Skip to content

Bump the dependencies group across 1 directory with 9 updates - #696

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-c92be23315
Open

Bump the dependencies group across 1 directory with 9 updates#696
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-c92be23315

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 3, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on apscheduler, channels[daphne], click, copier, django, dramatiq[redis,watch], gpp-client, typer and tomtoolkit to permit the latest version.
Updates apscheduler from 3.11.2 to 3.11.3

Release notes

Sourced from apscheduler's releases.

3.11.3

  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates channels[daphne] to 4.3.2

Changelog

Sourced from channels[daphne]'s changelog.

4.3.2 (2025-11-20)

  • Confirmed support for Django 6.0.

  • Confirmed support for Python 3.14.

  • Added types extra for types-channels stubs. See installation docs.

4.3.1 (2025-08-01)

  • Fixed testing live server setup when test DB name was not set.

4.3.0 (2025-07-28)

  • Updated asgiref dependency to v3.9+.

  • Dropped support for EOL Python and Django versions. Python 3.9 is now the minimum supported version.

  • Fixed compatibility of ChannelsLiveServerTestCase with Django 5.2.

  • Fixed DB setup for spawned testing subprocess, typically on Windows and macOS.

See the Version 4.3.0 release notes <https://channels.readthedocs.io/en/latest/releases/4.3.0.html>_ for more details.

4.2.2 (2025-03-30)

  • Added fallbacks for old valid channel/group name checks.

    These were renamed in 4.2.1 but (as internal methods) without deprecation. They are restored (and deprecated) here to allow updating channel layers using them.

4.2.1 (2025-03-29)

Channels 4.2.1 primarily updates the metadata for supported Python and Django versions.

  • Added official support for Django 5.2 LTS.

  • Added official support for Python 3.13.

  • Added a warning for the length of the channel layer group names.

... (truncated)

Commits
  • 15333cd Version 4.3.2
  • 10be531 Add explicit dj60 to test matrix.
  • f726845 Update .github/workflows/tests.yml
  • 0c1e533 tox.ini: envlist py{310,311,312,313,314}-dj52
  • b2ad89f GitHub Actions: Test on Python 3.14 release candidate 2
  • a135228 Bump actions/checkout from 4 to 5 (#2180)
  • 7dfcc7b Add types extra and installation docs for type checking support.
  • 95589a7 Version 4.3.1.
  • 5038d69 Fix live server setup when test DB name not set.
  • f17a8fe Bump browser-actions/setup-chrome from 1 to 2 (#2175)
  • Additional commits viewable in compare view

Updates click from 8.4.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582
Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582
Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates copier from 9.15.2 to 9.17.1

Release notes

Sourced from copier's releases.

v9.17.1 (2026-08-04)

Security

  • prevent code execution via Jinja finalizer by disallowing YAML tags
  • prevent code execution via Jinja sandbox escape through path and settings objects

v9.17.0 (2026-07-13)

Feat

  • add --ask flag to force prompting of selected questions (#2705)

Security

  • prevent trust bypass via encoded URL traversal

v9.16.0 (2026-06-23)

Feat

  • cache remote git templates as local mirrors with worktrees (#2720)

Fix

  • updating: preserve and update template-managed gitignored files (#2730)
Changelog

Sourced from copier's changelog.

v9.17.1 (2026-08-04)

Security

  • prevent code execution via Jinja finalizer by disallowing YAML tags
  • prevent code execution via Jinja sandbox escape through path and settings objects

v9.17.0 (2026-07-13)

Feat

  • add --ask flag to force prompting of selected questions (#2705)

Security

  • prevent trust bypass via encoded URL traversal

v9.16.0 (2026-06-23)

Feat

  • cache remote git templates as local mirrors with worktrees (#2720)

Fix

  • updating: preserve and update template-managed gitignored files (#2730)
Commits
  • e8c85ce bump: version 9.17.0 → 9.17.1
  • 3f1c1a6 fix: prevent code execution via Jinja finalizer by disallowing YAML tags
  • a5e9f3f fix: prevent code execution via Jinja sandbox escape through path and setting...
  • cd0d3aa build(deps): bump pymdown-extensions from 10.21.3 to 11.0
  • 02e1574 bump: version 9.16.0 → 9.17.0
  • 7408f0d fix: prevent trust bypass via encoded URL traversal
  • b8e2218 build(deps): update dependency mypy to v2.2.0
  • baeffda build(deps): update astral-sh/setup-uv action to v8.3.1
  • c89ebf5 build(deps): update dependency markdown-exec to v1.12.3
  • fcedc44 build(deps): update dependency poethepoet to v0.48.0
  • Additional commits viewable in compare view

Updates django from 5.2.15 to 5.2.17

Commits
  • e802ada [5.2.x] Bumped version for 5.2.17 release.
  • b9adb81 [5.2.x] Fixed CVE-2026-15920 -- Made display_for_field() validate URLs before...
  • ba80833 [5.2.x] Fixed CVE-2026-15830 -- Mitigated potential DoS via nested geometry c...
  • c72a5db [5.2.x] Fixed CVE-2026-15337 -- Mitigated potential DoS in check_for_language().
  • 115ffd0 [5.2.x] Fixed CVE-2026-15307 -- Blocked raster strings and dicts in spatial l...
  • ec5ced4 [5.2.x] Fixed #36770 -- Fixed incomplete mocking in SQLiteInMemoryTestDbs.
  • 02369b5 [5.2.x] Allowed the full Python test matrix to run on GitHub Actions.
  • 686072f [5.2.x] Added stub release notes and release date for 5.2.17.
  • cd5ad8c [5.2.x] Bumped minimum setuptools version to 83.
  • 3e389b7 [5.2.x] Closed temporary files in GDALRasterTests.
  • Additional commits viewable in compare view

Updates dramatiq[redis,watch] to 2.2.0

Release notes

Sourced from dramatiq[redis,watch]'s releases.

v2.2.0

See the documentation changelog for more information about the release.

Fixed

Added

Changed

Documentation

Project Maintenance

New Contributors

Full Changelog: Bogdanp/dramatiq@v2.1.0...v2.2.0

Commits
  • 5a1f74e Version 2.2.0 (#867)
  • c53e1a4 Update release workflow to use trusted publishing (#866)
  • 7e5bc61 Harden release workflow by using seperate build/publish jobs (#865)
  • 31106a1 Fix #862 -- Support redis-py 8.x (#863)
  • 41efd76 Merge pull request #861 from LincolnPuzey/fix_flaky_redis_test
  • e488546 Fix flaky test by waiting for consumer thread to properly start before gettin...
  • 14eafad Merge pull request #857 from LincolnPuzey/work_queue_rework
  • 1d8333d Bump actions/checkout in the github-actions-updates group (#860)
  • d2c963f Don't run release workflow in forks in the unlikely event a Release is create...
  • fb252f9 Fix #850 Make Worker process messages in roughly FIFO order when they have th...
  • Additional commits viewable in compare view

Updates gpp-client from 26.5.0 to 26.7.3

Release notes

Sourced from gpp-client's releases.

v26.7.3

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.7.2...v26.7.3

v26.7.3.dev5

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.7.3.dev4...v26.7.3.dev5

v26.7.3.dev4

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.7.3.dev3...v26.7.3.dev4

v26.7.3.dev3

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.7.3.dev2...v26.7.3.dev3

v26.7.3.dev2

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.7.3...v26.7.3.dev2

v26.7.3.dev1

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.7.2...v26.7.3.dev1

v26.7.2

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.7.1...v26.7.2

... (truncated)

Commits

Updates typer from 0.26.7 to 0.27.1

Release notes

Sourced from typer's releases.

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0

Breaking Changes

Internal

0.26.8

Fixes

  • 🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @​svlandeg.
  • 🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @​foomunleong.

Docs

  • 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @​tiangolo.
  • 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @​phalberg.

Internal

... (truncated)

Changelog

Sourced from typer's changelog.

0.27.1 (2026-08-03)

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

Docs

Internal

0.27.0 (2026-07-15)

Breaking Changes

Internal

0.26.8 (2026-06-25)

Fixes

  • 🐛 Make second column of Rich help output reflect the type consistently, even when using metavar. PR #1410 by @​svlandeg.
  • 🐛 Fix formatting in NoSuchOption.format_message(). PR #1843 by @​foomunleong.

Docs

  • 📝 Update docs badges: remove Publish badge, it doesn't give extra information. PR #1850 by @​tiangolo.
  • 📝 Fix formatting for help link to support GitHub-specific overview edge-case. PR #1826 by @​phalberg.

... (truncated)

Commits
  • fe2aa0e 🔖 Release version 0.27.1 (#1919)
  • 680dc99 📝 Update release notes
  • ac3efd5 ✨ Make epilog formatting consistent with other parts of the help string (#1...
  • 32d80ef 📝 Update release notes
  • 10cb3c9 ⬆️ Upgrade latest-changes to 0.7.1 (#1909)
  • ac329a0 📝 Update release notes
  • c37ae2f 📝 Add Library Skills documentation (#1906)
  • 0974a7e 📝 Update release notes
  • 951178c 🐛 Prevent scroll-to-top on restart/fast buttons in the documentation (#1904)
  • 9051baa 📝 Update release notes
  • Additional commits viewable in compare view

Updates tomtoolkit from 2.32.2 to 3.0.0

Release notes

Sourced from tomtoolkit's releases.

tomtoolkit 3.0.0

Version 3.0 is here!

This is a substantial update that contains MANY substantial changes. This version requires special care with updating. Please follow the instructions in the docs to avoid any issues. Remember to backup your DB before performing major migrations. Please contact the TOMToolkit development team if you have any trouble with the upgrade.

Major Changes Overview

  • Add DataServices
  • Remove tom_alerts and Brokers
  • Remove tom_catalogs
  • Add calendar
  • Refactor ReducedDatums into sub models with defined fields.
  • New documentation format
  • Update to bootstrap5

Detailed Change Log

Full Changelog: TOMToolkit/tom_base@2.32.4...3.0.0

... (truncated)

Commits
  • 76ce4bd Merge pull request #1579 from TOMToolkit/version-3-0-alpha
  • b10b4c4 fix unused variable
  • bf1a70f Merge branch 'dev' into version-3-0-alpha
  • 2f9102d Merge pull request #1616 from TOMToolkit/1599-customizing-ReducedDatum-Update...
  • 4235b73 Merge pull request #1598 from TOMToolkit/dependabot/pip/dev/responses-0.26.2
  • ccabbae rename management command to make Lindy happy
  • 6c3b91a Merge pull request #1615 from TOMToolkit/1602-add-docs-describing-general-sec...
  • 6a0d05e few typos
  • ab3cf3c update docs for data migration
  • 4f42312 Merge pull request #1612 from TOMToolkit/1491-documentation-accessing-data-vi...
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jul 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/uv/dependencies-c92be23315 branch from c61f52a to 0944f33 Compare July 6, 2026 12:29
@dependabot
dependabot Bot force-pushed the dependabot/uv/dependencies-c92be23315 branch 3 times, most recently from d7a2162 to 6e37951 Compare July 10, 2026 16:08
@dependabot
dependabot Bot force-pushed the dependabot/uv/dependencies-c92be23315 branch 3 times, most recently from 9052035 to b54bb50 Compare July 17, 2026 16:07
@dependabot
dependabot Bot force-pushed the dependabot/uv/dependencies-c92be23315 branch 2 times, most recently from 653739a to ec009b1 Compare July 30, 2026 21:24
@dependabot
Bump the dependencies group across 1 directory with 9 updates
1d0f897 
Updates the requirements on [apscheduler](https://github.com/agronholm/apscheduler), [channels[daphne]](https://github.com/django/channels), [click](https://github.com/pallets/click), [copier](https://github.com/copier-org/copier), [django](https://github.com/django/django), [dramatiq[redis,watch]](https://github.com/Bogdanp/dramatiq), [gpp-client](https://github.com/gemini-hlsw/gpp-client), [typer](https://github.com/fastapi/typer) and [tomtoolkit](https://github.com/TOMToolkit/tom_base) to permit the latest version.

Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)

Updates `channels[daphne]` to 4.3.2
- [Changelog](https://github.com/django/channels/blob/main/CHANGELOG.txt)
- [Commits](django/channels@4.0.0...4.3.2)

Updates `click` from 8.4.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.4.2)

Updates `copier` from 9.15.2 to 9.17.1
- [Release notes](https://github.com/copier-org/copier/releases)
- [Changelog](https://github.com/copier-org/copier/blob/master/CHANGELOG.md)
- [Commits](copier-org/copier@v9.15.2...v9.17.1)

Updates `django` from 5.2.15 to 5.2.17
- [Commits](django/django@5.2.15...5.2.17)

Updates `dramatiq[redis,watch]` to 2.2.0
- [Release notes](https://github.com/Bogdanp/dramatiq/releases)
- [Commits](Bogdanp/dramatiq@v1.18.0...v2.2.0)

Updates `gpp-client` from 26.5.0 to 26.7.3
- [Release notes](https://github.com/gemini-hlsw/gpp-client/releases)
- [Commits](gemini-hlsw/gpp-client@v26.5.0...v26.7.3)

Updates `typer` from 0.26.7 to 0.27.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.7...0.27.1)

Updates `tomtoolkit` from 2.32.2 to 3.0.0
- [Release notes](https://github.com/TOMToolkit/tom_base/releases)
- [Commits](TOMToolkit/tom_base@2.32.2...3.0.0)

---
updated-dependencies:
- dependency-name: apscheduler
  dependency-version: 3.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: channels[daphne]
  dependency-version: 4.3.2
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: copier
  dependency-version: 9.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django
  dependency-version: 5.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dramatiq[redis,watch]
  dependency-version: 2.2.0
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: gpp-client
  dependency-version: 26.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tomtoolkit
  dependency-version: 2.32.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: typer
  dependency-version: 0.26.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/uv/dependencies-c92be23315 branch from ec009b1 to 1d0f897 Compare August 7, 2026 16:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants