Skip to content

Bump the python-dependencies group with 44 updates - #79

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-582ee27c1e
Closed

Bump the python-dependencies group with 44 updates#79
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-582ee27c1e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 8, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on atproto, boto3, botocore, cbor2, coverage, daphne, django-allauth, django-stubs-ext, django-stubs, django-unfold, django, djlint, docutils, langchain-core, langchain-protocol, langgraph-checkpoint, langgraph-sdk, langgraph, langsmith, libipld, opentelemetry-api, opentelemetry-exporter-otlp-proto-http, opentelemetry-instrumentation-django, opentelemetry-sdk, praw, pyjwt, pyright, ruff, s3transfer, sentence-transformers, service-identity, structlog, svix, taskiq-aio-pika, taskiq-redis, types-deprecated, types-psycopg2, types-python-dateutil, types-pyyaml, types-requests, uuid-utils, wrapt, zope-interface and black to permit the latest version.
Updates atproto from 0.0.65 to 0.0.67

Release notes

Sourced from atproto's releases.

v0.0.67

What's Changed

Full Changelog: MarshalX/atproto@v0.0.66...v0.0.67

v0.0.66

What's Changed

Full Changelog: MarshalX/atproto@v0.0.65...v0.0.66

Changelog

Sourced from atproto's changelog.

Version 0.0.67

28.05.2026

Version 0.0.66

28.05.2026

Commits
  • 868758e Add Standard.site lexicon entrypoints (#673)
  • 146ca87 Update changelog for v0.0.66 (#672)
  • 67a81f2 Update copyright year (#671)
  • 0e3c76f Update lexicons fetched from cf6a8a5 committed 2026-05-28T13:48:13Z (#670)
  • 4b04af4 Update lexicons fetched from 622d365 committed 2026-05-24T03:51:02Z (#669)
  • 08e0fb3 Fix codegen to support namespaces with both records and child namespaces (#668)
  • 6efdcc2 Update lexicons fetched from 18d3114 committed 2026-05-12T18:28:00Z (#667)
  • ffba7a4 Update lexicons fetched from 450f26a committed 2026-05-07T21:39:04Z (#666)
  • 9b25f51 Update lexicons fetched from 1d575ed committed 2026-04-15T18:35:18Z (#665)
  • b6be4de Update lexicons fetched from 57ca210 committed 2026-03-19T22:42:27Z (#662)
  • Additional commits viewable in compare view

Updates boto3 from 1.43.8 to 1.43.24

Commits
  • b2b302b Merge branch 'release-1.43.24'
  • 02fd3ca Bumping version to 1.43.24
  • fcaf9ff Add changelog entries from botocore
  • f2106e0 Merge branch 'release-1.43.23'
  • 5f98326 Merge branch 'release-1.43.23' into develop
  • d7e5b7c Bumping version to 1.43.23
  • 86efe86 Add changelog entries from botocore
  • 8384440 Merge branch 'release-1.43.22'
  • eea01a7 Merge branch 'release-1.43.22' into develop
  • eff8ee7 Bumping version to 1.43.22
  • Additional commits viewable in compare view

Updates botocore from 1.43.8 to 1.43.24

Commits
  • f949c25 Merge branch 'release-1.43.24'
  • 31fa2f5 Bumping version to 1.43.24
  • aada132 Update endpoints model
  • 20824a4 Update to latest models
  • a3ee65f Merge customizations for QuickSight
  • fb8102b Merge branch 'release-1.43.23'
  • fe654dc Merge branch 'release-1.43.23' into develop
  • 4a9ae45 Bumping version to 1.43.23
  • 3a6338a Update to latest models
  • d1b7760 Merge branch 'release-1.43.22'
  • Additional commits viewable in compare view

Updates cbor2 from 6.1.1 to 6.1.2

Release notes

Sourced from cbor2's releases.

6.1.2

  • Fixed incorrect tracking of string references for definite-length text strings of length greater than 65536 (#308; PR by @​sahvx655-wq)
  • Fixed cbor2.load() crash caused by incorrect handling of internal read buffer extension during stream deserialization. (#307; PR by @​noderyos)
Commits

Updates coverage from 7.14.0 to 7.14.1

Changelog

Sourced from coverage's changelog.

Version 7.14.1 — 2026-05-26

  • Fix: the HTML report used typographic niceties to make file paths more readable by adding a small amount of space around slashes. Those spaces interfered with searching the page for file paths of interest. Now the report uses CSS to accomplish the same visual tweak so that searches with slashes work correctly. Closes issue 2170_.

  • Add a 3.16 PyPI classifier <hugo-316_>_ since we test on the 3.16 main branch.

.. _issue 2170: coveragepy/coveragepy#2170 .. _hugo-316: https://mastodon.social/@​hugovk/116588523571204490

.. _changes_7-14-0:

Commits
  • 64d9b66 docs: correct the date for 7.14.1
  • 6fa7dd4 chore: bump actions/dependency-review-action (#2181)
  • 078afae docs: sample HTML for 7.14.1
  • cb4f028 docs: prep for 7.14.1
  • ae2d09f Merge branch 'nedbat/classifire-316-kits'
  • 2c3568b build: declare 3.16 compatibility
  • faa68f8 chore: bump github/codeql-action in the action-dependencies group (#2173)
  • eb55fee test: we don't need PyPy < 7.3.22 anymore
  • ac168fe test: the text summary should show missing
  • fed4bd2 chore: upgrade virtualenv
  • Additional commits viewable in compare view

Updates daphne from 4.2.1 to 4.2.2

Changelog

Sourced from daphne's changelog.

4.2.2 (2026-06-03)

  • Fixed a denial of service vulnerability via unbounded WebSocket message sizes. Daphne previously passed no message or frame size limits to autobahn, whose defaults are unbounded. This allowed an unauthenticated client to exhaust server memory by sending a very large WebSocket messages/frames (CVE-2026-44545).

    Both limits now default to 1 MiB and can be configured via the new --websocket-max-message-size and --websocket-max-frame-size CLI flags (or the matching Server constructor arguments). Pass 0 to restore the previous unlimited behaviour.

    Thanks to ParkHyunWoo for the report.

  • Fixed a header injection vulnerability on the WebSocket upgrade path (CVE-2026-44546).

    Header values containing \x0b, \x0c, \x1c, \x1d, \x1e, or \x85 were parsed as a single header by Twisted but split into multiple headers by autobahn during the WebSocket handshake. An attacker could exploit this parser differential to smuggle additional headers (e.g. authentication tokens, X-Forwarded-For, Origin, Daphne-Root-Path) into the ASGI scope passed to the application.

    Daphne now rejects requests carrying these bytes in any header value with a 400 Bad Request response, as required by RFC 9110 §5.5.

    Thanks to Rene Henningsen for the report.

Commits

Updates django-allauth from 65.16.1 to 65.18.0

Commits

Updates django-stubs-ext from 6.0.4 to 6.0.5

Commits

Updates django-stubs from 6.0.4 to 6.0.5

Commits

Updates django-unfold from 0.93.0 to 0.97.0

Release notes

Sourced from django-unfold's releases.

0.97.0

v0.97.0 (2026-06-06)

This release is published under the MIT License.

Bug Fixes

Features

Detailed Changes: 0.96.0...0.97.0

0.96.0

v0.96.0 (2026-06-05)

This release is published under the MIT License.

Bug Fixes

Features

Detailed Changes: 0.95.0...0.96.0

0.95.0

v0.95.0 (2026-06-01)

This release is published under the MIT License.

... (truncated)

Changelog

Sourced from django-unfold's changelog.

v0.97.0 (2026-06-06)

Bug Fixes

Features

v0.96.0 (2026-06-05)

Bug Fixes

Features

v0.95.0 (2026-06-01)

... (truncated)

Commits

Updates django from 6.0.5 to 6.0.6

Commits
  • ee93f65 [6.0.x] Bumped version for 6.0.6 release.
  • 1721035 [6.0.x] Fixed CVE-2026-48587 -- Ignored whitespace padding when checking Vary...
  • 664652f [6.0.x] Fixed CVE-2026-35193 -- Varied on Authorization when caching non-publ...
  • b433025 [6.0.x] Fixed CVE-2026-8404 -- Used Cache-Control directives case-insensitive...
  • 625a670 [6.0.x] Fixed CVE-2026-7666 -- Delayed setting SMTP connection until fully co...
  • c807d9c [6.0.x] Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace collisi...
  • 98a75e3 [6.0.x] Included commit hash in checksum file when building artifacts for rel...
  • dd895d6 [6.0.x] Updated translations from Transifex.
  • 49ca2db [6.0.x] Updated links to severity levels in release notes.
  • c9f32a2 [6.0.x] Added stub release notes and release date for 6.0.6 and 5.2.15.
  • Additional commits viewable in compare view

Updates djlint from 1.36.4 to 1.39.0

Release notes

Sourced from djlint's releases.

v1.39.0

Feature

  • Add preserve_class_newlines / --preserve-class-newlines to keep authored line breaks inside multiline class attributes. #495

Fix

  • Fix Django 6.0 {% partialdef %} block indentation so {% endpartialdef %} aligns with its opener. #1556
  • Preserve multiline Django/Jinja control-flow blocks instead of condensing short bodies onto one line. #1597
  • Preserve single-line inline HTML and template tag bodies during expansion, even when they exceed max_line_length.

v1.38.2

  • Fix python -m djlint not working due to mypyc compilation.

v1.38.1

Fix

  • Match exclude paths on path boundaries. #1028

v1.38.0

Feature

  • Add support for .djlint.toml project and global config files. #1181

Fix

  • Preserve single-line inline HTML tag bodies when they fit within max_line_length. #637 #2041
  • Avoid evaluating template expressions while formatting tag contents. #784 #828 #1030 #1158

Packaging

  • Fix npm publish workflow.

v1.37.0

This release was not published on npm, as I am waiting for the owner to set up trusted publishing.

Feature

  • Add --format-attribute-js-json for formatting JavaScript and JSON inside HTML attributes. It also supports format_attribute_js_json_pattern and format_attribute_js_json_min_props for tuning which attributes are formatted. Thanks, @​oliverhaas.
  • Add --github-output for GitHub Actions annotations. Thanks, @​iloveitaly.

Fix

  • Fix ignore_blocks matching when ignored blocks are indented. Thanks, @​tdryer.
  • Use relative paths for --exclude and --use-gitignore matching so path filters work consistently from nested directories. Thanks, @​satya-waylit.
  • Stop D018/J018 from flagging root links such as href="/". Thanks, @​SAY-5.
  • Do not treat soft hyphen entities as text for H023. Thanks, @​kotutuloro.
  • Fix Handlebars {{#unless}} indentation. Thanks, @​S1mplePixels.
  • Fix formatting when /> appears inside an HTML attribute value. Thanks, @​novucs.
  • Improve CPU count handling for worker setup.

... (truncated)

Changelog

Sourced from djlint's changelog.

[1.39.0] - 2026-06-05

Feature

  • Add preserve_class_newlines / --preserve-class-newlines to keep authored line breaks inside multiline class attributes.

Fix

  • Fix Django 6.0 {% partialdef %} block indentation so {% endpartialdef %} aligns with its opener.
  • Preserve multiline Django/Jinja control-flow blocks instead of condensing short bodies onto one line.
  • Preserve single-line inline HTML and template tag bodies during expansion, even when they exceed max_line_length.

[1.38.2] - 2026-06-05

Fix

  • Fix python -m djlint not working due to mypyc compilation.

[1.38.1] - 2026-06-04

Fix

  • Match exclude paths on path boundaries.

[1.38.0] - 2026-06-04

Feature

  • Add support for .djlint.toml project and global config files.

Fix

  • Preserve single-line inline HTML tag bodies when they fit within max_line_length.
  • Avoid evaluating template expressions while formatting tag contents.

Packaging

  • Fix npm publish workflow.

[1.37.0] - 2026-06-04

Feature

  • Add --format-attribute-js-json for formatting JavaScript and JSON inside HTML attributes. It also supports format_attribute_js_json_pattern and format_attribute_js_json_min_props for tuning which attributes are formatted. Thanks, @​oliverhaas.
  • Add --github-output for GitHub Actions annotations. Thanks, @​iloveitaly.

Fix

  • Fix ignore_blocks matching when ignored blocks are indented. Thanks, @​tdryer.
  • Use relative paths for --exclude and --use-gitignore matching so path filters work consistently from nested directories. Thanks, @​satya-waylit.

... (truncated)

Commits
  • cc4a310 v1.39.0
  • cbe1778 feat(formatter): preserve multiline class attribute breaks
  • 1d10cd8 fix: preserve multiline template control blocks
  • 4a29553 Fix Django partialdef indentation
  • dbfcf6d chore: reformat
  • d2ce695 fix(formatter): preserve single-line inline bodies during expansion
  • 24eea19 chore(deps): lock file maintenance (#2051)
  • 506da77 Fix python -m djlint not working due to mypyc compilation
  • 854c897 chore(deps): lock file maintenance (#2049)
  • 3f5a83a docs: update config options
  • Additional commits viewable in compare view

Updates docutils from 0.22.4 to 0.23

Commits

Updates langchain-core from 1.4.0 to 1.4.1

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.1

Changes since langchain-core==1.4.0

release(core): 1.4.1 (#37922) fix(core): remove Bedrock prevalidation from load (#37909) docs(core): expand and link ModelProfile docstrings (#37904) release(anthropic): 1.4.4 (#37757) chore(core): bump uuid-utils to 0.16.0 (#37699) chore(infra): bump langchain-tests floor to 1.1.9 (#37610) release(standard-tests): 1.1.9 (#37609) chore: bump idna from 3.11 to 3.15 in /libs/core (#37539) ci(infra): harden Dependabot version-bound preservation (#37510) hotfix: bump lockfiles (#37508) docs(core): note override for _get_ls_params (#37503) chore(core,langchain,openai): refresh stale OpenAI model references (#37487) chore: bump langsmith from 0.7.31 to 0.8.0 in /libs/core (#37395) fix(core): accept Serializable constructor-envelope wire shape in _convert_to_message (#37456) fix(core): preserve chunk additional_kwargs across v3 stream assembly (#37435) fix(core): preserve reasoning blocks alongside tool_call in v3 stream (#37434) chore: bump jupyter-server from 2.17.0 to 2.18.0 in /libs/core (#37354) chore: bump mistune from 3.1.4 to 3.2.1 in /libs/core (#37353)

Commits
  • a401351 release(core): 1.4.1 (#37922)
  • 053c368 fix(core): remove Bedrock prevalidation from load (#37909)
  • 0993edb chore(model-profiles): refresh model profile data (#37916)
  • 6f7c8f5 chore: bump starlette from 0.49.1 to 1.0.1 in /libs/langchain (#37899)
  • 586bcd4 docs(core): expand and link ModelProfile docstrings (#37904)
  • 9eab523 chore: bump requests from 2.34.0 to 2.34.2 in /libs/partners/xai (#37903)
  • be2e8f7 ci(infra): add exclude input to skip libs in scheduled integration tests (#...
  • 3b99917 test(langchain,partners): disable pytest-benchmark under xdist to silence `Py...
  • 34af59c fix(partners): cap aiohttp below 3.14 for vcrpy compat (#37898)
  • 414d7b8 chore(model-profiles): refresh model profile data (#37895)
  • Additional commits viewable in compare view

Updates langchain-protocol from 0.0.15 to 0.0.16

Release notes

Sourced from langchain-protocol's releases.

langchain-protocol==0.0.16

What's Changed

New Contributors

Full Changelog: langchain-ai/agent-protocol@langchain-protocol==0.0.15...langchain-protocol==0.0.16

Commits
  • 8246ac0 feat(protocol): add batch resume for parallel interrupts (#86)
  • 0f896ba Merge pull request #84 from langchain-ai/mdrxy/bump-dep
  • 2e890bb chore: bump typing-extensions floor from >=4.7.0 to >=4.13.0
  • See full diff in compare view

Updates langgraph-checkpoint from 4.1.0 to 4.1.1

Release notes

Sourced from langgraph-checkpoint's releases.

langgraph-checkpoint==4.1.1

Changes since checkpoint==4.1.0

  • release(checkpoint): 4.1.1 (#7890)
  • fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • chore(deps): bump langsmith from 0.7.31 to 0.8.0 in /libs/checkpoint (#7784)
Commits
  • d1e2ff0 release(checkpoint): 4.1.1 (#7890)
  • e787af2 release(sdk-py): 0.3.15 (#7891)
  • 604534e fix(sdk-py): percent-encode caller-supplied identifiers in URL paths (#7893)
  • 346aa97 fix(checkpoint): restrict lc:2 envelope revival to default constructor (#7892)
  • 82b3872 chore(deps): bump the uv group across 2 directories with 1 update (#7853)
  • fcc4ab8 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint (#7860)
  • 701d344 chore(deps): bump idna from 3.11 to 3.15 in /libs/checkpoint-postgres (#7861)
  • 2c7967c chore(deps): bump idna from 3.11 to 3.15 in /libs/cli (#7865)
  • bf7fec0 release(langgraph): 1.2.1 (#7883)
  • 8215a9d feat(langgraph): add before_builtins opt-in for stream transformers (#7882)
  • Additional commits viewable in compare view

Updates langgraph-sdk from 0.3.14 to 0.4.2

Release notes

Sourced from langgraph-sdk's releases.

langgraph-sdk==0.4.2

Changes since sdk==0.4.1

  • release(sdk-py): 0.4.2 (#7955)
  • fix(sdk-py): percent-encode thread_id in v3 stream transport default paths (#7954)

langgraph-sdk==0.4.1

Changes since sdk==0.4.0

  • release(sdk-py): 0.4.1 (#7944)
  • feat(sdk-py): extract stream decoders and add interleave_projections (#7935)
  • feat(langgraph): add v3 streaming support to RemoteGraph (#7927)
  • fix(sdk-py): make tools_agent fake model stateless (#7930)

langgraph-sdk==0.4.0

Changes since sdk==0.3.15

  • release(sdk-py): 0.4.0 (#7923)
  • feat(sdk-py): add thread stream helpers (#7833)
  • feat(sdk-py): wire websocket stream selection (#7832)
  • feat(sdk-py): add websocket stream transports (#7830)
  • feat(sdk-py): harden streaming reconnects (#7829)
  • feat(sdk-py): add sync scoped subgraphs (#7828)
  • feat(sdk-py): add sync messages and tool calls (#7827)
  • feat(sdk-py): add sync thread stream core (#7826)
  • feat(sdk-py): add async stream reconnect support (#7825)
  • feat(sdk-py): add scoped subgraph handles (#7824)
  • feat(sdk-py): add messages and tool call projections (#7823)
  • feat(sdk-py): add output, values, and controller extraction (#7822)
  • feat(sdk-py): wire lifecycle state and output prerequisites (#7821)
  • feat(sdk-py): add shared stream subscriptions (#7820)
  • feat(sdk-py): add async thread stream skeleton (#7819)
  • feat(sdk-py): add v3 streaming primitives and SSE transport (#7818)
  • chore(langgraph): bump version to 1.2.2 (#7914)

langgraph-sdk==0.3.15

Changes since sdk==0.3.14

  • release(checkpoint): 4.1.1 (#7890)
  • release(sdk-py): 0.3.15 (#7891)
  • fix(sdk-py): percent-encode caller-s...

    Description has been truncated

@dependabot
Bump the python-dependencies group with 44 updates
961835b 
Updates the requirements on [atproto](https://github.com/MarshalX/atproto), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore), [cbor2](https://github.com/agronholm/cbor2), [coverage](https://github.com/coveragepy/coveragepy), [daphne](https://github.com/django/daphne), [django-allauth](https://github.com/sponsors/pennersr), [django-stubs-ext](https://github.com/typeddjango/django-stubs), [django-stubs](https://github.com/typeddjango/django-stubs), [django-unfold](https://github.com/unfoldadmin/django-unfold), [django](https://github.com/django/django), [djlint](https://github.com/djlint/djLint), [docutils](https://github.com/rtfd/recommonmark), [langchain-core](https://github.com/langchain-ai/langchain), [langchain-protocol](https://github.com/langchain-ai/agent-protocol), [langgraph-checkpoint](https://github.com/langchain-ai/langgraph), [langgraph-sdk](https://github.com/langchain-ai/langgraph), [langgraph](https://github.com/langchain-ai/langgraph), [langsmith](https://github.com/langchain-ai/langsmith-sdk), [libipld](https://github.com/MarshalX/python-libipld), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation-django](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [praw](https://github.com/praw-dev/praw), [pyjwt](https://github.com/jpadilla/pyjwt), [pyright](https://github.com/RobertCraigie/pyright-python), [ruff](https://github.com/astral-sh/ruff), [s3transfer](https://github.com/boto/s3transfer), [sentence-transformers](https://github.com/huggingface/sentence-transformers), [service-identity](https://github.com/pyca/service-identity), [structlog](https://github.com/hynek/structlog), [svix](https://github.com/svix/svix-webhooks), taskiq-aio-pika, [taskiq-redis](https://github.com/taskiq-python/taskiq-redis), [types-deprecated](https://github.com/python/typeshed), [types-psycopg2](https://github.com/python/typeshed), [types-python-dateutil](https://github.com/python/typeshed), [types-pyyaml](https://github.com/python/typeshed), [types-requests](https://github.com/python/typeshed), [uuid-utils](https://github.com/aminalaee/uuid-utils), [wrapt](https://github.com/GrahamDumpleton/wrapt), [zope-interface](https://github.com/zopefoundation/zope.interface) and [black](https://github.com/psf/black) to permit the latest version.

Updates `atproto` from 0.0.65 to 0.0.67
- [Release notes](https://github.com/MarshalX/atproto/releases)
- [Changelog](https://github.com/MarshalX/atproto/blob/main/CHANGES.md)
- [Commits](MarshalX/atproto@v0.0.65...v0.0.67)

Updates `boto3` from 1.43.8 to 1.43.24
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.8...1.43.24)

Updates `botocore` from 1.43.8 to 1.43.24
- [Commits](boto/botocore@1.43.8...1.43.24)

Updates `cbor2` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/agronholm/cbor2/releases)
- [Commits](agronholm/cbor2@6.1.1...6.1.2)

Updates `coverage` from 7.14.0 to 7.14.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.14.0...7.14.1)

Updates `daphne` from 4.2.1 to 4.2.2
- [Changelog](https://github.com/django/daphne/blob/main/CHANGELOG.txt)
- [Commits](django/daphne@4.2.1...4.2.2)

Updates `django-allauth` from 65.16.1 to 65.18.0
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `django-stubs-ext` from 6.0.4 to 6.0.5
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.0.4...6.0.5)

Updates `django-stubs` from 6.0.4 to 6.0.5
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.0.4...6.0.5)

Updates `django-unfold` from 0.93.0 to 0.97.0
- [Release notes](https://github.com/unfoldadmin/django-unfold/releases)
- [Changelog](https://github.com/unfoldadmin/django-unfold/blob/main/CHANGELOG.md)
- [Commits](unfoldadmin/django-unfold@0.93.0...0.97.0)

Updates `django` from 6.0.5 to 6.0.6
- [Commits](django/django@6.0.5...6.0.6)

Updates `djlint` from 1.36.4 to 1.39.0
- [Release notes](https://github.com/djlint/djLint/releases)
- [Changelog](https://github.com/djlint/djLint/blob/master/CHANGELOG.md)
- [Commits](djlint/djLint@v1.36.4...v1.39.0)

Updates `docutils` from 0.22.4 to 0.23
- [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rtfd/recommonmark/commits)

Updates `langchain-core` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.0...langchain-core==1.4.1)

Updates `langchain-protocol` from 0.0.15 to 0.0.16
- [Release notes](https://github.com/langchain-ai/agent-protocol/releases)
- [Commits](langchain-ai/agent-protocol@langchain-protocol==0.0.15...langchain-protocol==0.0.16)

Updates `langgraph-checkpoint` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.1.0...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.14 to 0.4.2
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.14...0.4.2)

Updates `langgraph` from 1.2.0 to 1.2.4
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.0...1.2.4)

Updates `langsmith` from 0.8.4 to 0.8.9
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.8.4...v0.8.9)

Updates `libipld` from 3.3.2 to 3.4.1
- [Release notes](https://github.com/MarshalX/python-libipld/releases)
- [Commits](MarshalX/python-libipld@v3.3.2...v3.4.1)

Updates `opentelemetry-api` to 1.42.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.42.1)

Updates `opentelemetry-exporter-otlp-proto-http` to 1.42.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.42.1)

Updates `opentelemetry-instrumentation-django` to 0.63b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-sdk` to 1.42.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.42.1)

Updates `praw` from 7.8.1 to 7.8.2
- [Release notes](https://github.com/praw-dev/praw/releases)
- [Changelog](https://github.com/praw-dev/praw/blob/v7.8.2/CHANGES.rst)
- [Commits](praw-dev/praw@v7.8.1...v7.8.2)

Updates `pyjwt` from 2.12.1 to 2.13.0
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.12.1...2.13.0)

Updates `pyright` from 1.1.409 to 1.1.410
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.409...v1.1.410)

Updates `ruff` from 0.15.13 to 0.15.16
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.13...0.15.16)

Updates `s3transfer` from 0.17.0 to 0.18.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.17.0...0.18.0)

Updates `sentence-transformers` from 5.5.0 to 5.5.1
- [Release notes](https://github.com/huggingface/sentence-transformers/releases)
- [Commits](huggingface/sentence-transformers@v5.5.0...v5.5.1)

Updates `service-identity` from 24.2.0 to 26.1.0
- [Release notes](https://github.com/pyca/service-identity/releases)
- [Changelog](https://github.com/pyca/service-identity/blob/main/CHANGELOG.md)
- [Commits](pyca/service-identity@24.2.0...26.1.0)

Updates `structlog` from 25.5.0 to 26.1.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.5.0...26.1.0)

Updates `svix` from 1.93.0 to 1.95.2
- [Release notes](https://github.com/svix/svix-webhooks/releases)
- [Changelog](https://github.com/svix/svix-webhooks/blob/main/ChangeLog.md)
- [Commits](svix/svix-webhooks@v1.93.0...v1.95.2)

Updates `taskiq-aio-pika` from 0.4.2 to 0.6.0

Updates `taskiq-redis` from 1.0.0 to 1.2.2
- [Release notes](https://github.com/taskiq-python/taskiq-redis/releases)
- [Commits](taskiq-python/taskiq-redis@1.0.0...1.2.2)

Updates `types-deprecated` from 1.3.1.20260508 to 1.3.1.20260520
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-psycopg2` from 2.9.21.20260509 to 2.9.21.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-python-dateutil` from 2.9.0.20260508 to 2.9.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-pyyaml` from 6.0.12 to 6.0.12.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-requests` from 2.33.0.20260508 to 2.33.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `uuid-utils` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/aminalaee/uuid-utils/releases)
- [Commits](aminalaee/uuid-utils@0.15.0...0.16.0)

Updates `wrapt` from 2.1.2 to 2.2.1
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.1.2...2.2.1)

Updates `zope-interface` from 8.4 to 8.5
- [Changelog](https://github.com/zopefoundation/zope.interface/blob/master/CHANGES.rst)
- [Commits](zopefoundation/zope.interface@8.4...8.5)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@26.3.1...26.5.1)

---
updated-dependencies:
- dependency-name: atproto
  dependency-version: 0.0.67
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: boto3
  dependency-version: 1.43.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: botocore
  dependency-version: 1.43.24
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: cbor2
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: coverage
  dependency-version: 7.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: daphne
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: django-allauth
  dependency-version: 65.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: django-stubs-ext
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: django-stubs
  dependency-version: 6.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: django-unfold
  dependency-version: 0.97.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: django
  dependency-version: 6.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: djlint
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: docutils
  dependency-version: '0.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: langchain-core
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-protocol
  dependency-version: 0.0.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langgraph-sdk
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: langgraph
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langsmith
  dependency-version: 0.8.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: libipld
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: opentelemetry-api
  dependency-version: 1.42.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.42.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: opentelemetry-instrumentation-django
  dependency-version: 0.63b1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: opentelemetry-sdk
  dependency-version: 1.42.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: praw
  dependency-version: 7.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pyjwt
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyright
  dependency-version: 1.1.410
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.15.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: s3transfer
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: sentence-transformers
  dependency-version: 5.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: service-identity
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: structlog
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: svix
  dependency-version: 1.95.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: taskiq-aio-pika
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: taskiq-redis
  dependency-version: 1.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: types-deprecated
  dependency-version: 1.3.1.20260520
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-psycopg2
  dependency-version: 2.9.21.20260518
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20260518
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20260518
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-requests
  dependency-version: 2.33.0.20260518
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: uuid-utils
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: wrapt
  dependency-version: 2.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: zope-interface
  dependency-version: '8.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: black
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 8, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 15, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 15, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/python-dependencies-582ee27c1e branch June 15, 2026 17:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants