Skip to content

chore(deps): bump the dependencies group across 1 directory with 37 updates#11984

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/src/backend/dependencies-7fc3bd366c
Closed

chore(deps): bump the dependencies group across 1 directory with 37 updates#11984
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/src/backend/dependencies-7fc3bd366c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 21, 2026 •
edited
Loading

Bumps the dependencies group with 37 updates in the /src/backend directory:

Package From To
bleach 4.1.0 6.3.0
blessed 1.38.0 1.39.0
boto3 1.42.96 1.43.8
botocore 1.42.96 1.43.8
cryptography 47.0.0 48.0.0
dulwich 1.2.0 1.2.1
fonttools 4.62.1 4.63.0
googleapis-common-protos 1.74.0 1.75.0
gunicorn 25.3.0 26.0.0
icalendar 7.0.3 7.1.0
importlib-metadata 8.7.1 9.0.0
nh3 0.3.4 0.3.5
opentelemetry-exporter-otlp-proto-common 1.40.0 1.41.1
opentelemetry-exporter-otlp-proto-grpc 1.40.0 1.41.1
opentelemetry-exporter-otlp-proto-http 1.40.0 1.41.1
opentelemetry-instrumentation 0.61b0 0.62b1
opentelemetry-instrumentation-dbapi 0.61b0 0.62b1
opentelemetry-proto 1.40.0 1.41.1
opentelemetry-semantic-conventions 0.61b0 0.62b1
opentelemetry-util-http 0.61b0 0.62b1
paramiko 4.0.0 5.0.0
protobuf 6.33.6 7.34.1
pypdf 6.10.2 6.11.0
requests 2.33.1 2.34.2
s3transfer 0.16.1 0.17.0
sentry-sdk 2.58.0 2.60.0
wcwidth 0.6.0 0.7.0
wrapt 1.17.3 2.1.2
coverage 7.13.5 7.14.0
django-stubs 6.0.3 6.0.4
django-stubs-ext 6.0.3 6.0.4
markdown-it-py 4.0.0 4.2.0
pip 26.1 26.1.1
prek 0.3.13 0.4.0
pytest-codspeed 4.4.0 5.0.2
types-psycopg2 2.9.21.20260422 2.9.21.20260509
types-pyyaml 6.0.12.20260408 6.0.12.20260510

Updates bleach from 4.1.0 to 6.3.0

Changelog

Sourced from bleach's changelog.

Version 6.3.0 (October 27th, 2025)

Backwards incompatible changes

  • Dropped support for Python 3.9. (#756)

Security fixes

None

Bug fixes

  • Add support for Python 3.14. (#758)
  • Fix wbr handling. (#488)

Version 6.2.0 (October 29th, 2024)

Backwards incompatible changes

  • Dropped support for Python 3.8. (#737)

Security fixes

None

Bug fixes

  • Add support for Python 3.13. (#736)
  • Remove six depdenncy. (#618)
  • Update known-good versions for tinycss2. (#732)
  • Fix additional < followed by characters and EOF issues. (#728)

Version 6.1.0 (October 6th, 2023)

Backwards incompatible changes

  • Dropped support for Python 3.7. (#709)

Security fixes

None

Bug fixes

  • Add support for Python 3.12. (#710)

... (truncated)

Commits
  • 5546d5d chore: prep for 6.3.0 release
  • 88df3ff chore: fix readthedocs
  • d8b2fb4 fix: fix wbr handling (#488)
  • 55e48ce chore: add support for Python 3.14 (#758)
  • a4d6cdd chore: drop support for Python 3.9 (#756)
  • 172d92f Bump actions/setup-python from 5.6.0 to 6.0.0
  • df88612 Bump actions/checkout from 4.2.2 to 5.0.0
  • cbcf6b1 Bump actions/cache from 4.2.3 to 4.3.0
  • d9aa7ef Switch from dependabot reviewers to CODEOWNERS
  • 06f0f76 Update setuptools, wheel, and twine for devs
  • Additional commits viewable in compare view

Updates blessed from 1.38.0 to 1.39.0

Release notes

Sourced from blessed's releases.

1.17.9: Initial support for Python 3.10

  • bugfix: Now imports on 3.10+

1.15.0: Disable various integration tests, support python 3.7

No release notes provided.

1.14.0: bugfix term.wrap for text containing newlines

  • bugfix: term.wrap misbehaved for text containing newlines, #74

1.13.0: new Terminal.split_seqs() function, speed enhancement

  • enhancement: method Terminal.split_seqs introduced, and 4x cost reduction in related sequence-aware functions, #29.
  • deprecated: function blessed.sequences.measure_length superseded by blessed.sequences.iter_parse if necessary.
  • deprecated: warnings about "binary-packed capabilities" are no longer emitted on strange terminal types, making best effort.

1.12.0: add Terminal.get_location() method

  • enhancement: method Terminal.get_locationreturns the(row, col)`` position of the cursor at the time of call for attached terminal.
  • enhancement: a keyboard now detected as stdin when stream is sys.stderr.
Changelog

Sourced from blessed's changelog.

.. py:currentmodule:: blessed.terminal

Version History

1.42

  • bugfix: regression in :meth:~.Terminal.cbreak and :meth:~.Terminal.raw were not thread-safe broken in versions 1.40 and 1.41, remove signal ignore of SIGTTOU :ghissue:380.

1.41

  • bugfix: :meth:~.Terminal.get_location broken in 1.40, returned a generator instead of a tuple. :ghissue:378.

1.40

  • improved: jinxed_ is now required on all platforms, providing a curses-free and singleton-free <https://jinxed.readthedocs.io/en/stable/capabilities.html#singleton-free>_ implementation of the subset of curses_ used by blessed. The jinxed_ 1.5.0 release provides a terminal capability database <https://jinxed.readthedocs.io/en/stable/capabilities.html#database> of 45 terminals and their common aliases.

  • improved: Class initialization of :class:~.Terminal() now uses XTGETTCAP_ to determine preferred terminal name TN, 24-bit color support RGB, number of colors Co, italic, and blink capabilities.

    This improves detection of Terminal kind and number_of_colors over protocols like serial that cannot forward any environment variables or ssh that do not forward COLORTERM.

  • introduced: A :exc:UserWarning is emitted when :meth:~.Terminal.__getattr__ resolves an unknown terminal capability name, helping developers catch typos like term.bld (missing bold). The warning can be suppressed by setting the environment variable BLESSED_NOWARN_UNKNOWN_CAPS.

  • bugfix: Fixed internal typo susimpleript to the correct terminfo name ssubm for the enter_susimpleript_mode capability. This was previously masked by curses_ returning an empty string for unknown capabilities.

1.39

  • introduced: :meth:~.Terminal.progress_bar for OSC 9;4 sequence <https://ghostty.org/docs/vt/osc/conemu#change-progress-state-(osc-94)>_.
  • introduced: :meth:~.Terminal.text_sized -- wrap text in Kitty text sizing protocol (OSC 66) escape sequences, with graceful fallback to plain text when the terminal does not support the protocol.
  • introduced: :class:~.Keystroke of name CPR_RESPONSE for asynchronous capture of Cursor Position Report responses via :meth:~.Terminal.inkey. New argument capture_cpr=True resolves the legacy F3 key ambiguity and matches against CPR_RESPONSE. New properties :attr:~.Keystroke.cpr_yx and :attr:~.Keystroke.cpr_xy return the decoded cursor coordinates. :ghpull:369.
  • improved: :meth:~.Terminal.inkey raises :exc:EOFError when keyboard fd is at EOF, rather than returning an empty :class:~.Keystroke. :ghpull:371.
  • improved: :meth:~.Terminal.ljust, :meth:~.Terminal.rjust, and :meth:~.Terminal.center now measure text containing hyperlinks, Kitty text sizing protocol sequences, and overtyping (backspace/cursor-left with painter's algorithm), introduced by wcwidth_ 0.7.0.

... (truncated)

Commits

Updates boto3 from 1.42.96 to 1.43.8

Commits

Updates botocore from 1.42.96 to 1.43.8

Commits

Updates cryptography from 47.0.0 to 48.0.0

Changelog

Sourced from cryptography's changelog.

48.0.0 - 2026-05-04


* **BACKWARDS INCOMPATIBLE:** Support for Python 3.8 has been removed.
  ``cryptography`` now requires Python 3.9 or later.
* **BACKWARDS INCOMPATIBLE:** Loading an X.509 CRL whose inner
  ``TBSCertList.signature`` algorithm does not match the outer
  ``signatureAlgorithm`` now raises ``ValueError``. Previously, such CRLs
  were parsed successfully and only rejected during signature validation.
* Added support for :doc:`/hazmat/primitives/asymmetric/mlkem` and
  :doc:`/hazmat/primitives/asymmetric/mldsa` when using OpenSSL 3.5.0 or
  later, in addition to the existing AWS-LC and BoringSSL support. This means
  post-quantum algorithms are now available to users of our wheels.

    

  • Note: Going forward, we do not guarantee that all functionality
    
in cryptography will be available when building against
    
OpenSSL. See :doc:/statements/state-of-openssl for more information.
    • 



.. _v47-0-0:

Commits

Updates dulwich from 1.2.0 to 1.2.1

Release notes

Sourced from dulwich's releases.

dulwich-1.2.1

Changes since 1.2.0

  • Derive the LFS endpoint as the remote's on-disk LFS store (<remote>/.git/lfs for worktrees, <remote>/lfs for bare repos) when remote.origin.url points at a local filesystem path or file:// URL, matching git-lfs behaviour. Previously the built-in smudge filter constructed an HTTP-style <remote>.git/info/lfs path that did not exist on disk, leaving LFS-tracked files as pointers when cloning from a local repo.

  • Deduplicate objects when writing a multi-pack-index. Objects present in multiple packs (e.g. after git gc creates a cruft pack) would otherwise produce an OIDL chunk with repeated SHAs, causing git multi-pack-index verify to fail with "oid lookup out of order". (#2152)

  • Extend ignorecase and precomposeunicode support to index lookups. (#1807)

Changelog

Sourced from dulwich's changelog.

1.2.1 2026-04-29

  • Recover from concurrent pack removals (e.g. a racing git repack or git gc --auto) instead of raising spurious KeyError / FileNotFoundError. Pack.index and Pack.data now translate FileNotFoundError during lazy load into PackFileDisappeared, and PackBasedObjectStore evicts the stale pack and rescans the pack directory before retrying — equivalent to git's reprepare_packed_git(). (Jelmer Vernooij, #2159)

  • Derive the LFS endpoint as the remote's on-disk LFS store (<remote>/.git/lfs for worktrees, <remote>/lfs for bare repos) when remote.origin.url points at a local filesystem path or file:// URL, matching git-lfs behaviour. Previously the built-in smudge filter constructed an HTTP-style <remote>.git/info/lfs path that did not exist on disk, leaving LFS-tracked files as pointers when cloning from a local repo. (Jelmer Vernooij)

  • Deduplicate objects when writing a multi-pack-index. Objects present in multiple packs (e.g. after git gc creates a cruft pack) would otherwise produce an OIDL chunk with repeated SHAs, causing git multi-pack-index verify to fail with "oid lookup out of order". (Jelmer Vernooij, #2152)

  • Extend ignorecase and precomposeunicode support to index lookups. (Jelmer Vernooij, #1807)

Commits
  • 57806b8 Release 1.2.1
  • a127d33 Honor GIT_PROTOCOL env var when picking default protocol version (#1862) (#2149)
  • 6c1697a lfs: derive correct file:// LFS endpoint from local remote URL (#2161)
  • 6685fde lfs: use pathlib.Path.as_uri() for portable file:// URLs
  • 0d0b9f8 Migrate from testrepository to inquest (#2160)
  • a0dac57 Migrate from testrepository to inquest
  • cd6ebd9 lfs: derive correct file:// LFS endpoint from local remote URL
  • bfaf192 Disable background processes to prevent issues with races (#2158)
  • 06d7afd Move GIT_SSH/GIT_SSH_COMMAND env lookup from client.py to cli.py (#2156)
  • e60e0c1 Disable background processes to prevent issues with races
  • Additional commits viewable in compare view

Updates fonttools from 4.62.1 to 4.63.0

Release notes

Sourced from fonttools's releases.

4.63.0

  • [ttLib] Add support for Apple Color Emoji bgcl table (#4065).
  • [ttLib] Add support for IFT and IFTX tables (Incremental Font Transfer, PatchMapFormat2) (#4070, #4072).
  • [otData] Introduce FieldSpec dataclass for OpenType table schema definitions, replacing raw tuples in otData.py (#4076).
  • [Feat] Show name table strings as comments next to label IDs in TTX output, matching the convention used by fvar, STAT, trak (#4089).
  • [cu2qu] Fix Cython complex-division rounding difference in split_cubic_into_three that could cause ±1 off-curve coordinate shifts (#3928, #4083).
  • [designspaceLib] Fix map_backwardgooglefonts/ufo2ft#978#4085).
  • [OS/2] Fix setUnicodeRanges to accept reserved bits 123-127, restoring round-trip with getUnicodeRanges and fixing recalcUnicodeRanges crash in the subsetter (#4087, #4088).
  • [cython] Declare Cython extensions as free-threading compatible on Python 3.13+, so that importing them on free-threaded Python no longer re-enables the GIL (#4073, #4090).
Changelog

Sourced from fonttools's changelog.

4.63.0 (released 2026-05-14)

  • [ttLib] Add support for Apple Color Emoji bgcl table (#4065).
  • [ttLib] Add support for IFT and IFTX tables (Incremental Font Transfer, PatchMapFormat2) (#4070, #4072).
  • [otData] Introduce FieldSpec dataclass for OpenType table schema definitions, replacing raw tuples in otData.py (#4076).
  • [Feat] Show name table strings as comments next to label IDs in TTX output, matching the convention used by fvar, STAT, trak (#4089).
  • [cu2qu] Fix Cython complex-division rounding difference in split_cubic_into_three that could cause ±1 off-curve coordinate shifts (#3928, #4083).
  • [designspaceLib] Fix map_backward for many-to-one (flat-segment) axis maps that silently dropped entries via dict comprehension googlefonts/ufo2ft#978#4085).
  • [OS/2] Fix setUnicodeRanges to accept reserved bits 123-127, restoring round-trip with getUnicodeRanges and fixing recalcUnicodeRanges crash in the subsetter (#4087, #4088).
  • [cython] Declare Cython extensions as free-threading compatible on Python 3.13+, so that importing them on free-threaded Python no longer re-enables the GIL (#4073, #4090).
Commits
  • 978d9ed Release 4.63.0
  • 6b40ecb Add changelog entries for 4.63.0
  • 382a35f Merge pull request #4090 from fonttools/fix-freethreading-compat
  • 0e999b5 Declare Cython extensions as free-threading compatible
  • 9e55ea5 Merge pull request #4089 from fonttools/graphite-feat-labels
  • e84db3a Merge pull request #4088 from fonttools/fix-setUnicodeRanges-bits-123-127
  • d6eabd1 Feat: show name table strings as comments next to label IDs in ttx
  • 7d0902b OS/2: fix setUnicodeRanges round-trip for reserved bits 123-127
  • 06e266c Merge pull request #4085 from fonttools/fix-map-backward-non-injective
  • 6d64598 Add more tests for map_backward with many-to-one axis maps
  • Additional commits viewable in compare view

Updates googleapis-common-protos from 1.74.0 to 1.75.0

Release notes

Sourced from googleapis-common-protos's releases.

googleapis-common-protos: v1.75.0

v1.75.0 (2026-05-06)

Commits
  • 3997a10 chore: librarian release pull request: 20260506T163115Z (#16964)
  • f655e49 chore: add type annotation to SYNCPOINTS (#16973)
  • f149bd7 refactor(bigframes): Modularize compiler routing as proxy executor (#16907)
  • 19db82f chore(bigframes): remove leftover support for Python <= 3.9 (#16961)
  • 2dedaac chore: test CommonResource resource name alias (#16965)
  • 9652a08 fix: pass resource aliases to file-level CommonResources (#16945)
  • 78a48b0 fix(google-cloud-core): Drop support for Python 3.9 (#16953)
  • 5975c48 fix(dns): Drop support for Python 3.9 (#16954)
  • d5bea2e fix(crc32c): Drop support for Python 3.8 and 3.9 (#16955)
  • 63f6d96 fix(sqlalchemy-bigquery): Drop support for Python 3.8 and 3.9 (#16956)
  • Additional commits viewable in compare view

Updates gunicorn from 25.3.0 to 26.0.0

Release notes

Sourced from gunicorn's releases.

26.0.0

Breaking Changes

  • Eventlet worker removed: The eventlet worker class has been dropped. Migrate to gevent, gthread, or tornado.

New Features

  • ASGI Framework Compatibility Suite: New end-to-end compatibility test harness covering Starlette, FastAPI, Litestar, Quart, Sanic, and BlackSheep. Current grid passes 438/444 tests (98%).
  • ASGI Test Suite Expansion: 134 additional ASGI unit tests covering protocol semantics, lifespan, websockets, and chunked framing.

Security

  • HTTP/1.1 Request-Target Validation (RFC 9112 sections 3.2.3, 3.2.4):
    • Reject authority-form request-target outside CONNECT
    • Reject asterisk-form request-target outside OPTIONS
    • Reject relative-reference request-targets
  • Header Field Hardening (RFC 9110):
    • Reject control characters in header field-value (section 5.5)
    • Reject forbidden trailer field-names (section 6.5.1)
    • Reject Content-Length list form (RFC 9112 section 6.3)
  • Request Smuggling Hardening:
    • Tighten keepalive gate and scope finish_body byte cap
    • Keep _body_receiver alive across the keepalive smuggling gate so pipelined requests cannot re-enter a closed body
    • Address parser/protocol findings from a six-point WSGI/ASGI audit
  • PROXY Protocol (ASGI): Enforce proxy_allow_ips and tighten v1/v2 parsing in the ASGI callback parser.
  • Connection Draining: Drain the connection on close per RFC 9112 section 9.6 to prevent reset-on-close truncation.

Bug Fixes

  • Body Framing on HEAD/204/304:
    • Keep Content-Length on HEAD and 304 responses (#3621)
    • Drop body framing on HEAD/204/304 even when the framework set it
    • Warn once when an ASGI app emits a body for a no-body response
  • HTTP/2 ASGI:
    • Fix _handle_stream_ended to set _body_complete in the async HTTP/2 handler so request bodies finalize correctly on stream end
    • Add InvalidChunkExtension mapping and fast-parser support in ASGI tests (#3565)
  • HTTP/1.1 100-Continue: Stop adding Transfer-Encoding: chunked to 100-Continue interim responses.
  • WebSocket Close Handshake (RFC 6455):
    • Comply with the close handshake state machine
    • Close the transport after the close handshake completes
    • Fix binary send when the text key is None
  • Early Hints: Validate headers in the early_hints callback to match process_headers; pass only the header name to InvalidHeader (#3588).
  • ASGI Framework Fixes:
    • Fix ASGI disconnect handling for Django-style apps
    • Fix Litestar request handling (use raw ASGI receive for body/headers)
    • Fix Litestar HTTP endpoints for compatibility tests
    • Fix Quart headers endpoint to normalize keys to lowercase
    • Fix Quart WebSocket close test app (missing accept())
    • Fix duplicate Transfer-Encoding header for BlackSheep streaming

... (truncated)

Commits
  • 5d819cf release: 26.0.0
  • b45c70d Merge pull request #3611 from zc-mattcen/docs-typo
  • 99c8d48 Merge pull request #3623 from benoitc/chore/drop-eventlet-add-h2-uvloop-test-...
  • 5a655af Merge pull request #3622 from benoitc/test/docker-port-and-ipv4-fixes
  • 201df19 chore: remove eventlet worker; add h2 and uvloop to test deps
  • f4ac8e1 test: pass action name to dirty client and stabilize after TTOU spam
  • 54d38af test: unblock docker fixtures on macOS hosts
  • 68843c8 Merge pull request #3621 from benoitc/fix/asgi-preserve-content-length-on-hea...
  • 31f2618 Merge pull request #3620 from benoitc/fix/asgi-proxy-protocol-trust-and-parsing
  • 41ec752 fix: keep Content-Length on HEAD and 304 responses
  • Additional commits viewable in compare view

Updates icalendar from 7.0.3 to 7.1.0

Release notes

Sourced from icalendar's releases.

v7.1.0

To view the changes, please see the Changelog. This release can be installed from PyPI.

Changelog

Sourced from icalendar's changelog.

7.1.0 (2026-04-30)

Minor changes


- Deprecate ``icalendar.parser.escape_string`` and ``icalendar.parser.unescape_string`` for icalendar version 8. Use ``_escape_string`` and ``_unescape_string`` internally. :issue:`1011`
- Added behavioral tests for :class:`~icalendar.cal.lazy.LazyCalendar` covering serialization round-trips, ``.todos``, ``.journals``, forward timezone references, and ``with_uid()`` substring false-positives. :issue:`1050`
- Added edge case tests for :class:`~icalendar.prop.conference.Conference` parameter normalization covering string passthrough, empty list filtering, and ``None`` omission. :issue:`925`
- Make icalendar an explicit editable install for clarity. :pr:`1268`
- Do not run some tests until a pull request is approved. :pr:`1246`
- Mark skipped CI tasks as skipped instead of running them. :issue:`1286`
- Created an :meth:`~icalendar.prop.boolean.vBoolean.ical_value` property for the :class:`~icalendar.prop.boolean.vBoolean` component. :issue:`876`
- Created an :meth:`~icalendar.prop.float.vFloat.ical_value` property for the :class:`~icalendar.prop.float.vFloat` component. :issue:`876`
- Created an :meth:`~icalendar.prop.integer.vInt.ical_value` property for the :class:`~icalendar.prop.integer.vInt` component. :issue:`876`
- Created an :meth:`~icalendar.prop.binary.vBinary.ical_value` property for the :class:`~icalendar.prop.binary.vBinary` component. :issue:`876`
- Put the link check as the last documentation CI task, allowing the documentation build and Vale to run first and fail faster. :pr:`1295`
- Extended :func:`~icalendar.timezone.tzp.TZP.localize` to support localizing both :class:`datetime.datetime` and :class:`datetime.time` objects, returning timezone-aware :class:`datetime.time` objects for the latter. :issue:`1142`
- Add type hints to tests directory functions. :issue:`938`
- Update to Contributor Covenant 3.0 Code of Conduct, hosted at https://pycal.org/code-of-conduct/.

New features



- Added :class:`~icalendar.cal.lazy.LazyCalendar` for lazy parsing of subcomponents. :issue:`158`, :issue:`1050`
- Updated :func:`icalendar.prop.dt.time.vTime.from_ical` to support parsing time values with TZID parameters, returning timezone-aware :class:`datetime.time` objects. :issue:`1142`
- Added ``subcomponents`` parameter to :meth:`Component.new &lt;icalendar.cal.component.Component.new&gt;`, :meth:`Event.new &lt;icalendar.cal.event.Event.new&gt;`, :meth:`Todo.new &lt;icalendar.cal.todo.Todo.new&gt;`, and :meth:`Availability.new &lt;icalendar.cal.availability.Availability.new&gt;`. :issue:`1065`
- Switch to uv for development. :issue:`1102`

Bug fixes



- Allow lenient parsing of content lines with optional whitespace around property and parameter delimiters (for example, ``REFRESH - INTERVAL; VALUE = DURATION:PT48H``) when parsing calendars with ``strict=False``. :issue:`351`
- X-properties with a ``VALUE`` parameter are now parsed using the correct type instead of falling back to :class:`~icalendar.prop.unkown.vUnknown`. :issue:`1238`
- Test that the ``DURATION`` property catches :class:`datetime.timedelta` objects without vProperty wrappers. :issue:`884`
- Fixed :func:`~icalendar.attr.get_end_property` to avoid allowing the creating of VEVENT components with negative durations. Only VTODO components are allowed to have negative durations. :issue:`999`
- GitHub Actions: conditional tests now show as &amp;quot;skipped&amp;quot; instead of &amp;quot;pending&amp;quot;. :issue:`1264`
- Fixed :meth:`Component.__eq__ &amp;lt;icalendar.cal.component.Component.__eq__&amp;gt;` method not being commutative when comparing subcomponents. :issue:`1224`
- Verified that the ``VALUE`` parameter of jCal components is used for the type of the component property. :issue:`1237`
- Fix :func:`~icalendar.parser.string.escape_char` handling of ``bytes`` input by converting with :func:`icalendar.parser_tools.to_unicode` before escaping. :issue:`1226`
- Fixed ``RecursionError`` in ``walk()``, ``property_items()``, and ``to_ical()`` by using iterative implementations for component traversal and property extraction. :pr:`1348`

Documentation
&lt;/code&gt;&lt;/pre&gt;
&lt;ul&gt;
&lt;li&gt;Convert docstring of :func:&lt;code&gt;~icalendar.param.string_parameter&lt;/code&gt; to Google style. :issue:&lt;code&gt;1072&lt;/code&gt;, :pr:&lt;code&gt;1316&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Run &lt;code&gt;sphinx-build&lt;/code&gt; with &lt;code&gt;-W&lt;/code&gt; to turn warnings into errors. :issue:&lt;code&gt;1306&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Added &lt;code&gt;sphinx-llms-txt &amp;lt;https://sphinx-llms-txt.readthedocs.io/en/stable/&amp;gt;&lt;/code&gt;_ extension to generate :file:&lt;code&gt;llms.txt&lt;/code&gt; and :file:&lt;code&gt;llms-full.txt&lt;/code&gt; files for AI/LLM documentation consumption. :issue:&lt;code&gt;1302&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Fixed CI Vale check reporting and resolved Vale errors. :issue:&lt;code&gt;1277&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Include :file:&lt;code&gt;Makefile&lt;/code&gt; in documentation workflow path filters so documentation CI runs when Makefile logic changes, and keep Vale failures visible in CI output. :issue:&lt;code&gt;1277&lt;/code&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/1300b76fb3fe40d987cc3715735c026b3c1a2191&quot;&gt;&lt;code&gt;1300b76&lt;/code&gt;&lt;/a&gt; Merge branch 'main' into 7.x&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/255e6b841331e2d5cf2901402e08ab788899d465&quot;&gt;&lt;code&gt;255e6b8&lt;/code&gt;&lt;/a&gt; add 7.x to run the tests&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/fc8a4f5674eaa05bf3546b296f166583f670561a&quot;&gt;&lt;code&gt;fc8a4f5&lt;/code&gt;&lt;/a&gt; disable the version switcher on the 7.x branch&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/f5aa35d2ff6d106f5a7b286970b65b5f9d9211b4&quot;&gt;&lt;code&gt;f5aa35d&lt;/code&gt;&lt;/a&gt; version 7.1.0&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/b4ffb8345deea76e4cca72689907ed2f8488e7de&quot;&gt;&lt;code&gt;b4ffb83&lt;/code&gt;&lt;/a&gt; Merge pull request &lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1348&quot;&gt;#1348&lt;/a&gt; from uwezkhan/fix/property-items-recursion&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/1d6d18d357335367d72f4628b7158dd4800caf39&quot;&gt;&lt;code&gt;1d6d18d&lt;/code&gt;&lt;/a&gt; Merge branch 'main' into fix/property-items-recursion&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/05a34d48d3223b2780c9afffd0cdbab9d5c50ffd&quot;&gt;&lt;code&gt;05a34d4&lt;/code&gt;&lt;/a&gt; Merge pull request &lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1346&quot;&gt;#1346&lt;/a&gt; from uwezkhan/fix/deep-component-walk-dos&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/a4829d4d43b29e430b97ab66313f6357edd3742d&quot;&gt;&lt;code&gt;a4829d4&lt;/code&gt;&lt;/a&gt; Merge branch 'main' into fix/property-items-recursion&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/66579fbf8fb4aeb6bf1ded0cfa353ba3d500e35a&quot;&gt;&lt;code&gt;66579fb&lt;/code&gt;&lt;/a&gt; fix formatting&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/1f55c2035315e53b8d9a6eeacf1aee046d794fd3&quot;&gt;&lt;code&gt;1f55c20&lt;/code&gt;&lt;/a&gt; Merge branch 'main' into fix/deep-component-walk-dos&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/collective/icalendar/compare/v7.0.3...v7.1.0&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;</code></pre>

Updates `importlib-metadata` from 8.7.1 to 9.0.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/python/importlib_metadata/blob/main/NEWS.rst">importlib-metadata's changelog</a>.</em></p>
<blockquote>
<h1>v9.0.0</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>Added <code>MetadataNotFound</code> (subclass of <code>FileNotFoundError</code>) and updated <code>Distribution.metadata</code>/<code>metadata()</code> to raise it when the metadata files are missing instead of returning <code>None</code><code>python/cpython#143387</code><a href="https://redirect.github.com/python/importlib_metadata/issues/532">#532</a>)</li>
</ul>
<h1>v8.9.0</h1>
<h2>Features</h2>
<ul>
<li><code>python/cpython#110937</code><a href="https://redirect.github.com/python/cpython/issues/140141">python/cpython#140141</a>, <a href="https://redirect.github.com/python/cpython/issues/143658">python/cpython#143658</a>)</li>
</ul>
<h1>v8.8.0</h1>
<h2>Features</h2>
<ul>
<li>Removed Python 3.9 compatibility.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/python/importlib_metadata/commit/a9f883fef337c667a81a987bc0cbc0dbb43b2bfe"><code>a9f883f</code></a> Finalize</li>
<li><a href="https://github.com/python/importlib_metadata/commit/9b0dfdfe2e187dca6644007570189aadc6c97a34"><code>9b0dfdf</code></a> Raise an exception when no metadata file is found (<a href="https://redirect.github.com/python/importlib_metadata/issues/532">#532</a>)</li>
<li><a href="https://github.com/python/importlib_metadata/commit/0f2229ca84f20be2ceaaa4c62a276fa9b003f5bc"><code>0f2229c</code></a> Merge branch 'main' into feature/no-metadata-exception</li>
<li><a href="https://github.com/python/importlib_metadata/commit/2f4088e490a73ac7f39b86214d2da16d2eb1ff39"><code>2f4088e</code></a> Remove news fragments about internal details.</li>
<li><a href="https://github.com/python/importlib_metadata/commit/0ac27203f8044daf634c22f385838122a0707449"><code>0ac2720</code></a> Add news fragment.</li>
<li><a href="https://github.com/python/importlib_metadata/commit/a5c2154835facb4a9d0a6f5b3aac1f3d1ff86170"><code>a5c2154</code></a> Finalize</li>
<li><a href="https://github.com/python/importlib_metadata/commit/e66e22634f7522e7778b66e8a8b19782a11d4943"><code>e66e226</code></a> Drop support for EOL Python 3.9 (<a href="https://redirect.github.com/python/importlib_metadata/issues/530">#530</a>)</li>
<li><a href="https://github.com/python/importlib_metadata/commit/6027933ae96c9e51dd0b7ce392cb30f6fcae1940"><code>6027933</code></a> Add news fragment.</li>
<li><a href="https://github.com/python/importlib_metadata/commit/b89388a53bf857127e0a6860dfcfe2cd69a79ab8"><code>b89388a</code></a> Import os_helper directly.</li>
<li><a href="https://github.com/python/importlib_metadata/commit/2dcb761d940b0115b786ab3b6f336af7d94630f4"><code>2dcb761</code></a> Add uniform exclusions for test.support.</li>
<li>Additional commits viewable in <a href="https://github.com/python/importlib_metadata/compare/v8.7.1...v9.0.0">compare view</a></li>
</ul>
</details>
<br />

Updates `nh3` from 0.3.4 to 0.3.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/messense/nh3/releases">nh3's releases</a>.</em></p>
<blockquote>
<h2>v0.3.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Add usage examples for clean() and Cleaner arguments by <a href="https://github.com/gghez"><code>@​gghez</code></a> in <a href="https://redirect.github.com/messense/nh3/pull/120">messense/nh3#120</a></li>
<li>Add doctest coverage for module docstrings and RST files by <a href="https://github.com/gghez"><code>@​gghez</code></a> in <a href="https://redirect.github.com/messense/nh3/pull/121">messense/nh3#121</a></li>
<li>Bump pyo3 from 0.28.2 to 0.28.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/messense/nh3/pull/123">messense/nh3#123</a></li>
<li>Add tags parameter to clean_text by <a href="https://github.com/gghez"><code>@​gghez</code></a> in <a href="https://redirect.github.com/messense/nh3/pull/122">messense/nh3#122</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/messense/nh3/compare/v0.3.4...v0.3.5">https://github.com/messense/nh3/compare/v0.3.4...v0.3.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/messense/nh3/commit/9e78e6af74267c6789c62e98512460990415fb91"><code>9e78e6a</code></a> Bump version to 0.3.5</li>
<li><a href="https://github.com/messense/nh3/commit/5225ec29f6ba74349d158676461fa6081cf804d8"><code>5225ec2</code></a> Add tags parameter to clean_text (<a href="https://redirect.github.com/messense/nh3/issues/122">#122</a>)</li>
<li><a href="https://github.com/messense/nh3/commit/129df5295dd98b263a3f24bd4f9bd5e43a7bb677"><code>129df52</code></a> Bump pyo3 from 0.28.2 to 0.28.3 (<a href="https://redirect.github.com/messense/nh3/issues/123">#123</a>)</li>
<li><a href="https://github.com/messense/nh3/commit/25348dffb9f1373008a3f0f7d85f2ebb37883e07"><code>25348df</code></a> Add doctest coverage for module docstrings and RST files (<a href="https://redirect.github.com/messense/nh3/issues/121">#121</a>)</li>
<li><a href="https://github.com/messense/nh3/commit/bf48b37d0b8e1e1bddc62ae058f880eae1a4abc2"><code>bf48b37</code></a> Add usage examples for clean() and Cleaner arguments (<a href="https://redirect.github.com/messense/nh3/issues/120">#120</a>)</li>
<li>See full diff in <a href="https://github.com/messense/nh3/compare/v0.3.4...v0.3.5">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-exporter-otlp-proto-common` from 1.40.0 to 1.41.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md">opentelemetry-exporter-otlp-proto-common's changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.</p>
<!-- raw HTML omitted -->
<p>The format is based on <a href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>,
and this project adheres to <a href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<p><strong>Breaking changes ongoing</strong></p>
<blockquote>
<p>[!IMPORTANT]
We are working on stabilizing the Log signal that would require making deprecations and breaking changes. We will try to reduce the releases that may require an update to your code, especially for instrumentations or for sdk developers.</p>
</blockquote>
<!-- raw HTML omitted -->
<h2>Version 1.42.1/0.63b1 (2026-05-21)</h2>
<h3>Fixed</h3>
<ul>
<li>Preserve the random trace ID flag when creating child spans instead of always
setting the random trace id bit depending on the available trace id
generator.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5241">#5241</a>)</li>
</ul>
<h2>Version 1.42.0/0.63b0 (2026-05-19)</h2>
<h3>Added</h3>
<ul>
<li><code>opentelemetry-api</code>, <code>opentelemetry-sdk</code>: add support for 'random-trace-id'
flags in W3C traceparent header trace flags. Implementations of <code>IdGenerator</code>
that do randomly generate the 56 least significant bits, should also
implement a <code>is_trace_id_random</code> methods that returns <code>True</code>.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4854">#4854</a>)</li>
<li>logs: add exception support to Logger emit and LogRecord attributes
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4908">#4908</a>)</li>
<li><code>opentelemetry-exporter-otlp-proto-grpc</code>: make retryable gRPC error codes
configurable for gRPC exporters
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4917">#4917</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>create_logger_provider</code>/<code>configure_logger_provider</code>
to declarative file configuration, enabling LoggerProvider instantiation from
config files without reading env vars
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4990">#4990</a>)</li>
<li><code>opentelemetry-exporter-otlp-json-common</code>: add</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/760e0248edbd01ae817941c1dfa61c07241b0727"><code>760e024</code></a> Prepare release 1.41.1/0.62b1 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5138">#5138</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/90e06bcd8c024a38ecf388c19c5a15fc094ea0ed"><code>90e06bc</code></a> Unreleased changelog for 1.41.1 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5137">#5137</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/1a178fcc5c689516849ced80fb2533fe7db7a80f"><code>1a178fc</code></a> [release/v1.41.x-0.62bx] Prepare release 1.41.0/0.62b0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5064">#5064</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/37dea4bbdb1a3c83b96fc22c2f68a848b4989fb5"><code>37dea4b</code></a> feat: add experimental logger configurator (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4980">#4980</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/7c860ca40eb87c15fb608ce3598cfec4a5da2d1c"><code>7c860ca</code></a> misc: update version for codegen-json and proto-json packages (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5061">#5061</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/b3d98b392fd1fa1a501e11ce8e126f2003edb895"><code>b3d98b3</code></a> [chore]: update readme (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5060">#5060</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/dbbd1bca26f12d0cefff721a857d08a82476f434"><code>dbbd1bc</code></a> feat(config): Add MeterProvider support for declarative config (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4987">#4987</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/6faa58c58782313283a87a7c61fbbdd9cd2054d6"><code>6faa58c</code></a> feat(config): add host resource detector support for declarative config (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5002">#5002</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/c0cbfbd62fa59e2c41cd2c88371dc6478fa95716"><code>c0cbfbd</code></a> feat(config): wire container resource detector via entry point loading (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5004">#5004</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/f764e45f52952f5a0287e5a6c094cbfd56accd2b"><code>f764e45</code></a> feat(config): Add TracerProvider support for declarative config (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4985">#4985</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/open-telemetry/opentelemetry-python/compare/v1.40.0...v1.41.1">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.40.0 to 1.41.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md">opentelemetry-exporter-otlp-proto-grpc's changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.</p>
<!-- raw HTML omitted -->
<p>The format is based on <a href="https://keepachangelog.com/en/1.0.0/">Keep a Changelog</a>,
and this project adheres to <a href="https://semver.org/spec/v2.0.0.html">Semantic Versioning</a>.</p>
<p><strong>Breaking changes ongoing</strong></p>
<blockquote>
<p>[!IMPORTANT]
We are working on stabilizing the Log signal that would require making deprecations and breaking changes. We will try to reduce the releases that may require an update to your code, especially for instrumentations or for sdk developers.</p>
</blockquote>
<!-- raw HTML omitted -->
<h2>Version 1.42.1/0.63b1 (2026-05-21)</h2>
<h3>Fixed</h3>
<ul>
<li>Preserve the random trace ID flag when creating child spans instead of always
setting the random trace id bit depending on the available trace id
generator.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5241">#5241</a>)</li>
</ul>
<h2>Version 1.42.0/0.63b0 (2026-...

_Description has been truncated_

@dependabot dependabot Bot requested a review from SchrodingersGat as a code owner May 21, 2026 22:50
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 21, 2026
@netlify
Copy link
Copy Markdown

netlify Bot commented May 21, 2026 •
edited
Loading

✅ Deploy Preview for inventree-web-pui-preview canceled.

Name Link
🔨 Latest commit 51c0462
🔍 Latest deploy log https://app.netlify.com/projects/inventree-web-pui-preview/deploys/6a10633a994a930008054c42

@dependabot
chore(deps): bump the dependencies group across 1 directory with 37 u…
51c0462 
…pdates

Bumps the dependencies group with 37 updates in the /src/backend directory:

| Package | From | To |
| --- | --- | --- |
| [bleach](https://github.com/mozilla/bleach) | `4.1.0` | `6.3.0` |
| [blessed](https://github.com/jquast/blessed) | `1.38.0` | `1.39.0` |
| [boto3](https://github.com/boto/boto3) | `1.42.96` | `1.43.8` |
| [botocore](https://github.com/boto/botocore) | `1.42.96` | `1.43.8` |
| [cryptography](https://github.com/pyca/cryptography) | `47.0.0` | `48.0.0` |
| [dulwich](https://github.com/dulwich/dulwich) | `1.2.0` | `1.2.1` |
| [fonttools](https://github.com/fonttools/fonttools) | `4.62.1` | `4.63.0` |
| [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) | `1.74.0` | `1.75.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `25.3.0` | `26.0.0` |
| [icalendar](https://github.com/collective/icalendar) | `7.0.3` | `7.1.0` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `9.0.0` |
| [nh3](https://github.com/messense/nh3) | `0.3.4` | `0.3.5` |
| [opentelemetry-exporter-otlp-proto-common](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` |
| [opentelemetry-instrumentation-dbapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` |
| [opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` |
| [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.61b0` | `0.62b1` |
| [opentelemetry-util-http](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` |
| [paramiko](https://github.com/paramiko/paramiko) | `4.0.0` | `5.0.0` |
| [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.6` | `7.34.1` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.10.2` | `6.11.0` |
| [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.16.1` | `0.17.0` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.58.0` | `2.60.0` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.6.0` | `0.7.0` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.3` | `2.1.2` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.13.5` | `7.14.0` |
| [django-stubs](https://github.com/typeddjango/django-stubs) | `6.0.3` | `6.0.4` |
| [django-stubs-ext](https://github.com/typeddjango/django-stubs) | `6.0.3` | `6.0.4` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `4.0.0` | `4.2.0` |
| [pip](https://github.com/pypa/pip) | `26.1` | `26.1.1` |
| [prek](https://github.com/j178/prek) | `0.3.13` | `0.4.0` |
| [pytest-codspeed](https://github.com/CodSpeedHQ/pytest-codspeed) | `4.4.0` | `5.0.2` |
| [types-psycopg2](https://github.com/python/typeshed) | `2.9.21.20260422` | `2.9.21.20260509` |
| [types-pyyaml](https://github.com/python/typeshed) | `6.0.12.20260408` | `6.0.12.20260510` |



Updates `bleach` from 4.1.0 to 6.3.0
- [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES)
- [Commits](mozilla/bleach@v4.1.0...v6.3.0)

Updates `blessed` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/jquast/blessed/releases)
- [Changelog](https://github.com/jquast/blessed/blob/master/docs/history.rst)
- [Commits](https://github.com/jquast/blessed/commits)

Updates `boto3` from 1.42.96 to 1.43.8
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.96...1.43.8)

Updates `botocore` from 1.42.96 to 1.43.8
- [Commits](boto/botocore@1.42.96...1.43.8)

Updates `cryptography` from 47.0.0 to 48.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@47.0.0...48.0.0)

Updates `dulwich` from 1.2.0 to 1.2.1
- [Release notes](https://github.com/dulwich/dulwich/releases)
- [Changelog](https://github.com/jelmer/dulwich/blob/main/NEWS)
- [Commits](jelmer/dulwich@dulwich-1.2.0...dulwich-1.2.1)

Updates `fonttools` from 4.62.1 to 4.63.0
- [Release notes](https://github.com/fonttools/fonttools/releases)
- [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst)
- [Commits](fonttools/fonttools@4.62.1...4.63.0)

Updates `googleapis-common-protos` from 1.74.0 to 1.75.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.74.0...googleapis-common-protos-v1.75.0)

Updates `gunicorn` from 25.3.0 to 26.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@25.3.0...26.0.0)

Updates `icalendar` from 7.0.3 to 7.1.0
- [Release notes](https://github.com/collective/icalendar/releases)
- [Changelog](https://github.com/collective/icalendar/blob/main/CHANGES.rst)
- [Commits](collective/icalendar@v7.0.3...v7.1.0)

Updates `importlib-metadata` from 8.7.1 to 9.0.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.7.1...v9.0.0)

Updates `nh3` from 0.3.4 to 0.3.5
- [Release notes](https://github.com/messense/nh3/releases)
- [Commits](messense/nh3@v0.3.4...v0.3.5)

Updates `opentelemetry-exporter-otlp-proto-common` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-exporter-otlp-proto-http` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-instrumentation` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-dbapi` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-proto` from 1.40.0 to 1.41.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1)

Updates `opentelemetry-semantic-conventions` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python/commits)

Updates `opentelemetry-util-http` from 0.61b0 to 0.62b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `paramiko` from 4.0.0 to 5.0.0
- [Commits](paramiko/paramiko@4.0.0...5.0.0)

Updates `protobuf` from 6.33.6 to 7.34.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Commits](https://github.com/protocolbuffers/protobuf/commits)

Updates `pypdf` from 6.10.2 to 6.11.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.10.2...6.11.0)

Updates `requests` from 2.33.1 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.1...v2.34.2)

Updates `s3transfer` from 0.16.1 to 0.17.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.16.1...0.17.0)

Updates `sentry-sdk` from 2.58.0 to 2.60.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.58.0...2.60.0)

Updates `wcwidth` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Commits](jquast/wcwidth@0.6.0...0.7.0)

Updates `wrapt` from 1.17.3 to 2.1.2
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@1.17.3...2.1.2)

Updates `coverage` from 7.13.5 to 7.14.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.5...7.14.0)

Updates `django-stubs` from 6.0.3 to 6.0.4
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.0.3...6.0.4)

Updates `django-stubs-ext` from 6.0.3 to 6.0.4
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@6.0.3...6.0.4)

Updates `markdown-it-py` from 4.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](executablebooks/markdown-it-py@v4.0.0...v4.2.0)

Updates `pip` from 26.1 to 26.1.1
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@26.1...26.1.1)

Updates `prek` from 0.3.13 to 0.4.0
- [Release notes](https://github.com/j178/prek/releases)
- [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md)
- [Commits](j178/prek@v0.3.13...v0.4.0)

Updates `pytest-codspeed` from 4.4.0 to 5.0.2
- [Release notes](https://github.com/CodSpeedHQ/pytest-codspeed/releases)
- [Changelog](https://github.com/CodSpeedHQ/pytest-codspeed/blob/master/CHANGELOG.md)
- [Commits](CodSpeedHQ/pytest-codspeed@v4.4.0...v5.0.2)

Updates `types-psycopg2` from 2.9.21.20260422 to 2.9.21.20260509
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-pyyaml` from 6.0.12.20260408 to 6.0.12.20260510
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: bleach
  dependency-version: 6.3.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: blessed
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.43.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: botocore
  dependency-version: 1.43.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: coverage
  dependency-version: 7.14.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: cryptography
  dependency-version: 48.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: django-stubs
  dependency-version: 6.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django-stubs-ext
  dependency-version: 6.0.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dulwich
  dependency-version: 1.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: fonttools
  dependency-version: 4.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: googleapis-common-protos
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: gunicorn
  dependency-version: 26.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: icalendar
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: importlib-metadata
  dependency-version: 9.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: markdown-it-py
  dependency-version: 4.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: nh3
  dependency-version: 0.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: opentelemetry-exporter-otlp-proto-common
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: opentelemetry-exporter-otlp-proto-grpc
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: opentelemetry-exporter-otlp-proto-http
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: opentelemetry-instrumentation
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: opentelemetry-instrumentation-dbapi
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: opentelemetry-proto
  dependency-version: 1.41.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: opentelemetry-semantic-conventions
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: opentelemetry-util-http
  dependency-version: 0.62b1
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: paramiko
  dependency-version: 5.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: pip
  dependency-version: 26.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: prek
  dependency-version: 0.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: protobuf
  dependency-version: 7.34.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: pypdf
  dependency-version: 6.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pytest-codspeed
  dependency-version: 5.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: s3transfer
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: types-psycopg2
  dependency-version: 2.9.21.20260509
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: types-pyyaml
  dependency-version: 6.0.12.20260510
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: wcwidth
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: wrapt
  dependency-version: 2.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/src/backend/dependencies-7fc3bd366c branch from e95275e to 51c0462 Compare May 22, 2026 14:07
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 22, 2026

Superseded by #11989.

@dependabot dependabot Bot closed this May 22, 2026
@dependabot dependabot Bot deleted the dependabot/pip/src/backend/dependencies-7fc3bd366c branch May 22, 2026 19:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@SchrodingersGat SchrodingersGat Awaiting requested review from SchrodingersGat SchrodingersGat is a code owner

Assignees

@matmair matmair

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@matmair