Skip to content

Bump the py-deps group with 12 updates#1280

Merged
shapiromatron merged 4 commits intomainfrom
dependabot/pip/py-deps-ca85271402
Mar 2, 2026
Merged

Bump the py-deps group with 12 updates#1280
shapiromatron merged 4 commits intomainfrom
dependabot/pip/py-deps-ca85271402

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Updates the requirements on crispy-bootstrap4, django-treebeard, granian, redis, pandas, pybmds, poethepoet, ruff, pytest-django, playwright, sentry-sdk and uv-build to permit the latest version.
Updates crispy-bootstrap4 from 2025.6 to 2026.2

Release notes

Sourced from crispy-bootstrap4's releases.

2026.2 (2026-02-11)

  • Removed support for Django 4.2, 5.0 and 5.1.
  • Confirmed support for Python 3.14.
  • Confirmed support for Django 6.0.
Changelog

Sourced from crispy-bootstrap4's changelog.

2026.2 (2026-02-11)

  • Removed support for Django 4.2, 5.0 and 5.1.
  • Confirmed support for Python 3.14.
  • Confirmed support for Django 6.0.
Commits

Updates django-treebeard from 4.8.0 to 5.0.5

Changelog

Sourced from django-treebeard's changelog.

Release 5.0.5 (Feb 19, 2026)

Treebeard 5.0.5 is a bugfix release.

  • Reverted change to lock root nodes when adding a new root, which had unwanted performance implications.

Release 5.0.4 (Feb 19, 2026)

Treebeard 5.0.4 is a bugfix release.

  • Fixed TypeError when adding root nodes for MP and LT trees with node_order_by set.

Release 5.0.3 (Feb 18, 2026)

Treebeard 5.0.3 is a bugfix release.

  • Added row locks to prevent potential race conditions when concurrently calling add_child() on the same node, or when concurrently adding root nodes.

Release 5.0.2 (Feb 13, 2026)

Treebeard 5.0.2 is a bugfix release.

  • MP and NS nodes are refreshed from the database after a move, for a better developer experience. Previously it was left to the developer to refresh manually if they needed to use the node, and this was the source of numerous issues.
  • Fixed handling of reverse ordering in node_order_by.
  • Fixed handling of inherited models in TreeAdmin.
  • Fixed adding root nodes for inherited models.
  • Handled null values of fields specified in node_order_by more gracefully: ignore the field for the purpose of ordering and log a warning to indicate that the value likely needs to be provided manually.
  • Modified dump_bulk() methods to use a queryset iterator to avoid loading large datasets into memory.
  • Fixed import error with Django 6 if pyscopg was not installed.

Release 5.0.1 (Feb 11, 2026)

Treebeard 5.0.1 is a bugfix release.

  • Fixed count aggregations not working on MariaDB.

... (truncated)

Commits
  • 0a55403 Revert change to lock all root nodes when adding a new root
  • 66390d5 Bump to version 5.0.4
  • a7ef708 Fix TypeError when adding root nodes with node_order_by set.
  • c90c412 Simplify load_bulk implementation
  • 18f732a Bump to version 5.0.3
  • 8d0e0a6 Add row locks to fix race conditions when adding root nodes
  • e0a92d6 Lock parent row when adding children to an MP_Node, to fix race conditions
  • 9c00f93 Remove all remaining percent-formatted strings
  • fc44d53 Simplify and speed up numconv operations, add tests for numconv
  • 4b5acaa Refactor how movenodeform_factory determines fields to exclude
  • Additional commits viewable in compare view

Updates granian to 2.7.1

Release notes

Sourced from granian's releases.

Granian 2.7.1

Patch release

Changes since 2.7.0:

  • Fix websockets' handles cleanup on shutdown
    • This should fix an occasional runtime thread panic with the message Cannot drop pointer into Python heap without the thread being attached
  • Fix a bug in the ASGI protocol preventing apps to receive the websocket.disconnect event after server-initiated close (#801 by @​JaeHyuckSa)
    • This should fix some long-standing issues with Django channels
  • Review some lock holding strategy in PyFutureAwaitable callback dispatch (#802 by @​ColemanDunn)
  • Bump dependencies
Commits
  • 1a5a8c3 Review lock hold strategy in PyFutureAwaitable callback dispatch (#802)
  • d10a246 Ensure to send ASGI websocket.disconnect after server-initiated close (#801)
  • 6736727 Update external benchmark results (#795)
  • 6bcdadc Bump dependencies
  • 0062b6b Handle cleanup of ws tasks on shutdown (#803)
  • 11df933 Simplify release profile
  • feb7d9d Bump version to 2.7.1
  • 0de704b Update readme
  • 5881171 Update readme
  • 6177660 Reduce min for blocking-threads-idle-timeout to 5s
  • Additional commits viewable in compare view

Updates redis from 7.1.0 to 7.2.0

Release notes

Sourced from redis's releases.

7.2.0

Changes

Redis 8.6 Support Added support for Redis 8.6, including new commands and features for streams idempotent production and HOTKEYS.

Smart Client Handoff (Maintenance Notifications) for Cluster note: Pending a Redis Enterprise version release

This release introduces comprehensive support for Redis Enterprise Cluster maintenance notifications via SMIGRATING/SMIGRATED push notifications. The client now automatically handles slot migrations by:

Relaxing timeouts during migration (SMIGRATING) to prevent false failures Triggering cluster state reloads upon completion (SMIGRATED) Enabling seamless operations during Redis Enterprise maintenance windows

OpenTelemetry Native Metrics Support Added comprehensive OpenTelemetry metrics support following the OpenTelemetry Database Client Semantic Conventions. Metric groups include:

  • Command metrics: Operation duration with retry tracking
  • Connection basic: Connection count and creation time
  • Resiliency: Errors, handoffs, timeout relaxation
  • Connection advanced: Wait time and use time
  • Pubsub metrics: Published and received messages
  • Stream metrics: Processing duration and maintenance notifications

🚀 New Features

  • Added OTel instrumentation and metrics export for sync client (#3954)
  • Add maintenance notifications support for OSS API cluster clients (#3946)
  • Adding hotkeys commands support. (#3924)
  • Adds support for the new Idempotent Producers feature in Redis 8.6 (#3926)
  • Adding support for vrange command. (#3927)
  • Added a local digest command to the client to execute the XXH3 locally… (#3884)
  • Add DriverInfo class for upstream driver tracking (#3880)
  • Add ssl_password support to async Redis client (#3878)
  • Add ssl_ca_path support to async Redis client (#3879)

⚠️ Deprecations

  • Adding special handling of client_tracking_on and client_tracking_off for cluster clients. Marking those two functions as deprecated for cluster - embedded client-side caching feature should be used instead. (#3858)

🐛 Bug Fixes

  • Fix handling of circular MOVED redirects in cluster slot mapping (#3899)
  • fix(asyncio): prevent deadlock when Lock.release() is cancelled (#3900)
  • Fix unrecoverable connection state (#3905)
  • Fixed potential race condition between call_later() and run_forever() (#3897)
  • Fix RuntimeError in ClusterPubSub sharded message generator (#3889)
  • Fix async connection pool lock contention during connection establishment (#3885)
  • Fix PubSub client health check handling for sync client implementation (#3870)
  • Adding retries for the overall connect - socket connect + handshake. Fix for pubsub reconnect issues. (#3863)
  • Adding special handling of client_tracking_on and client_tracking_off for cluster clients. Marking those two functions as deprecated for cluster - embedded client-side caching feature should be used instead. (#3858)
  • #3618 Fix client-side cache invalidation for mixed str and bytes Redis keys (#3766)

... (truncated)

Commits
  • 915e8b4 Updating server version to 7.2.0
  • b41e47d Added OTel instrumentation and metrics export for sync client (#3954)
  • 9c8ad16 Fix type hints for spop and srandmember methods (#3943)
  • 34c73c7 Add maintenance notifications support for OSS API cluster clients (#3946)
  • 24974fe Renamed initial health check policies and unhealthy database argument (#3949)
  • 3d6b571 Reorganize pipeline actions (#3951)
  • 877d7a2 Disabled SCH in MultiDBClient underlying clients (#3938)
  • 9ac9ee6 Adding hotkeys commands support. (#3924)
  • 65623b7 Extending the tests to validate more supported scorers for hybrid search. Add...
  • 2b2f2cf Adds support for the new Idempotent Producers feature in Redis 8.6 (#3926)
  • Additional commits viewable in compare view

Updates pandas to 3.0.1

Release notes

Sourced from pandas's releases.

pandas 3.0.1

We are pleased to announce the release of pandas 3.0.1. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits
  • e04b26f RLS: 3.0.1 (#64206)
  • 47909e6 [backport 3.0.x] ENH: Add item() method to ExtensionArray class (#64134) (#64...
  • a061bfd Backport PR #64199 on branch 3.0.x (DOC: cleanup 3.0.1 whatsnew) (#64201)
  • 085a385 [backport 3.0.x] BUG: Fix read_hdf failing on generic datetime64 dtype (#6400...
  • 5f17047 [backport 3.0.x] BUG: use fill_null fallback for bug in pyarrow 21 on Windows...
  • 0d3a8cb Backport PR #64122 on branch 3.0.x (REG: Allow RE2 syntax in str.contains and...
  • 78e1917 Backport PR #64185 on branch 3.0.x (TST: remove fixed xfail for PyArrow 23.0....
  • 75a42ca Backport PR #64168 on branch 3.0.x (TST: add legacy file generation and tests...
  • 46d443f Backport PR #64092 on branch 3.0.x (BUG: DataFrame.loc fills b'' instead of N...
  • 9d67932 Backport PR #64068 on branch 3.0.x (BUG: fixed to_timedelta with list of int ...
  • Additional commits viewable in compare view

Updates pybmds from 25.1 to 25.2

Release notes

Sourced from pybmds's releases.

v25.2

What's Changed

New Contributors

Full Changelog: USEPA/BMDS@25.1...25.2

Commits

Updates poethepoet to 0.41.0

Release notes

Sourced from poethepoet's releases.

0.41.0

Enhancements

Full Changelog: nat-n/poethepoet@v0.40.0...v0.41.0

[!IMPORTANT] You must follow the instructions to (re)install the completion script for your preferred shell environment to benefit from the revamped tab completion covering task arguments.

Commits

Updates ruff from 0.14.14 to 0.15.2

Release notes

Sourced from ruff's releases.

0.15.2

Release Notes

Released on 2026-02-19.

Preview features

Bug fixes

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.2

Released on 2026-02-19.

Preview features

... (truncated)

Commits

Updates pytest-django to 4.12.0

Changelog

Sourced from pytest-django's changelog.

v4.12.0 (2026-02-14)

Compatibility ^^^^^^^^^^^^^

  • Official Python 3.14 support.
  • Dropped support for Python 3.9, minimum version is now Python 3.10.
  • Official Django 6.0 support.

Improvements ^^^^^^^^^^^^

  • The :ref:multiple databases <multi-db> support added in v4.3.0 is no longer considered experimental.
  • Added :func:@pytest.mark.django_isolate_apps <pytest.mark.django_isolate_apps> for isolating Django's app registry in pytest tests, and a :fixture:django_isolated_apps fixture to access the isolated Apps registry instance if needed.

v4.11.1 (2025-04-03)

Bugfixes ^^^^^^^^

  • Fixed a regression in v4.11.0 for Django TestCase tests using the databases class variable ([#1188](https://github.com/pytest-dev/pytest-django/issues/1188) <https://github.com/pytest-dev/pytest-django/issues/1188>__).

v4.11.0 (2025-04-01)

Compatibility ^^^^^^^^^^^^^

  • Added official support for Django 5.2 (PR [#1179](https://github.com/pytest-dev/pytest-django/issues/1179) <https://github.com/pytest-dev/pytest-django/pull/1179>__).
  • Dropped testing on MySQL’s MyISAM storage engine (PR [#1180](https://github.com/pytest-dev/pytest-django/issues/1180) <https://github.com/pytest-dev/pytest-django/pull/1180>__).

Bugfixes ^^^^^^^^

  • Stopped setting up and serializing databases on test session setup when not needed (the database is not requested / serialized_rollback is not used). On test databases with large amounts of pre-seeded data, this may remove a delay of a few seconds when running pytest --reuse-db.

    The determination of which databases to setup is done by static inspection of the test suite. Using pytest's dynamic features to request db access, such as :meth:request.getfixturevalue("db") <pytest.FixtureRequest.getfixturevalue>, may throw off this analysis. If you start seeing DatabaseOperationForbidden or "unable to open database" errors, this is likely the cause. To fix this, decorate at least one test with the :func:django_db <pytest.mark.django_db> marker with appropriate databases and serialized_rollback settings.

v4.10.0 (2025-02-10)

Compatibility

... (truncated)

Commits
  • a2a9495 Release 4.12.0
  • 020bc23 tests: make sure access to default can also be blocked
  • bcefbe8 Add support for isolating apps in tests
  • 39c8dcc plugin: add a note why we reorder tests
  • 1830acd pyproject.toml: require pytest 9 for self tests, switch to native toml config...
  • f19da08 Fix the order of the test cases that use the live_server fixture
  • 92858ee docs: add pytest 9.0+ native TOML configuration format
  • 3f550d9 build(deps): bump hynek/build-and-inspect-python-package
  • 1f50dd2 Drop obsolete traces of Django 5.0 in CI
  • 247ec1c Fix PytestCollectionWarning for TestRunner class (#1259)
  • Additional commits viewable in compare view

Updates playwright to 1.58.0

Release notes

Sourced from playwright's releases.

v1.58.0

Trace Viewer Improvements

  • New 'system' theme option follows your OS dark/light mode preference
  • Search functionality (Cmd/Ctrl+F) is now available in code editors
  • Network details panel has been reorganized for better usability
  • JSON responses are now automatically formatted for readability

Thanks to @​cpAdm for contributing these improvements!

Miscellaneous

browser_type.connect_over_cdp() now accepts an is_local option. When set to True, it tells Playwright that it runs on the same host as the CDP server, enabling file system optimizations.

Breaking Changes ⚠️

  • Removed _react and _vue selectors. See locators guide for alternatives.
  • Removed :light selector engine suffix. Use standard CSS selectors instead.
  • Option devtools from browser_type.launch() has been removed. Use args=['--auto-open-devtools-for-tabs'] instead.
  • Removed macOS 13 support for WebKit. We recommend to upgrade your macOS version, or keep using an older Playwright version.

Browser Versions

  • Chromium 145.0.7632.6
  • Mozilla Firefox 146.0.1
  • WebKit 26.0

This version was also tested against the following stable channels:

  • Google Chrome 144
  • Microsoft Edge 144
Commits

Updates sentry-sdk to 2.53.0

Release notes

Sourced from sentry-sdk's releases.

2.53.0

Bug Fixes 🐛

Openai Agents

Other

Documentation 📚

Internal Changes 🔧

Openai Agents

Other

Changelog

Sourced from sentry-sdk's changelog.

2.53.0

Bug Fixes 🐛

Openai Agents

Other

Documentation 📚

Internal Changes 🔧

Openai Agents

Other

2.52.0

New Features ✨

Other

Bug Fixes 🐛

Google Genai

... (truncated)

Commits
  • f75a9ac Update CHANGELOG.md
  • b700fa8 Update CHANGELOG.md
  • 45379e2 release: 2.53.0
  • 4d8faf3 test(openai-agents): New tool field and library error log (#5454)
  • d3e2c88 fix(openai-agents): Patch execute_final_output() functions following librar...
  • f71a604 fix(openai-agents): Patch execute_handoffs() functions following library re...
  • bea608c fix(openai-agents): Patch run_single_turn_streamed() functions following li...
  • 14e3e0a fix(openai-agents): Patch run_single_turn() functions following library ref...
  • a5c2906 fix(openai-agents): Patch models functions following library refactor (#5449)
  • f78df7c ci: Use fixed clickhouse action, remove aws-sam-cli dependency (#5457)
  • Additional commits viewable in compare view

Updates uv-build to 0.10.4

Release notes

Sourced from uv-build's releases.

0.10.4

Release Notes

Released on 2026-02-17.

Enhancements

  • Remove duplicate references to the affected paths when showing uv python errors (#18008)
  • Skip discovery of workspace members that contain only git-ignored files, including in sub-directories (#18051)

Bug fixes

  • Don't panic when initialising a package at the filesystem root (e.g. uv init / --name foo) (#17983)
  • Fix permissions on wheel and sdist files produced by the uv_build build backend (#18020)
  • Revert locked file change to fix locked files on NFS mounts (#18071)

Install uv 0.10.4

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/astral-sh/uv/releases/download/0.10.4/uv-installer.sh | sh

Install prebuilt binaries via powershell script

@dependabot
Bump the py-deps group with 12 updates
1c6d6c9 
Updates the requirements on [crispy-bootstrap4](https://github.com/django-crispy-forms/crispy-bootstrap4), [django-treebeard](https://github.com/django-treebeard/django-treebeard), [granian](https://github.com/emmett-framework/granian), [redis](https://github.com/redis/redis-py), [pandas](https://github.com/pandas-dev/pandas), [pybmds](https://github.com/USEPA/BMDS), [poethepoet](https://github.com/nat-n/poethepoet), [ruff](https://github.com/astral-sh/ruff), [pytest-django](https://github.com/pytest-dev/pytest-django), [playwright](https://github.com/microsoft/playwright-python), [sentry-sdk](https://github.com/getsentry/sentry-python) and [uv-build](https://github.com/astral-sh/uv) to permit the latest version.

Updates `crispy-bootstrap4` from 2025.6 to 2026.2
- [Release notes](https://github.com/django-crispy-forms/crispy-bootstrap4/releases)
- [Changelog](https://github.com/django-crispy-forms/crispy-bootstrap4/blob/main/CHANGELOG.md)
- [Commits](django-crispy-forms/crispy-bootstrap4@2025.6...2026.2)

Updates `django-treebeard` from 4.8.0 to 5.0.5
- [Changelog](https://github.com/django-treebeard/django-treebeard/blob/master/CHANGES.md)
- [Commits](django-treebeard/django-treebeard@4.8.0...5.0.5)

Updates `granian` to 2.7.1
- [Release notes](https://github.com/emmett-framework/granian/releases)
- [Commits](emmett-framework/granian@v2.6.1...v2.7.1)

Updates `redis` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.1.0...v7.2.0)

Updates `pandas` to 3.0.1
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v2.3.3...v3.0.1)

Updates `pybmds` from 25.1 to 25.2
- [Release notes](https://github.com/USEPA/BMDS/releases)
- [Commits](USEPA/BMDS@25.1...25.2)

Updates `poethepoet` to 0.41.0
- [Release notes](https://github.com/nat-n/poethepoet/releases)
- [Commits](nat-n/poethepoet@v0.40.0...v0.41.0)

Updates `ruff` from 0.14.14 to 0.15.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.14...0.15.2)

Updates `pytest-django` to 4.12.0
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
- [Commits](pytest-dev/pytest-django@v4.11.1...v4.12.0)

Updates `playwright` to 1.58.0
- [Release notes](https://github.com/microsoft/playwright-python/releases)
- [Commits](microsoft/playwright-python@v1.57.0...v1.58.0)

Updates `sentry-sdk` to 2.53.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.51.0...2.53.0)

Updates `uv-build` to 0.10.4
- [Release notes](https://github.com/astral-sh/uv/releases)
- [Changelog](https://github.com/astral-sh/uv/blob/main/CHANGELOG.md)
- [Commits](astral-sh/uv@0.9.18...0.10.4)

---
updated-dependencies:
- dependency-name: crispy-bootstrap4
  dependency-version: '2026.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: py-deps
- dependency-name: django-treebeard
  dependency-version: 5.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: py-deps
- dependency-name: granian
  dependency-version: 2.7.1
  dependency-type: direct:production
  dependency-group: py-deps
- dependency-name: redis
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: py-deps
- dependency-name: pandas
  dependency-version: 3.0.1
  dependency-type: direct:production
  dependency-group: py-deps
- dependency-name: pybmds
  dependency-version: '25.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: py-deps
- dependency-name: poethepoet
  dependency-version: 0.41.0
  dependency-type: direct:development
  dependency-group: py-deps
- dependency-name: ruff
  dependency-version: 0.15.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: py-deps
- dependency-name: pytest-django
  dependency-version: 4.12.0
  dependency-type: direct:development
  dependency-group: py-deps
- dependency-name: playwright
  dependency-version: 1.58.0
  dependency-type: direct:development
  dependency-group: py-deps
- dependency-name: sentry-sdk
  dependency-version: 2.53.0
  dependency-type: direct:development
  dependency-group: py-deps
- dependency-name: uv-build
  dependency-version: 0.10.4
  dependency-type: direct:development
  dependency-group: py-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 1, 2026
@shapiromatron shapiromatron added this to the eg milestone Mar 2, 2026
@shapiromatron shapiromatron merged commit 1e1c47f into main Mar 2, 2026
7 checks passed
@shapiromatron shapiromatron deleted the dependabot/pip/py-deps-ca85271402 branch March 2, 2026 04:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

eg

Development

Successfully merging this pull request may close these issues.

1 participant

@shapiromatron