Bump the all-django-dependencies group across 1 directory with 6 updates #20

dependabot · 2025-12-03T20:20:20Z

Updates the requirements on python-dotenv, django, django-tailwind, boto3, black and pre-commit to permit the latest version.
Updates python-dotenv to 1.2.1

Release notes

Sourced from python-dotenv's releases.

v1.2.1

What's Changed

Support reading .env from FIFOs (Unix) by @sidharth-sudhir in theskumar/python-dotenv#586

Update CI to use trusted publishing on PyPI

New Contributors

@sidharth-sudhir made their first contribution in theskumar/python-dotenv#586

Full Changelog: theskumar/python-dotenv@v1.2.0...v1.2.1

Changelog

Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

Move more config to pyproject.toml, removed setup.cfg

Add support for reading .env from FIFOs (Unix) by [@sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Upgrade build system to use PEP 517 & PEP 518 to use build and pyproject.toml by [@EpicWink] in #583

Add support for Python 3.14 by [@23f3001135] in #579

Add support for disabling of load_dotenv() using PYTHON_DOTENV_DISABLED env var. by [@matthewfranglen] in #569

[1.1.1] - 2025-06-24

Fixed

CLI: Ensure find_dotenv work reliably on python 3.13 by [@theskumar] in #563

CLI: revert the use of execvpe on Windows by [@wrongontheinternet] in #566

[1.1.0] - 2025-03-25

Feature

Add support for python 3.13

Enhance dotenv run, switch to execvpe for better resource management and signal handling (#523) by [@eekstunt]

Fixed

find_dotenv and load_dotenv now correctly looks up at the current directory when running in debugger or pdb (#553 by [@randomseed42])

Misc

Drop support for Python 3.8

[1.0.1] - 2024-01-23

Fixed

Gracefully handle code which has been imported from a zipfile (#456 by [@samwyma])

Allow modules using load_dotenv to be reloaded when launched in a separate thread (#497 by [@freddyaboulton])

Fix file not closed after deletion, handle error in the rewrite function (#469 by [@Qwerty-133])

Misc

Use pathlib.Path in tests (#466 by [@eumiro])

Fix year in release date in changelog.md (#454 by [@jankislinger])

Use https in README links (#474 by [@Nicals])

[1.0.0] - 2023-02-24

Fixed

... (truncated)

Commits

eaf2a91 Do not remove .coverage file
8716196 Bump version: 1.2.0 → 1.2.1
b87807f Update changelog
3af77d3 Support reading .env from FIFOs (Unix) (#586)
467ee22 Fix test failures after moving config to pyproject.toml
76999e7 Move more config pyproject.toml
222ce2c Update to use trusted publisher on pypi
8ed4f79 Update docs requirements
5bf8822 Bump version: 1.1.1 → 1.2.0
1fe11cc upadate changelog
Additional commits viewable in compare view

Updates django to 6.0

Commits

36b5f39 [6.0.x] Bumped version for 6.0 release.
4f46d1f [6.0.x] Updated man page for Django 6.0.
a9f5ca5 [6.0.x] Refs #35859 -- Clarified Tasks ref and topics docs regarding availabl...
45f9e0e [6.0.x] Finalized release notes for Django 6.0.
ac44a55 [6.0.x] Made cosmetic edits to docs/releases/6.0.txt.
00575b7 [6.0.x] Updated translations from Transifex.
8414487 [6.0.x] Refs #35444 -- Fixed typo in PostgreSQL StringAgg deprecation warning.
1f8f36e [6.0.x] Added CVE-2025-13372 and CVE-2025-64460 to security archive.
224fc79 [6.0.x] Added stub release notes for 5.2.10.
1dbd07a [6.0.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation i...
Additional commits viewable in compare view

Updates django-tailwind to 4.4.1

Changelog

Sourced from django-tailwind's changelog.

4.4.1

Fixes an issue when raw_input is used instead of input.

4.4.0

Standalone Tailwind CSS binary support via pytailwindcss;

TAILWIND_USE_STANDALONE_BINARY setting to force standalone binary mode;

TAILWIND_STANDALONE_BINARY_VERSION setting to control standalone binary version (default: v4.1.16);

Automatic detection of standalone vs npm-based installations (checks for package.json presence);

app_template_v4_standalone/ cookiecutter template for standalone binary apps;

Updates documentation;

Node.js is now optional when using standalone binary mode;

4.3.0

Replaces Poetry with UV for dependency management;

Fixes extract_host_and_port to support standalone port numbers (e.g., python manage.py runserver 55555);

Updates tox configuration to use dev dependency group;

Removes Docker instructions from documentation;

4.2.0

Adds new manage.py tailwind plugin_install command to manage Tailwind CSS plugins;

Adds optional daisyUI support;

4.1.0

Adds new dev command that starts Django development server and Tailwind watcher simultaneously;

Automatically installs Honcho if not available when using dev command;

Creates Procfile.tailwind for customizable process management;

Updates documentation with dev command usage;

4.0.0

Adds support for Tailwind CSS v4+;

Sets Tailwind CSS v4+ as the default version, with the option to use v3.x via --tailwind-version 3 flag;

3.9.1

Brings Python 3.10 support back;

Adds Python 3.13 support;

3.9.0

Adds --no-package-lock option to python manage.py tailwind install command to optionally skip creating package-lock.json file;

Upgrades Tailwind CSS to v3.4.17;

Drops support for Python 3.10;

Drops support for Django 3.2;

... (truncated)

Commits

4b0e428 Releases 4.4.1
46fb9a9 Merge pull request #241 from evangeloskp/fix-distlib-import-error
34150e8 Fix ImportError by replacing distlib.compat.raw_input with built-in input()
91c509a Update CI badge in README.md
4ac8150 Releases 4.4.0
529fad2 Adds Standalone CLI support: Use Django-Tailwind CSS without Node.js
e772a8b Fixes github action
4ca191c Merge pull request #237 from evilmonkey19/patch-1
7ab980d Fix documentation
See full diff in compare view

Updates boto3 to 1.42.2

Commits

cc95ab6 Merge branch 'release-1.42.2'
8f7ba80 Bumping version to 1.42.2
119aff9 Add changelog entries from botocore
65b24a4 Merge branch 'release-1.42.1'
71a06cf Merge branch 'release-1.42.1' into develop
5991e64 Bumping version to 1.42.1
f2c9a79 Add changelog entries from botocore
448efd7 Merge pull request #4669 from boto/dependabot/github_actions/actions/setup-py...
f55dd16 Bump actions/setup-python from 6.0.0 to 6.1.0
7ce189b Merge branch 'release-1.42.0'
Additional commits viewable in compare view

Updates black to 25.11.0

Release notes

Sourced from black's releases.

25.11.0

Highlights

Enable base 3.14 support (#4804)

Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)

Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

Move multiline_string_handling from --unstable to --preview (#4760)

Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)

Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)

Standardize type comments to form # type: <value> (#4645)

Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

Add no_cache option to control caching behavior. (#4803)

Packaging

Releases now include arm64 Linux binaries (#4773)

Output

Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

Enable 3.14 base CI (#4804)

Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)

Improve error message for vim plugin users. It now handles independently vim version

Vim: Warn on unsupported Vim and Python versions independently (#4772)

Vim: Print the import paths when importing black fails (#4675)

Vim: Fix handling of virtualenvs that have a different Python version (#4675)

Changelog

Sourced from black's changelog.

25.11.0

Highlights

Enable base 3.14 support (#4804)

Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)

Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

Move multiline_string_handling from --unstable to --preview (#4760)

Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)

Fix bug where python 3.12 generics syntax split line happens weirdly (#4777)

Standardize type comments to form # type: <value> (#4645)

Fix fix_fmt_skip_in_one_liners preview feature to respect # fmt: skip for compound statements with semicolon-separated bodies (#4800)

Configuration

Add no_cache option to control caching behavior. (#4803)

Packaging

Releases now include arm64 Linux binaries (#4773)

Releases now include arm64 Windows binaries and wheels (#4814)

Output

Write unchanged content to stdout when excluding formatting from stdin using pipes (#4610)

Blackd

Implemented BlackDClient. This simple python client allows to easily send formatting requests to blackd (#4774)

Integrations

Enable 3.14 base CI (#4804)

Enhance GitHub Action psf/black to support the required-version major-version-only "stability" format when using pyproject.toml (#4770)

Add output-file input to GitHub Action psf/black to write formatter output to a file for artifact capture and log cleanliness (#4824)

Improve error message for vim plugin users. It now handles independently vim version

... (truncated)

Commits

05f0a8c Prepare for 25.11.0 release (#4825)
ae17c61 Fix tests on pytest 9 (#4835)
138745e Include Windows and Python 3.14 in PR wheel build matrix, fix Windows build (...
18170d6 ci: add label for running all builds on a pull request (#4833)
0e793e3 fix windows wheels (#4830)
b71f36c Use build[uv] as cibuildwheel frontend (#4831)
a7bd594 Skip free threaded builds in cibuildwheel (#4829)
862dee9 Update cibuildwheel (#4828)
b5f354c build: restrict to pytest 9.0 due to breakage in custom pytest_configure (#4827)
f705197 t-string support (#4805)
Additional commits viewable in compare view

Updates pre-commit to 4.5.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.0

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

Changelog

Sourced from pre-commit's changelog.

4.5.0 - 2025-11-22

Features

Add pre-commit hazmat.

#3585 PR by @asottile.

4.4.0 - 2025-11-08

Features

Add --fail-fast option to pre-commit run.

#3528 PR by @JulianMaurin.

Upgrade ruby-build / rbenv.

#3566 PR by @asottile.

#3565 issue by @MRigal.

Add language: unsupported / language: unsupported_script as aliases for language: system / language: script (which will eventually be deprecated).

#3577 PR by @asottile.

Add support docker-in-docker detection for cgroups v2.

#3535 PR by @br-rhrbacek.

#3360 issue by @JasonAlt.

Fixes

Handle when docker gives SecurityOptions: null.

#3537 PR by @asottile.

#3514 issue by @jenstroeger.

Fix error context for invalid stages in .pre-commit-config.yaml.

#3576 PR by @asottile.

4.3.0 - 2025-08-09

Features

language: docker / language: docker_image: detect rootless docker.

#3446 PR by @matthewhughes934.

#1243 issue by @dkolepp.

language: julia: avoid startup.jl when executing hooks.

#3496 PR by @ericphanson.

language: dart: support latest dart versions which require a higher sdk lower bound.

#3507 PR by @bc-lee.

4.2.0 - 2025-03-18

Features

For language: python first attempt a versioned python executable for the default language version before consulting a potentially unversioned

... (truncated)

Commits

1af6c8f v4.5.0
3358a3b Merge pull request #3585 from pre-commit/hazmat
bdf6879 add pre-commit hazmat
e436690 Merge pull request #3584 from pre-commit/exitstack
8d34f95 use ExitStack instead of start + stop
9c7ea88 Merge pull request #3583 from pre-commit/forward-compat-map-manifest
844dacc add forward-compat error message
6a1d543 Merge pull request #3582 from pre-commit/move-gc-back
66278a9 move logic for gc back to commands.gc
1b32c50 Merge pull request #3579 from pre-commit/pre-commit-ci-update-config
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Updates the requirements on [python-dotenv](https://github.com/theskumar/python-dotenv), [django](https://github.com/django/django), [django-tailwind](https://github.com/timonweb/django-tailwind), [boto3](https://github.com/boto/boto3), [black](https://github.com/psf/black) and [pre-commit](https://github.com/pre-commit/pre-commit) to permit the latest version. Updates `python-dotenv` to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.0.1...v1.2.1) Updates `django` to 6.0 - [Commits](django/django@5.2.7...6.0) Updates `django-tailwind` to 4.4.1 - [Changelog](https://github.com/timonweb/django-tailwind/blob/master/CHANGELOG.md) - [Commits](timonweb/django-tailwind@4.3.1...4.4.1) Updates `boto3` to 1.42.2 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.40.64...1.42.2) Updates `black` to 25.11.0 - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@24.10.0...25.11.0) Updates `pre-commit` to 4.5.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.0.1...v4.5.0) --- updated-dependencies: - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:production dependency-group: all-django-dependencies - dependency-name: django dependency-version: '6.0' dependency-type: direct:production dependency-group: all-django-dependencies - dependency-name: django-tailwind dependency-version: 4.4.1 dependency-type: direct:production dependency-group: all-django-dependencies - dependency-name: boto3 dependency-version: 1.42.2 dependency-type: direct:production dependency-group: all-django-dependencies - dependency-name: black dependency-version: 25.11.0 dependency-type: direct:development dependency-group: all-django-dependencies - dependency-name: pre-commit dependency-version: 4.5.0 dependency-type: direct:development dependency-group: all-django-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-01T20:14:26Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 3, 2025

dependabot bot force-pushed the dependabot/pip/django/main/all-django-dependencies-9bf971702f branch from 647ad1e to 855abb8 Compare December 16, 2025 20:49

dependabot bot force-pushed the dependabot/pip/django/main/all-django-dependencies-9bf971702f branch from 855abb8 to 7814059 Compare December 17, 2025 20:16

dependabot bot closed this Jan 1, 2026

dependabot bot deleted the dependabot/pip/django/main/all-django-dependencies-9bf971702f branch January 1, 2026 20:14

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-django-dependencies group across 1 directory with 6 updates #20

Bump the all-django-dependencies group across 1 directory with 6 updates #20

Uh oh!

dependabot bot commented on behalf of github Dec 3, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump the all-django-dependencies group across 1 directory with 6 updates #20

Bump the all-django-dependencies group across 1 directory with 6 updates #20

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.2.1

What's Changed

New Contributors

[1.2.1] - 2025-10-26

[1.2.0] - 2025-10-26

[1.1.1] - 2025-06-24

Fixed

[1.1.0] - 2025-03-25

[1.0.1] - 2024-01-23

[1.0.0] - 2023-02-24

4.4.1

4.4.0

4.3.0

4.2.0

4.1.0

4.0.0

3.9.1

3.9.0

25.11.0

Highlights

Stable style

Preview style

Configuration

Packaging

Output

Blackd

Integrations

25.11.0

Highlights

Stable style

Preview style

Configuration

Packaging

Output

Blackd

Integrations

pre-commit v4.5.0

Features

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

4.3.0 - 2025-08-09

Features

4.2.0 - 2025-03-18

Features

Uh oh!

dependabot bot commented on behalf of github Jan 1, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 3, 2025 •

edited

Loading