Skip to content

deps: bump the prod-deps group across 1 directory with 11 updates #5062

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

deps: bump the prod-deps group across 1 directory with 11 updates #5062

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 25, 2025 •
edited
Loading

Bumps the prod-deps group with 11 updates in the / directory:

Package From To
djangorestframework 3.16.0 3.16.1
django-post-office 3.10.0 3.10.1
requests 2.32.4 2.32.5
usaddress 0.5.15 0.5.16
boto3 1.39.14 1.40.16
coverage 7.10.1 7.10.5
tox 4.28.3 4.28.4
faker 37.4.2 37.5.3
pre-commit 4.2.0 4.3.0
docutils 0.21.2 0.22
hypothesis 6.136.5 6.138.3

Updates djangorestframework from 3.16.0 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

  • Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

  • Fix regression in unique_together validation with SerializerMethodField in #9712
  • Fix UniqueTogetherValidator to handle fields with source attribute in #9688
  • Drop HTML line breaks on long headers in browsable API in #9438

Translations

  • Add Kazakh locale support in #9713
  • Update translations for Korean translations in #9571
  • Update German translations in #9676
  • Update Chinese translations in #9675
  • Update Arabic translations-sal in #9595
  • Update Persian translations in #9576
  • Update Spanish translations in #9701
  • Update Turkish Translations in #9749
  • Fix some typos in Brazilian Portuguese translations in #9673

Documentation

  • Removed reference to GitHub Issues and Discussions in #9660
  • Add drf-restwind and update outdated images in browsable-api.md in #9680
  • Updated funding page to represent current scope in #9686
  • Fix broken Heroku JSON Schema link in #9693
  • Update Django documentation links to use stable version in #9698
  • Expand docs on unique constraints cause 'required=True' in #9725
  • Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734
  • Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

  • Update GitHub Actions to use Ubuntu 24.04 for testing in #9677
  • Update test matrix to use Django 5.2 stable version in #9679
  • Add pyupgrade to pre-commit hooks in #9682
  • Fix test with Django 5 when pytz is available in #9715

New Contributors

... (truncated)

Commits
  • de018df Prepare 3.16.1 release (#9752)
  • a7d050f Turkish Translation updates (#9749)
  • 853969c Fix test with Django 5 when pytz is available (#9715)
  • 2ae8c11 Add note to tutorial about required request in serializer context when using ...
  • 70e54f4 Revert docs back to djangorestframework-guardian (#9734)
  • 3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
  • 4bb46c2 Add Kazakh(kk) locale support (#9713)
  • e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
  • 33d59fe Update Spanish translations (#9701)
  • c0202a0 Update Django documentation links to use stable version (#9698)
  • Additional commits viewable in compare view

Updates django-post-office from 3.10.0 to 3.10.1

Release notes

Sourced from django-post-office's releases.

v3.10.1

  • Fixed an issue where email.last_updated is not updated during email delivery. Thanks @​marsha97!
Changelog

Sourced from django-post-office's changelog.

Version 3.10.1 (2025-08-04)

  • Fixed an issue where email.last_updated is not updated during email delivery. Thanks @​marsha97!
Commits

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates usaddress from 0.5.15 to 0.5.16

Commits

Updates boto3 from 1.39.14 to 1.40.16

Commits
  • fe7457e Merge branch 'release-1.40.16'
  • 3930259 Bumping version to 1.40.16
  • 0954e8f Add changelog entries from botocore
  • 8836e33 Merge branch 'release-1.40.15'
  • e1dfc5f Merge branch 'release-1.40.15' into develop
  • 14dbc58 Bumping version to 1.40.15
  • 679ec9a Add changelog entries from botocore
  • 9e5b34a Merge branch 'release-1.40.14'
  • e493970 Merge branch 'release-1.40.14' into develop
  • 07e80dd Bumping version to 1.40.14
  • Additional commits viewable in compare view

Updates coverage from 7.10.1 to 7.10.5

Changelog

Sourced from coverage's changelog.

Version 7.10.5 — 2025-08-23

  • Big speed improvements for coverage combine: it's now about twice as fast! Huge thanks to Alex Gaynor for pull requests 2032 <pull 2032_>, 2033 <pull 2033_>, and 2034 <pull 2034_>_.

.. _pull 2032: nedbat/coveragepy#2032 .. _pull 2033: nedbat/coveragepy#2033 .. _pull 2034: nedbat/coveragepy#2034

.. _changes_7-10-4:

Version 7.10.4 — 2025-08-16

  • Added patch = fork for times when the built-in forking support is insufficient.

  • Fix: patch = execv also inherits the entire coverage configuration now.

.. _changes_7-10-3:

Version 7.10.3 — 2025-08-10

  • Fixes for patch = subprocess:

    • If subprocesses spawned yet more subprocesses simultaneously, some coverage could be missed. This is now fixed, closing issue 2024_.

    • If subprocesses were created in other directories, their data files were stranded there and not combined into the totals, as described in issue 2025_. This is now fixed.

    • On Windows (or maybe only some Windows?) the patch would fail with a ModuleNotFound error trying to import coverage. This is now fixed, closing issue 2022_.

    • Originally only options set in the coverage configuration file would apply to subprocesses. Options set on the coverage run command line (such as --branch) wouldn't be communicated to the subprocesses. This could lead to combining failures, as described in issue 2021_. Now the entire configuration is used in subprocesses, regardless of its origin.

    • Added debug=patch to help diagnose problems.

  • Fix: really close all SQLite databases, even in-memory ones. Closes `issue

... (truncated)

Commits
  • 810abeb chore: make upgrade
  • 3c8f1b5 build: use --universal to keep platform conditions in .pip files
  • 107ae05 docs: sample HTML for 7.10.5
  • b5bc6d4 docs: prep for 7.10.5
  • a5c18cc style: auto-generated changes shouldn't trigger ruff re-formatting
  • 1f9f840 build: tooling for ruff formatting
  • 9ee5b3e chore: make upgrade
  • bfeb2ae style: fix things so pylint is happy with ruff
  • 82467f7 chore: ruff format .
  • 0a7b733 refactor: remove unused things from lab/
  • Additional commits viewable in compare view

Updates tox from 4.28.3 to 4.28.4

Release notes

Sourced from tox's releases.

4.28.4

What's Changed

New Contributors

Full Changelog: tox-dev/tox@4.28.3...4.28.4

Changelog

Sourced from tox's changelog.

v4.28.4 (2025-07-31)

Features - 4.28.4

- Pass ssh-agent variables ``SSH_AGENT_PID`` and ``SSH_AUTH_SOCK`` in ``pass_env`` by default.
  - by :user:`daniilgankov` (:issue:`3572`)
Commits

Updates faker from 37.4.2 to 37.5.3

Release notes

Sourced from faker's releases.

Release v37.5.3

See CHANGELOG.md.

Release v37.5.2

See CHANGELOG.md.

Release v37.5.1

See CHANGELOG.md.

Release v37.5.0

See CHANGELOG.md.

Release v37.4.3

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v37.5.3 - 2025-07-30

  • Allow Decimal type for min_value and max_value in pydecimal. Thanks @​sshishov.

v37.5.2 - 2025-07-30

  • Fix Turkish Republic National Number (TCKN) provider. Thanks @​fleizean.

v37.5.1 - 2025-07-30

  • Fix unnatural Korean company names in ko_KR locale. Thanks @​r-4bb1t.

v37.5.0 - 2025-07-30

  • Add Spanish lorem provider for es_ES, es_AR and es_MX. Thanks @​Pandede.

v37.4.3 - 2025-07-30

  • Fix male names in sv_SE locale. Thanks @​peterk.
Commits

Updates pre-commit from 4.2.0 to 4.3.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.3.0

Features

Changelog

Sourced from pre-commit's changelog.

4.3.0 - 2025-08-09

Features

Commits
  • b74a22d v4.3.0
  • cc899de Merge pull request #3507 from bc-lee/dart-fix
  • 2a0bcea Downgrade Dart SDK version installed in the CI
  • f1cc7a4 Make Dart pre-commit hook compatible with the latest Dart SDKs
  • 72a3b71 Merge pull request #3504 from pre-commit/pre-commit-ci-update-config
  • c8925a4 [pre-commit.ci] pre-commit autoupdate
  • a5fe6c5 Merge pull request #3496 from ericphanson/eph/jl-startup
  • 6f1f433 Julia language: skip startup.jl file
  • c681721 Merge pull request #3499 from pre-commit/pre-commit-ci-update-config
  • 4fd4537 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates docutils from 0.21.2 to 0.22

Commits

Updates hypothesis from 6.136.5 to 6.138.3

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.138.3

This patch slightly improves the cache-hit rate for "dictionaries()" and certain unique "lists()".

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.138.2

The type annotations for "register_type_strategy()" now indicate that it accepts registering types created with "typing.TypeAliasType" (aka "type MyType = int").

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.138.1

Internal refactoring and cleanup. As a result, "hypothesis[black]" now requires "black>=20.8b0" instead of the previous "black>=19.10b0".

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.138.0

On Python 3.14, "memoryview" is newly generic. This release adds the ability for "from_type()" to resolve generic "memoryview" types on 3.14, like "st.from_type(memoryview[CustomBufferClass])" . "CustomBufferClass" must implement "buffer", as expected by "memoryview".

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.137.3

This patch makes the stringification of lambdas, and as a result certain automatic filter rewriting operations, more robust. This fixes issue #4498, where a lambda was mistakenly identified as the identity operator due to "inspect.getsource()" only returning the first line of the lambda definition.

As a result, the "repr" of strategies filtered or mapped by lambda functions may change slightly.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.137.2

Add support for Python 3.14, which is currently in release candidate 1.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.137.1

Fixes a bug with solver-based alternative backends (like crosshair) where symbolic values passed to "event()" would not be realized to concrete values at the end of the test case.

... (truncated)

Commits
  • 4b8a6b1 Bump hypothesis-python version to 6.138.3 and update changelog
  • 99328b4 Merge pull request #4513 from HypothesisWorks/create-pull-request/patch
  • 9cc6ee8 update types tests
  • d82d084 improve unique-lists cache rate
  • 76e9439 annotate types for editor
  • 5aab770 update tests for new libs
  • 8378e3f Update pinned dependencies
  • c17c6b9 Bump hypothesis-python version to 6.138.2 and update changelog
  • af6a462 Merge pull request #4511 from tybug/registertypestrategy-typing
  • 2bedfec nocover
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps: bump the prod-deps group across 1 directory with 11 updates
1334dd6 
Bumps the prod-deps group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.16.0` | `3.16.1` |
| [django-post-office](https://github.com/ui/django-post_office) | `3.10.0` | `3.10.1` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [usaddress](https://github.com/datamade/usaddress) | `0.5.15` | `0.5.16` |
| [boto3](https://github.com/boto/boto3) | `1.39.14` | `1.40.16` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.10.1` | `7.10.5` |
| [tox](https://github.com/tox-dev/tox) | `4.28.3` | `4.28.4` |
| [faker](https://github.com/joke2k/faker) | `37.4.2` | `37.5.3` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.3.0` |
| [docutils](https://github.com/rtfd/recommonmark) | `0.21.2` | `0.22` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.136.5` | `6.138.3` |



Updates `djangorestframework` from 3.16.0 to 3.16.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.16.0...3.16.1)

Updates `django-post-office` from 3.10.0 to 3.10.1
- [Release notes](https://github.com/ui/django-post_office/releases)
- [Changelog](https://github.com/ui/django-post_office/blob/master/CHANGELOG.md)
- [Commits](ui/django-post_office@v3.10...v3.10.1)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `usaddress` from 0.5.15 to 0.5.16
- [Commits](datamade/usaddress@v0.5.15...v0.5.16)

Updates `boto3` from 1.39.14 to 1.40.16
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.39.14...1.40.16)

Updates `coverage` from 7.10.1 to 7.10.5
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.10.1...7.10.5)

Updates `tox` from 4.28.3 to 4.28.4
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.28.3...4.28.4)

Updates `faker` from 37.4.2 to 37.5.3
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v37.4.2...v37.5.3)

Updates `pre-commit` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.3.0)

Updates `docutils` from 0.21.2 to 0.22
- [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rtfd/recommonmark/commits)

Updates `hypothesis` from 6.136.5 to 6.138.3
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.136.5...hypothesis-python-6.138.3)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-version: 3.16.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: django-post-office
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: usaddress
  dependency-version: 0.5.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: boto3
  dependency-version: 1.40.16
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: coverage
  dependency-version: 7.10.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: tox
  dependency-version: 4.28.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: faker
  dependency-version: 37.5.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: pre-commit
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: docutils
  dependency-version: '0.22'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: hypothesis
  dependency-version: 6.138.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the Maintenance Tag as maintenance if the issue relates to general cleanup, maintenance, etc. Do not delete label. label Aug 25, 2025
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 8, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 8, 2025
@dependabot dependabot bot deleted the dependabot/pip/prod-deps-24d820d26b branch September 8, 2025 05:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

Maintenance Tag as maintenance if the issue relates to general cleanup, maintenance, etc. Do not delete label.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants