Skip to content

Bump the python-dependencies group across 1 directory with 53 updates - #92

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-e417d0358d
Closed

Bump the python-dependencies group across 1 directory with 53 updates#92
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-e417d0358d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 29, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on atproto, autobahn, boto3, botocore, cbor2, coverage, cssbeautifier, daphne, django-allauth, django-stubs-ext, django-stubs, django-unfold, django, djlint, docutils, jsbeautifier, langchain-core, langchain-protocol, langgraph-checkpoint, langgraph-sdk, langgraph, langsmith, libipld, msgpack, opentelemetry-api, opentelemetry-exporter-otlp-proto-http, opentelemetry-instrumentation-django, opentelemetry-sdk, praw, pyjwt, pyopenssl, pyright, pytest, ruff, s3transfer, sentence-transformers, service-identity, structlog, svix, taskiq-aio-pika, taskiq-redis, txaio, types-deprecated, types-psycopg2, types-python-dateutil, types-pyyaml, types-requests, ujson, uuid-utils, wrapt, xxhash, zope-interface and black to permit the latest version.
Updates atproto from 0.0.65 to 0.0.69

Release notes

Sourced from atproto's releases.

v0.0.69

What's Changed

⚡ Speed up imports by loading generated models lazily: 12x faster load time (2.6s → 0.21s), 6x lower memory usage (375MB → 57MB)

Full Changelog: MarshalX/atproto@v0.0.68...v0.0.69

v0.0.68

What's Changed

Full Changelog: MarshalX/atproto@v0.0.67...v0.0.68

v0.0.67

What's Changed

Full Changelog: MarshalX/atproto@v0.0.66...v0.0.67

v0.0.66

What's Changed

Full Changelog: MarshalX/atproto@v0.0.65...v0.0.66

Changelog

Sourced from atproto's changelog.

Version 0.0.69

24.06.2026

⚡ Speed up imports by loading generated models lazily: 12x faster load time (2.6s → 0.21s), 6x lower memory usage (375MB → 57MB)

Version 0.0.68

10.06.2026

Version 0.0.67

28.05.2026

Version 0.0.66

28.05.2026

Commits
  • a989a0a Update lexicons fetched from ec8c90c committed 2026-06-24T14:13:54Z (#689)
  • 4a4f741 Update changelog for v0.0.68 (#687)
  • c5581bb Add CHANGES.md update automation using GitHub Actions (#686)
  • a95d7da Update lexicons fetched from b3c4bc6 committed 2026-06-13T09:49:44Z (#685)
  • a3fb2a1 Fix GHA cache (#684)
  • 0c793d2 Fix update_lexicons codegen failing due to lazy-loading regression (#683)
  • 777e2ce Improve errors visibility in update_lexicons GHA workflow (#682)
  • 5f62d36 Add caching and bump actions for CI/CD pipelines (#681)
  • 9c63879 Add network mocking for identity resolver tests (#680)
  • bfd3f89 Speed up imports by loading generated models lazily (#679)
  • Additional commits viewable in compare view

Updates autobahn from 25.12.2 to 26.6.2

Release notes

Sourced from autobahn's releases.

Release v26_6_2

Official release v26_6_2

Included Platforms

  • Linux: x86_64, ARM64 (manylinux_2_34 wheels with NVX)
  • macOS: Apple Silicon ARM64 (binary wheels with NVX)
  • Windows: x86_64 (binary wheels with NVX)

Python Versions

  • CPython: 3.11, 3.12, 3.13, 3.14
  • PyPy: 3.11

Installation

pip install autobahn[all]==v26_6_2

Or download wheels directly from this release.

Build Information

  • Release Date: 2026-06-19 15:05:18 UTC
  • Total Wheels: 20
  • Source Distributions: 3

Features

Autobahn|Python provides:

  • WebSocket client and server implementations (RFC 6455)
  • WAMP client library for both Twisted and asyncio
  • NVX acceleration for high-performance networking (binary wheels)
  • Pure Python fallback wheels for maximum compatibility

Documentation

Development Build fork-5a9fad09-oberstet_autobahn_python-fix_1878-202606191302

Development build from pull request

Build Information

... (truncated)

Changelog

Sourced from autobahn's changelog.

26.6.2

WAMP Cryptosign

  • Fix import autobahn.wamp.cryptosign raising TypeError: unsupported operand type(s) for |: 'str' and 'NoneType' on CPython 3.11/3.12/3.13 when crypto support (nacl) is installed. A ruff UP007 autofix in 26.6.1 (#1843) had rewritten Optional["ISecurityModule"] to "ISecurityModule" | None in a module that lacks from __future__ import annotations, so the string forward-reference union was evaluated eagerly at class-definition time (CPython 3.14 was unaffected because PEP 649 defers annotation evaluation). The regression broke WAMP-cryptosign and any importer with crypto dependencies present (e.g. xbr, Crossbar.io) on CPython < 3.14. Added from __future__ import annotations to cryptosign.py to defer annotation evaluation (#1878)

Build & CI/CD

  • Add an import smoke test that imports every public autobahn submodule with the crypto extras installed, so eager-evaluation annotation regressions like #1878 are caught in CI on all supported Python versions (#1878)

26.6.1

WAMP RawSocket

  • Fix the Twisted WampRawSocketProtocol raising TransportLost out of dataReceived when the opening handshake fails before a WAMP session is attached (e.g. an invalid magic byte from a port scanner). abort() now tears down the transport whenever a transport is present - rather than only when a session is open - so a failed handshake closes the connection cleanly with a single warning instead of an "Unhandled Error" stack trace, and handshake processing stops instead of continuing past the abort. The asyncio backend already behaved correctly; cross-backend regression tests were added for both. Thanks to @​karel-un for the report (#1850)

WAMP Serialization

  • py-ubjson (unmaintained, sdist-only) is no longer an unconditional dependency. A base pip install autobahn — and the wheels-only / cross-arch case from #1849 (pip download --only-binary :all: --platform ...) — now resolves entirely from binary wheels (#1849)
  • The WAMP ubjson serializer is now backed by the maintained bjdata (Binary JData) package, provided as the OPTIONAL autobahn[serialization] extra (it also pulls in numpy), keeping both out of a minimal install (#1849)
  • bjdata is published sdist-only (no PyPI wheels) and is currently CPython-only: on PyPy its sdist build pulls an unbuildable numpy (upstream NeuroJSON/pybj#6), so the ubjson serializer is unavailable on PyPy - use cbor/msgpack there. On CPython without a compiler, set PYBJDATA_NO_EXTENSION=1 for a pure-Python build. For wheels-only or cross-arch deployments, also prefer cbor/msgpack (#1849)
  • ⚠️ Wire-level change to watch out for: bjdata's octet-level encoding is NOT identical to the previous py-ubjson/UBJSON bytes (different integer markers, little-endian). The WAMP serializer id remains ubjson for transport negotiation. The wamp-proto UBJSON test vectors will be regenerated in a follow-up PR after this release; until then the ubjson serializer is excluded from the byte-vector conformance suite (round-trip and cross-serializer coverage retained) (#1849)

FlatBuffers

  • Bump vendored FlatBuffers from v25.9.23 to v25.12.19, restoring the version-sync with zlmdb 26.6.1 (#1853)
  • Commit the binary schemas (reflection.bfbs, wamp.bfbs) to the source tree and ship them as-is; the package build no longer runs flatc, which fixes cross-compilation from the PyPI sdist (e.g. Buildroot/Yocto/aarch64) (#1853)
  • Add just generate-reflection to regenerate the committed binary schemas with a version-matched flatc built from deps/flatbuffers (#1853)
  • Add just check-flatbuffers-sync and a unit test exercising check_zlmdb_flatbuffers_version_in_sync() (#1853)
  • Delete two orphaned generated files, Kdf.py and ChannelBinding.py, left in src/autobahn/wamp/gen/wamp/proto/ after the schema renamed those tables to KDF and TLSChannelBinding. Their case-insensitive collisions with the current KDF.py / TLSChannelBinding.py broke git clone and directory copies on case-insensitive filesystems (APFS/macOS, some Docker setups). They are no longer produced by flatc, and the verification from #1830 now keeps such orphans from recurring. Thanks to @​dcki for the report (#1828)

Build & CI/CD

  • Bump shared .ai (wamp-ai) and .cicd (wamp-cicd) submodules to match zlmdb exactly (#1853)
  • Fix scripts/update_flatbuffers.sh git-version capture for submodule checkouts (.git is a file, not a directory) (#1853)
  • Bump the .cicd (wamp-cicd) submodule to pick up the script/shell-injection fix in the shared identifiers.yml reusable workflow (untrusted GitHub event fields are now passed via env: as quoted data with a fail-closed branch-name allowlist) (#1856)
  • Fail wheel builds hard when NVX was requested (AUTOBAHN_USE_NVX) but the CFFI extension did not compile, instead of silently degrading to a pure-Python (py3-none-any) wheel. A transient native-compile crash (e.g. a gcc SIGSEGV under QEMU ARM64 emulation) now aborts the build with a non-zero exit so CI can retry it, rather than uploading a structurally valid but unintended artifact. Building with AUTOBAHN_USE_NVX=0 still produces a pure-Python wheel as before (#1856)
  • Fix NVX native-extension builds breaking under cross-compilation (e.g. Buildroot/Yocto for aarch64), where the cross toolchain rejected the host-only -march=native flag (unknown value 'native' for '-march'). The default architecture target is now the portable baseline for all build contexts (wheels, local source installs, and cross-compilation), with -march=native available opt-in via AUTOBAHN_ARCH_TARGET=native. The target architecture is detected via sysconfig.get_platform() so the correct baseline is chosen when cross-compiling. Thanks to @​jameshilliard for the original report and approach (#1834, #1835)
  • Fail the just build-all recipe (non-zero exit) when any per-interpreter wheel build fails, naming the interpreter(s). Previously a failed build was silently swallowed, producing a green wheels job with a missing wheel that was only caught downstream by strict release fileset validation (#1859)
  • Cap cbor2 < 6 on PyPy/Windows only (via environment markers), keeping cbor2 6.x everywhere else. cbor2 6.x is Rust/pyo3-only with no PyPy/Windows wheel and no pure-Python fallback, so it cannot be installed on PyPy/Windows; the 5.x line ships a pure-Python wheel (and runs at near-native speed on PyPy). This unblocks building and installing autobahn on PyPy/Windows (#1859)
  • Build and publish the missing CPython 3.12 and 3.14 manylinux_*_aarch64 (ARM64) wheels. The per-version ARM64 build matrix (added in commit 3d856f5 to deduplicate wheels) only covered cp311 and cp313, so no cp312 aarch64 wheel was ever published (and cp314 was never added) - e.g. pip download autobahn --platform manylinux_2_34_aarch64 for CPython 3.12 found no matching distribution. The strict release fileset manifest shared the same gap and so could not catch it; it now requires the cp312/cp314 aarch64 wheels (fail-closed). Thanks to @​norrisjeremy for the report (#1848)
  • Make the release fileset symmetric across all four platforms: every supported interpreter (cp311, cp312, cp313, cp314, pypy311) is now required on macOS/arm64, Linux/x86_64, Linux/aarch64, and Windows/amd64. The macOS job already built all interpreters via just build-all, but the manifest only required cp313/cp314/pypy311, so the cp311/cp312 macOS wheels were built and then dropped as "extra" rather than published; they are now kept and required (#1848)
  • Remove orphaned/attic files left over from the pre-justfile/uv CI/CD system: Makefile.orig, Dockerfile.wheels, mypy.ini, test-docker-builds.sh, versions.sh, deploy.sh, .prettierrc.json, .coveragerc, docs/DOCKER_BUILDS.md, docker/README.md and the pyinstaller/ PyInstaller hooks, plus the unused pyinstaller dev dependency. The .coveragerc omit = */test/*.py setting was preserved by migrating it to [tool.coverage.run] in pyproject.toml (so coverage still excludes in-package test modules), and the stale DOCKER_BUILDS.md entry was dropped from the Sphinx exclude_patterns. mypy is unaffected: the typing recipe already passes --config-file pyproject-static-typing.toml explicitly. setuptools was added explicitly to the dev extra: it is required by cffi's ffi.compile() to build the NVX extensions in an editable install on Python >= 3.12 (stdlib distutils was removed in 3.12) and had been pulled in only transitively via the removed pyinstaller (#1831)
  • Fix the FlatBuffers generated-code verification so it actually detects drift. The build-fbs recipe now uses the vendored, version-matched flatc bundled in the venv (${VENV_PATH}/bin/flatc) instead of an arbitrary system flatc, and the CI job runs just clean-fbs before just build-fbs so orphaned/stale generated files no longer survive in both the before and after states (previously they matched checksums and went undetected). On drift the job now fails with an actionable, categorized table - content differs (regenerate & commit, e.g. after a vendored-flatc bump), orphan / not generated (delete), new, not committed (commit) - derived from git status of the regenerated tree (#1830)
Commits

Updates boto3 from 1.43.8 to 1.43.36

Commits
  • 1d26f21 Merge branch 'release-1.43.36'
  • 111333b Bumping version to 1.43.36
  • 9d1fa23 Add changelog entries from botocore
  • 6d7f3c2 Update security docs to use newer versions of openssl and python (#4796)
  • c5b26ca Merge branch 'release-1.43.35'
  • c3750ac Merge branch 'release-1.43.35' into develop
  • 46e77cd Bumping version to 1.43.35
  • 9919ede Add changelog entries from botocore
  • 1820b7d Merge branch 'release-1.43.34'
  • 0065dbe Merge branch 'release-1.43.34' into develop
  • Additional commits viewable in compare view

Updates botocore from 1.43.8 to 1.43.36

Commits
  • 7a5b506 Merge branch 'release-1.43.36'
  • 9f214f1 Bumping version to 1.43.36
  • 32ea3d9 Update to latest models
  • d33e4c5 Merge branch 'release-1.43.35'
  • 7f8e97a Merge branch 'release-1.43.35' into develop
  • 833cf6e Bumping version to 1.43.35
  • 8b3f215 Update to latest models
  • 377d566 Merge customizations for Application Signals
  • 67d724c Merge branch 'release-1.43.34'
  • 10f696e Merge branch 'release-1.43.34' into develop
  • Additional commits viewable in compare view

Updates cbor2 from 6.1.1 to 6.1.2

Release notes

Sourced from cbor2's releases.

6.1.2

  • Fixed incorrect tracking of string references for definite-length text strings of length greater than 65536 (#308; PR by @​sahvx655-wq)
  • Fixed cbor2.load() crash caused by incorrect handling of internal read buffer extension during stream deserialization. (#307; PR by @​noderyos)
Commits

Updates coverage from 7.14.0 to 7.14.3

Changelog

Sourced from coverage's changelog.

Version 7.14.3 — 2026-06-22

  • Fix: the default ... exclusion rule now also matches function bodies whose closing return-type bracket is on its own line (for example, after a long -> dict[ ... ] annotation that a formatter has split over multiple lines). Closes issue 2185, thanks Mengjia Shang <pull 2196_>.

  • Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors. We can't import the C tracer because in 7.14.2 we stopped shipping compiled wheels for 3.13t. Thanks, Hugo van Kemenade <pull 2203_>_.

.. _issue 2185: coveragepy/coveragepy#2185 .. _pull 2196: coveragepy/coveragepy#2196 .. _pull 2203: coveragepy/coveragepy#2203

.. _changes_7-14-2:

Version 7.14.2 — 2026-06-20

  • Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197_.

  • Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd <pull 2193_>.

  • Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don't really make sense, so now we search for a usable one instead. Fixes issue 2187_.

  • Following the advice of cibuildwheel <no-13t_>_, we no longer distribute wheels for Python 3.13 free-threaded.

.. _issue 2187: coveragepy/coveragepy#2187 .. _issue 2192: coveragepy/coveragepy#2192 .. _pull 2193: coveragepy/coveragepy#2193 .. _issue 2197: coveragepy/coveragepy#2197 .. _no-13t: https://py-free-threading.github.io/ci/#building-free-threaded-wheels-with-cibuildwheel

.. _changes_7-14-1:

... (truncated)

Commits
  • 22f13ea docs: sample HTML for 7.14.3
  • 2ca4e5f docs: prep for 7.14.3
  • 01d714e docs: add changelog entry for #2203
  • f36248d fix: don't emit 'Couldn't import C tracer' warning for 3.13t (#2203)
  • 86d73d1 docs: thanks, Mengjia Shang
  • 3d4ae3c docs: add the #2196 pr link to CHANGES
  • f4b2b4d fix: exclude ... bodies after multi-line return-type annotations (#2185) (#...
  • 1980ed0 chore: bump sigstore/gh-action-sigstore-python (#2201)
  • bca3217 build: since we don't ship 3.13t, don't test it
  • 77550d8 docs: oops, mismatched pull requests
  • Additional commits viewable in compare view

Updates cssbeautifier from 1.15.4 to 2.0.1

Release notes

Sourced from cssbeautifier's releases.

v2.0.1 🌈

What's Changed

Full Changelog: beautifier/js-beautify@v2.0.0...v2.0.1

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from cssbeautifier's changelog.

v2.0.1

  • Removed all usage of six and dropped support for Python 2. (#2374)
  • Move minimum version to Nodejs v22.x (#2363)
  • Bump nopt from 7.2.1 to 8.1.0 (#2361)
  • Fix minor crash for certain oddly formed *.js files (#2128)
Commits
  • 8c96030 Merge remote-tracking branch 'origin/staging/main' into staging/release
  • b9f7d50 Bump version numbers for 2.0.1
  • 6179d9d Update Changelog
  • e39f5dc Bump version numbers for 2.0.0
  • 36a0bb9 Update Changelog
  • ed0708c Merge remote-tracking branch 'origin/main' into staging/main
  • f27785b Python pip setuptools in release script
  • 527335d Merge remote-tracking branch 'origin/staging/main' into staging/release
  • c579527 Bump version numbers for 2.0.1
  • 4759992 Update Changelog
  • Additional commits viewable in compare view

Updates daphne from 4.2.1 to 4.2.2

Changelog

Sourced from daphne's changelog.

4.2.2 (2026-06-03)

  • Fixed a denial of service vulnerability via unbounded WebSocket message sizes. Daphne previously passed no message or frame size limits to autobahn, whose defaults are unbounded. This allowed an unauthenticated client to exhaust server memory by sending a very large WebSocket messages/frames (CVE-2026-44545).

    Both limits now default to 1 MiB and can be configured via the new --websocket-max-message-size and --websocket-max-frame-size CLI flags (or the matching Server constructor arguments). Pass 0 to restore the previous unlimited behaviour.

    Thanks to ParkHyunWoo for the report.

  • Fixed a header injection vulnerability on the WebSocket upgrade path (CVE-2026-44546).

    Header values containing \x0b, \x0c, \x1c, \x1d, \x1e, or \x85 were parsed as a single header by Twisted but split into multiple headers by autobahn during the WebSocket handshake. An attacker could exploit this parser differential to smuggle additional headers (e.g. authentication tokens, X-Forwarded-For, Origin, Daphne-Root-Path) into the ASGI scope passed to the application.

    Daphne now rejects requests carrying these bytes in any header value with a 400 Bad Request response, as required by RFC 9110 §5.5.

    Thanks to Rene Henningsen for the report.

Commits

Updates django-allauth from 65.16.1 to 65.18.0

Commits

Updates django-stubs-ext from 6.0.4 to 6.0.6

Commits

Updates django-stubs from 6.0.4 to 6.0.6

Commits

@dependabot
Bump the python-dependencies group across 1 directory with 53 updates
db5cda2 
Updates the requirements on [atproto](https://github.com/MarshalX/atproto), [autobahn](https://github.com/crossbario/autobahn-python), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore), [cbor2](https://github.com/agronholm/cbor2), [coverage](https://github.com/coveragepy/coveragepy), [cssbeautifier](https://github.com/beautifier/js-beautify), [daphne](https://github.com/django/daphne), [django-allauth](https://github.com/sponsors/pennersr), [django-stubs-ext](https://github.com/typeddjango/django-stubs), [django-stubs](https://github.com/typeddjango/django-stubs), [django-unfold](https://github.com/unfoldadmin/django-unfold), [django](https://github.com/django/django), [djlint](https://github.com/djlint/djLint), [docutils](https://github.com/rtfd/recommonmark), [jsbeautifier](https://github.com/ghost6991/Jsbeautifier), [langchain-core](https://github.com/langchain-ai/langchain), [langchain-protocol](https://github.com/langchain-ai/agent-protocol), [langgraph-checkpoint](https://github.com/langchain-ai/langgraph), [langgraph-sdk](https://github.com/langchain-ai/langgraph), [langgraph](https://github.com/langchain-ai/langgraph), [langsmith](https://github.com/langchain-ai/langsmith-sdk), [libipld](https://github.com/MarshalX/python-libipld), [msgpack](https://github.com/msgpack/msgpack-python), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation-django](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [praw](https://github.com/praw-dev/praw), [pyjwt](https://github.com/jpadilla/pyjwt), [pyopenssl](https://github.com/pyca/pyopenssl), [pyright](https://github.com/RobertCraigie/pyright-python), [pytest](https://github.com/pytest-dev/pytest), [ruff](https://github.com/astral-sh/ruff), [s3transfer](https://github.com/boto/s3transfer), [sentence-transformers](https://github.com/huggingface/sentence-transformers), [service-identity](https://github.com/pyca/service-identity), [structlog](https://github.com/hynek/structlog), [svix](https://github.com/svix/svix-webhooks), taskiq-aio-pika, [taskiq-redis](https://github.com/taskiq-python/taskiq-redis), [txaio](https://github.com/crossbario/txaio), [types-deprecated](https://github.com/python/typeshed), [types-psycopg2](https://github.com/python/typeshed), [types-python-dateutil](https://github.com/python/typeshed), [types-pyyaml](https://github.com/python/typeshed), [types-requests](https://github.com/python/typeshed), [ujson](https://github.com/ultrajson/ultrajson), [uuid-utils](https://github.com/aminalaee/uuid-utils), [wrapt](https://github.com/GrahamDumpleton/wrapt), [xxhash](https://github.com/ifduyue/python-xxhash), [zope-interface](https://github.com/zopefoundation/zope.interface) and [black](https://github.com/psf/black) to permit the latest version.

Updates `atproto` from 0.0.65 to 0.0.69
- [Release notes](https://github.com/MarshalX/atproto/releases)
- [Changelog](https://github.com/MarshalX/atproto/blob/main/CHANGES.md)
- [Commits](MarshalX/atproto@v0.0.65...v0.0.69)

Updates `autobahn` from 25.12.2 to 26.6.2
- [Release notes](https://github.com/crossbario/autobahn-python/releases)
- [Changelog](https://github.com/crossbario/autobahn-python/blob/master/docs/changelog.rst)
- [Commits](crossbario/autobahn-python@v25.12.2...v26.6.2)

Updates `boto3` from 1.43.8 to 1.43.36
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.8...1.43.36)

Updates `botocore` from 1.43.8 to 1.43.36
- [Commits](boto/botocore@1.43.8...1.43.36)

Updates `cbor2` from 6.1.1 to 6.1.2
- [Release notes](https://github.com/agronholm/cbor2/releases)
- [Commits](agronholm/cbor2@6.1.1...6.1.2)

Updates `coverage` from 7.14.0 to 7.14.3
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.14.0...7.14.3)

Updates `cssbeautifier` from 1.15.4 to 2.0.1
- [Release notes](https://github.com/beautifier/js-beautify/releases)
- [Changelog](https://github.com/beautifier/js-beautify/blob/main/CHANGELOG.md)
- [Commits](beautifier/js-beautify@v1.15.4...v2.0.1)

Updates `daphne` from 4.2.1 to 4.2.2
- [Changelog](https://github.com/django/daphne/blob/main/CHANGELOG.txt)
- [Commits](django/daphne@4.2.1...4.2.2)

Updates `django-allauth` from 65.16.1 to 65.18.0
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `django-stubs-ext` from 6.0.4 to 6.0.6
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.0.4...6.0.6)

Updates `django-stubs` from 6.0.4 to 6.0.6
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.0.4...6.0.6)

Updates `django-unfold` from 0.93.0 to 0.99.0
- [Release notes](https://github.com/unfoldadmin/django-unfold/releases)
- [Changelog](https://github.com/unfoldadmin/django-unfold/blob/main/CHANGELOG.md)
- [Commits](unfoldadmin/django-unfold@0.93.0...0.99.0)

Updates `django` from 6.0.5 to 6.0.6
- [Commits](django/django@6.0.5...6.0.6)

Updates `djlint` from 1.36.4 to 1.39.5
- [Release notes](https://github.com/djlint/djLint/releases)
- [Changelog](https://github.com/djlint/djLint/blob/master/CHANGELOG.md)
- [Commits](djlint/djLint@v1.36.4...v1.39.5)

Updates `docutils` from 0.22.4 to 0.23
- [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rtfd/recommonmark/commits)

Updates `jsbeautifier` from 1.15.4 to 2.0.1
- [Commits](https://github.com/ghost6991/Jsbeautifier/commits)

Updates `langchain-core` from 1.4.0 to 1.4.8
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.0...langchain-core==1.4.8)

Updates `langchain-protocol` from 0.0.15 to 0.0.18
- [Release notes](https://github.com/langchain-ai/agent-protocol/releases)
- [Commits](langchain-ai/agent-protocol@langchain-protocol==0.0.15...langchain-protocol==0.0.18)

Updates `langgraph-checkpoint` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==4.1.0...checkpoint==4.1.1)

Updates `langgraph-sdk` from 0.3.14 to 0.4.2
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@0.3.14...0.4.2)

Updates `langgraph` from 1.2.0 to 1.2.6
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.0...1.2.6)

Updates `langsmith` from 0.8.4 to 0.9.3
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.8.4...v0.9.3)

Updates `libipld` from 3.3.2 to 3.4.1
- [Release notes](https://github.com/MarshalX/python-libipld/releases)
- [Commits](MarshalX/python-libipld@v3.3.2...v3.4.1)

Updates `msgpack` from 1.1.2 to 1.2.1
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md)
- [Commits](msgpack/msgpack-python@v1.1.2...v1.2.1)

Updates `opentelemetry-api` to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.43.0)

Updates `opentelemetry-exporter-otlp-proto-http` to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.43.0)

Updates `opentelemetry-instrumentation-django` to 0.64b0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-sdk` to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.43.0)

Updates `praw` from 7.8.1 to 8.0.2
- [Release notes](https://github.com/praw-dev/praw/releases)
- [Changelog](https://github.com/praw-dev/praw/blob/main/CHANGES.rst)
- [Commits](praw-dev/praw@v7.8.1...v8.0.2)

Updates `pyjwt` from 2.12.1 to 2.13.0
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.12.1...2.13.0)

Updates `pyopenssl` from 26.2.0 to 26.3.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@26.2.0...26.3.0)

Updates `pyright` from 1.1.409 to 1.1.411
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.409...v1.1.411)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `ruff` from 0.15.13 to 0.15.20
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.13...0.15.20)

Updates `s3transfer` from 0.17.0 to 0.19.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.17.0...0.19.0)

Updates `sentence-transformers` from 5.5.0 to 5.6.0
- [Release notes](https://github.com/huggingface/sentence-transformers/releases)
- [Commits](huggingface/sentence-transformers@v5.5.0...v5.6.0)

Updates `service-identity` from 24.2.0 to 26.1.0
- [Release notes](https://github.com/pyca/service-identity/releases)
- [Changelog](https://github.com/pyca/service-identity/blob/main/CHANGELOG.md)
- [Commits](pyca/service-identity@24.2.0...26.1.0)

Updates `structlog` from 25.5.0 to 26.1.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.5.0...26.1.0)

Updates `svix` from 1.93.0 to 1.96.1
- [Release notes](https://github.com/svix/svix-webhooks/releases)
- [Changelog](https://github.com/svix/svix-webhooks/blob/main/ChangeLog.md)
- [Commits](svix/svix-webhooks@v1.93.0...v1.96.1)

Updates `taskiq-aio-pika` from 0.4.2 to 0.6.0

Updates `taskiq-redis` from 1.0.0 to 1.2.3
- [Release notes](https://github.com/taskiq-python/taskiq-redis/releases)
- [Commits](taskiq-python/taskiq-redis@1.0.0...1.2.3)

Updates `txaio` from 25.12.2 to 26.6.1
- [Release notes](https://github.com/crossbario/txaio/releases)
- [Changelog](https://github.com/crossbario/txaio/blob/master/docs/changelog.rst)
- [Commits](crossbario/txaio@v25.12.2...v26.6.1)

Updates `types-deprecated` from 1.3.1.20260508 to 1.3.1.20260520
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-psycopg2` from 2.9.21.20260509 to 2.9.21.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-python-dateutil` from 2.9.0.20260508 to 2.9.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-pyyaml` from 6.0.12 to 6.0.12.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-requests` from 2.33.0.20260508 to 2.33.0.20260518
- [Commits](https://github.com/python/typeshed/commits)

Updates `ujson` from 5.12.1 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.12.1...5.13.0)

Updates `uuid-utils` from 0.15.0 to 0.16.2
- [Release notes](https://github.com/aminalaee/uuid-utils/releases)
- [Commits](aminalaee/uuid-utils@0.15.0...0.16.2)

Updates `wrapt` from 2.1.2 to 2.2.2
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.1.2...2.2.2)

Updates `xxhash` from 3.7.0 to 3.8.0
- [Release notes](https://github.com/ifduyue/python-xxhash/releases)
- [Changelog](https://github.com/ifduyue/python-xxhash/blob/v3.8.0/CHANGELOG.rst)
- [Commits](ifduyue/python-xxhash@v3.7.0...v3.8.0)

Updates `zope-interface` from 8.4 to 8.5
- [Changelog](https://github.com/zopefoundation/zope.interface/blob/master/CHANGES.rst)
- [Commits](zopefoundation/zope.interface@8.4...8.5)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@26.3.1...26.5.1)

---
updated-dependencies:
- dependency-name: atproto
  dependency-version: 0.0.69
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: autobahn
  dependency-version: 26.6.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: boto3
  dependency-version: 1.43.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: botocore
  dependency-version: 1.43.36
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: cbor2
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: coverage
  dependency-version: 7.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: cssbeautifier
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: daphne
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: django-allauth
  dependency-version: 65.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: django-stubs-ext
  dependency-version: 6.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: django-stubs
  dependency-version: 6.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: django-unfold
  dependency-version: 0.99.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: django
  dependency-version: 6.0.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: djlint
  dependency-version: 1.39.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: docutils
  dependency-version: '0.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: jsbeautifier
  dependency-version: 2.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: langchain-core
  dependency-version: 1.4.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-protocol
  dependency-version: 0.0.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langgraph-checkpoint
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langgraph-sdk
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: langgraph
  dependency-version: 1.2.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langsmith
  dependency-version: 0.9.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: libipld
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: msgpack
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: opentelemetry-api
  dependency-version: 1.43.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.43.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: opentelemetry-instrumentation-django
  dependency-version: 0.64b0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: opentelemetry-sdk
  dependency-version: 1.43.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: praw
  dependency-version: 8.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: pyjwt
  dependency-version: 2.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyopenssl
  dependency-version: 26.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyright
  dependency-version: 1.1.411
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.15.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: s3transfer
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: sentence-transformers
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: service-identity
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: structlog
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: svix
  dependency-version: 1.96.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: taskiq-aio-pika
  dependency-version: 0.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: taskiq-redis
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: txaio
  dependency-version: 26.6.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: types-deprecated
  dependency-version: 1.3.1.20260520
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-psycopg2
  dependency-version: 2.9.21.20260518
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-python-dateutil
  dependency-version: 2.9.0.20260518
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20260518
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-requests
  dependency-version: 2.33.0.20260518
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: uuid-utils
  dependency-version: 0.16.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: wrapt
  dependency-version: 2.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: xxhash
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: zope-interface
  dependency-version: '8.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: black
  dependency-version: 26.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 29, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 3, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 3, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/python-dependencies-e417d0358d branch July 3, 2026 18:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants