962)).
  • Make sure that the notifies callback is called during the use of the ~Connection.notifies() generator (:ticket:[#972](https://github.com/psycopg/psycopg/issues/972)).
  • Raise the correct error returned by the database (such as !AdminShutdown or !IdleInTransactionSessionTimeout) instead of a generic OperationalError when a server error causes a client disconnection (:ticket:[#988](https://github.com/psycopg/psycopg/issues/988)).
  • Build macOS dependencies from sources instead using the Homebrew versions in order to avoid problems with MACOSX_DEPLOYMENT_TARGET (:ticket:[#858](https://github.com/psycopg/psycopg/issues/858)).
  • Bump libpq to 17.2 in Linux and macOS binary packages.
  • Bump libpq to 16.4 in Windows binary packages, using the vcpkg library__ (:ticket:[#966](https://github.com/psycopg/psycopg/issues/966)).

.. __: https://vcpkg.io/en/package/libpq

Psycopg 3.2.3 ^^^^^^^^^^^^^

... (truncated)

Commits
  • 664b2a1 chore: bump psycopg package version to 3.2.5
  • cd6589b chore: bump build libraries
  • 68f8603 Merge branch 'cython-uuid-3.2' into maint-3.2
  • dd1cefc docs: mention UUID speedup in release news
  • 7f950cb chore(c): remove C UUIDDumper and UUIDBinaryDumper
  • 393e162 perf(uuid): speed up UUID creation using a writable subclass
  • 57a3889 perf(c): use PyObject_CallFunctionObjArgs in UUIDBinaryLoader
  • 88f73fe perf(c): use PyObject_CallFunctionObjArgs in UUIDLoader
  • 3a9ade7 test(c): test UUID.slots
  • 811cb51 perf(c): Use hex_to_int_map in UUIDLoader
  • Additional commits viewable in compare view

Updates whitenoise from 6.8.2 to 6.9.0

Changelog

Sourced from whitenoise's changelog.

6.9.0 (2025-02-06)

  • Support Django 5.2.
Commits

Updates flake8 from 7.1.1 to 7.1.2

Commits
  • fffee8b Release 7.1.2
  • 19001f7 Merge pull request #1966 from PyCQA/limit-procs-to-file-count
  • f35737a avoid starting unnecessary processes when file count is limited
  • See full diff in compare view

Updates isort from 6.0.0 to 6.0.1

Release notes

Sourced from isort's releases.

6.0.1

Changes

🪲 Fixes

👷 Continuous Integration

Commits

Updates locust from 2.32.8 to 2.33.0

Release notes

Sourced from locust's releases.

2.33.0

What's Changed

New Contributors

Full Changelog: locustio/locust@2.32.10...2.33.0

2.32.10

What's Changed

Full Changelog: locustio/locust@2.32.9...2.32.10

2.32.9

What's Changed

New Contributors

Full Changelog: locustio/locust@2.32.8...2.32.9

Changelog

Sourced from locust's changelog.

2.33.0 (2025-02-24)

Full Changelog

Fixed bugs:

  • uv.lock ends up in root of site-packages #3053

2.33.0 (2025-02-22)

Full Changelog

Fixed bugs:

  • UnboundLocalError: local variable 'user_count' referenced before assignment #3051

Merged pull requests:

  • docs: update python-requests documentation links #3059 (n0h0)
  • dos: correct venv activation path in docs #3058 (n0h0)
  • Use enter to automatically open web UI in default browser #3057 (cyberw)
  • Update vite to 6.0.11 #3056 (cyberw)
  • Remove uv lock file from build artifacts #3055 (mquinnfd)
  • Improve error message on missing user_count or spawn_rate in swarm payload #3052 (cyberw)
  • Enable HTML Report Filename Parsing #3049 (ktchani)
  • FastHttpUser: Accept brotli and zstd compression encoding #3048 (kamilbednarz)
  • Bump vitest from 2.1.6 to 2.1.9 in /locust/webui #3044 (dependabot[bot])

2.32.10 (2025-02-18)

Full Changelog

Closed issues:

  • Switch from Poetry to uv #3033

Merged pull requests:

2.32.9 (2025-02-10)

Full Changelog

Fixed bugs:

  • Cannot Update Custom options in the Web UI when Default Value is None #3011

Merged pull requests:

... (truncated)

Commits
  • c5af270 Merge pull request #3059 from n0h0/fix-python-requests-link
  • d01765d Merge pull request #3058 from n0h0/fix-venv-bin-activate
  • 6335881 docs: update python-requests documentation links
  • 018cbb5 dos: correct venv activation path in docs
  • d6812b2 Update changelog (going to bump minor revision in next release)
  • 77831cd Merge pull request #3057 from locustio/Use-enter-to-automatically-open-web-ui...
  • a8c7b90 Use enter to open webui: Support mac/unix style newlines & fix test case.
  • 5984304 Use enter to open UI in default browser
  • c6eaf25 Update changelog in preparation of 2.32.11
  • 3bb8ff0 Merge pull request #3056 from locustio/update-vite
  • Additional commits viewable in compare view

Updates model-bakery from 1.20.1 to 1.20.4

Release notes

Sourced from model-bakery's releases.

1.20.4

What's Changed

Full Changelog: model-bakers/model_bakery@1.20.3...1.20.4

1.20.3

What's Changed

New Contributors

Full Changelog: model-bakers/model_bakery@1.20.2...1.20.3

1.20.2

What's Changed

New Contributors

Full Changelog: model-bakers/model_bakery@1.20.1...1.20.2

Changelog

Sourced from model-bakery's changelog.

1.20.4

Changed

  • Fix regression introduced in 1.20.3 that prevented using auto_now and auto_now_add fields with seq or callable.

1.20.3

Changed

  • Fix support of auto_now and auto_now_add fields in combination with _fill_optional
  • Isolate Recipe defaults to prevent modification via instances

1.20.2

Changed

  • Fix setting GFK parameter by a callable
  • Fix regression forbidding using Proxy models as GFK
Commits

Updates pytest-django from 4.9.0 to 4.10.0

Release notes

Sourced from pytest-django's releases.

v4.10.0

https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4100-2025-02-10

Changelog

Sourced from pytest-django's changelog.

v4.10.0 (2025-02-10)

Compatibility ^^^^^^^^^^^^^

  • Added official support for Python 3.13.

Improvements ^^^^^^^^^^^^

  • Added using argument to :fixture:django_assert_num_queries and :fixture:django_assert_max_num_queries to easily specify the database alias to use.

Bugfixes ^^^^^^^^

  • Fixed lock/unlock of db breaks if pytest is executed twice in the same process.
Commits
  • d8dc3d9 Release 4.10.0
  • 50a5578 build(deps): bump hynek/build-and-inspect-python-package
  • 54a5950 build(deps): bump pypa/gh-action-pypi-publish from 1.10.0 to 1.12.4
  • c030eb9 Bump codecov/codecov-action from 4 to 5
  • 0ee43ef Adds using to django_assert_num_queries (#1170)
  • c3018d6 Developer QOL (#1174)
  • 120c2a5 ci: update runs-on to ubuntu 24.04
  • ba6c6a6 tox: update ruff and mypy
  • e2c6cee Add Python 3.13 support
  • f422f1d Remove setup.py file
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the minor-updates group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.36.10` | `1.37.4` |
| [django](https://github.com/django/django) | `5.1.5` | `5.1.6` |
| [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.6.0` | `4.7.0` |
| [django-storages](https://github.com/jschneier/django-storages) | `1.14.4` | `1.14.5` |
| [djangorestframework-simplejwt](https://github.com/jazzband/djangorestframework-simplejwt) | `5.4.0` | `5.5.0` |
| [environs](https://github.com/sloria/environs) | `14.1.0` | `14.1.1` |
| [psycopg](https://github.com/psycopg/psycopg) | `3.2.4` | `3.2.5` |
| [whitenoise](https://github.com/evansd/whitenoise) | `6.8.2` | `6.9.0` |
| [flake8](https://github.com/pycqa/flake8) | `7.1.1` | `7.1.2` |
| [isort](https://github.com/PyCQA/isort) | `6.0.0` | `6.0.1` |
| [locust](https://github.com/locustio/locust) | `2.32.8` | `2.33.0` |
| [model-bakery](https://github.com/model-bakers/model_bakery) | `1.20.1` | `1.20.4` |
| [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.9.0` | `4.10.0` |



Updates `boto3` from 1.36.10 to 1.37.4
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.36.10...1.37.4)

Updates `django` from 5.1.5 to 5.1.6
- [Commits](django/django@5.1.5...5.1.6)

Updates `django-cors-headers` from 4.6.0 to 4.7.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.6.0...4.7.0)

Updates `django-storages` from 1.14.4 to 1.14.5
- [Changelog](https://github.com/jschneier/django-storages/blob/master/CHANGELOG.rst)
- [Commits](jschneier/django-storages@1.14.4...1.14.5)

Updates `djangorestframework-simplejwt` from 5.4.0 to 5.5.0
- [Release notes](https://github.com/jazzband/djangorestframework-simplejwt/releases)
- [Changelog](https://github.com/jazzband/djangorestframework-simplejwt/blob/master/CHANGELOG.md)
- [Commits](jazzband/djangorestframework-simplejwt@v5.4.0...v5.5.0)

Updates `environs` from 14.1.0 to 14.1.1
- [Changelog](https://github.com/sloria/environs/blob/main/CHANGELOG.md)
- [Commits](sloria/environs@14.1.0...14.1.1)

Updates `psycopg` from 3.2.4 to 3.2.5
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.2.4...3.2.5)

Updates `whitenoise` from 6.8.2 to 6.9.0
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.8.2...6.9.0)

Updates `flake8` from 7.1.1 to 7.1.2
- [Commits](PyCQA/flake8@7.1.1...7.1.2)

Updates `isort` from 6.0.0 to 6.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@6.0.0...6.0.1)

Updates `locust` from 2.32.8 to 2.33.0
- [Release notes](https://github.com/locustio/locust/releases)
- [Changelog](https://github.com/locustio/locust/blob/master/CHANGELOG.md)
- [Commits](locustio/locust@2.32.8...2.33.0)

Updates `model-bakery` from 1.20.1 to 1.20.4
- [Release notes](https://github.com/model-bakers/model_bakery/releases)
- [Changelog](https://github.com/model-bakers/model_bakery/blob/main/CHANGELOG.md)
- [Commits](model-bakers/model_bakery@1.20.1...1.20.4)

Updates `pytest-django` from 4.9.0 to 4.10.0
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
- [Commits](pytest-dev/pytest-django@v4.9.0...v4.10.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: django
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: django-cors-headers
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: django-storages
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: djangorestframework-simplejwt
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: environs
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: psycopg
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: whitenoise
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: flake8
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: isort
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: locust
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
- dependency-name: model-bakery
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: minor-updates
- dependency-name: pytest-django
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant