Skip to content

Bump the routine group across 1 directory with 19 updates - #4240

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/routine-f229a16cbe
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/routine-f229a16cbe

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 18, 2026

Copy link
Copy Markdown
Contributor

Bumps the routine group with 19 updates in the / directory:

Package From To
psycopg2-binary 2.9.6 2.9.12
pyyaml 6.0.1 6.0.3
boto3 1.28.1 1.43.72
beautifulsoup4 4.12.2 4.15.0
requests 2.33.0 2.34.2
google-api-python-client 2.155.0 2.198.0
google-auth 2.37.0 2.56.3
django-health-check 3.20.0 3.20.8
djangorestframework 3.16.1 3.18.0
django-oauth-toolkit 1.6.3 1.7.1
django-push-notifications 3.0.0 3.3.0
django-ical 1.9.1 1.9.2
markdown 3.8.1 3.10.3
authlib 1.6.12 1.7.2
matplotlib 3.9.2 3.11.1
django-expo-notifications 0.7.0 0.8.0
tox 4.11.3 4.60.0
coverage 7.4.1 7.15.4
uwsgi 2.0.22 2.0.31

Updates psycopg2-binary from 2.9.6 to 2.9.12

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix infinite loop with malformed interval (:ticket:1835).

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.14.
  • Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).
  • Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.
  • Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.13.
  • Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).
  • ~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.
  • Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Add support for Python 3.12.
  • Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).

... (truncated)

Commits
  • 3a6d9d6 ci: include almalinux in whieel building
  • ebca6bf chore: bump to version 3.9.12
  • 0196f02 build(deps): bump pypa/cibuildwheel from 3.3.1 to 3.4.0
  • d157bdc build(deps): bump docker/setup-qemu-action from 3 to 4
  • 7fccc0f build(deps): bump actions/upload-artifact from 6 to 7
  • d52a61e chore: bump dependency libraries
  • b231d72 chore: fix building binary images
  • 6d76e84 Merge pull request #1836 from psycopg/fix-1835
  • f7e314c fix: overflow in malformed interval
  • eb905c1 docs: replace bare except clause with except Exception
  • Additional commits viewable in compare view

Updates pyyaml from 6.0.1 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

6.0.2

What's Changed

  • Support for Cython 3.x and Python 3.13.

Full Changelog: yaml/pyyaml@6.0.1...6.0.2

6.0.2rc1

  • Support for extension build with Cython 3.x
  • Support for Python 3.13
  • Added PyPI wheels for musllinux on aarch64
Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

6.0.2 (2024-08-06)

Commits

Updates boto3 from 1.28.1 to 1.43.72

Commits
  • a3fc41f Merge branch 'release-1.43.72'
  • 27a2636 Bumping version to 1.43.72
  • 33a1671 Add changelog entries from botocore
  • a0b0f50 Merge branch 'release-1.43.71'
  • f1ea765 Merge branch 'release-1.43.71' into develop
  • 3a07077 Bumping version to 1.43.71
  • 9886147 Add changelog entries from botocore
  • 8c2ae68 Merge branch 'release-1.43.70'
  • 116daa7 Merge branch 'release-1.43.70' into develop
  • 4901fc8 Bumping version to 1.43.70
  • Additional commits viewable in compare view

Updates beautifulsoup4 from 4.12.2 to 4.15.0

Updates requests from 2.33.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates google-api-python-client from 2.155.0 to 2.198.0

Release notes

Sourced from google-api-python-client's releases.

v2.198.0

2.198.0 (2026-06-23)

Features

... (truncated)

Commits

Updates google-auth from 2.37.0 to 2.56.3

Release notes

Sourced from google-auth's releases.

google-auth: v2.56.3

2.56.3 (2026-08-06)

Bug Fixes

  • auth: avoid creating mTLS SSL context for custom async transports (#17825) (fbe33f9), refs #17622
  • auth: only trigger mTLS certificate rotation on mTLS endpoints (#17928) (f7b49ea)
  • auth: properly extract stdout from gnubby webauthn plugin failures (#17885) (744e826)
  • deduplicate x-goog-api-client headers (#17616) (6167e41)
  • oauth2: avoid redundant JWKS network fetches (#17891) (de53298)

Performance Improvements

  • auth: use generator expression in any() to allow short-circuiting (735e565)
  • auth: use generator expression in any() to allow short-circuiting (#17937) (735e565)

google-auth: v2.56.2

2.56.2 (2026-07-21)

Bug Fixes

  • auth: centralize cert discovery logic and steps (#17696) (edc0423)
  • auth: exit early when agent cert config is outside well-known directory (#17762) (61e795a)
  • transport: propagate mTLS adapter to auth session and fix connection leaks (#17689) (8289d32)
  • update _SERVICE_ACCOUNT_EMAIL_PATTERN to require .gserviceaccount.com suffix (#17748) (b60bb04)

google-auth: v2.56.1

2.56.1 (2026-07-17)

Bug Fixes

google-auth: v2.56.0

2.56.0 (2026-07-13)

Features

Bug Fixes

  • google-auth: add aiohttp bound for Python 3.14 (#17654) (b2ec761)
  • google-auth: add bounds for urllib3 and packaging dependencies (#17647) (e9c6265)

... (truncated)

Commits
  • 905bfe3 chore: release main (#17832)
  • ad8f93c fix(api-core): use truthiness check in setup_request_id to support proto-plus...
  • 06dd2c0 chore: bump google-api-core to 2.28.0 (#18003)
  • 08f21a6 fix(proto-plus): add context to TypeErrors during message manipulation (#17682)
  • 32fd479 tests(spanner): avoid table name collisions in tests (#18001)
  • 2207ca6 feat: add pandas-gbq capability helper (#17957)
  • 6167e41 fix: deduplicate x-goog-api-client headers (#17616)
  • 71bc622 docs: add connector libraries overview table to package README (#17939)
  • 1b5c48b fix(bigframes): fix field name typos for ai.generate* functions (#17983)
  • f64ada2 fix: avoid retaining routing parameter instances in cache (#17961)
  • Additional commits viewable in compare view

Updates django-health-check from 3.20.0 to 3.20.8

Release notes

Sourced from django-health-check's releases.

3.20.8

What's Changed

Full Changelog: codingjoe/django-health-check@3.20.7...3.20.8

3.20.7

What's Changed

New Contributors

Full Changelog: codingjoe/django-health-check@3.20.6...3.20.7

3.20.6

What's Changed

Full Changelog: codingjoe/django-health-check@3.20.5...3.20.6

3.20.5

What's Changed

Full Changelog: codingjoe/django-health-check@3.20.4...3.20.5

3.20.4

What's Changed

Full Changelog: codingjoe/django-health-check@3.20.3...3.20.4

3.20.3

What's Changed

Full Changelog: codingjoe/django-health-check@3.20.2...3.20.3

3.20.2

... (truncated)

Commits
  • 9d69500 Add missing subset documentation
  • b499162 Add conainerization documentation (#541)
  • 1c04d5a Switch from Sphinx to MkDocs (#539)
  • af92801 Limit coverage reporting to the package source
  • e2e794e Convert all tests from Django TestCase to pytest (#537)
  • 7fee8b1 Update docs link
  • 994e8ef Update docs links to GH pages
  • e34cca8 Revert "Temporary disable pypi-release"
  • de6abc3 Temporary disable pypi-release
  • b2132fb Add GitHub pages deployment
  • Additional commits viewable in compare view

Updates djangorestframework from 3.16.1 to 3.18.0

Release notes

Sourced from djangorestframework's releases.

3.18.0

What's Changed

Breaking changes

Features

Bug fixes

Other changes

New Contributors

Bumps the routine group with 19 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.6` | `2.9.12` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.3` |
| [boto3](https://github.com/boto/boto3) | `1.28.1` | `1.43.72` |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.12.2` | `4.15.0` |
| [requests](https://github.com/psf/requests) | `2.33.0` | `2.34.2` |
| [google-api-python-client](https://github.com/googleapis/google-api-python-client) | `2.155.0` | `2.198.0` |
| [google-auth](https://github.com/googleapis/google-cloud-python) | `2.37.0` | `2.56.3` |
| [django-health-check](https://github.com/codingjoe/django-health-check) | `3.20.0` | `3.20.8` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.16.1` | `3.18.0` |
| [django-oauth-toolkit](https://github.com/django-oauth/django-oauth-toolkit) | `1.6.3` | `1.7.1` |
| [django-push-notifications](https://github.com/jazzband/django-push-notifications) | `3.0.0` | `3.3.0` |
| [django-ical](https://github.com/jazzband/django-ical) | `1.9.1` | `1.9.2` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.8.1` | `3.10.3` |
| [authlib](https://github.com/authlib/authlib) | `1.6.12` | `1.7.2` |
| [matplotlib](https://github.com/matplotlib/matplotlib) | `3.9.2` | `3.11.1` |
| [django-expo-notifications](https://github.com/DoctorJohn/django-expo-notifications) | `0.7.0` | `0.8.0` |
| [tox](https://github.com/tox-dev/tox) | `4.11.3` | `4.60.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.4.1` | `7.15.4` |
| [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.22` | `2.0.31` |



Updates `psycopg2-binary` from 2.9.6 to 2.9.12
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.6...2.9.12)

Updates `pyyaml` from 6.0.1 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.1...6.0.3)

Updates `boto3` from 1.28.1 to 1.43.72
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.28.1...1.43.72)

Updates `beautifulsoup4` from 4.12.2 to 4.15.0

Updates `requests` from 2.33.0 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.0...v2.34.2)

Updates `google-api-python-client` from 2.155.0 to 2.198.0
- [Release notes](https://github.com/googleapis/google-api-python-client/releases)
- [Commits](googleapis/google-api-python-client@v2.155.0...v2.198.0)

Updates `google-auth` from 2.37.0 to 2.56.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-pubsub-v2.37.0...google-auth-v2.56.3)

Updates `django-health-check` from 3.20.0 to 3.20.8
- [Release notes](https://github.com/codingjoe/django-health-check/releases)
- [Commits](codingjoe/django-health-check@3.20.0...3.20.8)

Updates `djangorestframework` from 3.16.1 to 3.18.0
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.16.1...3.18.0)

Updates `django-oauth-toolkit` from 1.6.3 to 1.7.1
- [Release notes](https://github.com/django-oauth/django-oauth-toolkit/releases)
- [Changelog](https://github.com/django-oauth/django-oauth-toolkit/blob/master/CHANGELOG.md)
- [Commits](django-oauth/django-oauth-toolkit@1.6.3...1.7.1)

Updates `django-push-notifications` from 3.0.0 to 3.3.0
- [Release notes](https://github.com/jazzband/django-push-notifications/releases)
- [Changelog](https://github.com/jazzband/django-push-notifications/blob/master/CHANGELOG.md)
- [Commits](jazzband/django-push-notifications@3.0.0...3.3.0)

Updates `django-ical` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/jazzband/django-ical/releases)
- [Changelog](https://github.com/jazzband/django-ical/blob/master/CHANGES.rst)
- [Commits](jazzband/django-ical@1.9.1...1.9.2)

Updates `markdown` from 3.8.1 to 3.10.3
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.8.1...3.10.3)

Updates `authlib` from 1.6.12 to 1.7.2
- [Release notes](https://github.com/authlib/authlib/releases)
- [Commits](authlib/authlib@1.6.12...v1.7.2)

Updates `matplotlib` from 3.9.2 to 3.11.1
- [Release notes](https://github.com/matplotlib/matplotlib/releases)
- [Commits](matplotlib/matplotlib@v3.9.2...v3.11.1)

Updates `django-expo-notifications` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/DoctorJohn/django-expo-notifications/releases)
- [Commits](DoctorJohn/django-expo-notifications@v0.7.0...v0.8.0)

Updates `tox` from 4.11.3 to 4.60.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.11.3...4.60.0)

Updates `coverage` from 7.4.1 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.4.1...7.15.4)

Updates `uwsgi` from 2.0.22 to 2.0.31

---
updated-dependencies:
- dependency-name: psycopg2-binary
  dependency-version: 2.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine
- dependency-name: boto3
  dependency-version: 1.43.72
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: beautifulsoup4
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: google-api-python-client
  dependency-version: 2.198.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: google-auth
  dependency-version: 2.56.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: django-health-check
  dependency-version: 3.20.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine
- dependency-name: djangorestframework
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: django-oauth-toolkit
  dependency-version: 1.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: django-push-notifications
  dependency-version: 3.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: django-ical
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: routine
- dependency-name: markdown
  dependency-version: 3.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: authlib
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: matplotlib
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: django-expo-notifications
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: tox
  dependency-version: 4.60.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: coverage
  dependency-version: 7.15.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: routine
- dependency-name: uwsgi
  dependency-version: 2.0.31
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: routine
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants