Skip to content

Bump the python-packages group across 1 directory with 20 updates#45

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-packages-a1b18053a9
Open

Bump the python-packages group across 1 directory with 20 updates#45
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-packages-a1b18053a9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 15, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on django-extensions, whoosh, django-environ, django-redis, pysolr, redis, requests, uwsgi, whitenoise, pyprof2calltree, ipdb, ipython, sorl-thumbnail, easy-thumbnails, pytest, django-debug-toolbar, psycopg2-binary, black, pylint and pylint-django to permit the latest version.
Updates django-extensions to 4.1

Release notes

Sourced from django-extensions's releases.

4.1

What's Changed

  • Add: show_permissions command (#1920)
  • Improvement: graph_models, style per app (#1848)
  • Fix: JSONField, bulk_update's (#1924)

New Contributors

Full Changelog: django-extensions/django-extensions@4.0...4.1

Changelog

Sourced from django-extensions's changelog.

4.1

Changes:

  • Add: show_permissions command (#1920)
  • Improvement: graph_models, style per app (#1848)
  • Fix: JSONField, bulk_update's (#1924)

4.0

Changes:

  • Improvement: Support for Python 3.12 and 3.13
  • Improvement: Support for Django 5.x
  • Improvement: Switch from setup.{cfg,py} to pyproject.toml
  • Improvement: graph_models, Add option to display field choices in graph_models (#1854)
  • Improvement: graph_models, Add webp support (#1857)
  • Improvement: graph_models, Support for ordering edges on pydot/dot/graphviz (#1914)
  • Improvement: mail_debug, Update mail_debug command to use aiosmtpd (#1880)
  • Improvement: shell_plus, Improve error message for missing import (#1898)
  • Improvement: reset_db, Add reset_db support for django_tenants (#1855)
  • Improvement: docs, various improvements (#1852, #1888, #1882, #1901, #1912, #1913)
  • Improvement: jobs, Handle non-package modules when looking for job definitions (#1887)
  • Improvement: Add django-prometheus DB backends support (#1800)
  • Improvement: Call post_command when the command raises an unhandled exception (#1837)
  • Fix: sqldiff, do not consider ('serial', 'integer') nor ('bigserial', 'bigint') as a field-type-differ (#1867)
  • Fix: shell_plus, Fix start up order and add history (#1869)
  • Remove pipchecker and associated tests (#1906)
  • Following Django's release numbering style more closely (see https://docs.djangoproject.com/en/5.2/internals/release-process/ )

3.2.3

Changes:

  • Improvement: Add support for psycopg3 (#1814)
  • Improvement: runserver_plus, autoreload on template change (#1796)
  • Improvement: highlighting, test_should_highlight_bash_syntax_without_name to include whitespace spans (#1797)
  • Improvement: tests, add Python 3.11 to tox and actions to formally support python 3.11 (#1786)
  • Improvement: runserver_plus, Send the file_changed event when a reload is triggered (#1775)
  • Improvement: runserver_plus, Add REMOTE_USER to werkzeug environment (#1708)
  • Improvement: pipchecker, force pip to use pkg_resources as backend for resolving distributions (#1782)
  • Fix: Fix error with lack of PosixPath support (#1785)
  • Fix: Cleanup http: links (#1798)

3.2.1

... (truncated)

Commits

Updates whoosh to 2.7.4

Commits

Updates django-environ to 0.13.0

Release notes

Sourced from django-environ's releases.

v0.13.0

v0.13.0_ - 18-February-2026

Added +++++

  • Added optional warnings when defaults are used [#582](https://github.com/joke2k/django-environ/issues/582) <https://github.com/joke2k/django-environ/pull/582>_.
  • Added choices argument support for value validation in Env.str(...) [#555](https://github.com/joke2k/django-environ/issues/555) <https://github.com/joke2k/django-environ/pull/555>_.
  • Added Valkey support via valkey:// and valkeys:// cache URL schemes [#554](https://github.com/joke2k/django-environ/issues/554) <https://github.com/joke2k/django-environ/pull/554>_.
  • Added support for rediss:// scheme in channels URL parsing [#573](https://github.com/joke2k/django-environ/issues/573) <https://github.com/joke2k/django-environ/pull/573>_.
  • Added django-prometheus database backend aliases to DB URL parsing schemes [#559](https://github.com/joke2k/django-environ/issues/559) <https://github.com/joke2k/django-environ/pull/559>_.

Changed +++++++

  • Declared support for Python 3.14 [#580](https://github.com/joke2k/django-environ/issues/580) <https://github.com/joke2k/django-environ/pull/580>_.
  • Declared support for Django 5.2 and Django 6.0 [#578](https://github.com/joke2k/django-environ/issues/578) <https://github.com/joke2k/django-environ/pull/578>_.

Fixed +++++

  • Improved type hint coverage and related lint issues [#546](https://github.com/joke2k/django-environ/issues/546) <https://github.com/joke2k/django-environ/pull/546>_.
  • Fixed typos in the FAQ page [#445](https://github.com/joke2k/django-environ/issues/445) <https://github.com/joke2k/django-environ/pull/445>_.
Changelog

Sourced from django-environ's changelog.

v0.13.0_ - 18-February-2026

Added +++++

  • Added optional warnings when defaults are used [#582](https://github.com/joke2k/django-environ/issues/582) <https://github.com/joke2k/django-environ/pull/582>_.
  • Added choices argument support for value validation in Env.str(...) [#555](https://github.com/joke2k/django-environ/issues/555) <https://github.com/joke2k/django-environ/pull/555>_.
  • Added Valkey support via valkey:// and valkeys:// cache URL schemes [#554](https://github.com/joke2k/django-environ/issues/554) <https://github.com/joke2k/django-environ/pull/554>_.
  • Added support for rediss:// scheme in channels URL parsing [#573](https://github.com/joke2k/django-environ/issues/573) <https://github.com/joke2k/django-environ/pull/573>_.
  • Added django-prometheus database backend aliases to DB URL parsing schemes [#559](https://github.com/joke2k/django-environ/issues/559) <https://github.com/joke2k/django-environ/pull/559>_.

Changed +++++++

  • Declared support for Python 3.14 [#580](https://github.com/joke2k/django-environ/issues/580) <https://github.com/joke2k/django-environ/pull/581>_.
  • Declared support for Django 5.2 and Django 6.0 [#578](https://github.com/joke2k/django-environ/issues/578) <https://github.com/joke2k/django-environ/pull/578>_.

Fixed +++++

  • Improved type hint coverage and related lint issues [#546](https://github.com/joke2k/django-environ/issues/546) <https://github.com/joke2k/django-environ/pull/546>_.
  • Fixed typos in the FAQ page [#445](https://github.com/joke2k/django-environ/issues/445) <https://github.com/joke2k/django-environ/pull/445>_.

v0.12.1_ - 13-February-2026

Fixed +++++

  • Fixed PostgreSQL cluster URL parsing with bracketed IPv6 hosts in recent Python versions, preventing failures in runtime URL parsing and related regression tests [#574](https://github.com/joke2k/django-environ/issues/574) <https://github.com/joke2k/django-environ/issues/574>_.
  • Fixed debug logging in Env.get_value() to avoid evaluating lazy default objects when DEBUG logging is enabled [#571](https://github.com/joke2k/django-environ/issues/571) <https://github.com/joke2k/django-environ/issues/571>_.

v0.12.0_ - 8-November-2024

Fixed +++++

  • Include prefix in the ImproperlyConfigured error message [#513](https://github.com/joke2k/django-environ/issues/513) <https://github.com/joke2k/django-environ/issues/513>_.

... (truncated)

Commits
  • 00746d0 docs: add Django 5.2 and 6.0 support to README
  • d1f1159 Release 0.13.0
  • d82e361 Add optional warnings when defaults are used (#582)
  • a78f7c8 Fixed some typos in the FAQ page (#445)
  • 24b299e Feature/add choice parameter and raise an exception if fetched value is not w...
  • c441413 Add django-prometheus database backends to DB_SCHEMES (#559)
  • 98a0aad Fix lint issues in environ type hints
  • f4e77e4 feat(cache): add valkey and valkeys as allowed schemes (#554)
  • dd4d308 Add type hints (#546)
  • 3137c4f Support lower case options for Django Redis cache backend (#550)
  • Additional commits viewable in compare view

Updates django-redis to 7.0.0

Release notes

Sourced from django-redis's releases.

7.0.0

django-redis 7.0.0 (2026-06-02)

Features

  • Added the ability to pass redis username in the cache options (#657)
  • RedisCache does not attempt to close clients which have not been initialized. (#796)
  • Add sorted set operations (zadd, zrange, zrem, etc.) and mixins for RedisCache (#797)
  • Centralize configuration in pyproject.toml, drop EoL Python & Django versions, and add support & testing for modern Python & Django versions. (#820)
  • Provide TypeVar defaults & provide initial typing for RedisCache. (#829)

Bug Fixes

  • Fix IntEnum encoding (#602)
  • Fix incorrect Redis typing that relied on the legacy types-redis package, and update the public API to avoid exposing redis-py key types (the encode/decode/make_key methods allow a different API surface). (#822)

Miscellaneous

  • Drop support for Django 5.0 (EOL) (#779)
  • Clean & organize ruff config (#781)
  • Replace black with ruff format (#782)
  • Update RedisCache.close to not forward kwargs to the client implementation. (#788)
  • Rename 'name' parameter to 'key' in all sorted set methods for better consistency with Redis terminology (#811)
  • Fix hash method parameters: rename 'name' → 'key', 'key' → 'field' to align with Redis/Valkey terminology. Add version parameter to hlen() and hkeys(). Fix make_key() to only apply to hash key, not fields. (#812)
  • pre-commit autoupdate (#819)
  • Use from __future__ import annotations to postpone evaluation of annotations. (#823)
  • Increase mypy strictness, fix typing configuration, and fix type errors. (#824)
  • This change updates the compose configuration, and moves it to tests directory as it is only for testing. (#825)
  • Remove code handling unsupported Django versions (#826)
  • Increase mypy type coverage & update strictness overrides to only target specific modules (#827)
Changelog

Sourced from django-redis's changelog.

django-redis 7.0.0 (2026-06-02)

Features

  • Added the ability to pass redis username in the cache options ([#657](https://github.com/jazzband/django-redis/issues/657) <https://github.com/jazzband/django-redis/issues/657>_)
  • RedisCache does not attempt to close clients which have not been initialized. ([#796](https://github.com/jazzband/django-redis/issues/796) <https://github.com/jazzband/django-redis/issues/796>_)
  • Add sorted set operations (zadd, zrange, zrem, etc.) and mixins for RedisCache ([#797](https://github.com/jazzband/django-redis/issues/797) <https://github.com/jazzband/django-redis/issues/797>_)
  • Centralize configuration in pyproject.toml, drop EoL Python & Django versions, and add support & testing for modern Python & Django versions. ([#820](https://github.com/jazzband/django-redis/issues/820) <https://github.com/jazzband/django-redis/issues/820>_)
  • Provide TypeVar defaults & provide initial typing for RedisCache. ([#829](https://github.com/jazzband/django-redis/issues/829) <https://github.com/jazzband/django-redis/issues/829>_)

Bug Fixes

  • Fix IntEnum encoding ([#602](https://github.com/jazzband/django-redis/issues/602) <https://github.com/jazzband/django-redis/issues/602>_)
  • Fix incorrect Redis typing that relied on the legacy types-redis package, and update the public API to avoid exposing redis-py key types (the encode/decode/make_key methods allow a different API surface). ([#822](https://github.com/jazzband/django-redis/issues/822) <https://github.com/jazzband/django-redis/issues/822>_)

Miscellaneous

  • Drop support for Django 5.0 (EOL) ([#779](https://github.com/jazzband/django-redis/issues/779) <https://github.com/jazzband/django-redis/issues/779>_)
  • Clean & organize ruff config ([#781](https://github.com/jazzband/django-redis/issues/781) <https://github.com/jazzband/django-redis/issues/781>_)
  • Replace black with ruff format ([#782](https://github.com/jazzband/django-redis/issues/782) <https://github.com/jazzband/django-redis/issues/782>_)
  • Update RedisCache.close to not forward kwargs to the client implementation. ([#788](https://github.com/jazzband/django-redis/issues/788) <https://github.com/jazzband/django-redis/issues/788>_)
  • Rename 'name' parameter to 'key' in all sorted set methods for better consistency with Redis terminology ([#811](https://github.com/jazzband/django-redis/issues/811) <https://github.com/jazzband/django-redis/issues/811>_)
  • Fix hash method parameters: rename 'name' → 'key', 'key' → 'field' to align with Redis/Valkey terminology. Add version parameter to hlen() and hkeys(). Fix make_key() to only apply to hash key, not fields. ([#812](https://github.com/jazzband/django-redis/issues/812) <https://github.com/jazzband/django-redis/issues/812>_)
  • pre-commit autoupdate ([#819](https://github.com/jazzband/django-redis/issues/819) <https://github.com/jazzband/django-redis/issues/819>_)
  • Use from __future__ import annotations to postpone evaluation of annotations. ([#823](https://github.com/jazzband/django-redis/issues/823) <https://github.com/jazzband/django-redis/issues/823>_)
  • Increase mypy strictness, fix typing configuration, and fix type errors. ([#824](https://github.com/jazzband/django-redis/issues/824) <https://github.com/jazzband/django-redis/issues/824>_)
  • This change updates the compose configuration, and moves it to tests directory as it is only for testing. ([#825](https://github.com/jazzband/django-redis/issues/825) <https://github.com/jazzband/django-redis/issues/825>_)
  • Remove code handling unsupported Django versions ([#826](https://github.com/jazzband/django-redis/issues/826) <https://github.com/jazzband/django-redis/issues/826>_)
  • Increase mypy type coverage & update strictness overrides to only target specific modules ([#827](https://github.com/jazzband/django-redis/issues/827) <https://github.com/jazzband/django-redis/issues/827>_)

django-redis 6.0.0 (2025-06-17)

Features

  • Support HashMaps ([#598](https://github.com/jazzband/django-redis/issues/598) <https://github.com/jazzband/django-redis/issues/598>_)
  • Support gzip compression ([#688](https://github.com/jazzband/django-redis/issues/688) <https://github.com/jazzband/django-redis/issues/688>_)
  • Support for sets and support basic operations, sadd, scard, sdiff, sdiffstore, sinter, sinterstore, smismember, sismember, smembers, smove, spop, srandmember, srem, sscan, sscan_iter, sunion, sunionstore ([#730](https://github.com/jazzband/django-redis/issues/730) <https://github.com/jazzband/django-redis/issues/730>_)

... (truncated)

Commits
  • 0ee6b11 release 7.0 (#830)
  • fcc882b feat: Allow cache OPTIONS to specify USERNAME (#657)
  • 85c5c3d fix: fix encoding IntEnum values (#602)
  • 8558af4 feat: update RedisCache.close to check for client before closing (#796)
  • 53a1de3 feat: provide TypeVar defaults & provide initial typing for RedisCache (#829)
  • 308e2e1 feat: remove **kwargs from self.client.close() call in RedisCache.close() (#788)
  • 2c0e853 feat: increase mypy type coverage & move strictness overrides to specific mod...
  • 8fb199e feat: remove code handling unsupported Django versions (#826)
  • 5d54a25 tests: move & update compose configuration (#825)
  • ca1f368 feat: increase mypy strictness, fix typing configuration, and fix type errors...
  • Additional commits viewable in compare view

Updates pysolr to 3.11.0

Release notes

Sourced from pysolr's releases.

v3.11.0

What's Changed

Dependabot

Pre-commit

New Contributors

Full Changelog: django-haystack/pysolr@v3.10.0...v3.11.0

Changelog

Sourced from pysolr's changelog.

Changelog

%%version%% (unreleased)

New


- Support for nested documents (closes [#170](https://github.com/django-haystack/pysolr/issues/170)) [Chris Adams]

This adds support for Solr's nested documents in Solr.add


Thanks to @​skirsdeda for the patch


    

  • 

    ZooKeeper can receive an existing KazooClient instance. [Chris Adams]
    

    This simplifies advanced customization by allowing you to pass in an existing instance which is configured in whatever manner necessary.
    

    • 



Changes

  • Logging: pass full request body + headers as extra data. [Chris Adams]

    This doesn't affect the normal logging output but is helpful for aggregation systems such as Sentry where the full request information may be displayed for debugging purposes

  • Basic max_retries for ZooKeeper. [Chris Adams]

    Kazoo sets the default to hang forever which is frequently not the desired error-handling behavior. This makes it easier to set a limit on the number of retries and we use it in testing to avoid the suite hanging endlessly.

  • Better error message for Solr failures. [Chris Adams]

    Previously when ZooKeeper had no active shards pysolr would return an error when random.shuffle received an empty list. Now it will raise an exception which will hopefully indicate just how bad the situation is.

  • Remove del methods. [Chris Adams]

    The del methods were added in an attempt to avoid Kazoo-related failures as part of the SolrCloud support but can cause other problems on different versions of Python (see #193).

    Since the errors in question were observed during testing this commit removes the del methods and we will have to find an alternative for making tests fail safely.

  • Custom Commit Policy . [Evan Fagerberg]

... (truncated)

Commits
  • 9243537 Format Python code with ruff-format instead of black (#520)
  • 13deb10 feat: Configure Ruff linter pre-commit to perform write operations (#519)
  • 030d252 Merge pull request #518 from DhavalGojiya/python3.9-deprecation
  • a1fe28c package: Update minimum required 'requests' module to >=2.32.5
  • 08588af feat: Remove compatibility code for Python versions below 3.10
  • 04635cd feat: Remove six package as a dependency from the project
  • 27e5c6c feat: Update Pipenv to Python 3.10+ and drop support for 3.9 and below
  • 7ecd52d fix: Remove Python 3.9 references from GitHub Actions workflow and tox
  • 4d5f79c feat: Drop support for Python 3.9 and below
  • 2a8ec8d fix: Remove setup.cfg to eliminate Python 2 tag from distribution (#517)
  • Additional commits viewable in compare view

Updates redis to 8.0.0

Release notes

Sourced from redis's releases.

8.0.0

Changes

🚀 Highlights

Async Cluster PubSub

This release introduces full asyncio Cluster PubSub support, bringing shard-channel capabilities (SSUBSCRIBE, SUNSUBSCRIBE, SPUBLISH) to the async RedisCluster client. The new ClusterPubSub class in redis.asyncio.cluster automatically routes shard-channel subscriptions to the correct cluster node based on key-slot hashing, manages per-node PubSub connections, and supports round-robin message retrieval across nodes. Users can create a cluster pubsub instance via RedisCluster.pubsub() and use ssubscribe(), sunsubscribe(), and get_sharded_message() just as they would with the sync cluster client.

Keyspace and subkey notifications

Redis Keyspace Notifications are now supported for standalone and cluster deployments in both sync and async modes. New classes — KeyspaceNotifications, ClusterKeyspaceNotifications, AsyncKeyspaceNotifications, and AsyncClusterKeyspaceNotifications — provide a high-level API for keyspace/keyevent subscriptions and subkey notification families: subkeyspace, subkeyevent, subkeyspaceitem, and subkeyspaceevent. Convenience methods like subscribe_keyspace(), subscribe_keyevent(), subscribe_subkeyspace(), subscribe_subkeyevent(), subscribe_subkeyspaceitem(), and subscribe_subkeyspaceevent() simplify common patterns, with channel classes for both key and subkey channels.

In cluster mode, subscriptions are managed across primary nodes because each node emits notifications only for keys it owns, with built-in topology-change handling. Sync run_in_thread() and async listen() workflows are supported.

Redis Array commands(https://redis.io/docs/latest/develop/data-types/arrays/)

redis-py now supports Redis Arrays, a preview Redis data type for sparse, index-addressable sequences of strings. New AR* command helpers cover indexed reads/writes, range scans, deletion, cursor-based insertion, ring-buffer writes, metadata, text search, and aggregation, including ARGET, ARSET, ARMGET, ARMSET, ARSCAN, ARGREP, ARRING, and AROP.

Type Hints Improvements (breaking changes)

The @overload pattern has been applied systematically across core commands (core.py), VectorSet commands, and module commands (Search, JSON, TimeSeries, Bloom filters) to provide distinct return types for sync and async clients. Previously, methods returned a combined ResponseT (i.e., Union[Awaitable[Any], Any]), which caused static analysis tools like mypy and Pyright to flag false positives. Now, sync clients see concrete return types (e.g., int, bool, list[str]) while async clients see Awaitable[...] wrappers. This is a breaking change for type-checking only—runtime behavior is unchanged, but code relying on the old union return types in type annotations may need updates. Two new protocol types, SyncClientProtocol and AsyncClientProtocol, are used in overload signatures to enable this distinction.

RESP3 by default with opt-in unified responses

redis-py 8.0.0 now uses RESP3 on the wire by default while preserving legacy RESP2-compatible Python response shapes for existing applications (#4052). Protocol-independent unified response shapes are available by setting legacy_responses=False, so affected commands return the same Python structure with RESP2 or RESP3.

Use protocol=2 to force RESP2 on the wire, protocol=3 to opt into native RESP3 response shapes, or legacy_responses=False to migrate to unified responses. See https://github.com/redis/redis-py/blob/HEAD/docs/unified_responses.rst and https://github.com/redis/redis-py/blob/HEAD/specs/unified_responses_migration_guide.md for the affected commands and migration details.

Connection and retry defaults

Default connection settings were updated: socket_timeout and socket_connect_timeout now default to 5 seconds, TCP keepalive is enabled by default, socket reads use a 32 KB buffer, connection pools default to max_connections=100, and retry defaults now use 10 attempts with exponential jitter backoff.

Note: socket_timeout can affect blocking commands such as BLPOP/BRPOP; if a command blocks longer than the client socket timeout, it may raise TimeoutError before the command timeout elapses (#2807).

🧪 Experimental Features

  • Added support for new array commands (#4055)

🚀 New Features

  • Support Cluster PubSub in asyncio (#3736)
  • Add Redis Keyspace Notifications Support for Redis Cluster (#3962)
  • Add random load balancing strategy which allows for use of the primary (#4027)
  • Add FPHA (floating-point homogeneous array) arg support to JSON.SET (#4011)
  • Added custom Claude command + XNACK command support (#4030)
  • Adding Time Series Multiple Aggregators support (#4035)
  • Adding support for new COUNT aggregator for some sorted set commands - ZINTER, ZINTERSTORE, ZUNION, ZUNIONSTORE (#4034)
  • Adding support for new INCREX command (#4067 #4077)
  • Add support for PubSub subscriptions with binary channel names and handlers (#4068)

... (truncated)

Commits
  • 733f80e Updates in default connection and retry settings (#4082)
  • a68a16c Updating Redis supported versions in README.md and lib version to 8.0.0
  • 43a41d3 Updating INCREX command arg - SATURATE now controls overflow behaviour (#4077)
  • 1496deb Preserve explicit None for client metadata config (#4081)
  • 57dc08c Avoid zero-timeout async reads in hiredis connections readiness checks and re...
  • cd54ddd fix(typing): correct type annotation for XReadResponse (#4046)
  • ab2d41f Add support for PubSub subscriptions with binary channel names and handlers (...
  • ef24dc9 Randomize cluster startup node order during topology refresh (#4060)
  • b604015 Add CLAUDE.md and /sync-claude-md skill for managing (#4066)
  • 2b8b4fc Fix flaky tests (#4071)
  • Additional commits viewable in compare view

Updates requests to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates uwsgi to 2.0.31

Updates whitenoise to 6.12.0

Changelog

Sourced from whitenoise's changelog.

6.12.0 (2026-02-27)

  • Drop Python 3.9 support.
  • Fix potential unauthorised file access vulnerability in "autorefesh" mode. See PR [#684](https://github.com/evansd/whitenoise/issues/684) <https://github.com/evansd/whitenoise/pull/684>__ for details, and a reminder that autorefresh mode has always been documented as unsuitable for production use. Thanks Seth Larson for reporting.

6.11.0 (2025-09-18)

  • Support Django 6.0.

6.10.0 (2025-09-09)

  • Support Python 3.14.

6.9.0 (2025-02-06)

  • Support Django 5.2.

6.8.2 (2024-10-29)

  • Fix compression speed gains for the thread pool when running Django’s collectstatic. The thread pool had no effect due to use of a generator for the results, a refactoring introduced when reviewing the initial PR.

    Thanks to Petr Přikryl for the investigation and fix in PR [#616](https://github.com/evansd/whitenoise/issues/616) <https://github.com/evansd/whitenoise/pull/616>__.

6.8.1 (2024-10-28)

  • Raise any errors from threads in the whitenoise.compress command.

    Regression in 6.8.0. Thanks to Tom Grainger for the spotting this with a comment on PR [#484](https://github.com/evansd/whitenoise/issues/484) <https://github.com/evansd/whitenoise/pull/484#discussion_r1818989096>__.

6.8.0 (2024-10-28)

  • Drop Django 3.2 to 4.1 support.

  • Drop Python 3.8 support.

  • Support Python 3.13.

  • Fix a bug introduced in version 6.0.0 where Range requests could lead to database connection errors in other requests.

    Thanks to Per Myren for the detailed investigation and fix in PR [#612](https://github.com/evansd/whitenoise/issues/612) <https://github.com/evansd/whitenoise/pull/612>__.

... (truncated)

Commits

Updates pyprof2calltree to 1.4.5

Commits
  • f142cd7 Update to v1.4.5
  • de3e103 Merge pull request #53 from jdufresne/eggs
  • 96f837f Merge pull request #52 from jdufresne/test
  • babcfaf Merge pull request #51 from jdufresne/py38
  • d3845da Remove deprecated eggsecutable script
  • 6bec6e4 Remove use of deprecated setuptools test command
  • 811ff11 Add testing and support for Python 3.8
  • 62b99c7 Bump version to v1.4.4
  • f1b86f7 Merge pull reque...

    Description has been truncated

@dependabot
Bump the python-packages group across 1 directory with 20 updates
99a7d97 
Updates the requirements on [django-extensions](https://github.com/django-extensions/django-extensions), [whoosh](https://bitbucket.org/mchaput/whoosh), [django-environ](https://github.com/joke2k/django-environ), [django-redis](https://github.com/jazzband/django-redis), [pysolr](https://github.com/django-haystack/pysolr), [redis](https://github.com/redis/redis-py), [requests](https://github.com/psf/requests), [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/), [whitenoise](https://github.com/evansd/whitenoise), [pyprof2calltree](https://github.com/pwaller/pyprof2calltree), [ipdb](https://github.com/gotcha/ipdb), [ipython](https://github.com/ipython/ipython), [sorl-thumbnail](https://github.com/jazzband/sorl-thumbnail), [easy-thumbnails](https://github.com/SmileyChris/easy-thumbnails), [pytest](https://github.com/pytest-dev/pytest), [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar), [psycopg2-binary](https://github.com/psycopg/psycopg2), [black](https://github.com/psf/black), [pylint](https://github.com/pylint-dev/pylint) and [pylint-django](https://github.com/pylint-dev/pylint-django) to permit the latest version.

Updates `django-extensions` to 4.1
- [Release notes](https://github.com/django-extensions/django-extensions/releases)
- [Changelog](https://github.com/django-extensions/django-extensions/blob/main/CHANGELOG.md)
- [Commits](django-extensions/django-extensions@2.2.0...4.1)

Updates `whoosh` to 2.7.4
- [Commits](https://bitbucket.org/mchaput/whoosh/commits)

Updates `django-environ` to 0.13.0
- [Release notes](https://github.com/joke2k/django-environ/releases)
- [Changelog](https://github.com/joke2k/django-environ/blob/develop/CHANGELOG.rst)
- [Commits](joke2k/django-environ@v0.4...v0.13.0)

Updates `django-redis` to 7.0.0
- [Release notes](https://github.com/jazzband/django-redis/releases)
- [Changelog](https://github.com/jazzband/django-redis/blob/master/CHANGELOG.rst)
- [Commits](jazzband/django-redis@4.12.0...7.0.0)

Updates `pysolr` to 3.11.0
- [Release notes](https://github.com/django-haystack/pysolr/releases)
- [Changelog](https://github.com/django-haystack/pysolr/blob/master/CHANGELOG.rst)
- [Commits](django-haystack/pysolr@v3.9.0...v3.11.0)

Updates `redis` to 8.0.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@3.5.0...v8.0.0)

Updates `requests` to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.25.0...v2.34.2)

Updates `uwsgi` to 2.0.31

Updates `whitenoise` to 6.12.0
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.7.0...6.12.0)

Updates `pyprof2calltree` to 1.4.5
- [Release notes](https://github.com/pwaller/pyprof2calltree/releases)
- [Commits](pwaller/pyprof2calltree@v1.4.0...v1.4.5)

Updates `ipdb` to 0.13.13
- [Changelog](https://github.com/gotcha/ipdb/blob/master/HISTORY.txt)
- [Commits](gotcha/ipdb@0.13.0...0.13.13)

Updates `ipython` to 9.14.1
- [Release notes](https://github.com/ipython/ipython/releases)
- [Commits](ipython/ipython@7.12.0...9.14.1)

Updates `sorl-thumbnail` to 13.0.0
- [Release notes](https://github.com/jazzband/sorl-thumbnail/releases)
- [Changelog](https://github.com/jazzband/sorl-thumbnail/blob/master/CHANGES.rst)
- [Commits](jazzband/sorl-thumbnail@12.10.0...13.0.0)

Updates `easy-thumbnails` to 2.10.1
- [Release notes](https://github.com/SmileyChris/easy-thumbnails/releases)
- [Changelog](https://github.com/SmileyChris/easy-thumbnails/blob/master/CHANGES.rst)
- [Commits](SmileyChris/easy-thumbnails@2.9.0...2.10.1)

Updates `pytest` from 9.0.3 to 9.1.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.0)

Updates `django-debug-toolbar` to 6.3.0
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@2.2...6.3.0)

Updates `psycopg2-binary` to 2.9.12
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.6...2.9.12)

Updates `black` to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@24.4.2...26.5.1)

Updates `pylint` to 4.0.6
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.2.4...v4.0.6)

Updates `pylint-django` to 2.7.0
- [Release notes](https://github.com/pylint-dev/pylint-django/releases)
- [Changelog](https://github.com/pylint-dev/pylint-django/blob/master/CHANGELOG.rst)
- [Commits](pylint-dev/pylint-django@v2.6.0...v2.7.0)

---
updated-dependencies:
- dependency-name: django-extensions
  dependency-version: '4.1'
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: whoosh
  dependency-version: 2.7.4
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: django-environ
  dependency-version: 0.13.0
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: django-redis
  dependency-version: 7.0.0
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: pysolr
  dependency-version: 3.11.0
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: redis
  dependency-version: 8.0.0
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: uwsgi
  dependency-version: 2.0.31
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: whitenoise
  dependency-version: 6.12.0
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: pyprof2calltree
  dependency-version: 1.4.5
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: ipdb
  dependency-version: 0.13.13
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: ipython
  dependency-version: 9.14.1
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: sorl-thumbnail
  dependency-version: 13.0.0
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: easy-thumbnails
  dependency-version: 2.10.1
  dependency-type: direct:production
  dependency-group: python-packages
- dependency-name: pytest
  dependency-version: 9.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: django-debug-toolbar
  dependency-version: 6.3.0
  dependency-type: direct:development
  dependency-group: python-packages
- dependency-name: psycopg2-binary
  dependency-version: 2.9.12
  dependency-type: direct:development
  dependency-group: python-packages
- dependency-name: black
  dependency-version: 26.5.1
  dependency-type: direct:development
  dependency-group: python-packages
- dependency-name: pylint
  dependency-version: 4.0.6
  dependency-type: direct:development
  dependency-group: python-packages
- dependency-name: pylint-django
  dependency-version: 2.7.0
  dependency-type: direct:development
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants