chore(deps): bump the pip-api group across 1 directory with 6 updates by dependabot[bot] · Pull Request #1258 · desec-io/desec-stack

dependabot · 2026-09-04T18:04:15Z

Updates the requirements on celery, cryptography, django-prometheus, pyotp, psycopg and requests to permit the latest version.
Updates celery to 5.6.3

Release notes

Sourced from celery's releases.

v5.6.3

What's Changed

Fix Django worker recursion bug + defensive checks for pool_cls.module by @maycuatroi1 in celery/celery#10048

Docs: Update user_preload_options example to use click. by @jorsyk in celery/celery#10056

Fix invalid configuration key "bootstrap_servers" in Kafka demo by @jorsyk in celery/celery#10060

Fix broken images on PyPI page by @Timour-Ilyas in celery/celery#10066

Remove broken reference. by @sueannioanis in celery/celery#10071

Removed --dist=loadscope from smoke tests by @Nusnus in celery/celery#10073

Docs: Clarify task_retry signal args may be None by @GangEunzzang in celery/celery#10076

Update example for Django by @sbc-khacnha in celery/celery#10081

Make tests compatible with pymongo >= 4.16 by @cjwatson in celery/celery#10074

fix: source install of cassandra-driver by @Izzette in celery/celery#10105

fix: register task cross-reference role in Sphinx extension by @veeceey in celery/celery#10100

fix: avoid cycle detection in native delayed delivery by @Izzette in celery/celery#10095

fix(asynpool): avoid AttributeError when proc lacks _sentinel_poll by @mriddle in celery/celery#10086

fix dusk_astronomical horizon sign (+18 -> -18) by @Mr-Neutr0n in celery/celery#10121

Fix/10106 onupdate col use lambda func by @ChickenBenny in celery/celery#10108

Fix warm shutdown RuntimeError with eventlet>=0.37.0 (#10083) by @ChickenBenny in celery/celery#10123

Fix 10109 db backend connection health by @ChickenBenny in celery/celery#10124

Database Backend filter unsupport sql engine arguments with nullpool #7355 by @ChickenBenny in celery/celery#10134

fix(beat): correct argument order in Service.reduce by @bysiber in celery/celery#10137

ci: declare explicit read-only token permissions in workflow jobs by @Rohan5commit in celery/celery#10139

chore: 'boto3to' to 'boto3 to' by @cuiweixie in celery/celery#10133

Database Backend: Add missing index on date_done (Fixes #10097) by @ChickenBenny in celery/celery#10098

docs: fix typo in CONTRIBUTING.rst by @Rohan5commit in celery/celery#10141

Refer to Flower / Prometheus for monitoring by @WilliamDEdwards in celery/celery#10140

docs: remove duplicated words in broker and routing docs by @Rohan5commit in celery/celery#10146

docs: fix stale version reference and grammar in README by @kelsonbrito50 in celery/celery#10145

docs: fix wording in Celery 5.3 worker pool notes by @Rohan5commit in celery/celery#10149

docs: fix duplicated wording in 3.1 changelog entry by @Rohan5commit in celery/celery#10152

docs: fix changelog typo in context manager wording by @Rohan5commit in celery/celery#10144

Fix/10096 worker fails to reconnect after redis failover by @ChickenBenny in celery/celery#10151

Improve on_after_finalize signal documentation by @Br1an67 in celery/celery#10155

Add non-commutative example to clarify partial arg ordering in canvas docs by @Br1an67 in celery/celery#10157

Remove redundant test_isa_mapping test (fixes #10077) by @daniel7an in celery/celery#10103

Upgrade pytest-celery to >=1.3.0 and adopt PYTEST_CELERY_PKG build arg by @Nusnus in celery/celery#10162

Remove deprecated args from redis get_connection call by @JaeHyuckSa in celery/celery#10036

Fix #6912 rpc backend reconnection error by @ChickenBenny in celery/celery#10179

Fix NameError with TYPE_CHECKING annotations on Python 3.14+ (PEP 649) by @drichardson in celery/celery#10165

docs: Add elaboration on prefetch multiplier settings (worker_prefetch_multiplier) and worker_eta_task_limit by @tsangwailam in celery/celery#10181

Fix O(K²) message bloat in a chain of chords by @Borzik in celery/celery#10171

Fix mock connection interfaces to prevent TypeError during exception handling by @ChickenBenny in celery/celery#10178

fix(trace): dispatch chain/callbacks on dedup fast-path for redelivered tasks by @aurangzaib048 in celery/celery#10159

Extract reconnect_on_error to BaseResultConsumer by @ChickenBenny in celery/celery#10189

pep 649 by @ericbuehl in celery/celery#10187

Fix#9722 friendly status errors for CLI by @ChickenBenny in celery/celery#10190

docs: clarify after_return behavior for retried tasks by @KianAnbarestani in celery/celery#10192

Add compression header to message protocol docs by @Br1an67 in celery/celery#10156

docs: fix duplicated word in bootsteps comment by @Rohan5commit in celery/celery#10153

Remove outdated autoreloader section from extending docs by @Br1an67 in celery/celery#10154

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.3

:release-date: 2026-03-26 :release-by: Tomer Nosrati

What's Changed


- Fix Django worker recursion bug + defensive checks for pool_cls.__module__ ([#10048](https://github.com/celery/celery/issues/10048))
- Docs: Update user_preload_options example to use click. ([#10056](https://github.com/celery/celery/issues/10056))
- Fix invalid configuration key "bootstrap_servers" in Kafka demo ([#10060](https://github.com/celery/celery/issues/10060))
- Fix broken images on PyPI page ([#10066](https://github.com/celery/celery/issues/10066))
- Remove broken reference. ([#10071](https://github.com/celery/celery/issues/10071))
- Removed --dist=loadscope from smoke tests ([#10073](https://github.com/celery/celery/issues/10073))
- Docs: Clarify task_retry signal args may be None ([#10076](https://github.com/celery/celery/issues/10076))
- Update example for Django ([#10081](https://github.com/celery/celery/issues/10081))
- Make tests compatible with pymongo >= 4.16 ([#10074](https://github.com/celery/celery/issues/10074))
- fix: source install of cassandra-driver ([#10105](https://github.com/celery/celery/issues/10105))
- fix: register task cross-reference role in Sphinx extension ([#10100](https://github.com/celery/celery/issues/10100))
- fix: avoid cycle detection in native delayed delivery ([#10095](https://github.com/celery/celery/issues/10095))
- fix(asynpool): avoid AttributeError when proc lacks _sentinel_poll ([#10086](https://github.com/celery/celery/issues/10086))
- fix dusk_astronomical horizon sign (+18 -> -18) ([#10121](https://github.com/celery/celery/issues/10121))
- Fix/10106 onupdate col use lambda func ([#10108](https://github.com/celery/celery/issues/10108))
- Fix warm shutdown RuntimeError with eventlet>=0.37.0 ([#10083](https://github.com/celery/celery/issues/10083)) ([#10123](https://github.com/celery/celery/issues/10123))
- Fix 10109 db backend connection health ([#10124](https://github.com/celery/celery/issues/10124))
- Database Backend filter unsupport sql engine arguments with nullpool [#7355](https://github.com/celery/celery/issues/7355) ([#10134](https://github.com/celery/celery/issues/10134))
- fix(beat): correct argument order in Service.__reduce__ ([#10137](https://github.com/celery/celery/issues/10137))
- ci: declare explicit read-only token permissions in workflow jobs ([#10139](https://github.com/celery/celery/issues/10139))
- chore: 'boto3to' to 'boto3 to' ([#10133](https://github.com/celery/celery/issues/10133))
- Database Backend: Add missing index on date_done (Fixes [#10097](https://github.com/celery/celery/issues/10097)) ([#10098](https://github.com/celery/celery/issues/10098))
- docs: fix typo in CONTRIBUTING.rst ([#10141](https://github.com/celery/celery/issues/10141))
- Refer to Flower / Prometheus for monitoring ([#10140](https://github.com/celery/celery/issues/10140))
- docs: remove duplicated words in broker and routing docs ([#10146](https://github.com/celery/celery/issues/10146))
- docs: fix stale version reference and grammar in README ([#10145](https://github.com/celery/celery/issues/10145))
- docs: fix wording in Celery 5.3 worker pool notes ([#10149](https://github.com/celery/celery/issues/10149))
- docs: fix duplicated wording in 3.1 changelog entry ([#10152](https://github.com/celery/celery/issues/10152))
- docs: fix changelog typo in context manager wording ([#10144](https://github.com/celery/celery/issues/10144))
- Fix/10096 worker fails to reconnect after redis failover ([#10151](https://github.com/celery/celery/issues/10151))
- Improve on_after_finalize signal documentation ([#10155](https://github.com/celery/celery/issues/10155))
- Add non-commutative example to clarify partial arg ordering in canvas docs ([#10157](https://github.com/celery/celery/issues/10157))
- Remove redundant test_isa_mapping test (fixes [#10077](https://github.com/celery/celery/issues/10077)) ([#10103](https://github.com/celery/celery/issues/10103))
- Upgrade pytest-celery to >=1.3.0 and adopt PYTEST_CELERY_PKG build arg ([#10162](https://github.com/celery/celery/issues/10162))
- Remove deprecated args from redis get_connection call ([#10036](https://github.com/celery/celery/issues/10036))
- Fix [#6912](https://github.com/celery/celery/issues/6912) rpc backend reconnection error ([#10179](https://github.com/celery/celery/issues/10179))
- Fix NameError with TYPE_CHECKING annotations on Python 3.14+ (PEP 649) ([#10165](https://github.com/celery/celery/issues/10165))
- docs: Add elaboration on prefetch multiplier settings (worker_prefetch_multiplier) and worker_eta_task_limit ([#10181](https://github.com/celery/celery/issues/10181))
- Fix O(K²) message bloat in a chain of chords ([#10171](https://github.com/celery/celery/issues/10171))
- Fix mock connection interfaces to prevent `TypeError` during exception handling ([#10178](https://github.com/celery/celery/issues/10178))
- fix(trace): dispatch chain/callbacks on dedup fast-path for redelivered tasks ([#10159](https://github.com/celery/celery/issues/10159))
</tr></table>

... (truncated)

Commits

3f4d8d7 Prepare for release: v5.6.3 (#10221)
a989e8c fix: clear the timer while catch the exception (#10218)
d06de5f Chore(deps): Bump nick-fields/retry from 3 to 4 (#10213)
c3c19c3 Fix: prioritize request ignore_result over task definition (#10184)
d23be53 Remove outdated autoreloader section from extending docs (#10154)
ada2da7 docs: fix duplicated word in bootsteps comment\n\nSigned-off-by: Rohan Santho...
f45f62b Add compression header to message protocol docs (#10156)
9a27092 docs: clarify after_return behavior for retried tasks (#10192)
6ee6230 Fix#9722 friendly status errors for CLI (#10190)
a9a2d4c [pre-commit.ci] pre-commit autoupdate (#10186)
Additional commits viewable in compare view

Updates cryptography to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.
.. _v50-0-0:
50.0.0 - 2026-07-31
SECURITY ISSUE: :func:~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der and its PEM and S/MIME variants no longer expose distinguishable errors or timing when unwrapping a RecipientInfo's encryptedKey, which could act as a Bleichenbacher oracle for callers that decrypt untrusted messages. A random key is now substituted on failure, as described in :rfc:3218. Credit to @X1AOxiang for reporting the issue. CVE-2026-69247

Deprecated Diffie-Hellman key exchange over finite fields (FFDH). Everything FFDH is deprecated, including the types in cryptography.hazmat.primitives.asymmetric.dh and loading FFDH keys or parameters with the key loading APIs. Users should migrate to a more modern key exchange algorithm.

Added xof() class methods to :class:~cryptography.hazmat.primitives.hashes.SHAKE128 and :class:~cryptography.hazmat.primitives.hashes.SHAKE256 for constructing algorithm instances configured for use with :class:~cryptography.hazmat.primitives.hashes.XOFHash.

The :mod:X.509 verification <cryptography.x509.verification> APIs are now considered stable and are subject to our API stability policy.

Added the :doc:/cobblestone recipe, an implementation of the Cobblestone-128 and Cobblestone-256 instantiations of the C2SP chunked-encryption specification <https://c2sp.org/chunked-encryption>_ for streaming authenticated encryption of large messages.

Parsing a Signed Certificate Timestamp list now rejects encodings that carry trailing bytes after the list or after an individual SCT, instead of silently ignoring them.

Added support for using :class:~cryptography.x509.Name as a field type in the :doc:/hazmat/asn1/index module.

Loading a public key or an EC private key now rejects DER where the subjectPublicKey (or EC publicKey) BIT STRING declares a non-zero number of unused bits, instead of silently ignoring it.

Parsing a CRL entry's InvalidityDate extension now rejects a GeneralizedTime that carries fractional seconds or another non-DER form, matching the strict encoding already required for every other X.509 time field.

:func:~cryptography.x509.ocsp.load_der_ocsp_request and :func:~cryptography.x509.ocsp.load_der_ocsp_response now reject a request or response whose version field is not v1, the only version defined by RFC 6960, matching the version validation already performed when loading

... (truncated)

Commits

ffde75a bump for 50.0.1 + changelog (#15520)
dcb7050 Prepare for 50.0.0 release (#15372)
53fccd9 Don't leak how PKCS#7 encryptedKey decryption failed (#15369)
d472f97 Add from __future__ import annotations to all src/ Python files (#15371)
908773d Bump downstream dependencies in CI (#15368)
2cc07cc Bump BoringSSL, OpenSSL, AWS-LC in CI (#15367)
c94ede9 chore(deps): bump ruff from 0.16.0 to 0.16.1 (#15366)
67a8308 chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (#15365)
95018ff Release the GIL in one-shot AEAD encrypt/decrypt (#15361)
6954733 Release the GIL during DH and DSA parameter generation (#15364)
Additional commits viewable in compare view

Updates django-prometheus to 2.5.0

Release notes

Sourced from django-prometheus's releases.

v2.5.0

Add support for Django 5.2 and 6.0.

Drop support for Django 5.0 (EOL).

Add support for Python 3.13, 3.14, and free threaded 3.14t.

Changelog

Sourced from django-prometheus's changelog.

v2.5.0 - May 26th, 2026

Add support for Django 5.2 and 6.0.

Drop support for Django 5.0 (EOL).

Add support for Python 3.13, 3.14, and free threaded 3.14t.

v2.4.1 - June 25th, 2025

Add Django version to install requirements.

v2.4.0 - June 18th, 2025

Add support for Django 5.0 and Python 3.12.

Replace black, flake8 and isort with Ruff

Drop support for Django 3.2 (Python 3.7), 4.0 and 4.1

Project moved to the Django Commons GitHub organization.

Add pyupgrade and yamlfmt pre-commit hooks

v2.3.1 - May 2nd, 2023

Fix postgresql provider import, Thanks @wilsonehusin

v2.3.0 - May 2nd, 2023

Remove support for Python 3.6, Django versions older than 3.2

Fix two latency metrics not using PROMETHEUS_LATENCY_BUCKETS setting, Thanks @AleksaC

Support new cache backend names in newer Django versions, Thanks @tneuct

Make export of migrations False by default, Thanks @kaypee90

Add support for Django 4.1, Python 3.11

Add support for Django 4.2 and Psycopg 3

v2.2.0 - December 19, 2021

Switch to Github Actions CI, remove travis-ci.

Add support for Django 3.2 & 4.0 and Python 3.9 & 3.10

v2.1.0 - August 22, 2020

Remove support for older django and python versions

Add support for Django 3.0 and Django 3.1

Add support for PostGIS, Thanks @EverWinter23

v2.0.0 - Jan 20, 2020

Added support for newer Django and Python versions

Added an extensibility that applications to add their own labels to middleware (request/response) metrics

Allow overriding and setting custom bucket values for request/response latency histogram metric

Internal improvements:

use tox

Use pytest

... (truncated)

Commits

febae2c Version 2.5.0 (#507)
1fd36e6 Bump the pre-release version for 2.5.0. (#506)
77a983e Fix cursor_factory re-wrapping with connection pooling (#505)
72f0131 Fix Python version format in pre-release workflow (#504)
ea2d559 feat: Add pyproject.toml validator hook to pre-commit (#491)
ffb249c Add Django 6.0 to tests (#489)
df29fd3 Update GitHub Actions in pre-release workflow (#486)
d17c8e0 Programming Language :: Python :: Free Threading (#488)
910123b Fix typos discovered by codespell (#487)
3e23c16 Add Python 3.14 and 3.14 to the testing (#485)
Additional commits viewable in compare view

Updates pyotp to 2.10.0

Release notes

Sourced from pyotp's releases.

v2.10.0

Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)

Simplified and improved generate_otp() performance in Steam class (#179)

Check digest function to prevent error on OTP Generation (#170)

Ignore non-standard otpauth parameters

use strings as immutable default arguments (#162)

Changelog

Sourced from pyotp's changelog.

Changes for v2.10.0 (2026-06-13)

Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)

Simplified and improved generate_otp() performance in Steam class (#179)

Check digest function to prevent error on OTP Generation (#170)

Ignore non-standard otpauth parameters

use strings as immutable default arguments (#162)

Changes for v2.9.0 (2023-07-27)

Add parse_uri() support for Steam TOTP (#153)

Test and documentation improvements

Changes for v2.8.0 (2022-12-13)

Modify OTP generation to run in constant time (#148)

Documentation improvements

Drop Python 3.6 support; introduce Python 3.11 support

Changes for v2.7.0 (2022-09-11)

Support Steam TOTP (#142)

Build, test, and documentation updates

Changes for v2.6.0 (2021-02-04)

Raise default and minimum base32 secret length to 32, and hex secret length to 40 (160 bits as recommended by the RFC) (#115).

Fix issue where provisioning_uri would return invalid results after calling verify() (#115).

Changes for v2.5.1 (2021-01-29)

... (truncated)

Commits

81ed54a v2.10.0
d44e98a Fix parse_uri mis-parsing of encoded colon in issuer/account name (#187)
a25dbbb Simplified and improved generate_otp() performance in Steam class (#179)
89ebf90 Update CI matrix
2c152d4 Replace ubuntu-20.04 with 22.04 in CI (#177)
6e25ce2 Replace license classifier with license expression (#176)
3419136 Use trusted publishing and hatch
0c3b765 Format files with ruff
a398c80 Update CI configuration
92b1dbc docs: fix deprecated intersphinx_mapping format (#173)
Additional commits viewable in compare view

Updates psycopg to 3.3.5

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Current release

Psycopg 3.3.6 ^^^^^^^^^^^^^

Add support for Python 3.15 (:ticket:[#1245](https://github.com/psycopg/psycopg/issues/1245)).

Don't wait forever for a query to terminate after interrupting it, for instance if the server is unresponsive. The fix requires libpq 17 or newer (:ticket:[#1371](https://github.com/psycopg/psycopg/issues/1371)).

Cancel a running query upon receiving !SystemExit (:ticket:[#1384](https://github.com/psycopg/psycopg/issues/1384)).

Report !None instead of 65535 as the Column.precision of an :sql:interval column declared with a fields restriction and no explicit precision, such as e.g. :sql:interval day to second (:ticket:[#1397](https://github.com/psycopg/psycopg/issues/1397)).

Fix dumping of nested subclasses of lists as arrays (:ticket:[#1398](https://github.com/psycopg/psycopg/issues/1398)).

Discard prepared statements upon :sql:DEALLOCATE ALL (:ticket:[#1408](https://github.com/psycopg/psycopg/issues/1408)).

Better guards dumping large Python !int to binary numeric (:ticket:[#1414](https://github.com/psycopg/psycopg/issues/1414)).

Improve performance of async queries by reducing the overhead of the !wait_async() function (:ticket:[#1331](https://github.com/psycopg/psycopg/issues/1331)).

Psycopg 3.3.5 ^^^^^^^^^^^^^

Discard prepared statements upon :sql:ALTER * or DISCARD * (:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).

Fix !ProgrammingError when dumping non-!None values with no !NoneType dumper registered in python implementation (:ticket:[#1325](https://github.com/psycopg/psycopg/issues/1325)).

Fix !wait_selector wait function to not raise !KeyError (:ticket:[#1327](https://github.com/psycopg/psycopg/issues/1327)).

Fix !DataError messages leaking the literal {...} placeholder instead of the offending value when loading a pre-year-1 :sql:timestamp or a malformed binary :sql:jsonb value (:ticket:[#1372](https://github.com/psycopg/psycopg/issues/1372)).

Raise !DataError instead of !ValueError when ~psycopg.rows.namedtuple_row receives duplicate column names (:ticket:[#1348](https://github.com/psycopg/psycopg/issues/1348)).

Raise !DataError on inconsistent copy data (:tickets:[#1359](https://github.com/psycopg/psycopg/issues/1359), [#1360](https://github.com/psycopg/psycopg/issues/1360)).

Handle client encodings aliases (:ticket:[#1363](https://github.com/psycopg/psycopg/issues/1363)).

Fix building C extension with Cython 3.3.

Psycopg 3.3.4

... (truncated)

Commits

ea542c9 chore: bump psycopg package version to 3.3.5
8d31e47 chore(deps): bump the actions group across 1 directory with 4 updates
268f863 Merge pull request #1370 from Sanjays2402/fix/truncated-binary-copy-error
a412fa4 docs: put together different issues fixed around copy parsing
f757307 fix: clearer error messages according to truncated copy message part
b1f17c4 test: move existing COPY format parsing tests into a single module
21eba57 test: drop useless parametrization of copy binary parsigh test
6780e17 fix(copy): handle truncated binary row headers
2f2fcfb Merge pull request #1364 from DylanYoung/fix_client_encoding_aliases
ccc351e refactor: don't store the encodings raw table as a dict
Additional commits viewable in compare view

Updates requests to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

Widened json input type from dict and list to Mapping and Sequence. (#7436)

Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)

Response.reason moved from str | None to str to improve handling for users. (#7437)

Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

Special thanks to @bastimeyer, @cthoyt, @edgarrmondragon, and @srittau for helping review and test the types ahead of the release. (#7272)

Improvements

Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)

Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)

Requests added support for Python 3.14t. (#7419)

Bugfixes

Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)

Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)

Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

6e83187 v2.34.2
84d10f0 Move Request.headers back to Mapping (#7441)
b7b549b v2.34.1
e511bc7 Fix mutability issues with headers input types (#7431)
5691f59 Update JsonType containers to read-based collections (#7436)
2144213 Constrain Response.reason to str (#7437)
6404f34 Fix prepare_body stream detection for __getattr__-based file wrappers (#7...
0b401c7 v2.34.0
86b378d Align Session.get parameters with requests.get (#7429)
a4f9a59 Port bpo-39057 to Requests (#7427)
Additional commits viewable in compare view

peterthomassen · 2026-09-19T01:09:52Z

@dependabot rebase

Updates the requirements on [celery](https://github.com/celery/celery), [cryptography](https://github.com/pyca/cryptography), [django-prometheus](https://github.com/korfuri/django-prometheus), [pyotp](https://github.com/pyauth/pyotp), [psycopg](https://github.com/psycopg/psycopg) and [requests](https://github.com/psf/requests) to permit the latest version. Updates `celery` to 5.6.3 - [Release notes](https://github.com/celery/celery/releases) - [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst) - [Commits](celery/celery@v5.6.2...v5.6.3) Updates `cryptography` to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@46.0.5...50.0.1) Updates `django-prometheus` to 2.5.0 - [Release notes](https://github.com/korfuri/django-prometheus/releases) - [Changelog](https://github.com/django-commons/django-prometheus/blob/master/CHANGELOG.md) - [Commits](django-commons/django-prometheus@v2.4.1...v2.5.0) Updates `pyotp` to 2.10.0 - [Release notes](https://github.com/pyauth/pyotp/releases) - [Changelog](https://github.com/pyauth/pyotp/blob/main/Changes.rst) - [Commits](pyauth/pyotp@v2.9.0...v2.10.0) Updates `psycopg` to 3.3.5 - [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst) - [Commits](psycopg/psycopg@3.3.4...3.3.5) Updates `requests` to 2.34.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.5...v2.34.2) --- updated-dependencies: - dependency-name: celery dependency-version: 5.6.3 dependency-type: direct:production dependency-group: pip-api - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production dependency-group: pip-api - dependency-name: django-prometheus dependency-version: 2.5.0 dependency-type: direct:production dependency-group: pip-api - dependency-name: psycopg dependency-version: 3.3.5 dependency-type: direct:production dependency-group: pip-api - dependency-name: pyotp dependency-version: 2.10.0 dependency-type: direct:production dependency-group: pip-api - dependency-name: requests dependency-version: 2.34.2 dependency-type: direct:production dependency-group: pip-api ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 4, 2026

dependabot Bot mentioned this pull request Sep 4, 2026

chore(deps): update requests requirement from ~=2.32.5 to ~=2.34.2 in /api #1249

Closed

dependabot Bot changed the title ~~chore(deps): bump the pip-api group in /api with 6 updates~~ chore(deps): bump the pip-api group across 1 directory with 6 updates Sep 19, 2026

dependabot Bot force-pushed the dependabot/pip/api/pip-api-dd66694657 branch from 98d92da to 963ec33 Compare September 19, 2026 01:11

peterthomassen approved these changes Sep 19, 2026

View reviewed changes

peterthomassen force-pushed the dependabot/pip/api/pip-api-dd66694657 branch from 963ec33 to 978780a Compare September 19, 2026 01:36

peterthomassen merged commit 978780a into main Sep 19, 2026
27 of 31 checks passed

peterthomassen deleted the dependabot/pip/api/pip-api-dd66694657 branch September 19, 2026 02:56

Navigation Menu

Uh oh!

chore(deps): bump the pip-api group across 1 directory with 6 updates - #1258

chore(deps): bump the pip-api group across 1 directory with 6 updates#1258
peterthomassen merged 1 commit into
mainfrom
dependabot/pip/api/pip-api-dd66694657

dependabot Bot commented on behalf of github Sep 4, 2026 •

edited

Loading

Uh oh!

peterthomassen commented Sep 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.6.3

What's Changed

5.6.3

v2.5.0

v2.5.0 - May 26th, 2026

v2.4.1 - June 25th, 2025

v2.4.0 - June 18th, 2025

v2.3.1 - May 2nd, 2023

v2.3.0 - May 2nd, 2023

v2.2.0 - December 19, 2021

v2.1.0 - August 22, 2020

v2.0.0 - Jan 20, 2020

v2.10.0

Changes for v2.10.0 (2026-06-13)

Changes for v2.9.0 (2023-07-27)

Changes for v2.8.0 (2022-12-13)

Changes for v2.7.0 (2022-09-11)

Changes for v2.6.0 (2021-02-04)

Changes for v2.5.1 (2021-01-29)

psycopg release notes

Current release

v2.34.2

2.34.2 (2026-05-14)

2.34.2 (2026-05-14)

2.34.1 (2026-05-13)

2.34.0 (2026-05-11)

Uh oh!

peterthomassen commented Sep 19, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 4, 2026 •

edited

Loading

`psycopg` release notes