Repository navigation
Resolve Dependabot updates and release PyFly v26.10.05 - #188
Merged
Merged
Conversation
This was referenced Oct 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Refresh the runtime, development, site, and book dependencies from Dependabot #171 and upgrade all 14 setup-python uses from #157 to the immutable v7.0.0 commit. Bump PyFly to v26.10.05 (package 26.10.5), synchronize active download links and badges, and retain the qualified SQLAlchemy 2.0.50 and asyncmy 0.2.11 minimums while updating their locked versions.
Redis 8's five-second default socket timeout disconnects valid long-polling consumers. Preserve blocking reads and legacy response shapes, with a real-server regression covering finite and indefinite waits, delivery after idling, and cancellation. Adapt the affected strict typing and tooling tests to the updated libraries.
The published Presidio anonymizer caps cryptography below 49. The optional PII extra uses its official merged source fix at commit
5e2fcea990aa3b99660d2aea9121d0ba74a8940b, allowing patched cryptography 50.0.2 without overriding dependency metadata. PII installs require Git/GitHub access; existing pip PII installs must explicitly reinstall the same-version source dependency before upgrading. The README, installation guide, logging guide, and dependency ledger document the tested migration.Validation on the candidate:
Exact-head CI passed: regular PR CI, real Presidio redaction, and all 14 jobs of the manually dispatched native-backend workflow, including Python 3.12/3.13, SQLAlchemy 2.0, PostgreSQL, MySQL, MariaDB, MongoDB replica set, Docker services, and browser/installed distributions. PII installed-package qualification also passed on both supported Python versions. Final books and package assets will be rebuilt from the release tag and independently downloaded/verified.