Skip to content

chore(deps): bump the dependencies group across 2 directories with 38 updates - #403

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/docs/dependencies-4496dcea3c
Open

chore(deps): bump the dependencies group across 2 directories with 38 updates#403
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/docs/dependencies-4496dcea3c

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 25, 2026

Copy link
Copy Markdown

Bumps the dependencies group with 1 update in the /docs directory: mkdocs-git-revision-date-localized-plugin.
Bumps the dependencies group with 37 updates in the /src/backend directory:

Package From To
blessed 1.49.0 1.50.0
boto3 1.43.88 1.43.97
botocore 1.43.88 1.43.97
django 5.2.17 6.1.1
django-allauth 65.18.0 65.19.4
django-dbbackup 5.3.0 5.3.1
django-otp 1.3.0 1.7.3
django-stubs-ext 6.1.0 6.1.1
djangorestframework 3.18.0 3.18.1
dulwich 1.2.14 1.2.15
fonttools 4.64.0 4.65.0
grpcio 1.83.1 1.84.0
idna 3.19 3.20
jwcrypto 1.6.0 1.6.1
pint 0.25.3 0.26.1
platformdirs 4.11.7 4.11.10
protobuf 7.36.1 7.36.2
pydantic-core 2.46.5 2.49.0
pyjwt 2.13.0 2.14.0
pypdf 6.17.0 6.19.0
scim2-models 0.6.12 0.7.0
sentry-sdk 2.68.1 2.69.2
tqdm 4.70.0 4.70.1
tzdata 2026.3 2026.4
urllib3 2.7.0 2.8.0
wcwidth 0.8.3 0.8.4
wrapt 2.4.0 2.4.1
anyio 4.15.0 4.15.1
build 1.6.0 1.6.1
coverage 7.16.0 7.16.1
django-silk 5.5.2 5.6.0
django-stubs 6.1.0 6.1.1
prek 0.5.2 0.5.3
pyproject-hooks 1.2.0 1.3.3
ty 0.0.76 0.0.82
types-psycopg2 2.9.21.20260724 2.9.21.20260911
types-pyyaml 6.0.12.20260815 6.0.12.20260906

Updates mkdocs-git-revision-date-localized-plugin from 1.5.4 to 1.6.0

Release notes

Sourced from mkdocs-git-revision-date-localized-plugin's releases.

v1.6.0

Highlights

Faster builds

Every page asked git which tag pointed at its commit, and asked again for the site-wide revision commit — the same answer, recomputed for each page. Those lookups are now cached.

The bigger your site, the more you save: on a 1000 page site this removes roughly 18 seconds of build time.

custom_format keeps your own words

If your format had any text around the date directives, that text came out scrambled:

custom_format: "Updated on %d %B %Y"
before:   Up23AMt723 on 23 January 2022
now:      Updated on 23 January 2022

Any format that was made up purely of % directives (including the %d. %B %Y default) was unaffected and still renders exactly as before. Unrecognised directives such as %Q are now left alone instead of being quietly reinterpreted as a different date field.

Creation date commit hash and tag now work

page.meta.git_creation_date_localized_hash and page.meta.git_creation_date_localized_tag were documented but always came back empty. If you use them in a theme override to link back to the commit or release that introduced a page, they now contain what you expect.

Shallow clone warnings reach more setups

The warning that tells you your dates will be wrong because CI only fetched part of the history was silently skipped whenever your .git was not in the directory you ran mkdocs from — a repository inside docs/, or a temporary checkout made by plugins such as monorepo. It now fires there too.

Clearer messages when something goes wrong

  • A bad type: now produces a proper MkDocs config error listing the valid values, instead of a bare AssertionError.
  • If reading git history in parallel fails, the error explains what enable_parallel_processing: false actually does, rather than suggesting a fallback it never attempted.
  • Plugin messages now go through MkDocs' own logger, so they are formatted and coloured like every other message in your build output.

Type hints are now visible

The package ships py.typed, so mypy, pyright and ty can see the plugin's annotations.

Upgrading

mkdocs build --strict is now stricter. Warnings from this plugin previously bypassed MkDocs' warning counter, so --strict ignored them. They now count.

In practice this means a build that combines --strict with a shallow clone will start failing where it used to pass — most commonly GitHub Actions, which checks out with fetch-depth: 1 by default. The dates in that build really are wrong, so the right fix is to fetch the full history:

- uses: actions/checkout@v6
</tr></table>

... (truncated)

Commits
  • 8db2449 Bump version to 1.6.0
  • 1f6eb6d Merge pull request #226 from timvink/refactor/page-rendering-and-packaging
  • 604005a Merge pull request #224 from timvink/fix/date-formatting-and-git-detection
  • 6e9e4e4 Cache tag lookups, split up on_page_markdown, tidy packaging
  • bf270f7 Fix custom_format literals, creation commit hash and shallow clone detection
  • 97ecbac Bump mkdocs-material from 9.7.6 to 9.7.7 (#223)
  • See full diff in compare view

Updates blessed from 1.49.0 to 1.50.0

Changelog

Sourced from blessed's changelog.

.. py:currentmodule:: blessed.terminal

Version History

1.50

  • change: default timeout of automatic terminal queries from 1 to 5 seconds with environment variable BLESSED_QUERY_TIMEOUT_SECONDS override, :ghpull:414.
  • bugfix: Do not automatic query XTGETTCAP_ for older CONPTY builds (Windows Server 2022), which displays control codes as visible text :ghpull:411.
  • bugfix: :meth:~Terminal.mouse_enabled failed to yield MOUSE_* keystrokes on older CONPTY builds (Windows Server 2022), where the console's "QuickEdit mode" blocks transmission, :ghpull:412.
  • bugfix: an XTGETTCAP_ received after query time out was returned by :meth:~Terminal.inkey as errant keystrokes. It is no longer yielded by :meth:~Terminal.inkey, :ghpull:413.
  • bugfix: :meth:~Terminal.does_iterm2_graphics results are now more accurate, by drawing a transparent pixel, :ghpull:416.
  • improve: performance of :meth:~Terminal.does_xtgettcap, :ghpull:415.
  • improve: skip some automatic queries for Apple's Terminal.app that leak VT100 codes as output :ghpull:417.
  • change: default timeout of automatic terminal queries from 1 to 5 seconds with environment variable BLESSED_QUERY_TIMEOUT_SECONDS override, :ghpull:414.

1.49

  • introduce: :meth:~Terminal.get_font_coverage reports codepoints the terminal font has a glyph for, by mintty's OSC 7771 Font Glyph Coverage Enquiry or the APC 25a1 Glyph Protocol, :ghpull:407.
  • bugfix: :ref:legacy mouse event names and button values, mouse release events returned by :meth:~Terminal.inkey were always MOUSE_LEFT_RELEASED for all buttons, they now report MOUSE_RELEASED, :ghpull:406.
  • bugfix: Mouse buttons 6 through 11 were erroneously decoded as left, middle, or right instead of MOUSE_BUTTON_6 through MOUSE_BUTTON_11, :ghpull:406.
  • improve: performance of automatic terminal query replies, :ghpull:405.
  • improve: all parameterized capabilities are now memorized, about 50x faster, :ghpull:404.
  • bugfix: :meth:~Terminal.truncate by bump of dependency wcwidth>=0.8.3, :ghissue:402.

1.48 * bugfix: :meth:~Terminal.async_inkey dropped keystrokes while another task is busy, :ghissue:401.

1.47

  • bugfix: :meth:~Terminal.does_sixel now returns True for SyncTERM using special-case matching of its illegal DA1 response.
  • bugfix: legacy SGR mouse decoder reported no-button motion event (mode 1003) as LEFT_MOTION instead of MOTION, :ghpull:398.
  • bugfix: match keyboard input \x1b\n as KEY_ALT_ENTER instead of KEY_CTRL_ALT_J.

1.46

  • bugfix: :meth:~Terminal.does_sixel failed to detect DA1 and caused the response to "leak" into

... (truncated)

Commits

Updates boto3 from 1.43.88 to 1.43.97

Commits
  • ed7de96 Merge branch 'release-1.43.97'
  • 275709c Bumping version to 1.43.97
  • a5c0088 Add changelog entries from botocore
  • 2be9967 Merge branch 'release-1.43.96'
  • bc62489 Merge branch 'release-1.43.96' into develop
  • 6e1774a Bumping version to 1.43.96
  • ef6f957 Add changelog entries from botocore
  • 238d6ec Update PyPI package summary to add Boto3 (#4846)
  • 2d18ca8 Add root workspace folder to gitignore (#4847)
  • 3061d22 Merge branch 'release-1.43.95'
  • Additional commits viewable in compare view

Updates botocore from 1.43.88 to 1.43.97

Commits
  • 7ffc568 Merge branch 'release-1.43.97'
  • fbb8f49 Bumping version to 1.43.97
  • e4ed5da Update to latest models
  • 7b05bf7 Merge customizations for SocialMessaging
  • 04d4c18 Expose calculated checksum on StreamingChecksumBody (#3799)
  • 9da9912 Merge branch 'release-1.43.96'
  • 7c1daa3 Merge branch 'release-1.43.96' into develop
  • edef4a7 Bumping version to 1.43.96
  • bafb058 Update to latest models
  • 4cd222f Merge branch 'release-1.43.95'
  • Additional commits viewable in compare view

Updates django from 5.2.17 to 6.1.1

Commits
  • 249b13d [6.1.x] Bumped version for 6.1.1 release.
  • 5f26fa8 [6.1.x] Added release date for 6.1.1.
  • fdcf78a [6.1.x] Added remaining community package mentions to the documentation.
  • 7241568 [6.1.x] Fixed #37222 -- Fixed QuerySet.distinct() crash on duplicated selecti...
  • ef3fc80 [6.1.x] Fixed #37312, Refs #36605 -- Fixed annotation preservation and key se...
  • b09cb6b [6.1.x] Clarified scope of object-level admin view permissions.
  • a6d3aa2 [6.1.x] Corrected heading hierarchy in the admin actions documentation.
  • 9031d41 [6.1.x] Clarified object-level permission checks in admin actions.
  • fc805c6 [6.1.x] Fixed #37311 -- Prevented consumption of rhs iterators in annotation ...
  • 4b0185a [6.1.x] Fixed #37300 -- Preserved parent instance hints on custom Prefetch qu...
  • Additional commits viewable in compare view

Updates django-allauth from 65.18.0 to 65.19.4

Commits

Updates django-dbbackup from 5.3.0 to 5.3.1

Release notes

Sourced from django-dbbackup's releases.

5.3.1

Changed

  • PostgreSQL HOST that are Unix/Windows socket paths will now be automatically URI-encoded to uphold pg_restore command line requirements.

Fixed

  • --verbosity parameter now correctly outputs log messages to the console instead of suppressing all output regardless of verbosity level.
Changelog

Sourced from django-dbbackup's changelog.

[5.3.1] - 2026-09-10

Changed

  • PostgreSQL HOST that are Unix/Windows socket paths will now be automatically URI-encoded to uphold pg_restore command line requirements.

Fixed

  • --verbosity parameter now correctly outputs log messages to the console instead of suppressing all output regardless of verbosity level.
Commits

Updates django-otp from 1.3.0 to 1.7.3

Changelog

Sourced from django-otp's changelog.

v1.7.3 - September 06, 2026 - Admin asset fixes

  • [#191](https://github.com/django-otp/django-otp/issues/191)_: Improve admin page compatibility with CSP (Varun Juneja)

.. _#191: django-otp/django-otp#191

v1.7.2 - September 03, 2026 - Fix throttling overflow

  • [#190](https://github.com/django-otp/django-otp/issues/190)_: OverflowError on the admin login page when a device's throttling failure count is high (Varun Juneja)

.. _#190: django-otp/django-otp#190

v1.7.1 - September 02, 2026 - Form improvement

  • Routine test matrix update
  • [#188](https://github.com/django-otp/django-otp/issues/188)_: Fix authentication form inappropriately triggering rate-limiting

Thanks to Varun Juneja.

.. _#188: django-otp/django-otp#188

v1.7.0 - January 07, 2026 - Async support

  • [#185](https://github.com/django-otp/django-otp/issues/185)_: Make OTPMiddleware async capable

Thanks to Aljosha Papsch.

.. _#185: django-otp/django-otp#185

v1.6.3 - October 25, 2025 - Spanish update

  • [#182](https://github.com/django-otp/django-otp/issues/182)_: Correct missing Spanish translations
  • [#181](https://github.com/django-otp/django-otp/issues/181)_: Wrong :rtype: in StaticToken.random_token docstring

.. _#181: django-otp/django-otp#181 .. _#182: django-otp/django-otp#182

v1.6.2 - October 21, 2025 - Cleanup

... (truncated)

Commits
  • 88cf497 Version 1.7.3
  • 4f8a5d2 Add a justfile
  • 9b64aaf Move admin template inline styles/scripts into static files for CSP compatibi...
  • a3be9e8 Version 1.7.2
  • 2db531b Cap the exponential throttle delay so a high failure count doesn't overflow
  • 3bc09de Version 1.7.1
  • 8e32455 Test matrix update
  • 82dafe2 Fix #186: Remove use of match_token from authentication forms (#188)
  • fc0d50b Version 1.7.0
  • 56e4ce3 Refactor test utilities
  • Additional commits viewable in compare view

Updates django-stubs-ext from 6.1.0 to 6.1.1

Commits

Updates djangorestframework from 3.18.0 to 3.18.1

Release notes

Sourced from djangorestframework's releases.

3.18.1

What's Changed

Bug fixes

Other changes

New Contributors

Full Changelog: encode/django-rest-framework@3.18.0...3.18.1

Commits
  • dd23495 Prepare release 3.18.1 (#10036)
  • cb1fb66 Install gettext in prepare-release
  • 858f1fc Reject non-finite values (nan, inf) in FloatField (#9998)
  • ea695cd Ensure translations are up to date when preparing release
  • 0406c6e Update pygments requirement from >=2.17,<2.21 to ==2.21.* in the optional gro...
  • 8c92e89 Expand deprecation classes and review deprecation policy (#10034)
  • 3157a6a Update pytest config to native TOML format from v9 (#10035)
  • 4f77428 Fixing issue #9484 (#10033)
  • f17d70f Fix int64 format detection for negative IntegerField minimums in Open API s...
  • 5668281 Add a compatibility setting for ListSerializer error formats (#10027)
  • Additional commits viewable in compare view

Updates dulwich from 1.2.14 to 1.2.15

Release notes

Sourced from dulwich's releases.

dulwich-1.2.15

  • Detect delta cycles in Pack.resolve_object: a crafted pack with REF_DELTA objects that name each other sent get_raw into an unbounded loop. Such chains now raise DeltaCycle.
  • Fix porcelain.clean when the target directory and the repository path are spelled differently, such as via a relative path or a symlink. (Jelmer Vernooij)
  • Memoize tag peeling on the object store, so refs sharing an annotated tag chain no longer re-walk it once per ref. show_ref --dereference and the ref advertisement were quadratic. (Jelmer Vernooij, #2406)
  • Give a .gitignore in a subdirectory precedence over one closer to the root, matching git. A negation in a deeper file no longer loses to a rule at the root, and a nested negation no longer re-includes a path whose parent directory stays excluded. (Jelmer Vernooij, #2399)
  • Reject reftable tables.list entries that contain a path separator or are absolute, so a hostile repository cannot make a ref lookup open a file outside the reftable directory. (netliomax25-code)
  • Support dulwich commit -C/--reuse-message and -c/--reedit-message to reuse a commit's message, author and author date, optionally editing the message. The committer and new commit ancestry remain independent. (eunwoo song, #1845)
  • List local branches for bare dulwich branch and standalone dulwich branch --list [pattern]. Listing empty repositories or patterns with no matches succeeds without changing refs. (be-student, #1847)
  • Add dulwich commit --author="Name <email>" to override the author of a new or amended commit. (kudala-bharani, #1845)
  • Set branch.<name>.remote and branch.<name>.merge for the branch checked out by a clone, so that a subsequent git pull with no arguments has tracking information. (Jelmer Vernooij, #2376)
  • Keep relative paths relative in SSHGitClient.get_url, emitting git's ssh://host/~/path form. Cloning from an scp-style URL like user@host:git/repo.git previously stored ssh://user@host/git/repo.git as the remote URL, which points at a different repository. (Jelmer Vernooij, #2375)
  • Name a symlink by its own path in porcelain.path_to_tree_path, rather than by the path of its target. porcelain.status listed a tracked symlink as untracked whenever the file it pointed at was itself untracked or missing, so a modified symlink was reported twice. (Jerry Xiao)
  • Ignore gitignore lines that carry no pattern, such as a bare ! or /. A bare ! previously re-included a directory that an earlier pattern in the same file had ignored. (Jelmer Vernooij, #2398)
  • Avoid quadratic cost in PktLineParser.parse, which resliced its remaining buffer once per pkt-line. (Jelmer Vernooij, #2408)
Changelog

Sourced from dulwich's changelog.

1.2.15 2026-09-14

  • Detect delta cycles in Pack.resolve_object: a crafted pack with REF_DELTA objects that name each other sent get_raw into an unbounded loop. Such chains now raise DeltaCycle.

  • Fix porcelain.clean when the target directory and the repository path are spelled differently, such as via a relative path or a symlink. (Jelmer Vernooij)

  • Enter a directory whose contents are excluded by a pattern such as dir/* when walking the work tree, so a later negation can re-include a file below it. (Jelmer Vernooij, #2409)

  • Memoize tag peeling on the object store, so refs sharing an annotated tag chain no longer re-walk it once per ref. show_ref --dereference and the ref advertisement were quadratic. (Jelmer Vernooij, #2406)

  • Give a .gitignore in a subdirectory precedence over one closer to the root, matching git. A negation in a deeper file no longer loses to a rule at the root, and a nested negation no longer re-includes a path whose parent directory stays excluded. (Jelmer Vernooij, #2399)

  • Reject reftable tables.list entries that contain a path separator or are absolute, so a hostile repository cannot make a ref lookup open a file outside the reftable directory. (netliomax25-code)

  • Support dulwich commit -C/--reuse-message and -c/--reedit-message to reuse a commit's message, author and author date, optionally editing the message. The committer and new commit ancestry remain independent. (eunwoo song, #1845)

  • List local branches for bare dulwich branch and standalone dulwich branch --list [pattern]. Listing empty repositories or patterns with no matches succeeds without changing refs. (be-student, #1847)

  • Add dulwich commit --author="Name <email>" to override the author of a new or amended commit. (kudala-bharani, #1845)

  • Set branch.<name>.remote and branch.<name>.merge for the branch checked out by a clone, so that a subsequent git pull with no arguments has tracking information. (Jelmer Vernooij, #2376)

  • Keep relative paths relative in SSHGitClient.get_url, emitting git's ssh://host/~/path form. Cloning from an scp-style URL like user@host:git/repo.git previously stored ssh://user@host/git/repo.git as the remote URL, which points at a different repository. (Jelmer Vernooij, #2375)

  • Name a symlink by its own path in porcelain.path_to_tree_path, rather

... (truncated)

Commits
  • b84b2ad Release 1.2.15
  • ee235e8 Memoize tag peeling on the object store (#2407)
  • 7fe797b Memoize tag peeling on the object store
  • f6fc1b3 protocol: Avoid quadratic cost in PktLineParser.parse (#2410)
  • 60660d2 protocol: Avoid quadratic cost in PktLineParser.parse
  • e0952f9 More gitignore matching improvements (#2409)
  • fa2d6da Match ignore patterns by entry name and type, as git does
  • 43d67eb Share one ignore decision path between filter and manager
  • cb0d914 Name the directory re-inclusion checks in ignore matching
  • fa1a579 Keep a directory excluded by name against a "!dir/**/" negation
  • Additional commits viewable in compare view

Updates fonttools from 4.64.0 to 4.65.0

Release notes

Sourced from fonttools's releases.

4.65.0

  • [glyf] Add __iter__, items and values methods to the glyf table to make it more dict-like (#4156).
  • [feaLib] Escape the anonymous block tag when scanning for its terminator, so tags containing regex metacharacters are matched literally (#4167).
  • [varLib] Strip directory components from <variable-font name="..."/> when deriving the output filename in the varLib command line, so a designspace cannot write outside the output directory (#4168).
  • [feaLib] Fix tracking of the current script and language across redundant script statements. Rules following a script statement that names the first declared language system no longer end up under the DFLT script, and a script statement naming the already-current script still narrows the language systems and terminates the current lookup while leaving the lookupflag alone, matching makeotf (#1824, #2522, #4169).
  • [varLib.interpolatable] Escape glyph names in the HTML report (#4172).
  • [otlLib] Fix overflow handling when building contextual lookups: offset overflows now raise OTLOffsetOverflowError instead of AttributeError so another contextual format can be tried (regression from #3439). When all formats overflow, split the ruleset in halves until it fits (#4171).
Changelog

Sourced from fonttools's changelog.

4.65.0 (released 2026-09-10)

  • [glyf] Add __iter__, items and values methods to the glyf table to make it more dict-like (#4156).
  • [feaLib] Escape the anonymous block tag when scanning for its terminator, so tags containing regex metacharacters are matched literally (#4167).
  • [varLib] Strip directory components from <variable-font name="..."/> when deriving the output filename in the varLib command line, so a designspace cannot write outside the output directory (#4168).
  • [feaLib] Fix tracking of the current script and language across redundant script statements. Rules following a script statement that names the first declared language system no longer end up under the DFLT script, and a script statement naming the already-current script still narrows the language systems and terminates the current lookup while leaving the lookupflag alone, matching makeotf (#1824, #2522, #4169).
  • [varLib.interpolatable] Escape glyph names in the HTML report (#4172).
  • [otlLib] Fix overflow handling when building contextual lookups: offset overflows now raise OTLOffsetOverflowError instead of AttributeError so another contextual format can be tried (regression from #3439). When all formats overflow, split the ruleset in halves until it fits (#4171).
Commits
  • 656f89d Release 4.65.0
  • 1643950 Update NEWS.rst [skip ci]
  • fd0f083 Merge pull request #4177 from fonttools/sbix-to-otsvg-snippet
  • 9c625d4 Merge pull request #4171 from fonttools/fix-contextual-size-overflow
  • 5f04c38 Add sbix to OT-SVG conversion snippet
  • 48a0cf9 Merge pull request #4172 from insaf021/interpolatable-html-escape
  • d30db24 Merge pull request #4169 from cmyr/fealib-script-tracking-afdko
  • ac342d7 [varLib.interpolatable] escape glyph name in HTML report
  • 2a93de2 Split contextual rulesets when all formats overflow
  • e6bb5fe Fix overflow reporting when sizing contextual lookups
  • Additional commits viewable in compare view

Updates grpcio from 1.83.1 to 1.84.0

Release notes

Sourced from grpcio's releases.

Release v1.84.0

This is release 1.84.0 (gimbal) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [promise_based_filter] enable v2_non_owning_waker_implementation experiment. (#43253)
  • [xDS] allow server listener address to match wildcard port. (#43247)
  • [WRR] remove env var guard for custom backend metrics. (#43198)
  • [subchannel] enable connection scaling service config fields. (#43116)
  • [subchannel] add metrics as per A94. (#43140)
  • Fix incorrect hostname suffix matching in no_proxy handling (prevents proxy bypass). (#41915)

C#

  • [C# Grpc.Tools] Add native macOS ARM64 support via universal binaries. (#41222)

Python

  • [Python] Fix -Werror=unused-result error triggered by Cythonized code. (#43313)
  • [Python] Release Python 3.15 wheels publicly. (#43259)
  • [Python][AsyncIO] Fixed reference cycles. (#43121)
  • [Python] fix: remove ghost key in grpc.aio.Metadata.delitem when last value is deleted. (#42974)
  • [Python] Fix the StatusCode Enums to be int. (#43167)
  • [Python] Fixed the parenthesis placement. (#43111)
  • [Python] Removed UsageError exception from registered method. (#43086)
  • [Python] Added registered methods support in AsyncIO stack . (#41796)
  • [Python] AIO Part 4 - Typehints fixes and add Pyright for aio/_channel.py. (#42736)
  • [Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#43000)
  • [Python] Observability plugin fixes. (#42785)

Ruby

  • [Ruby] Fix: Addressed Array of strings passed as metadata. (#42827)

Release v1.84.0-pre2

This is a prerelease of gRPC Core 1.84.0 (gimbal).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This is a Python-only pre-release that introduces pre-built wheels for Python 3.15.

... (truncated)

Commits
  • 3252a89 Bump release version to 1.84.0 on v1.84.x branch (#43405)
  • c633e39 [Release] Bump version to 1.84.0-pre2 (on v1.84.x branch) (#43401)
  • 12cafee [Backport][v1.84.x] Revert "[Python] Revert Python 3.15 changes due to sanity...
  • 56e86cb Bump release version to 1.84.0-pre1 on v1.84.x branch (#43327)
  • 7ef6a9e [build] Source reflection and channelz v1 schemas from BCR (@​grpc_proto) (#43...
  • c337c3e [core][filters] Unit test framework for v3 filter (#42969)
  • ce22bb4 [PH2][CHTTP2] Retire stream flow control delta early to avoid data race
  • 25c16f9 [PH2][Test] Add destructor tests for the Seq promise combinator.
  • a7fabec [Python] Fix -Werror=unused-result error triggered by Cythonized code (#43313)
  • d92ee43 [util] remove LoadFile() option to append null byte (#41478)
  • Additional commits viewable in compare view

Updates idna from 3.19 to 3.20

Release notes

Sourced from idna's releases.

v3.20

  • Update to Unicode 18.0.0.
  • Better enforcement of the domain length limit in the incremental codec.
  • Add support for Python 3.15.
Changelog

Sourced from idna's changelog.

3.20 (2026-09-17)

  • Update to Unicode 18.0.0.
  • Better enforcement of the domain length limit in the incremental codec.
  • Add support for Python 3.15.
Commits
  • d55e65e Release 3.20
  • 0c0824a Pre-release 3.20rc0
  • bd7c316 Note Python 3.15 support in the 3.20 changelog
  • b6cce85 Merge pull request #276 from kjd/unicode-18
  • 9a4bc59 Update to Unicode 18.0.0
  • dfab5a0 Merge branch 'python-3.15'
  • 417c354 Read the latest Unicode version from the DerivedAge.txt header instead of the...
  • cd17392 Merge pull request #274 from kjd/fix-decode-length-check
  • c5796d7 Skip the decode round-trip check for domains past encode's length limit
  • d6ee690 Update to Python 3.15 release candidate in CI and add trove classifier
  • Additional commits viewable in compare view

Updates jwcrypto from 1.6.0 to 1.6.1

Release notes

Sourced from jwcrypto's releases.

Version 1.6.1

Security Release

This release fixes CVE-2026-92091, a low security issue that may result in a Denial of Service on malformed JWK keys

What's Changed

New Contributors

Full Changelog: latchset/jwcrypto@v1.6.0...v1.6.1

Commits

Updates pint from 0.25.3 to 0.26.1

Changelog

Sourced from pint's changelog.

0.26.1 (2026-09-10)

  • Fix UnitRegistry(system="imperial") returning US units instead of imperial ones for shared names like Description has been truncated

@dependabot
chore(deps): bump the dependencies group across 2 directories with 38…
35b67b3 
… updates

Bumps the dependencies group with 1 update in the /docs directory: [mkdocs-git-revision-date-localized-plugin](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin).
Bumps the dependencies group with 37 updates in the /src/backend directory:

| Package | From | To |
| --- | --- | --- |
| [blessed](https://github.com/jquast/blessed) | `1.49.0` | `1.50.0` |
| [boto3](https://github.com/boto/boto3) | `1.43.88` | `1.43.97` |
| [botocore](https://github.com/boto/botocore) | `1.43.88` | `1.43.97` |
| [django](https://github.com/django/django) | `5.2.17` | `6.1.1` |
| [django-allauth](https://github.com/sponsors/pennersr) | `65.18.0` | `65.19.4` |
| [django-dbbackup](https://github.com/Archmonger/django-dbbackup) | `5.3.0` | `5.3.1` |
| [django-otp](https://github.com/django-otp/django-otp) | `1.3.0` | `1.7.3` |
| [django-stubs-ext](https://github.com/typeddjango/django-stubs) | `6.1.0` | `6.1.1` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.18.0` | `3.18.1` |
| [dulwich](https://github.com/dulwich/dulwich) | `1.2.14` | `1.2.15` |
| [fonttools](https://github.com/fonttools/fonttools) | `4.64.0` | `4.65.0` |
| [grpcio](https://github.com/grpc/grpc) | `1.83.1` | `1.84.0` |
| [idna](https://github.com/kjd/idna) | `3.19` | `3.20` |
| [jwcrypto](https://github.com/latchset/jwcrypto) | `1.6.0` | `1.6.1` |
| [pint](https://github.com/hgrecco/pint) | `0.25.3` | `0.26.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.11.7` | `4.11.10` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `7.36.1` | `7.36.2` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.5` | `2.49.0` |
| [pyjwt](https://github.com/jpadilla/pyjwt) | `2.13.0` | `2.14.0` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.17.0` | `6.19.0` |
| [scim2-models](https://github.com/python-scim/scim2-models) | `0.6.12` | `0.7.0` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.68.1` | `2.69.2` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.70.0` | `4.70.1` |
| [tzdata](https://github.com/python/tzdata) | `2026.3` | `2026.4` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.7.0` | `2.8.0` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.8.3` | `0.8.4` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `2.4.0` | `2.4.1` |
| [anyio](https://github.com/agronholm/anyio) | `4.15.0` | `4.15.1` |
| [build](https://github.com/pypa/build) | `1.6.0` | `1.6.1` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.16.0` | `7.16.1` |
| [django-silk](https://github.com/jazzband/django-silk) | `5.5.2` | `5.6.0` |
| [django-stubs](https://github.com/typeddjango/django-stubs) | `6.1.0` | `6.1.1` |
| [prek](https://github.com/j178/prek) | `0.5.2` | `0.5.3` |
| [pyproject-hooks](https://github.com/pypa/pyproject-hooks) | `1.2.0` | `1.3.3` |
| [ty](https://github.com/astral-sh/ty) | `0.0.76` | `0.0.82` |
| [types-psycopg2](https://github.com/python/typeshed) | `2.9.21.20260724` | `2.9.21.20260911` |
| [types-pyyaml](https://github.com/python/typeshed) | `6.0.12.20260815` | `6.0.12.20260906` |



Updates `mkdocs-git-revision-date-localized-plugin` from 1.5.4 to 1.6.0
- [Release notes](https://github.com/timvink/mkdocs-git-revision-date-localized-plugin/releases)
- [Commits](timvink/mkdocs-git-revision-date-localized-plugin@v1.5.4...v1.6.0)

Updates `blessed` from 1.49.0 to 1.50.0
- [Release notes](https://github.com/jquast/blessed/releases)
- [Changelog](https://github.com/jquast/blessed/blob/master/docs/history.rst)
- [Commits](jquast/blessed@1.49...1.50)

Updates `boto3` from 1.43.88 to 1.43.97
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.88...1.43.97)

Updates `botocore` from 1.43.88 to 1.43.97
- [Commits](boto/botocore@1.43.88...1.43.97)

Updates `django` from 5.2.17 to 6.1.1
- [Commits](django/django@5.2.17...6.1.1)

Updates `django-allauth` from 65.18.0 to 65.19.4
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `django-dbbackup` from 5.3.0 to 5.3.1
- [Release notes](https://github.com/Archmonger/django-dbbackup/releases)
- [Changelog](https://github.com/Archmonger/django-dbbackup/blob/master/CHANGELOG.md)
- [Commits](Archmonger/django-dbbackup@5.3.0...5.3.1)

Updates `django-otp` from 1.3.0 to 1.7.3
- [Changelog](https://github.com/django-otp/django-otp/blob/master/CHANGES.rst)
- [Commits](django-otp/django-otp@v1.3.0...v1.7.3)

Updates `django-stubs-ext` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.1.0...6.1.1)

Updates `djangorestframework` from 3.18.0 to 3.18.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.18.0...3.18.1)

Updates `dulwich` from 1.2.14 to 1.2.15
- [Release notes](https://github.com/dulwich/dulwich/releases)
- [Changelog](https://github.com/jelmer/dulwich/blob/main/NEWS)
- [Commits](jelmer/dulwich@dulwich-1.2.14...dulwich-1.2.15)

Updates `fonttools` from 4.64.0 to 4.65.0
- [Release notes](https://github.com/fonttools/fonttools/releases)
- [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst)
- [Commits](fonttools/fonttools@4.64.0...4.65.0)

Updates `grpcio` from 1.83.1 to 1.84.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.83.1...v1.84.0)

Updates `idna` from 3.19 to 3.20
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.19...v3.20)

Updates `jwcrypto` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/latchset/jwcrypto/releases)
- [Commits](latchset/jwcrypto@v1.6.0...v1.6.1)

Updates `pint` from 0.25.3 to 0.26.1
- [Changelog](https://github.com/hgrecco/pint/blob/master/CHANGES)
- [Commits](hgrecco/pint@0.25.3...0.26.1)

Updates `platformdirs` from 4.11.7 to 4.11.10
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.11.7...4.11.10)

Updates `protobuf` from 7.36.1 to 7.36.2
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `pydantic-core` from 2.46.5 to 2.49.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `pyjwt` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/jpadilla/pyjwt/releases)
- [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst)
- [Commits](jpadilla/pyjwt@2.13.0...2.14.0)

Updates `pypdf` from 6.17.0 to 6.19.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.17.0...6.19.0)

Updates `scim2-models` from 0.6.12 to 0.7.0
- [Release notes](https://github.com/python-scim/scim2-models/releases)
- [Changelog](https://github.com/python-scim/scim2-models/blob/main/doc/changelog.rst)
- [Commits](python-scim/scim2-models@0.6.12...0.7.0)

Updates `sentry-sdk` from 2.68.1 to 2.69.2
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.68.1...2.69.2)

Updates `tqdm` from 4.70.0 to 4.70.1
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.70.0...v4.70.1)

Updates `tzdata` from 2026.3 to 2026.4
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2026.3...2026.4)

Updates `urllib3` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.7.0...2.8.0)

Updates `wcwidth` from 0.8.3 to 0.8.4
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst)
- [Commits](jquast/wcwidth@0.8.3...0.8.4)

Updates `wrapt` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.4.0...2.4.1)

Updates `anyio` from 4.15.0 to 4.15.1
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](agronholm/anyio@4.15.0...4.15.1)

Updates `build` from 1.6.0 to 1.6.1
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.6.0...1.6.1)

Updates `coverage` from 7.16.0 to 7.16.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.16.0...7.16.1)

Updates `django-silk` from 5.5.2 to 5.6.0
- [Release notes](https://github.com/jazzband/django-silk/releases)
- [Changelog](https://github.com/jazzband/django-silk/blob/master/CHANGELOG.md)
- [Commits](jazzband/django-silk@5.5.2...5.6.0)

Updates `django-stubs` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.1.0...6.1.1)

Updates `prek` from 0.5.2 to 0.5.3
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.5.2...v0.5.3)

Updates `pyproject-hooks` from 1.2.0 to 1.3.3
- [Changelog](https://github.com/pypa/pyproject-hooks/blob/main/docs/changelog.rst)
- [Commits](pypa/pyproject-hooks@v1.2.0...v1.3.3)

Updates `ty` from 0.0.76 to 0.0.82
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.76...0.0.82)

Updates `types-psycopg2` from 2.9.21.20260724 to 2.9.21.20260911
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-pyyaml` from 6.0.12.20260815 to 6.0.12.20260906
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: mkdocs-git-revision-date-localized-plugin
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: blessed
  dependency-version: 1.50.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.43.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: botocore
  dependency-version: 1.43.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: django-allauth
  dependency-version: 65.19.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django-dbbackup
  dependency-version: 5.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django-otp
  dependency-version: 1.7.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django-stubs-ext
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: djangorestframework
  dependency-version: 3.18.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dulwich
  dependency-version: 1.2.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: fonttools
  dependency-version: 4.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: grpcio
  dependency-version: 1.84.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: idna
  dependency-version: '3.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: jwcrypto
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pint
  dependency-version: 0.26.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: platformdirs
  dependency-version: 4.11.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: protobuf
  dependency-version: 7.36.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pydantic-core
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pyjwt
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pypdf
  dependency-version: 6.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: scim2-models
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.69.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tqdm
  dependency-version: 4.70.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: tzdata
  dependency-version: '2026.4'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: urllib3
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: wcwidth
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wrapt
  dependency-version: 2.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: anyio
  dependency-version: 4.15.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: build
  dependency-version: 1.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: coverage
  dependency-version: 7.16.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django-silk
  dependency-version: 5.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django-stubs
  dependency-version: 6.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: prek
  dependency-version: 0.5.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pyproject-hooks
  dependency-version: 1.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ty
  dependency-version: 0.0.82
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: types-psycopg2
  dependency-version: 2.9.21.20260911
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20260906
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 25, 2026
@sonarqubecloud

sonarqubecloud Bot commented Sep 25, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@matmair matmair

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@matmair