Skip to content

chore(deps): bump the dependencies group across 1 directory with 23 updates#600

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/src/backend/dependencies-a3242ac77d
Closed

chore(deps): bump the dependencies group across 1 directory with 23 updates#600
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/src/backend/dependencies-a3242ac77d

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Apr 3, 2026 •
edited
Loading

Bumps the dependencies group with 23 updates in the /src/backend directory:

Package From To
blessed 1.33.0 1.34.0
boto3 1.42.72 1.42.77
botocore 1.42.72 1.42.77
django 5.2.12 6.0.3
djangorestframework 3.17.0 3.17.1
googleapis-common-protos 1.73.0 1.73.1
gunicorn 25.1.0 25.3.0
importlib-metadata 8.7.1 9.0.0
protobuf 6.33.6 7.34.1
redis 7.3.0 7.4.0
sentry-sdk 2.55.0 2.56.0
tinycss2 1.4.0 1.5.1
wrapt 1.17.3 2.1.2
build 1.4.0 1.4.2
coverage 7.13.4 7.13.5
django-silk 5.4.3 5.5.0
django-stubs 5.2.9 6.0.1
django-stubs-ext 5.2.9 6.0.1
filelock 3.25.0 3.25.2
identify 2.6.17 2.6.18
python-discovery 1.1.0 1.2.1
ty 0.0.1a21 0.0.26
virtualenv 21.1.0 21.2.0

Updates blessed from 1.33.0 to 1.34.0

Release notes

Sourced from blessed's releases.

1.34

  • improved: Windows now supports Terminal.does_mouse(), Terminal.notify_on_resize(), and Terminal.mouse_enabled(). More than 100x improvement of response times to keyboard input and automatic response sequences on the Windows platform by using WaitForSingleObject initially proposed by @​cr545l, #354.
  • bugfix: Terminal.async_inkey() no longer raises NotImplementedError on Windows.

1.17.9: Initial support for Python 3.10

  • bugfix: Now imports on 3.10+

1.15.0: Disable various integration tests, support python 3.7

No release notes provided.

1.14.0: bugfix term.wrap for text containing newlines

  • bugfix: term.wrap misbehaved for text containing newlines, #74

1.13.0: new Terminal.split_seqs() function, speed enhancement

  • enhancement: method Terminal.split_seqs introduced, and 4x cost reduction in related sequence-aware functions, #29.
  • deprecated: function blessed.sequences.measure_length superseded by blessed.sequences.iter_parse if necessary.
  • deprecated: warnings about "binary-packed capabilities" are no longer emitted on strange terminal types, making best effort.

1.12.0: add Terminal.get_location() method

  • enhancement: method Terminal.get_locationreturns the(row, col)`` position of the cursor at the time of call for attached terminal.
  • enhancement: a keyboard now detected as stdin when stream is sys.stderr.
Changelog

Sourced from blessed's changelog.

.. py:currentmodule:: blessed.terminal

Version History

1.38

  • introduced: :meth:~.Terminal.does_osc52_clipboard, :meth:~.Terminal.clipboard_copy, and :meth:~.Terminal.clipboard_paste to detect, copy, and read from clipboard.
  • introduced: :meth:~.Terminal.get_color_scheme.
  • introduced: :meth:~.Terminal.does_kitty_query for Kitty's XTGETTCAP query extensions.
  • introduced: :meth:~.Terminal.does_decrqss for DECRQSS (Request Status String).
  • introduced: :meth:~.Terminal.does_styled_underlines and :meth:~.Terminal.does_colored_underlines -- detect extended underline styles (Smulx) and colored underlines (Setulc) via XTGETTCAP.
  • introduced: :meth:~.Terminal.set_window_title and :meth:~.Terminal.window_title -- set the terminal window and/or icon title via xterm OSC sequences, with a context manager that pushes and pops the title stack (XTWINOPS).
  • introduced: :attr:DecModeResponse.recognized and :attr:DecModeResponse.supported properties -- distinguish modes the terminal acknowledges from those it can actually use.
  • improved: Smulx and Setulc added to XTGETTCAP capability list.
  • bugfix: EOF when stdin is connected to a Pipe (eg. pytest capture) caused infinite loop :ghpull:366.
  • bugfix: Background SGR not applying to text/suggestion content in :class:blessed.line_editor.LineEditor, now prepend bg_sgr before each content SGR sequence.
  • bugfix: OSC responses for 'ST' in addition to 'BEL' terminated iTerm2 capabilities, Kitty notifications, Kitty pointer shapes responses

1.37

  • bugfix: legacy CSI letter-form sequences with explicit modifiers and event type (e.g., \x1b[1;1:1A for arrow key press) were not resolved to key names, this affected only some terminals, such as Ghostty. :ghpull:363.

1.36

  • bugfix: [ key returned :attr:~.Keystroke.name of value CSI in Kitty keyboard protocol mode, it now returns KEY_LEFT_SQUARE_BRACKET.
  • improved: Kitty keyboard protocol now synthesizes :attr:~.Keystroke.name for all ASCII alphanumeric and punctuation keys, including unmodified press events (e.g., KEY_A, KEY_PERIOD, KEY_LEFT_SQUARE_BRACKET). Previously, only modified or released/repeated keys received synthesized names.

1.35

  • introduced: :meth:~.Terminal.cursor_shape context manager and :class:~blessed.cursor_shape.CursorShape constants for DECSCUSR cursor shape control (block, underline, bar -- steady or blinking).
  • introduced: methods :meth:~Keystroke.key_name and :meth:~Keystroke.key_value allow for better key and value tracking when using kitty keyboard protocol with pressed, released, and

... (truncated)

Commits

Updates boto3 from 1.42.72 to 1.42.77

Commits
  • 48369ea Merge branch 'release-1.42.77'
  • 4398c8e Bumping version to 1.42.77
  • 7c449e2 Add changelog entries from botocore
  • ee6c3e4 Merge branch 'release-1.42.76'
  • a5ad9c3 Merge branch 'release-1.42.76' into develop
  • 1abf640 Bumping version to 1.42.76
  • 0a383d4 Add changelog entries from botocore
  • aaab8ce Merge branch 'release-1.42.75'
  • 9ee6523 Merge branch 'release-1.42.75' into develop
  • a0efc54 Bumping version to 1.42.75
  • Additional commits viewable in compare view

Updates botocore from 1.42.72 to 1.42.77

Commits
  • a42e6cf Merge branch 'release-1.42.77'
  • 7906a34 Bumping version to 1.42.77
  • 7f9c3cd Update endpoints model
  • 1db4cef Update to latest models
  • eded7ce Merge branch 'release-1.42.76'
  • 85f623c Merge branch 'release-1.42.76' into develop
  • 1ecb1a3 Bumping version to 1.42.76
  • f725d85 Update to latest models
  • cfa4484 Merge branch 'release-1.42.75'
  • 2ccc2db Merge branch 'release-1.42.75' into develop
  • Additional commits viewable in compare view

Updates django from 5.2.12 to 6.0.3

Commits
  • a0d3bdb [6.0.x] Bumped version for 6.0.3 release.
  • 264d5c7 [6.0.x] Fixed CVE-2026-25674 -- Prevented potentially incorrect permissions o...
  • b1444d9 [6.0.x] Fixed CVE-2026-25673 -- Simplified URLField scheme detection.
  • 1b22d53 [6.0.x] Fixed #36961 -- Fixed TypeError in deprecation warnings if Django is ...
  • 27ed90a [6.0.x] Ensured spelling checks pass OK.
  • 659bacf [6.0.x] Aligned docs checks between GitHub Actions and local development.
  • e65c412 [6.0.x] Adjusted default DoS severity level in Security Policy.
  • 5b70253 [6.0.x] Fixed #36848 -- Mentioned BadRequest exception in docs/ref/views.txt.
  • 3a04b22 [6.0.x] Fixed #36951 -- Removed empty exc_info from log_task_finished signal ...
  • d112203 [6.0.x] Fixed #36944 -- Removed MAX_LENGTH_HTML and related 5M chars limit re...
  • Additional commits viewable in compare view

Updates djangorestframework from 3.17.0 to 3.17.1

Release notes

Sourced from djangorestframework's releases.

3.17.1

What's Changed

Bug fixes

Full Changelog: encode/django-rest-framework@3.17.0...3.17.1

Commits

Updates googleapis-common-protos from 1.73.0 to 1.73.1

Commits
  • 7a05a34 chore: create a release (#16191)
  • 0f19d85 chore: fix missing heading in changelog (#16189)
  • a16755d chore: librarian onboard pull request: 20260323T111101Z (#16141)
  • 9694ce9 chore: librarian onboard pull request: 20260323T114549Z (#16143)
  • c4a35cf chore: librarian onboard pull request: 20260323T132735Z (#16146)
  • 640a86b chore: librarian update image pull request: 20260325T221325Z (#16175)
  • 341284c chore(deps): bump pyasn1 from 0.6.1 to 0.6.3 in /packages/sqlalchemy-spanner ...
  • ec9262c fix: Allow Protobuf 7.x, require Python 3.9 (#16102)
  • cf50cea feat(firestore): literals pipeline stage (#16028)
  • 4b400fa chore: librarian generate pull request: 20260325T142358Z (#16166)
  • Additional commits viewable in compare view

Updates gunicorn from 25.1.0 to 25.3.0

Release notes

Sourced from gunicorn's releases.

Gunicorn 25.3.0

Bug Fixes

  • HTTP/2 ASGI Body Duplication: Fix request body being received twice in HTTP/2 ASGI requests, causing JSON parsing errors with "Extra data" messages (#3558)

  • ASGI Chunked EOF Handling: Add finish() method to callback parser to handle chunked encoding edge case where connection closes before final CRLF after zero-chunk

  • HTTP/2 Documentation: Fix http_protocols examples to use comma-separated string instead of list syntax (#3561)

  • Chunked Encoding: Reject chunk extensions containing bare CR bytes per RFC 9112 (#3556)

  • Request Line Limit: Fix --limit-request-line 0 to mean unlimited as documented, instead of using default maximum. Works with both Python and fast C parser. (#3563)

Security

  • ASGI Parser Header Validation: Add security checks per RFC 9110/9112:
    • Reject duplicate Content-Length headers
    • Reject requests with both Content-Length and Transfer-Encoding
    • Reject chunked transfer encoding in HTTP/1.0
    • Reject stacked chunked encoding
    • Validate Transfer-Encoding values
    • Strict chunk size validation

Changes

  • Fast HTTP Parser: Update to gunicorn_h1c >= 0.6.3 for asgi_headers property and InvalidChunkExtension validation for bare CR rejection

  • ASGI PROXY Protocol: Add PROXY protocol v1/v2 support to callback parser

  • Docker Images: Update to Python 3.14

Gunicorn 25.2.0

New Features

  • Fast HTTP Parser (gunicorn_h1c 0.4.1): Integrate new exception types and limit parameters from gunicorn_h1c 0.4.1 for both WSGI and ASGI workers
    • Requires gunicorn_h1c >= 0.4.1 for http_parser='fast'
    • Falls back to Python parser in auto mode if version not met
    • Proper HTTP status codes for limit errors (414, 431)

Bug Fixes

  • uWSGI Async Workers: Fix InvalidUWSGIHeader: incomplete header error when using gevent or gthread workers with uwsgi protocol behind nginx. (#3552, [PR #3554](benoitc/gunicorn#3554))

... (truncated)

Commits
  • 9bce72c Update changelog with missing 25.3.0 changes
  • 2a15fdb Fix pylint isinstance-second-argument-not-valid-type warning
  • 8d08aaa Fix --limit-request-line 0 to mean unlimited
  • d40a374 Fix pytest-asyncio configuration and treq_asgi hex escapes
  • da8bd48 Remove unused AsyncRequest class
  • b00f125 Integrate gunicorn_h1c 0.6.3 with InvalidChunkExtension support
  • bdb2ebd Reject chunk extensions with bare CR bytes (RFC 9112)
  • 7057fc9 Fix http_protocols documentation to use string syntax
  • d43acb8 Update to gunicorn_h1c >= 0.6.2 for asgi_headers support
  • cbd27e8 Merge pull request #3559 from benleembruggen/fix/http2-asgi-body-duplication
  • Additional commits viewable in compare view

Updates importlib-metadata from 8.7.1 to 9.0.0

Changelog

Sourced from importlib-metadata's changelog.

v9.0.0

Deprecations and Removals

  • Added MetadataNotFound (subclass of FileNotFoundError) and updated Distribution.metadata/metadata() to raise it when the metadata files are missing instead of returning Nonepython/cpython#143387#532)

v8.9.0

Features

v8.8.0

Features

  • Removed Python 3.9 compatibility.
Commits

Updates protobuf from 6.33.6 to 7.34.1

Release notes

Sourced from protobuf's releases.

Protocol Buffers v34.0-rc1

Announcements

Bazel

Compiler

C++

... (truncated)

Commits

Updates redis from 7.3.0 to 7.4.0

Release notes

Sourced from redis's releases.

7.4.0

Changes

🐛 Bug Fixes

  • Fix AttributeError in cluster metrics recording when connection is None or ClusterNode object instance is used to extract the connection info (#3999)
  • Fixing security concern in repr methods for ConnectionPools - passwords might leak in plain text logs (#3998)
  • Refactored connection count and SCH metric collection (#4001)

🧪 Experimental Features

-Refactored health check logic for MultiDBClient (#3994)

🧰 Maintenance

  • Expose basic Otel classes and functions to be importable through redis.observability to match the examples in the readthedocs (#3996)

We'd like to thank all the contributors who worked on this release! @​vladvildanov @​petyaslavova

Commits
  • b72f24a Updating lib version to 7.4.0
  • 0a4e0af Refactored health check logic for MultiDBClient (#3994)
  • 15492c9 Refactored connection count and SCH metric collection (#4001)
  • cd964ac Expose basic Otel classes and funtions to be importable through redis.observa...
  • 46ab74d Fixing security concern in repr methods for ConnectionPools - passwords m...
  • 26482db Fix AttributeError in cluster metrics recording when connection is None or Cl...
  • See full diff in compare view

Updates sentry-sdk from 2.55.0 to 2.56.0

Release notes

Sourced from sentry-sdk's releases.

2.56.0

New Features ✨

Bug Fixes 🐛

Anthropic

Other

Documentation 📚

Internal Changes 🔧

Other

Changelog

Sourced from sentry-sdk's changelog.

2.56.0

New Features ✨

Bug Fixes 🐛

Anthropic

Other

Documentation 📚

Internal Changes 🔧

Other

Commits
  • f5e93ad release: 2.56.0
  • 4cd6752 chore: pin GitHub Actions to full-length commit SHAs (#5781)
  • c3eb19f test: fix flaky threading test (#5700)
  • b2b42df fix(starlette): Catch Jinja2Templates ImportError (#5741)
  • 48dc566 feat(asgi): Add option to disable suppressing chained exceptions (#5714)
  • f963475 tests: Add -latest alias for each integration test suite (#5706)
  • 715fd2b ci: Use date-based branch names for toxgen PRs (#5704)
  • 35fe9e4 ci: 🤖 Update test matrix with new releases (03/19) (#5703)
  • 8d56b30 fix(anthropic): Set exception info on streaming span when applicable (#5683)
  • e103926 feat: Make ASGI support span first (#5680)
  • Additional commits viewable in compare view

Updates tinycss2 from 1.4.0 to 1.5.1

Release notes

Sourced from tinycss2's releases.

v1.5.1

  • Include parsing tests in source tarball

v1.5.0

  • Support most of CSS Color Level 5
  • Fix tokenizer crash on escaped Dimension units and Function names
Changelog

Sourced from tinycss2's changelog.

Version 1.5.1

Released on 2025-11-23.

  • Include parsing tests in source tarball

Version 1.5.0

Released on 2025-11-19.

  • Support most of CSS Color Level 5
  • Fix tokenizer crash on escaped Dimension units and Function names
Commits

Updates wrapt from 1.17.3 to 2.1.2

Release notes

Sourced from wrapt's releases.

wrapt-2.1.2

See the project page on the Python Package Index at https://pypi.org/project/wrapt/2.1.2/ for more information.

wrapt-2.1.1

See the project page on the Python Package Index at https://pypi.org/project/wrapt/2.1.1/ for more information.

wrapt-2.1.0

See the project page on the Python Package Index at https://pypi.org/project/wrapt/2.1.0/ for more information.

wrapt-2.0.1

See the project page on the Python Package Index at https://pypi.org/project/wrapt/2.0.1/ for more information.

wrapt-2.0.0

See the project page on the Python Package Index at https://pypi.org/project/wrapt/2.0.0/ for more information.

Changelog

Sourced from wrapt's changelog.

Version 2.1.2

Bugs Fixed

  • Building of Python wheels for riscv64 Linux platform had been accidentally removed from the build configuration. This has now been added back in.

  • When a weak function proxy was created for a bound method and the instance it was bound to was garbage collected, calling the proxy would silently call the function as unbound instead of raising a ReferenceError.

  • When deleting an attribute named __annotations__ on an object proxy, the attribute was only being deleted from the proxy and not also from the wrapped object.

Version 2.1.1

Bugs Fixed

  • Search field for documentation hosted on Read the Docs wasn't working correctly due to JavaScript error.

  • Missing tox.ini from source distribution package has been added.

Version 2.1.0

Features Changed

  • Drop support for Python 3.8. Python version 3.9 or later is now required.

Bugs Fixed

  • Improved type hints so that mypy and ty work better for methods of classes when using wrapt.decorator and wrapt.function_wrapper. Note that applying these to static methods still does not work correctly due to possibly limitations in those type checkers. The pyrefly tool still does not work correctly with wrapt.decorator and wrapt.function_wrapper applied to any methods of classes. Overall pyright provides the best experience when using wrapt with type checking.

Version 2.0.1

Bugs Fixed

  • The wrapt.lazy_import() function wasn't included in the __all__ attribute of the wrapt module, meaning that it wasn't

... (truncated)

Commits
  • 1381ae8 Merge branch 'release/2.1.2'
  • 26ab4fd Update ready for 2.1.2 release.
  • fbdbef4 Handle pypy which raises different exception type.
  • 87baf75 Add tests for deletion of qualname and annotations.
  • b48debf Decided only needed a patch level update,
  • 06c698f Update release notes for annotation deletion bug.
  • 6e6ed87 Merge pull request #313 from bysiber/fix/delattr-annotations
  • 4fc2c23 Add test to call proxy after weakref cleared.
  • 9e53a71 Add change notes for ReferenceError fix.
  • 2cda4e6 Merge pull request #312 from bysiber/fix/weakfunctionproxy-expired-instance
  • Additional commits viewable in compare view

Updates build from 1.4.0 to 1.4.2

Release notes

Sourced from build's releases.

1.4.2

What's Changed

New Contributors

Full Changelog: pypa/build@1.4.1...1.4.2

1.4.1

What's Changed

@dependabot
chore(deps): bump the dependencies group across 1 directory with 23 u…
632d4f0 
…pdates

Bumps the dependencies group with 23 updates in the /src/backend directory:

| Package | From | To |
| --- | --- | --- |
| [blessed](https://github.com/jquast/blessed) | `1.33.0` | `1.34.0` |
| [boto3](https://github.com/boto/boto3) | `1.42.72` | `1.42.77` |
| [botocore](https://github.com/boto/botocore) | `1.42.72` | `1.42.77` |
| [django](https://github.com/django/django) | `5.2.12` | `6.0.3` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.17.0` | `3.17.1` |
| [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) | `1.73.0` | `1.73.1` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `25.1.0` | `25.3.0` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `9.0.0` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.6` | `7.34.1` |
| [redis](https://github.com/redis/redis-py) | `7.3.0` | `7.4.0` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.55.0` | `2.56.0` |
| [tinycss2](https://github.com/Kozea/tinycss2) | `1.4.0` | `1.5.1` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.3` | `2.1.2` |
| [build](https://github.com/pypa/build) | `1.4.0` | `1.4.2` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.13.4` | `7.13.5` |
| [django-silk](https://github.com/jazzband/django-silk) | `5.4.3` | `5.5.0` |
| [django-stubs](https://github.com/typeddjango/django-stubs) | `5.2.9` | `6.0.1` |
| [django-stubs-ext](https://github.com/typeddjango/django-stubs) | `5.2.9` | `6.0.1` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.25.0` | `3.25.2` |
| [identify](https://github.com/pre-commit/identify) | `2.6.17` | `2.6.18` |
| [python-discovery](https://github.com/tox-dev/python-discovery) | `1.1.0` | `1.2.1` |
| [ty](https://github.com/astral-sh/ty) | `0.0.1a21` | `0.0.26` |
| [virtualenv](https://github.com/pypa/virtualenv) | `21.1.0` | `21.2.0` |



Updates `blessed` from 1.33.0 to 1.34.0
- [Release notes](https://github.com/jquast/blessed/releases)
- [Changelog](https://github.com/jquast/blessed/blob/master/docs/history.rst)
- [Commits](jquast/blessed@1.33...1.34)

Updates `boto3` from 1.42.72 to 1.42.77
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.72...1.42.77)

Updates `botocore` from 1.42.72 to 1.42.77
- [Commits](boto/botocore@1.42.72...1.42.77)

Updates `django` from 5.2.12 to 6.0.3
- [Commits](django/django@5.2.12...6.0.3)

Updates `djangorestframework` from 3.17.0 to 3.17.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.17.0...3.17.1)

Updates `googleapis-common-protos` from 1.73.0 to 1.73.1
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.73.0...googleapis-common-protos-v1.73.1)

Updates `gunicorn` from 25.1.0 to 25.3.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@25.1.0...25.3.0)

Updates `importlib-metadata` from 8.7.1 to 9.0.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.7.1...v9.0.0)

Updates `protobuf` from 6.33.6 to 7.34.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `redis` from 7.3.0 to 7.4.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.3.0...v7.4.0)

Updates `sentry-sdk` from 2.55.0 to 2.56.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.55.0...2.56.0)

Updates `tinycss2` from 1.4.0 to 1.5.1
- [Release notes](https://github.com/Kozea/tinycss2/releases)
- [Changelog](https://github.com/Kozea/tinycss2/blob/main/docs/changelog.rst)
- [Commits](Kozea/tinycss2@v1.4.0...v1.5.1)

Updates `wrapt` from 1.17.3 to 2.1.2
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@1.17.3...2.1.2)

Updates `build` from 1.4.0 to 1.4.2
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.4.0...1.4.2)

Updates `coverage` from 7.13.4 to 7.13.5
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.4...7.13.5)

Updates `django-silk` from 5.4.3 to 5.5.0
- [Release notes](https://github.com/jazzband/django-silk/releases)
- [Changelog](https://github.com/jazzband/django-silk/blob/master/CHANGELOG.md)
- [Commits](jazzband/django-silk@5.4.3...5.5.0)

Updates `django-stubs` from 5.2.9 to 6.0.1
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@5.2.9...6.0.1)

Updates `django-stubs-ext` from 5.2.9 to 6.0.1
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@5.2.9...6.0.1)

Updates `filelock` from 3.25.0 to 3.25.2
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.25.0...3.25.2)

Updates `identify` from 2.6.17 to 2.6.18
- [Commits](pre-commit/identify@v2.6.17...v2.6.18)

Updates `python-discovery` from 1.1.0 to 1.2.1
- [Release notes](https://github.com/tox-dev/python-discovery/releases)
- [Commits](tox-dev/python-discovery@1.1.0...1.2.1)

Updates `ty` from 0.0.1a21 to 0.0.26
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.1-alpha.21...0.0.26)

Updates `virtualenv` from 21.1.0 to 21.2.0
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.1.0...21.2.0)

---
updated-dependencies:
- dependency-name: blessed
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.42.77
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: botocore
  dependency-version: 1.42.77
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: djangorestframework
  dependency-version: 3.17.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: googleapis-common-protos
  dependency-version: 1.73.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: gunicorn
  dependency-version: 25.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: importlib-metadata
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: protobuf
  dependency-version: 7.34.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: redis
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tinycss2
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: wrapt
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: build
  dependency-version: 1.4.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: coverage
  dependency-version: 7.13.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django-silk
  dependency-version: 5.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django-stubs
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: django-stubs-ext
  dependency-version: 6.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: filelock
  dependency-version: 3.25.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: identify
  dependency-version: 2.6.18
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: python-discovery
  dependency-version: 1.2.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ty
  dependency-version: 0.0.26
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: virtualenv
  dependency-version: 21.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 3, 2026
@dependabot dependabot bot requested a review from SchrodingersGat as a code owner April 3, 2026 09:46
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 3, 2026
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Apr 7, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 7, 2026
@dependabot dependabot bot deleted the dependabot/pip/src/backend/dependencies-a3242ac77d branch April 7, 2026 18:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@SchrodingersGat SchrodingersGat Awaiting requested review from SchrodingersGat SchrodingersGat is a code owner

Assignees

@matmair matmair

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@matmair