Bump the all-python-dependencies group across 1 directory with 11 updates #15
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=80&v=4){kind=small}
…ates Bumps the all-python-dependencies group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `4.2.23` | `4.2.25` | | [whitenoise](https://github.com/evansd/whitenoise) | `6.9.0` | `6.11.0` | | [django-mysql](https://github.com/adamchainz/django-mysql) | `4.17.0` | `4.19.0` | | [django-import-export](https://github.com/django-import-export/django-import-export) | `4.3.9` | `4.3.10` | | [django-filter](https://github.com/carltongibson/django-filter) | `25.1` | `25.2` | | [numpy](https://github.com/numpy/numpy) | `2.2.5` | `2.3.3` | | [pandas](https://github.com/pandas-dev/pandas) | `2.3.1` | `2.3.3` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.42` | `2.0.43` | | [google-cloud-bigquery[bqstorage,pandas]](https://github.com/googleapis/python-bigquery) | `3.35.1` | `3.38.0` | | [debugpy](https://github.com/microsoft/debugpy) | `1.8.16` | `1.8.17` | | [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.25.0` | `4.25.1` | Updates `django` from 4.2.23 to 4.2.25 - [Commits](django/django@4.2.23...4.2.25) Updates `whitenoise` from 6.9.0 to 6.11.0 - [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst) - [Commits](evansd/whitenoise@6.9.0...6.11.0) Updates `django-mysql` from 4.17.0 to 4.19.0 - [Changelog](https://github.com/adamchainz/django-mysql/blob/main/docs/changelog.rst) - [Commits](adamchainz/django-mysql@4.17.0...4.19.0) Updates `django-import-export` from 4.3.9 to 4.3.10 - [Release notes](https://github.com/django-import-export/django-import-export/releases) - [Changelog](https://github.com/django-import-export/django-import-export/blob/main/docs/changelog.rst) - [Commits](django-import-export/django-import-export@4.3.9...4.3.10) Updates `django-filter` from 25.1 to 25.2 - [Release notes](https://github.com/carltongibson/django-filter/releases) - [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst) - [Commits](carltongibson/django-filter@25.1...25.2) Updates `numpy` from 2.2.5 to 2.3.3 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.2.5...v2.3.3) Updates `pandas` from 2.3.1 to 2.3.3 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v2.3.1...v2.3.3) Updates `sqlalchemy` from 2.0.42 to 2.0.43 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `google-cloud-bigquery[bqstorage,pandas]` from 3.35.1 to 3.38.0 - [Release notes](https://github.com/googleapis/python-bigquery/releases) - [Changelog](https://github.com/googleapis/python-bigquery/blob/main/CHANGELOG.md) - [Commits](googleapis/python-bigquery@v3.35.1...v3.38.0) Updates `debugpy` from 1.8.16 to 1.8.17 - [Release notes](https://github.com/microsoft/debugpy/releases) - [Commits](microsoft/debugpy@v1.8.16...v1.8.17) Updates `jsonschema` from 4.25.0 to 4.25.1 - [Release notes](https://github.com/python-jsonschema/jsonschema/releases) - [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst) - [Commits](python-jsonschema/jsonschema@v4.25.0...v4.25.1) --- updated-dependencies: - dependency-name: django dependency-version: 4.2.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-python-dependencies - dependency-name: whitenoise dependency-version: 6.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python-dependencies - dependency-name: django-mysql dependency-version: 4.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python-dependencies - dependency-name: django-import-export dependency-version: 4.3.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-python-dependencies - dependency-name: django-filter dependency-version: '25.2' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python-dependencies - dependency-name: numpy dependency-version: 2.3.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python-dependencies - dependency-name: pandas dependency-version: 2.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-python-dependencies - dependency-name: sqlalchemy dependency-version: 2.0.43 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-python-dependencies - dependency-name: google-cloud-bigquery[bqstorage,pandas] dependency-version: 3.38.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-python-dependencies - dependency-name: debugpy dependency-version: 1.8.17 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-python-dependencies - dependency-name: jsonschema dependency-version: 4.25.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the all-python-dependencies group with 11 updates in the / directory:
4.2.234.2.256.9.06.11.04.17.04.19.04.3.94.3.1025.125.22.2.52.3.32.3.12.3.32.0.422.0.433.35.13.38.01.8.161.8.174.25.04.25.1Updates
djangofrom 4.2.23 to 4.2.25Commits
57d20b2[4.2.x] Bumped version for 4.2.25 release.9504bba[4.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal v...38d9ef8[4.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggre...7c7d2a4[4.2.x] Added stub release notes and release date for 4.2.25.3e27d61[4.2.x] Added missing backticks in docs/releases/security.txt.07e5fb9[4.2.x] Added CVE-2025-57833 to security archive.5636e82[4.2.x] Post-release version bump.5e23d89[4.2.x] Bumped version for 4.2.24 release.31334e6[4.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL inject...d5860d5[4.2.x] Added stub release notes and release date for 4.2.24.Updates
whitenoisefrom 6.9.0 to 6.11.0Changelog
Sourced from whitenoise's changelog.
Commits
c9c06e9Version 6.11.0051c4e9Support Django 6.0 (#665)c903cc1Version 6.10.0a81bcb0docs(django): use the stable version in URLs (#626)67b4f32Support Python 3.14 (#664)da8d333[pre-commit.ci] pre-commit autoupdate (#663)8000724Bump the github-actions group with 2 updates (#662)8fb339fUpgrade dependencies (#661)adf64ddUse uvx to run tox on GitHub Actions (#660)ad6eb20[pre-commit.ci] pre-commit autoupdate (#659)Updates
django-mysqlfrom 4.17.0 to 4.19.0Changelog
Sourced from django-mysql's changelog.
Commits
243140eVersion 4.19.02bc533dCorrect testing of Django 6.0 (#1166)530b8a0Support Django 6.0 (#1165)d5375b0Version 4.18.00cf4a84Update tested database versions (#1164)10ca704Support Python 3.14 (#1163)a8e867bFix some types (#1162)d513ebd[pre-commit.ci] pre-commit autoupdate (#1161)37e6514Bump the github-actions group with 2 updates (#1160)57e2470Upgrade dependencies (#1159)Updates
django-import-exportfrom 4.3.9 to 4.3.10Release notes
Sourced from django-import-export's releases.
Changelog
Sourced from django-import-export's changelog.
Commits
15ecbb9release 4.3.10341c27dFix/foreign key widget export issue (#2117)7333eefImprove API documentation forwidget.clean()(#2115)e50a7fb[pre-commit.ci] pre-commit autoupdate (#2116)fb6259dupdated czech translation (#2111)5c9076aUpdate django.po (#2110)fcab876minor improvements to control flow (#2093)5f89b71[pre-commit.ci] pre-commit autoupdate (#2109)34a2969Documents JSONField export with attribute syntax (#2100)3dbd592[pre-commit.ci] pre-commit autoupdate (#2105)Updates
django-filterfrom 25.1 to 25.2Changelog
Sourced from django-filter's changelog.
Commits
17ec565Bumped version for 25.2 release.9b4b8fdUpdated testing for Django 6.0. (#1730)1b07b3eBump actions/setup-python from 5 to 6 in the github-actions group (#1726)27a1168Bump the github-actions group with 2 updates (#1722)7f59b6fAdd drf as optional dependencies (#1724)635343eAdd reference anchors to filter types to facilitate intersphinx refs (#1706)7b3176eDocument steps for postgres full text search (#1704)Updates
numpyfrom 2.2.5 to 2.3.3Release notes
Sourced from numpy's releases.
... (truncated)
Commits
f2a77a7Merge pull request #29702 from charris/prepare-2.3.38641006REL: Prepare for the NumPy 2.3.3 release [wheel build]f024265Merge pull request #29701 from charris/backport-2969784f2eedMerge pull request #29700 from charris/backport-296957cacdbfUpdate VXE and VXE2 detection regex patterns028c469TYP: appease ruff4b80666TYP: fixnp.boolmethod declarationsf2a6b75Merge pull request #29691 from charris/backport-29665a707cbfMerge pull request #29689 from charris/backport-296623d66056BUG: use correct input dtype in flatiter assignmentUpdates
pandasfrom 2.3.1 to 2.3.3Release notes
Sourced from pandas's releases.
Commits
9c8bc3eRLS: 2.3.36aa788a[backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (#62499) (#62508)b64f0df[backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...058eb2b[backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (#62424) (...2ca088d[backport 2.3.x] DEPR: remove the Period resampling deprecation (#62480) (#62...92bf98f[backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...e57c7d6Backport PR #62452 on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (#62454)e0fe9a0Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...23a1085BUG: improve future warning for boolean operations with missaligned indexes (...6113696Backport PR #62396 on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...Updates
sqlalchemyfrom 2.0.42 to 2.0.43Release notes
Sourced from sqlalchemy's releases.
... (truncated)
Commits
Updates
google-cloud-bigquery[bqstorage,pandas]from 3.35.1 to 3.38.0Release notes
Sourced from google-cloud-bigquery[bqstorage,pandas]'s releases.
Changelog
Sourced from google-cloud-bigquery[bqstorage,pandas]'s changelog.
Commits
7cad6cfchore(main): release 3.38.0 (#2289)c9aba64chore(deps): update all dependencies (#2275)7b1b718feat: add additional query stats (#2270)4b0ef0cchore(main): release 3.37.0 (#2269)6e88d7ddocs: clarify that the presence ofXyzJob.errorsdoesn't necessarily mean ...33ea296fix: remove deepcopy while setting properties for _QueryResults (#2280)8a13c12docs: clarify the api_method arg for client.query() (#2277)435ecdbbug: updates__eq__comparison on TableConstraint (#2274)43527afchore(deps): update all dependencies (#2259)ef2740afeat: updates to fastpath query execution (#2268)Updates
debugpyfrom 1.8.16 to 1.8.17Commits
6cbdf87update testing for python 3.14 (#1955)2eb3afeCheck ifos.__file__is available before using it (#1944)Updates
jsonschemafrom 4.25.0 to 4.25.1Release notes
Sourced from jsonschema's releases.
Changelog
Sourced from jsonschema's changelog.
Commits
331c384Add the fix to the changelog.c1ec0a6Merge pull request #1398 from python-jsonschema/dependabot/github_actions/ast...8e7d594Merge pull request #1399 from python-jsonschema/dependabot/github_actions/act...460f4faMerge pull request #1396 from sirosen/improve-protocol-init-signature1e58409[pre-commit.ci] auto fixes from pre-commit.com hooks64bc217Add a typing test for the Validator protocol6c25741Bump actions/checkout from 4 to 5bf603d5Bump astral-sh/setup-uv from 6.4.3 to 6.5.0a916d8fFixValidatorprotocol init to match runtimede60f18Merge pull request #1397 from python-jsonschema/pre-commit-ci-update-configDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions