build: Bump the python-dependencies group with 23 updates #641

dependabot · 2025-12-01T02:09:04Z

Bumps the python-dependencies group with 23 updates:

Package	From	To
django	`5.2.7`	`5.2.8`
django-allauth	`65.9.0`	`65.13.1`
django-components	`0.141.2`	`0.143.2`
django-htmx	`1.15.0`	`1.27.0`
django-taggit	`5.0.1`	`6.1.0`
django-tailwind	`4.0.1`	`4.4.1`
djangorestframework	`3.15.2`	`3.16.1`
bleach	`6.2.0`	`6.3.0`
markdown	`3.4.4`	`3.10`
psycopg2-binary	`2.9.10`	`2.9.11`
pydantic	`2.11.7`	`2.12.5`
python-akismet	`0.4.2`	`0.4.3`
python-dotenv	`1.1.1`	`1.2.1`
requests	`2.32.4`	`2.32.5`
requests-oauthlib	`1.3.1`	`2.0.0`
six	`1.15.0`	`1.17.0`
whitenoise	`6.1.0`	`6.11.0`
certifi	`2025.10.5`	`2025.11.12`
gunicorn	`20.1.0`	`23.0.0`
sentry-sdk	`1.5.12`	`2.46.0`
ipython	`7.33.0`	`9.7.0`
ruff	`0.14.3`	`0.14.7`
pre-commit	`2.19.0`	`4.5.0`

Updates django from 5.2.7 to 5.2.8

Commits

47fe39a [5.2.x] Bumped version for 5.2.8 release.
ac9fcf6 [5.2.x] Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on ...
6703f36 [5.2.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via th...
4f5d904 [5.2.x] Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedire...
cbdf128 [5.2.x] Fixed #36704 -- Fixed system check error for proxy model with a compo...
6775888 [5.2.x] Fixed #36696 -- Fixed NameError when inspecting functions with deferr...
d5dfffa [5.2.x] Added stub release notes and release date for 5.2.8, 5.1.14, and 4.2.26.
368f955 [5.2.x] Fixed #36681 -- Removed English pluralization bias from example in do...
71267c9 [5.2.x] Fixed #35095 -- Clarified Swiss number formatting in docs/topics/i18n...
9b37bd5 [5.2.x] Made RemoteTestResultTest.test_pickle_errors_detection() compatible w...
Additional commits viewable in compare view

Updates django-allauth from 65.9.0 to 65.13.1

Commits

See full diff in compare view

Updates django-components from 0.141.2 to 0.143.2

Commits

See full diff in compare view

Updates django-htmx from 1.15.0 to 1.27.0

Changelog

Sourced from django-htmx's changelog.

1.27.0 (2025-11-28)

Drop Python 3.9 support.

Fix CSP nonce support in the template tags when they’re the first use of csp_nonce.

PR [#572](https://github.com/adamchainz/django-htmx/issues/572) <https://github.com/adamchainz/django-htmx/pull/572>__.

1.26.0 (2025-09-22)

The :ref:django-htmx-extension-script now displays responses with status codes 400 (bad request) and 403 (forbidden), like the existing support for codes 404 and 500. This change can help you debug

Issue [#521](https://github.com/adamchainz/django-htmx/issues/521) <https://github.com/adamchainz/django-htmx/issues/521>__.

Add :func:.reselect to set the HX-Reselect header.

Issue [#559](https://github.com/adamchainz/django-htmx/issues/559) <https://github.com/adamchainz/django-htmx/issues/559>__.

Improve typing of :func:.reswap to only accept valid HTMX swap methods.

Thanks to Thibaut Decombe in PR [#555](https://github.com/adamchainz/django-htmx/issues/555) <https://github.com/adamchainz/django-htmx/pull/555>__.

Prevent :class:.HttpResponseClientRedirect from being called with preserve_request=True, which was added to redirect responses <https://docs.djangoproject.com/en/stable/ref/request-response/#django.http.HttpResponseRedirect>__ in Django 5.2. It doesn’t make sense in the context of a client-side redirect, which always returns a status code of 200, and would crash anyway.

Issue [#517](https://github.com/adamchainz/django-htmx/issues/517) <https://github.com/adamchainz/django-htmx/issues/517>__.

1.25.0 (2025-09-18)

Support Django 6.0.

Add Content Security Policy (CSP) nonce support to the template tags.

Thanks to waifudegen for the report in Issue [#542](https://github.com/adamchainz/django-htmx/issues/542) <https://github.com/adamchainz/django-htmx/issues/542>__.

1.24.1 (2025-09-11)

Upgrade the vendored htmx to version 2.0.7 <https://github.com/bigskysoftware/htmx/blob/master/CHANGELOG.md#207---2025-09-08>__.

1.24.0 (2025-09-10)

Support Python 3.14.

Fix crashes in the extension script for custom error pages.

... (truncated)

Commits

7416a03 Version 1.27.0
117418c Fix CSP nonce first use (#572)
e4b01b6 Build documentation on Python 3.14 (#571)
24e4da2 Drop Python 3.9 support (#570)
9cafb80 Bump the github-actions group with 3 updates (#567)
2ad42aa [pre-commit.ci] pre-commit autoupdate (#568)
34cc611 Fix broken links
bca6e75 [pre-commit.ci] pre-commit autoupdate (#566)
714046e Bump actions/setup-python from 5 to 6 in the github-actions group (#565)
5ac0abc Improve CSP nonce docs
Additional commits viewable in compare view

Updates django-taggit from 5.0.1 to 6.1.0

Changelog

Sourced from django-taggit's changelog.

6.1.0 (2024-09-29)
* Add a management command (``remove_orphaned_tags``) to remove orphaned tags
* Add a fallback for when multiple tags are found in case-insensitivity mode (the earliest by PK is returned)
* Add a ``deduplicate_tags`` management command to remove duplicate tags based on case insensitivity. This feature is enabled when ``TAGGIT_CASE_INSENSITIVE`` is set to ``True`` in the settings.
* We no longer package tests, docs, or the sample taggit app into the distributed wheels. While we believe this shouldn't affect anything for users of the library, please tell us if you find yourself hitting issues (like around import errors)
* Fix missing template file for admin merge tag action
6.0.0 (2024-07-27)
By default, order tag items on instances by the primary key. This generally means that they will be ordered by "creation date" for the tag item. The previous behavior for this was that by default tag items were not ordered. In practice tag items often end up ordered by creation date anyways, just due to how databases work, but this was not a guarantee. If you wish to have the old behavior, set ordering=[] to your TaggableManager instance. We believe that this should not cause a noticable performance change, and the number of queries involved should not change.

Added the ability to merge tags via the admin

Add Django 5.0 support (no code changes were needed, but now we test this release).

Add Python 3.12 support

Add support for dumpdata/loaddata using natural keys

Commits

4e5f7de Merge pull request #922 from jazzband/6-1-0
1535f06 Fix missing template file in packaging
4f3ec30 Merge pull request #921 from jazzband/prepare-6-1-0
0436236 Prepare django-taggit 6.1.0
0cd1f24 Merge pull request #914 from fazeelghafoor/feat/resolve-duplicate-tags
0e3c865 Merge remote-tracking branch 'origin/master' into feat/resolve-duplicate-tags
f4effb2 Remove unused import
e851a84 Simplify deduplication management command
0e10963 sort imports
150c025 Make sure ordering is always by pk for handling multiples
Additional commits viewable in compare view

Updates django-tailwind from 4.0.1 to 4.4.1

Changelog

Sourced from django-tailwind's changelog.

4.4.1

Fixes an issue when raw_input is used instead of input.

4.4.0

Standalone Tailwind CSS binary support via pytailwindcss;

TAILWIND_USE_STANDALONE_BINARY setting to force standalone binary mode;

TAILWIND_STANDALONE_BINARY_VERSION setting to control standalone binary version (default: v4.1.16);

Automatic detection of standalone vs npm-based installations (checks for package.json presence);

app_template_v4_standalone/ cookiecutter template for standalone binary apps;

Updates documentation;

Node.js is now optional when using standalone binary mode;

4.3.0

Replaces Poetry with UV for dependency management;

Fixes extract_host_and_port to support standalone port numbers (e.g., python manage.py runserver 55555);

Updates tox configuration to use dev dependency group;

Removes Docker instructions from documentation;

4.2.0

Adds new manage.py tailwind plugin_install command to manage Tailwind CSS plugins;

Adds optional daisyUI support;

4.1.0

Adds new dev command that starts Django development server and Tailwind watcher simultaneously;

Automatically installs Honcho if not available when using dev command;

Creates Procfile.tailwind for customizable process management;

Updates documentation with dev command usage;

4.0.0

Adds support for Tailwind CSS v4+;

Sets Tailwind CSS v4+ as the default version, with the option to use v3.x via --tailwind-version 3 flag;

3.9.1

Brings Python 3.10 support back;

Adds Python 3.13 support;

3.9.0

Adds --no-package-lock option to python manage.py tailwind install command to optionally skip creating package-lock.json file;

Upgrades Tailwind CSS to v3.4.17;

Drops support for Python 3.10;

Drops support for Django 3.2;

... (truncated)

Commits

4b0e428 Releases 4.4.1
46fb9a9 Merge pull request #241 from evangeloskp/fix-distlib-import-error
34150e8 Fix ImportError by replacing distlib.compat.raw_input with built-in input()
91c509a Update CI badge in README.md
4ac8150 Releases 4.4.0
529fad2 Adds Standalone CLI support: Use Django-Tailwind CSS without Node.js
e772a8b Fixes github action
4ca191c Merge pull request #237 from evilmonkey19/patch-1
ce3f776 Updates uv.lock
6efd88c Releases v4.3.1
Additional commits viewable in compare view

Updates djangorestframework from 3.15.2 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

Fix regression in unique_together validation with SerializerMethodField in #9712

Fix UniqueTogetherValidator to handle fields with source attribute in #9688

Drop HTML line breaks on long headers in browsable API in #9438

Translations

Add Kazakh locale support in #9713

Update translations for Korean translations in #9571

Update German translations in #9676

Update Chinese translations in #9675

Update Arabic translations-sal in #9595

Update Persian translations in #9576

Update Spanish translations in #9701

Update Turkish Translations in #9749

Fix some typos in Brazilian Portuguese translations in #9673

Documentation

Removed reference to GitHub Issues and Discussions in #9660

Add drf-restwind and update outdated images in browsable-api.md in #9680

Updated funding page to represent current scope in #9686

Fix broken Heroku JSON Schema link in #9693

Update Django documentation links to use stable version in #9698

Expand docs on unique constraints cause 'required=True' in #9725

Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734

Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

Update GitHub Actions to use Ubuntu 24.04 for testing in #9677

Update test matrix to use Django 5.2 stable version in #9679

Add pyupgrade to pre-commit hooks in #9682

Fix test with Django 5 when pytz is available in #9715

New Contributors

@araggohnxd made their first contribution in #9673

@mbeijen made their first contribution in #9660

@stefan6419846 made their first contribution in #9676

@ren000thomas made their first contribution in #9675

@ulgens made their first contribution in #9682

... (truncated)

Commits

de018df Prepare 3.16.1 release (#9752)
a7d050f Turkish Translation updates (#9749)
853969c Fix test with Django 5 when pytz is available (#9715)
2ae8c11 Add note to tutorial about required request in serializer context when using ...
70e54f4 Revert docs back to djangorestframework-guardian (#9734)
3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
4bb46c2 Add Kazakh(kk) locale support (#9713)
e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
33d59fe Update Spanish translations (#9701)
c0202a0 Update Django documentation links to use stable version (#9698)
Additional commits viewable in compare view

Updates bleach from 6.2.0 to 6.3.0

Changelog

Sourced from bleach's changelog.

Version 6.3.0 (October 27th, 2025)

Backwards incompatible changes

Dropped support for Python 3.9. (#756)

Security fixes

None

Bug fixes

Add support for Python 3.14. (#758)

Fix wbr handling. (#488)

Commits

5546d5d chore: prep for 6.3.0 release
88df3ff chore: fix readthedocs
d8b2fb4 fix: fix wbr handling (#488)
55e48ce chore: add support for Python 3.14 (#758)
a4d6cdd chore: drop support for Python 3.9 (#756)
172d92f Bump actions/setup-python from 5.6.0 to 6.0.0
df88612 Bump actions/checkout from 4.2.2 to 5.0.0
cbcf6b1 Bump actions/cache from 4.2.3 to 4.3.0
d9aa7ef Switch from dependabot reviewers to CODEOWNERS
06f0f76 Update setuptools, wheel, and twine for devs
Additional commits viewable in compare view

Updates markdown from 3.4.4 to 3.10

Release notes

Sourced from markdown's releases.

Release 3.10.0

Changed

Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).

Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

Release 3.9.0

Changed

Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

Ensure inline processing iterates through elements in document order (#1546).

Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

Release 3.8.2

Fixed

Fix codecs deprecation in Python 3.14.

Fix issue with unclosed comment parsing in Python 3.14.

Fix issue with unclosed declarations in Python 3.14.

Fix issue with unclosed HTML tag <foo and Python 3.14.

Release 3.8.1

Fixed

Ensure incomplete markup declaration in raw HTML doesn't crash parser (#1534).

Fixed dropped content in md_in_html (#1526).

Fixed HTML handling corner case that prevented some content from not being rendered (#1528).

Release 3.8

Changed

DRY fix in abbr extension by introducing method create_element (#1483).

Clean up test directory by removing some redundant tests and port non-redundant cases to the newer test framework.

Improved performance of the raw HTML post-processor (#1510).

... (truncated)

Changelog

Sourced from markdown's changelog.

title: Changelog toc_depth: 2

Python-Markdown Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to the Python Version Specification. See the Contributing Guide for details.

[3.10.0] - 2025-11-03

Changed

Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).

Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

[3.9.0] - 2025-09-04

Changed

Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

Ensure inline processing iterates through elements in document order (#1546).

Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

[3.8.2] - 2025-06-19

Fixed

Fix codecs deprecation in Python 3.14 (#1537).

Fix issue with unclosed comment parsing in Python 3.14 (#1537).

Fix issue with unclosed declarations in Python 3.14 (#1537).

Fix issue with unclosed HTML tag <foo and Python 3.14 (#1537).

... (truncated)

Commits

22e89c1 Bump version to 3.10
c138aea + PY314 - PY39
746f7f5 cleanup
a5ee2b4 Revert the default behavior of USE_DEFINITION_ORDER
5354daf Fix an HTML comment parsing case that can cause an infinite loop
f39cf84 Bump version to 3.9
07bf207 Order footnotes by reference
23c301d Fix failing cases for Python 3.14
4669a09 fix typo
d9c8431 Bump version to 3.8.2
Additional commits viewable in compare view

Updates psycopg2-binary from 2.9.10 to 2.9.11

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).

Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).

Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits

fd9ae8c chore: bump to version 2.9.11
d923840 chore: update docs requirements
d42dc71 Merge branch 'fix-1791'
4fde656 fix: avoid failed assert passing more arguments than placeholders
8308c19 fix: drop warning about the use of deprecated PyWeakref_GetObject function
1a1eabf build(deps): bump actions/github-script from 7 to 8
897af8b build(deps): bump peter-evans/repository-dispatch from 3 to 4
ceefd30 build(deps): bump actions/checkout from 4 to 5
4dc5854 build(deps): bump actions/setup-python from 5 to 6
1945788 Merge pull request #1802 from edgarrmondragon/cp314-wheels
Additional commits viewable in compare view

Updates pydantic from 2.11.7 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

v2.12.3 (2025-10-17)

GitHub release

... (truncated)

Commits

bd2d0dd Prepare release v2.12.5
7d0302e Document security implications when using create_model()
e9ef980 Fix typo in Standard Library Types documentation
f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
a76c1aa Update documentation about JSON Schema
8cbc72c Add documentation about custom __init__()
99eba59 Add additional test for FieldInfo.get_default()
c710769 Special case MISSING sentinel in smart_deepcopy()
20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
c86515a Update parts of the model and revalidate_instances documentation
Additional commits viewable in compare view

Updates python-akismet from 0.4.2 to 0.4.3

Commits

3c6d0f4 Bump version: 0.4.2 → 0.4.3
6f43552 Issue #17: Add Python 3.9 and python 3.10 support
5745376 Issue #17: Add Python 3.9 and python 3.10 support
0e3e5e6 Issue #17: Add Python 3.9 and python 3.10 support
4f08043 Merge pull request #16 from tgbot-collection/master
5c0a712 Merge pull request #14 from nijel/patch-1
cb5fa51 add py3.10 support
6469fd6 Use == for comparing strings
a082021 Issue #13: Test using Github Actions
bb7d2f3 Issue #13: Test using Github Actions
Additional commits viewable in compare view

Updates python-dotenv from 1.1.1 to 1.2.1

Release notes

Sourced from python-dotenv's releases.

v1.2.1

What's Changed

Support reading .env from FIFOs (Unix) by @sidharth-sudhir in theskumar/python-dotenv#586

Update CI to use trusted publishing on PyPI

New Contributors

@sidharth-sudhir made their first contribution in theskumar/python-dotenv#586

Full Changelog: theskumar/python-dotenv@v1.2.0...v1.2.1

v1.2.0

What's Changed

style: upgrade to use ruff by @theskumar in theskumar/python-dotenv#567

Use sys.exit() instead of exit() by @theskumar in theskumar/python-dotenv#568

feat: add PYTHON_DOTENV_DISABLED flag to disable load_dotenv (fixes #510) by @matthewfranglen in theskumar/python-dotenv#569

Added [email protected]: Github CI & tox.ini by @23f3001135 in theskumar/python-dotenv#579

ocs: clarify what load_dotenv() does in README by @cybercoded in theskumar/python-dotenv#575

Bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in theskumar/python-dotenv#577

Move project metadata and config to pyproject.toml by @EpicWink in theskumar/python-dotenv#583

New Contributors

@matthewfranglen made their first contribution in theskumar/python-dotenv#569

@23f3001135 made their first contribution in theskumar/python-dotenv#579

@cybercoded made their first contribution in theskumar/python-dotenv#575

@EpicWink made their first contribution in theskumar/python-dotenv#583

Full Changelog: theskumar/python-dotenv@v1.1.1...v1.2.0

Changelog

Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

Move more config to pyproject.toml, removed setup.cfg

Add support for reading .env from FIFOs (Unix) by [@sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Upgrade build system to use PEP 517 & PEP 518 to use build and pyproject.toml by [@EpicWink] in #583

Add support for Python 3.14 by [@23f3001135] in #579

Add support for disabling of load_dotenv() using PYTHON_DOTENV_DISABLED env var. by [@matthewfranglen] in #569

Commits

eaf2a91 Do not remove .coverage file
8716196 Bump version: 1.2.0 → 1.2.1
b87807f Update changelog
3af77d3 Support reading .env from FIFOs (Unix) (#586)
467ee22 Fix test failures after moving config to pyproject.toml
76999e7 Move more config pyproject.toml
222ce2c Update to use trusted publisher on pypi
8ed4f79 Update docs requirements
5bf8822 Bump version: 1.1.1 → 1.2.0
1fe11cc upadate changelog
Additional commits viewable in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.

Dropped support for Python 3.8 following its end of support.

Commits

Bumps the python-dependencies group with 23 updates: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `5.2.7` | `5.2.8` | | [django-allauth](https://github.com/sponsors/pennersr) | `65.9.0` | `65.13.1` | | [django-components](https://github.com/sponsors/EmilStenstrom) | `0.141.2` | `0.143.2` | | [django-htmx](https://github.com/adamchainz/django-htmx) | `1.15.0` | `1.27.0` | | [django-taggit](https://github.com/jazzband/django-taggit) | `5.0.1` | `6.1.0` | | [django-tailwind](https://github.com/timonweb/django-tailwind) | `4.0.1` | `4.4.1` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.15.2` | `3.16.1` | | [bleach](https://github.com/mozilla/bleach) | `6.2.0` | `6.3.0` | | [markdown](https://github.com/Python-Markdown/markdown) | `3.4.4` | `3.10` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` | | [pydantic](https://github.com/pydantic/pydantic) | `2.11.7` | `2.12.5` | | [python-akismet](https://github.com/Nekmo/python-akismet) | `0.4.2` | `0.4.3` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` | | [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` | | [requests-oauthlib](https://github.com/requests/requests-oauthlib) | `1.3.1` | `2.0.0` | | [six](https://github.com/benjaminp/six) | `1.15.0` | `1.17.0` | | [whitenoise](https://github.com/evansd/whitenoise) | `6.1.0` | `6.11.0` | | [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2025.11.12` | | [gunicorn](https://github.com/benoitc/gunicorn) | `20.1.0` | `23.0.0` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `1.5.12` | `2.46.0` | | [ipython](https://github.com/ipython/ipython) | `7.33.0` | `9.7.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.3` | `0.14.7` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `2.19.0` | `4.5.0` | Updates `django` from 5.2.7 to 5.2.8 - [Commits](django/django@5.2.7...5.2.8) Updates `django-allauth` from 65.9.0 to 65.13.1 - [Commits](https://github.com/sponsors/pennersr/commits) Updates `django-components` from 0.141.2 to 0.143.2 - [Commits](https://github.com/sponsors/EmilStenstrom/commits) Updates `django-htmx` from 1.15.0 to 1.27.0 - [Changelog](https://github.com/adamchainz/django-htmx/blob/main/docs/changelog.rst) - [Commits](adamchainz/django-htmx@1.15.0...1.27.0) Updates `django-taggit` from 5.0.1 to 6.1.0 - [Changelog](https://github.com/jazzband/django-taggit/blob/master/CHANGELOG.rst) - [Commits](jazzband/django-taggit@5.0.1...6.1.0) Updates `django-tailwind` from 4.0.1 to 4.4.1 - [Changelog](https://github.com/timonweb/django-tailwind/blob/master/CHANGELOG.md) - [Commits](timonweb/django-tailwind@4.0.1...4.4.1) Updates `djangorestframework` from 3.15.2 to 3.16.1 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.15.2...3.16.1) Updates `bleach` from 6.2.0 to 6.3.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v6.2.0...v6.3.0) Updates `markdown` from 3.4.4 to 3.10 - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](Python-Markdown/markdown@3.4.4...3.10.0) Updates `psycopg2-binary` from 2.9.10 to 2.9.11 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.10...2.9.11) Updates `pydantic` from 2.11.7 to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.11.7...v2.12.5) Updates `python-akismet` from 0.4.2 to 0.4.3 - [Release notes](https://github.com/Nekmo/python-akismet/releases) - [Commits](Nekmo/python-akismet@v0.4.2...v0.4.3) Updates `python-dotenv` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1) Updates `requests` from 2.32.4 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.4...v2.32.5) Updates `requests-oauthlib` from 1.3.1 to 2.0.0 - [Release notes](https://github.com/requests/requests-oauthlib/releases) - [Changelog](https://github.com/requests/requests-oauthlib/blob/master/HISTORY.rst) - [Commits](requests/requests-oauthlib@v1.3.1...v2.0.0) Updates `six` from 1.15.0 to 1.17.0 - [Changelog](https://github.com/benjaminp/six/blob/main/CHANGES) - [Commits](benjaminp/six@1.15.0...1.17.0) Updates `whitenoise` from 6.1.0 to 6.11.0 - [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst) - [Commits](evansd/whitenoise@6.1.0...6.11.0) Updates `certifi` from 2025.10.5 to 2025.11.12 - [Commits](certifi/python-certifi@2025.10.05...2025.11.12) Updates `gunicorn` from 20.1.0 to 23.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@20.1.0...23.0.0) Updates `sentry-sdk` from 1.5.12 to 2.46.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@1.5.12...2.46.0) Updates `ipython` from 7.33.0 to 9.7.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@7.33.0...9.7.0) Updates `ruff` from 0.14.3 to 0.14.7 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.3...0.14.7) Updates `pre-commit` from 2.19.0 to 4.5.0 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v2.19.0...v4.5.0) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: django-allauth dependency-version: 65.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-components dependency-version: 0.143.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-htmx dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-taggit dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: django-tailwind dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: djangorestframework dependency-version: 3.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: bleach dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: markdown dependency-version: '3.10' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: psycopg2-binary dependency-version: 2.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: python-akismet dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: requests dependency-version: 2.32.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: requests-oauthlib dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: six dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: whitenoise dependency-version: 6.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: certifi dependency-version: 2025.11.12 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: gunicorn dependency-version: 23.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: sentry-sdk dependency-version: 2.46.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: ipython dependency-version: 9.7.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: ruff dependency-version: 0.14.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pre-commit dependency-version: 4.5.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Dec 1, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build: Bump the python-dependencies group with 23 updates #641

build: Bump the python-dependencies group with 23 updates #641

Uh oh!

dependabot bot commented on behalf of github Dec 1, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

build: Bump the python-dependencies group with 23 updates #641

Are you sure you want to change the base?

build: Bump the python-dependencies group with 23 updates #641

Uh oh!

Conversation

dependabot bot commented on behalf of github Dec 1, 2025

1.27.0 (2025-11-28)

1.26.0 (2025-09-22)

1.25.0 (2025-09-18)

1.24.1 (2025-09-11)

1.24.0 (2025-09-10)

4.4.1

4.4.0

4.3.0

4.2.0

4.1.0

4.0.0

3.9.1

3.9.0

v3.16.1

Minor changes

Bug fixes

Translations

Documentation

Internal changes

New Contributors

Version 6.3.0 (October 27th, 2025)

Release 3.10.0

Changed

Fixed

Release 3.9.0

Changed

Fixed

Release 3.8.2

Fixed

Release 3.8.1

Fixed

Release 3.8

Changed

Python-Markdown Changelog

[3.10.0] - 2025-11-03

Changed

Fixed

[3.9.0] - 2025-09-04

Changed

Fixed

[3.8.2] - 2025-06-19

Fixed

Current release

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

v2.12.5 (2025-11-26)

v2.12.4 (2025-11-05)

v2.12.3 (2025-10-17)

v1.2.1

What's Changed

New Contributors

v1.2.0

What's Changed

New Contributors

[1.2.1] - 2025-10-26

[1.2.0] - 2025-10-26

v2.32.5

2.32.5 (2025-08-18)

2.32.5 (2025-08-18)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants