From 73337e84d56a4ede48b126aa50ca579b01268b8f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Oct 2025 05:49:36 +0000 Subject: [PATCH] deps: bump the prod-deps group across 1 directory with 21 updates Bumps the prod-deps group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `4.2.24` | `5.2.7` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` | | [hiredis](https://github.com/redis/hiredis-py) | `3.2.1` | `3.3.0` | | [drf-yasg](https://github.com/axnsan12/drf-yasg) | `1.21.10` | `1.21.11` | | [jellyfish](https://jellyfish.jpt.sh/) | `1.2.0` | `1.2.1` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` | | [xlsxwriter](https://github.com/jmcnamara/XlsxWriter) | `3.2.8` | `3.2.9` | | [xmlschema](https://github.com/sissaschool/xmlschema) | `4.1.0` | `4.2.0` | | [lark](https://github.com/lark-parser/lark) | `1.2.2` | `1.3.0` | | [shapely](https://github.com/shapely/shapely) | `2.0.7` | `2.1.2` | | [django-two-factor-auth[phonenumbers]](https://github.com/jazzband/django-two-factor-auth) | `1.17.0` | `1.18.1` | | [boto3](https://github.com/boto/boto3) | `1.40.30` | `1.40.55` | | [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.30` | `2.0.31` | | [coverage](https://github.com/nedbat/coveragepy) | `7.10.6` | `7.11.0` | | [tox](https://github.com/tox-dev/tox) | `4.30.2` | `4.31.0` | | [psutil](https://github.com/giampaolo/psutil) | `7.0.0` | `7.1.1` | | [faker](https://github.com/joke2k/faker) | `37.6.0` | `37.11.0` | | [sphinx](https://github.com/sphinx-doc/sphinx) | `7.4.7` | `8.2.3` | | [sphinxcontrib-spelling](https://github.com/sphinx-contrib/spelling) | `8.0.0` | `8.0.1` | | [docutils](https://github.com/rtfd/recommonmark) | `0.21.2` | `0.22.2` | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.138.16` | `6.142.1` | Updates `django` from 4.2.24 to 5.2.7 - [Commits](https://github.com/django/django/compare/4.2.24...5.2.7) Updates `psycopg2-binary` from 2.9.10 to 2.9.11 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](https://github.com/psycopg/psycopg2/compare/2.9.10...2.9.11) Updates `hiredis` from 3.2.1 to 3.3.0 - [Release notes](https://github.com/redis/hiredis-py/releases) - [Changelog](https://github.com/redis/hiredis-py/blob/master/CHANGELOG.md) - [Commits](https://github.com/redis/hiredis-py/compare/v3.2.1...v3.3.0) Updates `drf-yasg` from 1.21.10 to 1.21.11 - [Release notes](https://github.com/axnsan12/drf-yasg/releases) - [Changelog](https://github.com/axnsan12/drf-yasg/blob/master/docs/changelog.rst) - [Commits](https://github.com/axnsan12/drf-yasg/compare/1.21.10...1.21.11) Updates `jellyfish` from 1.2.0 to 1.2.1 Updates `pyyaml` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3) Updates `xlsxwriter` from 3.2.8 to 3.2.9 - [Changelog](https://github.com/jmcnamara/XlsxWriter/blob/main/Changes) - [Commits](https://github.com/jmcnamara/XlsxWriter/compare/RELEASE_3.2.8...RELEASE_3.2.9) Updates `xmlschema` from 4.1.0 to 4.2.0 - [Release notes](https://github.com/sissaschool/xmlschema/releases) - [Changelog](https://github.com/sissaschool/xmlschema/blob/master/CHANGELOG.rst) - [Commits](https://github.com/sissaschool/xmlschema/compare/v4.1.0...v4.2.0) Updates `lark` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/lark-parser/lark/releases) - [Changelog](https://github.com/lark-parser/lark/blob/master/CHANGELOG.md) - [Commits](https://github.com/lark-parser/lark/compare/1.2.2...1.3.0) Updates `shapely` from 2.0.7 to 2.1.2 - [Release notes](https://github.com/shapely/shapely/releases) - [Changelog](https://github.com/shapely/shapely/blob/main/CHANGES.txt) - [Commits](https://github.com/shapely/shapely/compare/2.0.7...2.1.2) Updates `django-two-factor-auth[phonenumbers]` from 1.17.0 to 1.18.1 - [Release notes](https://github.com/jazzband/django-two-factor-auth/releases) - [Changelog](https://github.com/jazzband/django-two-factor-auth/blob/master/CHANGELOG.md) - [Commits](https://github.com/jazzband/django-two-factor-auth/compare/1.17.0...1.18.1) Updates `boto3` from 1.40.30 to 1.40.55 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](https://github.com/boto/boto3/compare/1.40.30...1.40.55) Updates `uwsgi` from 2.0.30 to 2.0.31 Updates `coverage` from 7.10.6 to 7.11.0 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](https://github.com/nedbat/coveragepy/compare/7.10.6...7.11.0) Updates `tox` from 4.30.2 to 4.31.0 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](https://github.com/tox-dev/tox/compare/4.30.2...4.31.0) Updates `psutil` from 7.0.0 to 7.1.1 - [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst) - [Commits](https://github.com/giampaolo/psutil/compare/release-7.0.0...release-7.1.1) Updates `faker` from 37.6.0 to 37.11.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](https://github.com/joke2k/faker/compare/v37.6.0...v37.11.0) Updates `sphinx` from 7.4.7 to 8.2.3 - [Release notes](https://github.com/sphinx-doc/sphinx/releases) - [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst) - [Commits](https://github.com/sphinx-doc/sphinx/compare/v7.4.7...v8.2.3) Updates `sphinxcontrib-spelling` from 8.0.0 to 8.0.1 - [Release notes](https://github.com/sphinx-contrib/spelling/releases) - [Commits](https://github.com/sphinx-contrib/spelling/compare/8.0.0...8.0.1) Updates `docutils` from 0.21.2 to 0.22.2 - [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md) - [Commits](https://github.com/rtfd/recommonmark/commits) Updates `hypothesis` from 6.138.16 to 6.142.1 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](https://github.com/HypothesisWorks/hypothesis/compare/hypothesis-python-6.138.16...hypothesis-python-6.142.1) --- updated-dependencies: - dependency-name: django dependency-version: 5.2.7 dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: psycopg2-binary dependency-version: 2.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: hiredis dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: drf-yasg dependency-version: 1.21.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: jellyfish dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: xlsxwriter dependency-version: 3.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: xmlschema dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: lark dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: shapely dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: django-two-factor-auth[phonenumbers] dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: boto3 dependency-version: 1.40.55 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: uwsgi dependency-version: 2.0.31 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: coverage dependency-version: 7.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: tox dependency-version: 4.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: psutil dependency-version: 7.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: faker dependency-version: 37.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: sphinx dependency-version: 8.2.3 dependency-type: direct:production update-type: version-update:semver-major dependency-group: prod-deps - dependency-name: sphinxcontrib-spelling dependency-version: 8.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: docutils dependency-version: 0.22.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: hypothesis dependency-version: 6.142.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps ... Signed-off-by: dependabot[bot] --- requirements/aws.txt | 4 ++-- requirements/base.txt | 22 +++++++++++----------- requirements/test.txt | 16 ++++++++-------- 3 files changed, 21 insertions(+), 21 deletions(-) diff --git a/requirements/aws.txt b/requirements/aws.txt index 5ddd015c70..1e14371451 100644 --- a/requirements/aws.txt +++ b/requirements/aws.txt @@ -1,4 +1,4 @@ -r base.txt -boto3==1.40.30 +boto3==1.40.55 django-ses==4.4.0 -uWSGI==2.0.30; sys_platform != "win32" +uWSGI==2.0.31; sys_platform != "win32" diff --git a/requirements/base.txt b/requirements/base.txt index 5c4183fe0a..f9714c5800 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -1,14 +1,14 @@ # Django -django==4.2.24 +django==5.2.7 # Persistence stores -psycopg2-binary==2.9.10 +psycopg2-binary==2.9.11 # Background process management celery==5.5.3 django-celery-beat==2.8.1 django-redis==6.0.0 -hiredis==3.2.1 +hiredis==3.3.0 brotli==1.1.0 django-compressor==4.5.1 @@ -26,7 +26,7 @@ django-pint==0.7.3 # https://github.com/hgrecco/pint/issues/2065 djangorestframework==3.16.1 djangorestframework-simplejwt==5.5.1 django-post-office==3.10.1 -drf-yasg==1.21.10 +drf-yasg==1.21.11 django-filter==22.1 # Update after drf-spectacular drf-nested-routers==0.95.0 @@ -34,18 +34,18 @@ drf-nested-routers==0.95.0 sentry-sdk==2.14.0 # Various packages -jellyfish==1.2.0 +jellyfish==1.2.1 Markdown==3.9 polling==0.3.2 -pyyaml==6.0.2 +pyyaml==6.0.3 street-address==0.4.0 xlrd<2.0.0 # Version 2 removes xlsx support -xlsxwriter==3.2.8 +xlsxwriter==3.2.9 xmltodict==1.0.2 requests==2.32.5 probablepeople==0.5.6 -xmlschema==4.1.0 -lark==1.2.2 +xmlschema==4.2.0 +lark==1.3.0 pandas<3 # Parsing and managing geojson data (this is only used in managed tasks at the moment) @@ -59,13 +59,13 @@ buildingsync-asset-extractor==v0.2.1 seed-salesforce==0.1.1 # geospatial and pnnl/buildingid-py -shapely==2.0.7 +shapely==2.1.2 usaddress==0.5.16 pnnl-buildingid @ git+https://github.com/SEED-platform/buildingid@3cb82c9 django-treebeard==4.7.1 -django-two-factor-auth[phonenumbers]==1.17.0 +django-two-factor-auth[phonenumbers]==1.18.1 qrcode[pil]==7.4.2 pyotp==2.9.0 diff --git a/requirements/test.txt b/requirements/test.txt index e79c4a5852..794d1906c0 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -2,13 +2,13 @@ -r base.txt # general -coverage==7.10.6 +coverage==7.11.0 coveralls==4.0.1 # https://github.com/TheKevJames/coveralls-python/pull/542 -tox==4.30.2 # Keep this in sync with ci.yml -psutil==7.0.0 +tox==4.31.0 # Keep this in sync with ci.yml +psutil==7.1.1 # python testing -Faker==37.6.0 +Faker==37.11.0 mock==5.2.0 vcrpy==7.0.0 pytest==8.4.2 @@ -19,10 +19,10 @@ urllib3==1.26.20 pre-commit==4.3.0 # documentation and spelling -Sphinx==7.4.7 # TODO update after python 3.9 -sphinxcontrib-spelling==8.0.0 +Sphinx==8.2.3 # TODO update after python 3.9 +sphinxcontrib-spelling==8.0.1 sphinx_rtd_theme==3.0.2 -docutils==0.21.2 # TODO update after python 3.9 +docutils==0.22.2 # TODO update after python 3.9 # property-based testing -hypothesis==6.138.16 +hypothesis==6.142.1