Skip to content

Bump the production-dependencies group across 1 directory with 20 updates#63

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/main/production-dependencies-77a97f368e
Closed

Bump the production-dependencies group across 1 directory with 20 updates#63
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/main/production-dependencies-77a97f368e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Oct 3, 2025 •
edited
Loading

Bumps the production-dependencies group with 20 updates in the / directory:

Package From To
flask 3.1.0 3.1.2
google-cloud-datastore 2.20.2 2.21.0
grpcio 1.71.0 1.75.1
pyyaml 6.0.2 6.0.3
requests 2.32.3 2.32.5
structlog 25.2.0 25.4.0
boto3 1.37.23 1.40.44
humanize 4.12.2 4.13.0
marshmallow 3.26.1 4.0.1
google-cloud-storage 3.1.0 3.4.0
redis 5.2.1 6.4.0
flask-compress 1.17 1.18
uwsgi 2.0.28 2.0.30
email-validator 2.2.0 2.3.0
google-cloud-pubsub 2.29.0 2.31.1
google-cloud-tasks 2.19.2 2.19.3
simplejson 3.20.1 3.20.2
markupsafe 3.0.2 3.0.3
cachetools 5.5.2 6.2.0
gevent 24.11.1 25.9.1

Updates flask from 3.1.0 to 3.1.2

Release notes

Sourced from flask's releases.

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776

3.1.1

This is the Flask 3.1.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.1/ Changes: https://flask.palletsprojects.com/en/stable/changes/#version-3-1-1 Milestone https://github.com/pallets/flask/milestone/36?closed=1

  • Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. GHSA-4grg-w6v8-c28g
  • Fix type hint for cli_runner.invoke. #5645
  • flask --help loads the app and plugins first to make sure all commands are shown. #5673
  • Mark sans-io base class as being able to handle views that return AsyncIterable. This is not accurate for Flask, but makes typing easier for Quart. #5659
Changelog

Sourced from flask's changelog.

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776

Version 3.1.1

Released 2025-05-13

  • Fix signing key selection order when key rotation is enabled via SECRET_KEY_FALLBACKS. :ghsa:4grg-w6v8-c28g
  • Fix type hint for cli_runner.invoke. :issue:5645
  • flask --help loads the app and plugins first to make sure all commands are shown. :issue:5673
  • Mark sans-io base class as being able to handle views that return AsyncIterable. This is not accurate for Flask, but makes typing easier for Quart. :pr:5659
Commits
  • 2c1b30d release version 3.1.2
  • 1292419 Update GitHub Actions workflow for artifact handling (#5795)
  • 4dd52ca Update GitHub Actions workflow for artifact handling
  • 55c6255 update dev dependencies
  • d8259eb use Jinja name consistently
  • 38b4c1e refactor stream_with_context for async views (#5799)
  • 9822a03 refactor stream_with_context for async views
  • 49b7e7b security docs for TRUSTED_HOSTS (#5798)
  • b228ca3 security docs for TRUSTED_HOSTS
  • ff64079 update flask-talisman link
  • Additional commits viewable in compare view

Updates google-cloud-datastore from 2.20.2 to 2.21.0

Release notes

Sourced from google-cloud-datastore's releases.

v2.21.0

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Changelog

Sourced from google-cloud-datastore's changelog.

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Commits
  • 1dafc68 chore(main): release 2.21.0 (#595)
  • d391911 chore(python): remove CONTRIBUTING.rst from templates (#605)
  • 16b9c73 chore(python): fix incorrect import statement in README (#604)
  • ed92e8e fix: backwards-compatibility for previous meaning format (#603)
  • a7df080 chore: Update gapic-generator-python to 1.23.6 (#602)
  • 7c1171b fix: Allow protobuf 6.x (#598)
  • 7be9c4c chore: Update gapic-generator-python to v1.23.2 (#569)
  • 9f83d17 chore(python): conditionally load credentials in .kokoro/build.sh (#594)
  • 14a0f96 chore: update protoplus for python 3.13 (#579)
  • 59bf5f9 chore(python): Update the python version in docs presubmit to use 3.10 (#584)
  • See full diff in compare view

Updates grpcio from 1.71.0 to 1.75.1

Release notes

Sourced from grpcio's releases.

Release v1.75.1

This is release gRPC Core 1.75.1 (gemini).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

  • Release grpcio wheels with Python 3.14 support (#40403)
  • Asyncio: fixes grpc shutdown race condition occurring during python interpreter finalizations. (#40447)
    • This also addresses previously reported issues with empty error message on Python interpreter exit (Error in sys.excepthook:/Original exception was: empty): #36655, #38679, #33342
  • Python 3.14: preserve current behavior when using grpc.aio async methods outside of a running event loop. (#40750)
    • Note: using async methods outside of a running event loop is discouraged by Python, and will be deprecated in future gRPC releases. Please use the asyncio.run() function (or asyncio.Runner for custom loop factories). For interactive mode, use dedicated asyncio REPL: python -m asyncio.

Full Changelog: grpc/grpc@v1.75.0...v1.75.1

Release v1.75.0

This is release 1.75.0 (gemini) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [Security] Cherry Pick Spiffe Verification. (#40515)
  • [Python][Typeguard] Part 3 - Add Typeguard to AIO stack in tests. (#40217)
  • [c-ares] update version to 1.34.5. (#39508)
  • [pick_first] fix bug that caused us to stop attempting to connect. (#40162)

C++

  • [OTel C++] Implement retry metrics. (#39195)

Objective-C

  • Fix data race by adding custom getter for state property with @synchronized locking. (#40146)

Python

  • gRPC Python (grpcio) now depends on typing-extensions~=4.13. (#40137)
  • Update musllinux wheels from musllinux_1_1 to musllinux_1_2. (#40317)
    • Dropping musllinux_1_1 because it reached EOL in November 2024

... (truncated)

Commits
  • 9b63ce0 [Backport][v1.75.x][Fix] PHP macOS build: composer sha sum update, harden ins...
  • 3ab7404 [Release] Bump version to 1.75.1 (on v1.75.x branch) (#40773)
  • 876e1d1 [Backport][v1.75.x][Python] Handle python3.14 get_event_loop behavior changes...
  • 74ec067 [Backport][v1.75.x][Python][Support 3.14] Enable 3.14 supported wheels (#40726)
  • ff24d38 [Backport][v1.75.x][Python] aio: skip grpc/aio shutdown if py interpreter is ...
  • 093085c [build] Fix objc boringssl build backport (#40689)
  • 8c45613 [release] Bump release version on v1.75.x branch to v1.75.0 (#40644)
  • d382f40 [Backport][v1.75.x][Python][Support 3.14] Enable Python 3.14 interpreters for...
  • e6db475 [Backport][v1.75.x][Python] Build manylinux aarch64 without cross-compilation...
  • 77dc9c8 [Backport][v1.75.x][Python] Updating rules_python to 1.5.4 (#40607)
  • Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates requests from 2.32.3 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates structlog from 25.2.0 to 25.4.0

Release notes

Sourced from structlog's releases.

25.4.0

Highlights

The main feature is support for exception groups we stole adapted from Rich, however the main reason for this release at this point in time are backwards-incompatible changes in the upcoming Python 3.13.4. Update structlog before updating Python, if you use structlog.stdlib.filter_by_level().

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Klaviyo (@klaviyo), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Doist (@Doist), nate nowack (@zzstoatzz), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Moving Content AG (@moving-content), ProteinQure (@ProteinQure), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Not to forget 14 more amazing humans who chose to be generous but anonymous!

Full Changelog

Added

  • Support for Python 3.14 and Python 3.13.4.

    Python 3.14 has an backwards-incompatible change to logging.Logger.isEnabledFor() (it now always returns False if a log entry is in flight) that has been backported to 3.13.4 (expected on 2025-06-03). It mainly affects structlog.stdlib.filter_by_level(). #723

  • structlog.tracebacks now handles exception groups. structlog.tracebacks.Stack has two new fields, is_group: bool and exceptions: list[Trace]. This works similarly to what Rich v14.0.0 does. #720

Fixed

  • structlog.processors.ExceptionPrettyPrinter now respects the exception_formatter arguments instead of always using the default formatter. #724

This release contains contributions from @​anujdas, @​hynek, and @​sscherfke.

Artifact Attestations

You can verify this release's artifact attestions using GitHub's CLI tool by downloading the sdist and wheel from PyPI and running:

$ gh attestation verify --owner hynek structlog-25.4.0.tar.gz
</tr></table>

... (truncated)

Changelog

Sourced from structlog's changelog.

25.4.0 - 2025-06-02

Added

  • Support for Python 3.14 and Python 3.13.4.

    Python 3.14 has an backwards-incompatible change to logging.Logger.isEnabledFor() (it now always returns False if a log entry is in flight) that has been backported to 3.13.4 (expected on 2025-06-03). It mainly affects structlog.stdlib.filter_by_level(). #723

  • structlog.tracebacks now handles exception groups. structlog.tracebacks.Stack has two new fields, is_group: bool and exceptions: list[Trace]. This works similarly to what Rich v14.0.0 does. #720

Fixed

  • structlog.processors.ExceptionPrettyPrinter now respects the exception_formatter arguments instead of always using the default formatter. #724

25.3.0 - 2025-04-25

Fixed

  • structlog.processors.TimeStamper now again uses timestamps using UTC for custom format strings when utc=True. #713
Commits

Updates boto3 from 1.37.23 to 1.40.44

Commits
  • 61ee934 Merge branch 'release-1.40.44'
  • 01553e7 Bumping version to 1.40.44
  • 1b47e9e Add changelog entries from botocore
  • a295071 Merge branch 'release-1.40.43'
  • a349ff9 Merge branch 'release-1.40.43' into develop
  • 86bb6e1 Bumping version to 1.40.43
  • 9f52c6f Add changelog entries from botocore
  • fe09306 Merge branch 'release-1.40.42'
  • 3d3a44d Merge branch 'release-1.40.42' into develop
  • d433126 Bumping version to 1.40.42
  • Additional commits viewable in compare view

Updates humanize from 4.12.2 to 4.13.0

Release notes

Sourced from humanize's releases.

4.13.0

Changed

Fixed

4.12.3

Fixed

Commits

Updates marshmallow from 3.26.1 to 4.0.1

Changelog

Sourced from marshmallow's changelog.

4.0.1 (2025-08-28) ++++++++++++++++++

Bug fixes:

  • Fix wildcard import of from marshmallow import * (:pr:2823). Thanks :user:Florian-Laport for the PR.

4.0.0 (2025-04-16)

See :ref:upgrading_4_0 for a guide on updating your code.

Features:

  • Typing: Add types to all Field <marshmallow.fields.Field> constructor kwargs (:issue:2285). Thanks :user:navignaw for the suggestion.
  • DateTime <marshmallow.fields.DateTime>, Date <marshmallow.fields.Date>, Time <marshmallow.fields.Time>, TimeDelta <marshmallow.fields.TimeDelta>, and Enum <marshmallow.fields.Enum> accept their internal value types as valid input (:issue:1415). Thanks :user:bitdancer for the suggestion.
  • @validates <marshmallow.validates> accepts multiple field names (:issue:1960). Backwards-incompatible: Decorated methods now receive data_key as a keyword argument. Thanks :user:dpriskorn for the suggestion and :user:dharani7998 for the PR.

Other changes:

  • Typing: Field <marshmallow.fields.Field> is now a generic type with a type argument for the internal value type.

  • marshmallow.fields.UUID no longer subclasses marshmallow.fields.String.

  • marshmallow.Schema.load no longer silently fails to call schema validators when a generator is passed (:issue:1898). The typing of data is also updated to be more accurate. Thanks :user:ziplokk1 for reporting.

  • Backwards-incompatible: Use datetime.date.fromisoformat, datetime.time.fromisoformat, and datetime.datetime.fromisoformat from the standard library to deserialize dates, times and datetimes (:pr:2078). As a consequence of this change:

    • Time with time offsets are now supported.
    • YYYY-MM-DD is now accepted as a datetime and deserialized as naive 00:00 AM.
    • from_iso_date, from_iso_time and from_iso_datetime are removed from marshmallow.utils.

  • Remove isoformat, to_iso_time and to_iso_datetime from marshmallow.utils (:pr:2766).

  • Remove from_rfc, and rfcformat from marshmallow.utils (:pr:2767).

  • Remove is_keyed_tuple from marshmallow.utils (:pr:2768).

  • Remove get_fixed_timezone from marshmallow.utils (:pr:2773).

  • Backwards-incompatible: marshmallow.fields.Boolean no longer serializes non-boolean values (:pr:2725).

  • Backwards-incompatible: Rename schema parameter to parent in marshmallow.fields.Field._bind_to_schema (:issue:1360).

  • Backwards-incompatible: Rename pass_many parameter to pass_collection in pre/post processing methods (:issue:1369).

  • Backwards-incompatible: marshmallow.fields.TimeDelta no longer truncates float values when deserializing (:pr:2654). This allows microseconds to be preserved, e.g.

.. code-block:: python

... (truncated)

Commits

Updates google-cloud-storage from 3.1.0 to 3.4.0

Release notes

Sourced from google-cloud-storage's releases.

v3.4.0

3.4.0 (2025-09-15)

Features

Bug Fixes

  • GAPIC generation failed with 'Directory not empty' (#1542) (c80d820)

v3.3.1

3.3.1 (2025-08-25)

Bug Fixes

  • Provide option to user to set entire object checksum at "initiate a resumable upload session" and send the same.(#1525) (a8109e0)
  • Send part's checksum for XML MPU part upload (#1529) (2ad77c7)

v3.3.0

3.3.0 (2025-08-05)

Features

Bug Fixes

Documentation

  • Update the documentation of move_blob function (#1507) (72252e9)

v3.2.0

3.2.0 (2025-07-04)

Features

v3.1.1

... (truncated)

Changelog

Sourced from google-cloud-storage's changelog.

3.4.0 (2025-09-15)

Features

Bug Fixes

  • GAPIC generation failed with 'Directory not empty' (#1542) (c80d820)

3.3.1 (2025-08-25)

Bug Fixes

  • Provide option to user to set entire object checksum at "initiate a resumable upload session" and send the same (#1525) (a8109e0)
  • Send part's checksum for XML MPU part upload (#1529) (2ad77c7)

3.3.0 (2025-08-05)

Features

Bug Fixes

Documentation

  • Update the documentation of move_blob function (#1507) (72252e9)

3.2.0 (2025-07-04)

Features

3.1.1 (2025-06-13)

Bug Fixes

... (truncated)

Commits

Updates redis from 5.2.1 to 6.4.0

Release notes

Sourced from redis's releases.

6.4.0

Changes

🚀 New Features

  • Added epsilon property to the vsim command (#3723)

🧰 Maintenance

  • Updating the latest Redis image for github pipeline testing (#3726)

We'd like to thank all the contributors who worked on this release! @​htemelski-redis @​elena-kolevska @​petyaslavova @​vladvildanov

6.3.0

Changes

🚀 New Features

  • Add support for new BITOP operations: DIFF, DIFF1, ANDOR, ONE (#3690)
  • Support new VAMANA vector index type (#3702)
  • Add new stream commands (#3711)
  • add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)

🐛 Bug Fixes

  • Fixing sentinel command execution to allow returning of actual responses when meaningful - behaviour controlled by 'return_responses' argument. (#3191)
  • Annotate deprecated_args decorator to preserve wrapped function type signature (#3701)
  • Fix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)
  • add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)
  • SentinelManagedConnection searches for new master upon connection failure (#3560) (#3601)

🧰 Maintenance

  • fix: avoid instantiating a connection on repr_ (#3653)
  • Fixing the return type hint for the transaction method in the standalone client. (#3660)
  • Bump rojopolis/spellcheck-github-actions from 0.48.0 to 0.49.0 (#3665)
  • Dropping integration tests with Redis 6.2 from pipeline actions. (#3659)
  • Remove deprecated arg from call to ClusterPipeline (#3670)
  • TransactionStrategy reset: UNWATCH only when status is watching (#3671)
  • KeyT for set operations (#3190)
  • Removing references to old docs site 'https://redis-py.readthedocs.io/' replaced by 'https://redis.readthedocs.io/' (#3674)
  • Removing unnecessary check for tests using AsyncMock (#3432)
  • Updating test images for github pipeline execution (#3678)
  • Updating the latest Redis image for pipeline testing (#3695)
  • Bump rojopolis/spellcheck-github-actions from 0.49.0 to 0.51.0 (#3689)
  • DOC-5225 testable probabilistic dt examples (#3691)
  • Update README.md (#3699)
  • Convert the value to int type only if it exists in CLIENT INFO (#3688)
  • Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)
  • DOC-5424 time series examples (#3705)
  • Adding information in connection pool class doc string for available SSLConnection class, that can be used for SSL connections (#3710)

... (truncated)

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 3, 2025
@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-77a97f368e branch from d421a26 to d83bbc4 Compare December 12, 2025 08:17
@dependabot
Bump the production-dependencies group across 1 directory with 20 upd…
d5413d0 
…ates

Bumps the production-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flask](https://github.com/pallets/flask) | `3.1.0` | `3.1.2` |
| [google-cloud-datastore](https://github.com/googleapis/python-datastore) | `2.20.2` | `2.21.0` |
| [grpcio](https://github.com/grpc/grpc) | `1.71.0` | `1.75.1` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.5` |
| [structlog](https://github.com/hynek/structlog) | `25.2.0` | `25.4.0` |
| [boto3](https://github.com/boto/boto3) | `1.37.23` | `1.40.44` |
| [humanize](https://github.com/python-humanize/humanize) | `4.12.2` | `4.13.0` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.26.1` | `4.0.1` |
| [google-cloud-storage](https://github.com/googleapis/python-storage) | `3.1.0` | `3.4.0` |
| [redis](https://github.com/redis/redis-py) | `5.2.1` | `6.4.0` |
| [flask-compress](https://github.com/colour-science/flask-compress) | `1.17` | `1.18` |
| [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.28` | `2.0.30` |
| [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` |
| [google-cloud-pubsub](https://github.com/googleapis/python-pubsub) | `2.29.0` | `2.31.1` |
| [google-cloud-tasks](https://github.com/googleapis/google-cloud-python) | `2.19.2` | `2.19.3` |
| [simplejson](https://github.com/simplejson/simplejson) | `3.20.1` | `3.20.2` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [cachetools](https://github.com/tkem/cachetools) | `5.5.2` | `6.2.0` |
| [gevent](https://github.com/gevent/gevent) | `24.11.1` | `25.9.1` |



Updates `flask` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.0...3.1.2)

Updates `google-cloud-datastore` from 2.20.2 to 2.21.0
- [Release notes](https://github.com/googleapis/python-datastore/releases)
- [Changelog](https://github.com/googleapis/python-datastore/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-datastore@v2.20.2...v2.21.0)

Updates `grpcio` from 1.71.0 to 1.75.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md)
- [Commits](grpc/grpc@v1.71.0...v1.75.1)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `requests` from 2.32.3 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.5)

Updates `structlog` from 25.2.0 to 25.4.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.2.0...25.4.0)

Updates `boto3` from 1.37.23 to 1.40.44
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.37.23...1.40.44)

Updates `humanize` from 4.12.2 to 4.13.0
- [Release notes](https://github.com/python-humanize/humanize/releases)
- [Commits](python-humanize/humanize@4.12.2...4.13.0)

Updates `marshmallow` from 3.26.1 to 4.0.1
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...4.0.1)

Updates `google-cloud-storage` from 3.1.0 to 3.4.0
- [Release notes](https://github.com/googleapis/python-storage/releases)
- [Changelog](https://github.com/googleapis/python-storage/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-storage@v3.1.0...v3.4.0)

Updates `redis` from 5.2.1 to 6.4.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.2.1...v6.4.0)

Updates `flask-compress` from 1.17 to 1.18
- [Changelog](https://github.com/colour-science/flask-compress/blob/master/CHANGELOG.md)
- [Commits](colour-science/flask-compress@v1.17...v1.18)

Updates `uwsgi` from 2.0.28 to 2.0.30

Updates `email-validator` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/JoshData/python-email-validator/releases)
- [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md)
- [Commits](JoshData/python-email-validator@v2.2.0...v2.3.0)

Updates `google-cloud-pubsub` from 2.29.0 to 2.31.1
- [Release notes](https://github.com/googleapis/python-pubsub/releases)
- [Changelog](https://github.com/googleapis/python-pubsub/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-pubsub@v2.29.0...v2.31.1)

Updates `google-cloud-tasks` from 2.19.2 to 2.19.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-tasks-v2.19.2...google-cloud-tasks-v2.19.3)

Updates `simplejson` from 3.20.1 to 3.20.2
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](simplejson/simplejson@v3.20.1...v3.20.2)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `cachetools` from 5.5.2 to 6.2.0
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v5.5.2...v6.2.0)

Updates `gevent` from 24.11.1 to 25.9.1
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@24.11.1...25.9.1)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: google-cloud-datastore
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: grpcio
  dependency-version: 1.75.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: structlog
  dependency-version: 25.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: boto3
  dependency-version: 1.40.44
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: humanize
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marshmallow
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: google-cloud-storage
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: redis
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: flask-compress
  dependency-version: '1.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: uwsgi
  dependency-version: 2.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: email-validator
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-pubsub
  dependency-version: 2.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-tasks
  dependency-version: 2.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: simplejson
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: cachetools
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: gevent
  dependency-version: 25.9.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-77a97f368e branch from d83bbc4 to d5413d0 Compare January 9, 2026 08:28
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Jan 23, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 23, 2026
@dependabot dependabot bot deleted the dependabot/pip/main/production-dependencies-77a97f368e branch January 23, 2026 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants