Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 5, 2026

Bumps the prod-deps group with 35 updates in the / directory:

Package From To
django 4.2.26 6.0
psycopg2-binary 2.9.10 2.9.11
celery 5.5.3 5.6.2
hiredis 3.2.1 3.3.0
brotli 1.1.0 1.2.0
django-compressor 4.5.1 4.6.0
django-post-office 3.10.1 3.11.0
drf-yasg 1.21.10 1.21.11
jellyfish 1.2.0 1.2.1
markdown 3.9 3.10
pyyaml 6.0.2 6.0.3
xlsxwriter 3.2.8 3.2.9
xmlschema 4.1.0 4.2.0
lark 1.2.2 1.3.1
simple-salesforce 1.12.8 1.12.9
shapely 2.0.7 2.1.2
django-treebeard 4.7.1 4.8.0
django-two-factor-auth[phonenumbers] 1.17.0 1.18.1
importlib-metadata 8.7.0 8.7.1
boto3 1.40.30 1.42.21
django-ses 4.4.0 4.5.0
uwsgi 2.0.30 2.0.31
coverage 7.10.6 7.13.1
coveralls 4.0.1 4.0.2
tox 4.30.2 4.33.0
psutil 7.0.0 7.2.1
faker 37.6.0 40.1.0
vcrpy 7.0.0 8.1.1
pytest 8.4.2 9.0.2
pre-commit 4.3.0 4.5.1
sphinx 7.4.7 9.1.0
sphinxcontrib-spelling 8.0.0 8.0.2
docutils 0.21.2 0.22.4
hypothesis 6.138.16 6.148.13
django-debug-toolbar 6.0.0 6.1.0

Updates django from 4.2.26 to 6.0

Commits
  • 36b5f39 [6.0.x] Bumped version for 6.0 release.
  • 4f46d1f [6.0.x] Updated man page for Django 6.0.
  • a9f5ca5 [6.0.x] Refs #35859 -- Clarified Tasks ref and topics docs regarding availabl...
  • 45f9e0e [6.0.x] Finalized release notes for Django 6.0.
  • ac44a55 [6.0.x] Made cosmetic edits to docs/releases/6.0.txt.
  • 00575b7 [6.0.x] Updated translations from Transifex.
  • 8414487 [6.0.x] Refs #35444 -- Fixed typo in PostgreSQL StringAgg deprecation warning.
  • 1f8f36e [6.0.x] Added CVE-2025-13372 and CVE-2025-64460 to security archive.
  • 224fc79 [6.0.x] Added stub release notes for 5.2.10.
  • 1dbd07a [6.0.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation i...
  • Additional commits viewable in compare view

Updates psycopg2-binary from 2.9.10 to 2.9.11

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.14.
  • Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).
  • Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.
  • Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.13.
  • Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.
  • Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.12.
  • Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
  • Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
  • Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits
  • fd9ae8c chore: bump to version 2.9.11
  • d923840 chore: update docs requirements
  • d42dc71 Merge branch 'fix-1791'
  • 4fde656 fix: avoid failed assert passing more arguments than placeholders
  • 8308c19 fix: drop warning about the use of deprecated PyWeakref_GetObject function
  • 1a1eabf build(deps): bump actions/github-script from 7 to 8
  • 897af8b build(deps): bump peter-evans/repository-dispatch from 3 to 4
  • ceefd30 build(deps): bump actions/checkout from 4 to 5
  • 4dc5854 build(deps): bump actions/setup-python from 5 to 6
  • 1945788 Merge pull request #1802 from edgarrmondragon/cp314-wheels
  • Additional commits viewable in compare view

Updates celery from 5.5.3 to 5.6.2

Release notes

Sourced from celery's releases.

v5.6.2

What's Changed

New Contributors

Full Changelog: celery/celery@v5.6.1...v5.6.2

v5.6.1

What's Changed

New Contributors

Full Changelog: celery/celery@v5.6.0...v5.6.1

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.2

:release-date: 2026-01-04 :release-by: Tomer Nosrati

What's Changed


- Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeError when pool_cls is a string ([#10045](https://github.com/celery/celery/issues/10045))
- Bugfix: Revoked tasks now immediately update backend status to REVOKED ([#9869](https://github.com/celery/celery/issues/9869))
- Prepare for release: v5.6.2 ([#10049](https://github.com/celery/celery/issues/10049))

.. _version-5.6.1:

5.6.1

:release-date: 2025-12-29 :release-by: Tomer Nosrati

What's Changed

  • Fix Redis Sentinel ACL authentication support (#10013)
  • Fix: Broker heartbeats not sent during graceful shutdown (#9986)
  • docs #5410 -- Document confirm_publish broker transport option (#10016)
  • close DB pools only in prefork mode (#10020)
  • Fix: Avoid unnecessary Django database connection creation during cleanup (#10015)
  • reliable prefork detection (#10023)
  • better coverage (#10029)
  • Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example (#10030)
  • Stop importing pytest_subtests (#10032)
  • Only use exceptiongroup backport for Python < 3.11 (#10033)
  • Prepare for release: v5.6.1 (#10037)

.. _version-5.6.0:

5.6.0

:release-date: 2025-11-30 :release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights


See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below.
</tr></table> 

... (truncated)

Commits
  • 6a43c84 Prepare for release: v5.6.2 (#10049)
  • 333a82f Bugfix: Revoked tasks now immediately update backend status to REVOKED (#9869)
  • 9d6ab11 Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeEr...
  • 21dbc73 Prepare for release: v5.6.1 (#10037)
  • ba20bed Only use exceptiongroup backport for Python < 3.11 (#10033)
  • 2167529 Stop importing pytest_subtests
  • 0527296 Bump google-cloud-firestore from 2.21.0 to 2.22.0
  • 5f8659b Clarify 'result_extended' setting usage in tasks
  • f19db70 Bump mypy from 1.19.0 to 1.19.1 (#10028)
  • 6da72bd better coverage (#10029)
  • Additional commits viewable in compare view

Updates hiredis from 3.2.1 to 3.3.0

Release notes

Sourced from hiredis's releases.

3.3.0

Changes

Contributors

We'd like to thank all the contributors who worked on this release!

Commits

Updates brotli from 1.1.0 to 1.2.0

Release notes

Sourced from brotli's releases.

v1.2.0

SECURITY

  • python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

  • decoder / encoder: added static initialization to reduce binary size
  • python: allow limiting decoder output (see SECURITY section)
  • CLI: brcat alias; allow decoding concatenated brotli streams
  • kt: pure Kotlin decoder
  • cgo: support "raw" dictionaries
  • build: Bazel modules

Removed

  • java: dropped finalize() for native entities

Fixed

  • java: in compress pass correct length to native encoder

Improved

  • build: install man pages
  • build: updated / fixed / refined Bazel buildfiles
  • encoder: faster encoding
  • cgo: link via pkg-config
  • python: modernize extension / allow multi-phase module initialization

Changed

  • decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)

v1.2.0 RC2

What's Changed (compared to RC1)

v1.2.0 RC1

IMPORTANT: though this is a pre-release for v1.2.0, it is expected that some changes will be added before release; most notably concerning build files: patches applied by Alpine, Debian, Conan, VCPKG will be partially/fully integrated.

SECURITY

  • python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

  • decoder / encoder: added static initialization to reduce binary size
  • python: allow limiting decoder output (see SECURITY section)

... (truncated)

Changelog

Sourced from brotli's changelog.

[1.2.0] - 2025-10-27

SECURITY

  • python: added Decompressor::can_accept_more_data method and optional output_buffer_limit argument Decompressor::process; that allows mitigation of unexpectedly large output; reported by Charles Chan (https://github.com/charleswhchan)

Added

  • decoder / encoder: added static initialization to reduce binary size
  • python: allow limiting decoder output (see SECURITY section)
  • CLI: brcat alias; allow decoding concatenated brotli streams
  • kt: pure Kotlin decoder
  • cgo: support "raw" dictionaries
  • build: Bazel modules

Removed

  • java: dropped finalize() for native entities

Fixed

  • java: in compress pass correct length to native encoder

Improved

  • build: install man pages
  • build: updated / fixed / refined Bazel buildfiles
  • encoder: faster encoding
  • cgo: link via pkg-config
  • python: modernize extension / allow multi-phase module initialization

Changed

  • decoder / encoder: static tables use "small" model (allows 2GiB+ binaries)
Commits

Updates django-compressor from 4.5.1 to 4.6.0

Changelog

Sourced from django-compressor's changelog.

Changelog

v4.6 (2025-11-10)

Full list of changes from v4.5.1 <https://github.com/django-compressor/django-compressor/compare/4.5.1...4.6>_

  • Fixed compatibility with latest BS4.
  • Removed top pin for rcssmin and rjsmin dependencies.
  • Avoid compressing the same node concurrently in offline compression.
  • Avoid use of deprecated ast.Constant.s
  • Officially support Django 6.0
  • Officially support Django 5.2
  • Drop support for EOL Django 5.0
  • Add support for Python 3.14.
  • Add support for Python 3.13.
  • Drop support for EOL Python 3.9.
  • Drop support for EOL Python 3.8.
Commits
  • 3ada994 Prepare 4.6.0.
  • 1baa82a Remove CI testing for EOL Django 5.0.
  • 8706a52 Add CI testing for Python 3.14 and Django 6.0.
  • 7be9ce2 Bump brotli, lxml, and coverage test dependencies.
  • d6fd813 Remove test version pinning for rcssmin and rjsmin.
  • 2b46e7d Bump actions/setup-python from 5 to 6 (#1307)
  • b97bb05 Disable bs4's multi valued attributes (#1296)
  • 4e54330 Migrate packaging to pyproject.toml (#1313)
  • 872f8d5 Remove version pinning for rcssmin and rjsmin (#1312)
  • cc38666 Drop support for Python 3.9 (#1311)
  • Additional commits viewable in compare view

Updates django-post-office from 3.10.1 to 3.11.0

Release notes

Sourced from django-post-office's releases.

v3.11

  • Added Python 3.14 and Django 6.0 compatibility. Thanks @​selwin!
  • Replaced bleach with nh3 for HTML sanitization. bleach has been deprecated since 2023. Thanks @​selwin!
  • Added SESWebhookHandler and SparkPostWebhookHandler for handling webhook events (beta feature). Thanks @​selwin!
  • Optimized the way templates are fetched during email delivery. Thanks @​selwin!
Changelog

Sourced from django-post-office's changelog.

Changelog

Unreleased

  • Replaced bleach with nh3 for HTML sanitization. bleach has been deprecated since 2023. Thanks @​selwin!
  • Added SESWebhookHandler and SparkPostWebhookHandler for handling webhook events (beta feature). Thanks @​selwin!
  • Optimized the way templates are fetched during email delivery. Thanks @​selwin!
Commits

Updates drf-yasg from 1.21.10 to 1.21.11

Release notes

Sourced from drf-yasg's releases.

1.21.11

FIXED: Fix list views with parameters in last path segment not named "list" views (#917) ADDED: Allow overriding produces/consumes with @​swagger_auto_schema decorator (#916) FIXED: Fix filter parameters not appearing in swagger with django-filter>=25 (#926) IMPROVED: Update Python, Django, and DRF versions and packaging configuration (#922) IMPROVED: Remove usage of pkg_resources (#928) FIXED: Fix call_view_method warning to include the method name again (#923) ADDED: Add a hide download button option (#848) ADDED: Add ruff linters (#903)

Changelog

Sourced from drf-yasg's changelog.

######### Changelog #########


1.21.11


FIXED: Fix list views with parameters in last path segment not named "list" views (:pr:917) ADDED: Allow overriding produces/consumes with @​swagger_auto_schema decorator (:pr:916) FIXED: Fix filter parameters not appearing in swagger with django-filter>=25 (:pr:926) IMPROVED: Update Python, Django, and DRF versions and packaging configuration (:pr:922) IMPROVED: Remove usage of pkg_resources (:pr:928) FIXED: Fix call_view_method warning to include the method name again (:pr:923) ADDED: Add a hide download button option (:pr:848) ADDED: Add ruff linters (:pr:903)


1.21.10


FIXED: Fix type hints when using postponed evaluation of annotations (PEP-563) (:pr:840) IMPROVED: Update JSON & YAML renderers to not use a "." in their format string (:pr:911) FIXED: Fix lint errors when comparing types with == instead of is (:pr:868) IMPROVED: Update swagger-ui-dist to address CVE-2021-46708 (:pr:904)


1.21.9


ADDED: Added support for zoneinfo object fields (:pr:908)


1.21.8


ADDED: Python 3.11 and 3.12 support (:pr:891) FIXED: Fix pkg_resources version lookups for Python 3.9+ (:pr:891)


1.21.7


Release date: Jul 20, 2023

ADDED: Added drf_yasg.inspectors.query.DrfAPICompatInspector (:pr:857) ADDED: Added DrfAPICompatInspector to serve as a replacement CoreAPICompatInspector (:pr:857) ADDED: Allow DEFAULT_SPEC_RENDERERS default renderers to be overriden in the settings (:pr:857) FIXED: Fixed redoc source mapping (:pr:859)

... (truncated)

Commits
  • f8cb2db Add version 1.21.11 details to the changelog (#939)
  • 0c6d08d Update the ruff lint rules (#920)
  • 055a74d Bump actions/setup-python from 5 to 6 in the github-actions group (#937)
  • a8813ac Bump actions/checkout from 4 to 5 in the github-actions group (#936)
  • 9f4b449 Restore the live demo and replace heroku with apprunner (#935)
  • 2983251 fix list views with parameters in last path segment not named "list" views (#...
  • a746893 allow overriding produces/consumes with @​swagger_auto_schema decorator (#916)
  • e747ad6 Fixes issue with filter parameters not appearing in Swagger after upgrading t...
  • ee3c871 update Python, Django, and DRF versions & packaging configuration (#922)
  • be6eeed Remove usage of pkg_resources (#928)
  • Additional commits viewable in compare view

Updates jellyfish from 1.2.0 to 1.2.1

Updates markdown from 3.9 to 3.10

Release notes

Sourced from markdown's releases.

Release 3.10.0

Changed

  • Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

  • Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).
  • Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).
Changelog

Sourced from markdown's changelog.

title: Changelog toc_depth: 2

Python-Markdown Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to the Python Version Specification. See the Contributing Guide for details.

[Unreleased]

Fixed

  • Ensure nested elements inside inline comments are properly unescaped (#1571).
  • Make the docs build successfully with mkdocstrings-python 2.0 (#1575).
  • Fix infinite loop when multiple bogus or unclosed HTML comments appear in input (#1578).

[3.10.0] - 2025-11-03

Changed

  • Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

  • Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).
  • Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

[3.9.0] - 2025-09-04

Changed

  • Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

  • Ensure inline processing iterates through elements in document order (#1546).
  • Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

[3.8.2] - 2025-06-19

... (truncated)

Commits

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates xlsxwriter from 3.2.8 to 3.2.9

Changelog

Sourced from xlsxwriter's changelog.

Release 3.2.9 - September 16 2025

  • Removed the py.typed file since it was causing a lot of downstream CI failures where consumers weren't handling the xlsxwriter types correctly or taking them into account.

    The file will be re-added once the xlsxwriter typing is more comprehensive.

Commits

Updates xmlschema from 4.1.0 to 4.2.0

Release notes

Sourced from xmlschema's releases.

v4.2.0 (2025-10-14)

  • Add arguments validation for schemas and validation methods (by validation contexts)
  • Add SchemaSettings dataclass for storing read-only settings for schema instances and for managing package default settings
  • Add block argument to XMLResource class (issue #464)
  • Add MAX_SCHEMA_SOURCES package limit (1000, applied to XsdGlobals global maps instances)
  • Add MAX_XML_ELEMENTS package limit (1,000,000, applied to non-lazy XMLResource instances)
  • Reduce MAX_XML_DEPTH limit to 1000 and apply it to all XMLResource instances
  • Fix for substitute match in case of unexpected child (issue #461)
Changelog

Sourced from xmlschema's changelog.

v4.2.0_ (2025-10-14)

  • Add arguments validation for schemas and validation methods (by validation contexts)
  • Add SchemaSettings dataclass for storing read-only settings for schema instances and for managing package default settings
  • Add block argument to XMLResource class (issue #464)
  • Add MAX_SCHEMA_SOURCES package limit (1000, applied to XsdGlobals global maps instances)
  • Add MAX_XML_ELEMENTS package limit (1,000,000, applied to non-lazy XMLResource instances)
  • Reduce MAX_XML_DEPTH limit to 1000 and apply it to all XMLResource instances
  • Fix for substitute match in case of unexpected child (issue #461)
Commits
  • 2783030 Bump minor release
  • 7c77a12 Include publiccode.yml validation workflow for CI and README changes
  • 04c19d5 Fix XsdGroup.match_element (issue #461)
  • dd4f279 Merge pull request #463 from publiccode-pr-bot/chore/add-publiccode-parser-ac...
  • 1bd7aa6 Update GitHub workflow for CI
  • 76b0f67 Patch mypy tests with protocols
  • 28727bb Update docs and release info
  • e4131ea Add from_settings() class method to schemas
  • 0aea8de Rewrite validation contexts as normal classes
  • d443d7b Full validation of context arguments
  • Additional commits viewable in compare view

Updates lark from 1.2.2 to 1.3.1

Release notes

Sourced from lark's releases.

1.3.1 - Bugfix + source build now contains complete project data

What's Changed

Full Changelog: lark-parser/lark@1.3.0...1.3.1

1.3.0 - Introduces text-slices, Earley fix, and various small improvements

New features

  • Lark can now parse in sections of strings, using TextSlice, as a faster alternative to creating a "copy-slice" with s[i:j]. Learn more
  • Added support to match on Tree instances
  • When serializing a Lark instance, added the option to include the grammar object (before compilation).
  • Added convenience method Tree.find_token()

Bugfixes

  • Bugfix of an edge case in Earley related to representation of ambiguity.
  • Bugfixes in the standalone parser related to imports
  • Bugfix in indenter - now dedents always contain line information
  • Various small bugfixes (see PR list below)

Full list of PRs

New Contributors

... (truncated)

Commits
  • f79772c Version bump (1.3.1)
  • b64e9f4 Merge pull request #1561 from chanicpanic/sdist-git
  • ad0ea5f Update MANIFEST.in
  • 1f6f03c Merge pull request #1562 from lark-parser/issue1560
  • 7c365de Added custom input test (based on code from examples)
  • 19bbbee Bugfix: Restore support for custom input, alongside text and TextSlice (Issue...
  • dbcb60e Keep sdist in sync with git
  • e332c2d Version bump (1.3.0)
  • aa5666c Merge pull request #1541 from pdeibert/master
  • 41934d3 Merge pull request #1553 from lark-parser/issue1552
  • Additional commits viewable in compare view

Updates simple-salesforce from 1.12.8 to 1.12.9

Release notes

Sourced from simple-salesforce's releases.

v1.12.9

What's Changed

New Contributors

@dependabot dependabot bot added the Maintenance Tag as maintenance if the issue relates to general cleanup, maintenance, etc. Do not delete label. label Jan 5, 2026
Bumps the prod-deps group with 35 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `4.2.26` | `6.0` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` |
| [celery](https://github.com/celery/celery) | `5.5.3` | `5.6.2` |
| [hiredis](https://github.com/redis/hiredis-py) | `3.2.1` | `3.3.0` |
| [brotli](https://github.com/google/brotli) | `1.1.0` | `1.2.0` |
| [django-compressor](https://github.com/django-compressor/django-compressor) | `4.5.1` | `4.6.0` |
| [django-post-office](https://github.com/ui/django-post_office) | `3.10.1` | `3.11.0` |
| [drf-yasg](https://github.com/axnsan12/drf-yasg) | `1.21.10` | `1.21.11` |
| [jellyfish](https://jellyfish.jpt.sh/) | `1.2.0` | `1.2.1` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.9` | `3.10` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [xlsxwriter](https://github.com/jmcnamara/XlsxWriter) | `3.2.8` | `3.2.9` |
| [xmlschema](https://github.com/sissaschool/xmlschema) | `4.1.0` | `4.2.0` |
| [lark](https://github.com/lark-parser/lark) | `1.2.2` | `1.3.1` |
| [simple-salesforce](https://github.com/simple-salesforce/simple-salesforce) | `1.12.8` | `1.12.9` |
| [shapely](https://github.com/shapely/shapely) | `2.0.7` | `2.1.2` |
| [django-treebeard](https://github.com/django-treebeard/django-treebeard) | `4.7.1` | `4.8.0` |
| [django-two-factor-auth[phonenumbers]](https://github.com/jazzband/django-two-factor-auth) | `1.17.0` | `1.18.1` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.0` | `8.7.1` |
| [boto3](https://github.com/boto/boto3) | `1.40.30` | `1.42.21` |
| [django-ses](https://github.com/django-ses/django-ses) | `4.4.0` | `4.5.0` |
| [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.30` | `2.0.31` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.10.6` | `7.13.1` |
| [coveralls](https://github.com/TheKevJames/coveralls-python) | `4.0.1` | `4.0.2` |
| [tox](https://github.com/tox-dev/tox) | `4.30.2` | `4.33.0` |
| [psutil](https://github.com/giampaolo/psutil) | `7.0.0` | `7.2.1` |
| [faker](https://github.com/joke2k/faker) | `37.6.0` | `40.1.0` |
| [vcrpy](https://github.com/kevin1024/vcrpy) | `7.0.0` | `8.1.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.1` |
| [sphinx](https://github.com/sphinx-doc/sphinx) | `7.4.7` | `9.1.0` |
| [sphinxcontrib-spelling](https://github.com/sphinx-contrib/spelling) | `8.0.0` | `8.0.2` |
| [docutils](https://github.com/rtfd/recommonmark) | `0.21.2` | `0.22.4` |
| [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.138.16` | `6.148.13` |
| [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) | `6.0.0` | `6.1.0` |



Updates `django` from 4.2.26 to 6.0
- [Commits](django/django@4.2.26...6.0)

Updates `psycopg2-binary` from 2.9.10 to 2.9.11
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.10...2.9.11)

Updates `celery` from 5.5.3 to 5.6.2
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst)
- [Commits](celery/celery@v5.5.3...v5.6.2)

Updates `hiredis` from 3.2.1 to 3.3.0
- [Release notes](https://github.com/redis/hiredis-py/releases)
- [Changelog](https://github.com/redis/hiredis-py/blob/master/CHANGELOG.md)
- [Commits](redis/hiredis-py@v3.2.1...v3.3.0)

Updates `brotli` from 1.1.0 to 1.2.0
- [Release notes](https://github.com/google/brotli/releases)
- [Changelog](https://github.com/google/brotli/blob/master/CHANGELOG.md)
- [Commits](google/brotli@go/cbrotli/v1.1.0...v1.2.0)

Updates `django-compressor` from 4.5.1 to 4.6.0
- [Changelog](https://github.com/django-compressor/django-compressor/blob/develop/docs/changelog.txt)
- [Commits](django-compressor/django-compressor@4.5.1...4.6)

Updates `django-post-office` from 3.10.1 to 3.11.0
- [Release notes](https://github.com/ui/django-post_office/releases)
- [Changelog](https://github.com/ui/django-post_office/blob/master/CHANGELOG.md)
- [Commits](ui/django-post_office@v3.10.1...v3.11)

Updates `drf-yasg` from 1.21.10 to 1.21.11
- [Release notes](https://github.com/axnsan12/drf-yasg/releases)
- [Changelog](https://github.com/axnsan12/drf-yasg/blob/master/docs/changelog.rst)
- [Commits](axnsan12/drf-yasg@1.21.10...1.21.11)

Updates `jellyfish` from 1.2.0 to 1.2.1

Updates `markdown` from 3.9 to 3.10
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.9.0...3.10.0)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `xlsxwriter` from 3.2.8 to 3.2.9
- [Changelog](https://github.com/jmcnamara/XlsxWriter/blob/main/Changes)
- [Commits](jmcnamara/XlsxWriter@RELEASE_3.2.8...RELEASE_3.2.9)

Updates `xmlschema` from 4.1.0 to 4.2.0
- [Release notes](https://github.com/sissaschool/xmlschema/releases)
- [Changelog](https://github.com/sissaschool/xmlschema/blob/master/CHANGELOG.rst)
- [Commits](sissaschool/xmlschema@v4.1.0...v4.2.0)

Updates `lark` from 1.2.2 to 1.3.1
- [Release notes](https://github.com/lark-parser/lark/releases)
- [Changelog](https://github.com/lark-parser/lark/blob/master/CHANGELOG.md)
- [Commits](lark-parser/lark@1.2.2...1.3.1)

Updates `simple-salesforce` from 1.12.8 to 1.12.9
- [Release notes](https://github.com/simple-salesforce/simple-salesforce/releases)
- [Changelog](https://github.com/simple-salesforce/simple-salesforce/blob/master/CHANGES)
- [Commits](simple-salesforce/simple-salesforce@v1.12.8...v1.12.9)

Updates `shapely` from 2.0.7 to 2.1.2
- [Release notes](https://github.com/shapely/shapely/releases)
- [Changelog](https://github.com/shapely/shapely/blob/main/CHANGES.txt)
- [Commits](shapely/shapely@2.0.7...2.1.2)

Updates `django-treebeard` from 4.7.1 to 4.8.0
- [Changelog](https://github.com/django-treebeard/django-treebeard/blob/master/CHANGES.md)
- [Commits](django-treebeard/django-treebeard@4.7.1...4.8.0)

Updates `django-two-factor-auth[phonenumbers]` from 1.17.0 to 1.18.1
- [Release notes](https://github.com/jazzband/django-two-factor-auth/releases)
- [Changelog](https://github.com/jazzband/django-two-factor-auth/blob/master/CHANGELOG.md)
- [Commits](jazzband/django-two-factor-auth@1.17.0...1.18.1)

Updates `importlib-metadata` from 8.7.0 to 8.7.1
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.7.0...v8.7.1)

Updates `boto3` from 1.40.30 to 1.42.21
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.40.30...1.42.21)

Updates `django-ses` from 4.4.0 to 4.5.0
- [Release notes](https://github.com/django-ses/django-ses/releases)
- [Changelog](https://github.com/django-ses/django-ses/blob/main/CHANGES.md)
- [Commits](django-ses/django-ses@v4.4.0...v4.5.0)

Updates `uwsgi` from 2.0.30 to 2.0.31

Updates `coverage` from 7.10.6 to 7.13.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.6...7.13.1)

Updates `coveralls` from 4.0.1 to 4.0.2
- [Release notes](https://github.com/TheKevJames/coveralls-python/releases)
- [Changelog](https://github.com/TheKevJames/coveralls-python/blob/master/CHANGELOG.md)
- [Commits](TheKevJames/coveralls-python@4.0.1...4.0.2)

Updates `tox` from 4.30.2 to 4.33.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.30.2...4.33.0)

Updates `psutil` from 7.0.0 to 7.2.1
- [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst)
- [Commits](giampaolo/psutil@release-7.0.0...release-7.2.1)

Updates `faker` from 37.6.0 to 40.1.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v37.6.0...v40.1.0)

Updates `vcrpy` from 7.0.0 to 8.1.1
- [Release notes](https://github.com/kevin1024/vcrpy/releases)
- [Changelog](https://github.com/kevin1024/vcrpy/blob/master/docs/changelog.rst)
- [Commits](kevin1024/vcrpy@v7.0.0...v8.1.1)

Updates `pytest` from 8.4.2 to 9.0.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.2...9.0.2)

Updates `pre-commit` from 4.3.0 to 4.5.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.5.1)

Updates `sphinx` from 7.4.7 to 9.1.0
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinx@v7.4.7...v9.1.0)

Updates `sphinxcontrib-spelling` from 8.0.0 to 8.0.2
- [Release notes](https://github.com/sphinx-contrib/spelling/releases)
- [Commits](sphinx-contrib/spelling@8.0.0...8.0.2)

Updates `docutils` from 0.21.2 to 0.22.4
- [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rtfd/recommonmark/commits)

Updates `hypothesis` from 6.138.16 to 6.148.13
- [Release notes](https://github.com/HypothesisWorks/hypothesis/releases)
- [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.138.16...hypothesis-python-6.148.13)

Updates `django-debug-toolbar` from 6.0.0 to 6.1.0
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@6.0.0...6.1.0)

---
updated-dependencies:
- dependency-name: django
  dependency-version: '6.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: psycopg2-binary
  dependency-version: 2.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: celery
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: hiredis
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: brotli
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: django-compressor
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: django-post-office
  dependency-version: 3.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: drf-yasg
  dependency-version: 1.21.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: jellyfish
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: markdown
  dependency-version: '3.10'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: xlsxwriter
  dependency-version: 3.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: xmlschema
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: lark
  dependency-version: 1.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: simple-salesforce
  dependency-version: 1.12.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: shapely
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: django-treebeard
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: django-two-factor-auth[phonenumbers]
  dependency-version: 1.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: importlib-metadata
  dependency-version: 8.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: boto3
  dependency-version: 1.42.21
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: django-ses
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: uwsgi
  dependency-version: 2.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: coverage
  dependency-version: 7.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: coveralls
  dependency-version: 4.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: tox
  dependency-version: 4.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: psutil
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: faker
  dependency-version: 40.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: vcrpy
  dependency-version: 8.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: pre-commit
  dependency-version: 4.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: sphinx
  dependency-version: 9.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: prod-deps
- dependency-name: sphinxcontrib-spelling
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-deps
- dependency-name: docutils
  dependency-version: 0.22.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: hypothesis
  dependency-version: 6.148.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: django-debug-toolbar
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/prod-deps-e9de499513 branch from fc4cc59 to 1859a98 Compare January 12, 2026 06:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Maintenance Tag as maintenance if the issue relates to general cleanup, maintenance, etc. Do not delete label.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant