Skip to content

Bump the pip-backend-patch-minor group across 1 directory with 14 updates#89

Merged
Prekzursil merged 3 commits into
mainfrom
dependabot/pip/backend/pip-backend-patch-minor-22211653fa
Jun 26, 2026
Merged

Bump the pip-backend-patch-minor group across 1 directory with 14 updates#89
Prekzursil merged 3 commits into
mainfrom
dependabot/pip/backend/pip-backend-patch-minor-22211653fa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip-backend-patch-minor group with 14 updates in the /backend directory:

Package From To
asgiref 3.8.1 3.11.1
billiard 4.2.1 4.2.4
celery 5.5.3 5.6.3
click 8.2.1 8.4.1
django-cors-headers 4.4.0 4.9.0
djangorestframework 3.16.0 3.17.1
kombu 5.5.4 5.6.2
prompt-toolkit 3.0.51 3.0.52
psycopg2-binary 2.9.10 2.9.12
redis 6.2.0 6.4.0
tzdata 2025.2 2025.3
wcwidth 0.2.13 0.8.1
pytest 9.0.3 9.1.1
idna 3.15 3.18

Updates asgiref from 3.8.1 to 3.11.1

Changelog

Sourced from asgiref's changelog.

3.11.1 (2026-02-03)

  • SECURITY FIX CVE-2025-14550: There was a potential DoS vector for users of the asgiref.wsgi.WsgiToAsgi adapter. Malicious requests, including an unreasonably large number of values for the same header, could lead to resource exhaustion when building the WSGI environment.

    To mitigate this, the algorithm is changed to be more efficient, and WsgiToAsgi gains a new optional duplicate_header_limit parameter, which defaults to 100. This specifies the number of times a single header may be repeated before the request is rejected as malformed.

    You may override duplicate_header_limit when configuring your application::

    application = WsgiToAsgi(wsgi_app, duplicate_header_limit=200)

    Set duplicate_header_limit=None if you wish to disable this check.

  • Fixed a regression in 3.11.0 in sync_to_async when wrapping a callable with an attribute named context. (#537)

3.11.0 (2025-11-19)

  • sync_to_async gains a context parameter, similar to those for asyncio.create_task, TaskGroup &co, that can be used on Python 3.11+ to control the context used by the underlying task.

    The parent context is already propagated by default but the additional control is useful if multiple sync_to_async calls need to share the same context, e.g. when used with asyncio.gather().

3.10.0 (2025-10-05)

  • Added AsyncSingleThreadContext context manager to ensure multiple AsyncToSync invocations use the same thread. (#511)

3.9.2 (2025-09-23)

  • Adds support for Python 3.14.

  • Fixes wsgi.errors file descriptor in WsgiToAsgi adapter.

3.9.1 (2025-07-08)

  • Fixed deletion of Local values affecting other contexts. (#523)

... (truncated)

Commits

Updates billiard from 4.2.1 to 4.2.4

Release notes

Sourced from billiard's releases.

v4.2.4

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.2.3...v4.2.4

v4.2.3

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.2.2...v4.2.3

v4.2.2

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.2.1...v4.2.2

Changelog

Sourced from billiard's changelog.

4.2.4 - 2025-11-30

  • Eliminate usage of 'return' in 'finally' blocks (#438)
  • Prepare for release: v4.2.4 (#439)

4.2.3 - 2025-11-16

  • Ensure that task results are delivered during pool shutdown (#435)
  • Prepare for release: v4.2.3 (#436)

4.2.2 - 2025-09-20

  • Add codespell support (config, workflow to detect/not fix) and make it fix few typos
  • initial python 3.13 support
  • Copy code.co_qualname on Python >= 3.11
  • Added DeepWiki to README
  • Fix the failing pre-commit.ci job
  • GitHub Actions: Test on Python 3.14 release candidate 2
  • Keep GitHub Actions up to date with GitHub's Dependabot
  • Bump the github-actions group with 2 updates
  • Prepare for release: v4.2.2
Commits
  • 69c2f29 Prepare for release: v4.2.4 (#439)
  • 973c773 Eliminate usage of 'return' in 'finally' blocks (#438)
  • 5115394 Bump actions/checkout from 5 to 6 in the github-actions group (#437)
  • e8f51d1 Prepare for release: v4.2.3 (#436)
  • 8603172 Ensure that task results are delivered during pool shutdown (#435)
  • 849a3e8 Bump github/codeql-action from 3 to 4 in the github-actions group
  • 0642d2e Prepare for release: v4.2.2 (#432)
  • a954b74 Bump the github-actions group with 2 updates (#431)
  • 57123cb Keep GitHub Actions up to date with GitHub's Dependabot (#430)
  • 75d195c GitHub Actions: Test on Python 3.14 release candidate 2
  • Additional commits viewable in compare view

Updates celery from 5.5.3 to 5.6.3

Release notes

Sourced from celery's releases.

v5.6.3

What's Changed

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.3

:release-date: 2026-03-26 :release-by: Tomer Nosrati

What's Changed


- Fix Django worker recursion bug + defensive checks for pool_cls.__module__ ([#10048](https://github.com/celery/celery/issues/10048))
- Docs: Update user_preload_options example to use click. ([#10056](https://github.com/celery/celery/issues/10056))
- Fix invalid configuration key "bootstrap_servers" in Kafka demo ([#10060](https://github.com/celery/celery/issues/10060))
- Fix broken images on PyPI page ([#10066](https://github.com/celery/celery/issues/10066))
- Remove broken reference. ([#10071](https://github.com/celery/celery/issues/10071))
- Removed --dist=loadscope from smoke tests ([#10073](https://github.com/celery/celery/issues/10073))
- Docs: Clarify task_retry signal args may be None ([#10076](https://github.com/celery/celery/issues/10076))
- Update example for Django ([#10081](https://github.com/celery/celery/issues/10081))
- Make tests compatible with pymongo >= 4.16 ([#10074](https://github.com/celery/celery/issues/10074))
- fix: source install of cassandra-driver ([#10105](https://github.com/celery/celery/issues/10105))
- fix: register task cross-reference role in Sphinx extension ([#10100](https://github.com/celery/celery/issues/10100))
- fix: avoid cycle detection in native delayed delivery ([#10095](https://github.com/celery/celery/issues/10095))
- fix(asynpool): avoid AttributeError when proc lacks _sentinel_poll ([#10086](https://github.com/celery/celery/issues/10086))
- fix dusk_astronomical horizon sign (+18 -> -18) ([#10121](https://github.com/celery/celery/issues/10121))
- Fix/10106 onupdate col use lambda func ([#10108](https://github.com/celery/celery/issues/10108))
- Fix warm shutdown RuntimeError with eventlet>=0.37.0 ([#10083](https://github.com/celery/celery/issues/10083)) ([#10123](https://github.com/celery/celery/issues/10123))
- Fix 10109 db backend connection health ([#10124](https://github.com/celery/celery/issues/10124))
- Database Backend filter unsupport sql engine arguments with nullpool [#7355](https://github.com/celery/celery/issues/7355) ([#10134](https://github.com/celery/celery/issues/10134))
- fix(beat): correct argument order in Service.__reduce__ ([#10137](https://github.com/celery/celery/issues/10137))
- ci: declare explicit read-only token permissions in workflow jobs ([#10139](https://github.com/celery/celery/issues/10139))
- chore: 'boto3to' to 'boto3 to' ([#10133](https://github.com/celery/celery/issues/10133))
- Database Backend: Add missing index on date_done (Fixes [#10097](https://github.com/celery/celery/issues/10097)) ([#10098](https://github.com/celery/celery/issues/10098))
- docs: fix typo in CONTRIBUTING.rst ([#10141](https://github.com/celery/celery/issues/10141))
- Refer to Flower / Prometheus for monitoring ([#10140](https://github.com/celery/celery/issues/10140))
- docs: remove duplicated words in broker and routing docs ([#10146](https://github.com/celery/celery/issues/10146))
- docs: fix stale version reference and grammar in README ([#10145](https://github.com/celery/celery/issues/10145))
- docs: fix wording in Celery 5.3 worker pool notes ([#10149](https://github.com/celery/celery/issues/10149))
- docs: fix duplicated wording in 3.1 changelog entry ([#10152](https://github.com/celery/celery/issues/10152))
- docs: fix changelog typo in context manager wording ([#10144](https://github.com/celery/celery/issues/10144))
- Fix/10096 worker fails to reconnect after redis failover ([#10151](https://github.com/celery/celery/issues/10151))
- Improve on_after_finalize signal documentation ([#10155](https://github.com/celery/celery/issues/10155))
- Add non-commutative example to clarify partial arg ordering in canvas docs ([#10157](https://github.com/celery/celery/issues/10157))
- Remove redundant test_isa_mapping test (fixes [#10077](https://github.com/celery/celery/issues/10077)) ([#10103](https://github.com/celery/celery/issues/10103))
- Upgrade pytest-celery to >=1.3.0 and adopt PYTEST_CELERY_PKG build arg ([#10162](https://github.com/celery/celery/issues/10162))
- Remove deprecated args from redis get_connection call ([#10036](https://github.com/celery/celery/issues/10036))
- Fix [#6912](https://github.com/celery/celery/issues/6912) rpc backend reconnection error ([#10179](https://github.com/celery/celery/issues/10179))
- Fix NameError with TYPE_CHECKING annotations on Python 3.14+ (PEP 649) ([#10165](https://github.com/celery/celery/issues/10165))
- docs: Add elaboration on prefetch multiplier settings (worker_prefetch_multiplier) and worker_eta_task_limit ([#10181](https://github.com/celery/celery/issues/10181))
- Fix O(K²) message bloat in a chain of chords ([#10171](https://github.com/celery/celery/issues/10171))
- Fix mock connection interfaces to prevent `TypeError` during exception handling ([#10178](https://github.com/celery/celery/issues/10178))
- fix(trace): dispatch chain/callbacks on dedup fast-path for redelivered tasks ([#10159](https://github.com/celery/celery/issues/10159))
</tr></table>

... (truncated)

Commits
  • 3f4d8d7 Prepare for release: v5.6.3 (#10221)
  • a989e8c fix: clear the timer while catch the exception (#10218)
  • d06de5f Chore(deps): Bump nick-fields/retry from 3 to 4 (#10213)
  • c3c19c3 Fix: prioritize request ignore_result over task definition (#10184)
  • d23be53 Remove outdated autoreloader section from extending docs (#10154)
  • ada2da7 docs: fix duplicated word in bootsteps comment\n\nSigned-off-by: Rohan Santho...
  • f45f62b Add compression header to message protocol docs (#10156)
  • 9a27092 docs: clarify after_return behavior for retried tasks (#10192)
  • 6ee6230 Fix#9722 friendly status errors for CLI (#10190)
  • a9a2d4c [pre-commit.ci] pre-commit autoupdate (#10186)
  • Additional commits viewable in compare view

Updates click from 8.2.1 to 8.4.1

Release notes

Sourced from click's releases.

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32?closed=1

  • get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
  • Zsh completion scripts parse correctly on Windows. #3277 # 3466
  • Shell completion of Choice Enum values produces a valid completion result. #3015
  • Fix empty byte-string handling in echo. #3487
  • Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.4.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-0 Milestone https://github.com/pallets/click/milestone/30

  • ParamType typing improvements. #3371

    • :class:ParamType is now a generic abstract base class, parameterized by its converted value type.
    • :meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).
    • :meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].
    • :class:CompositeParamType and the number-range base are now generic with abstract methods.

  • Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. #3372

  • Parameter typing improvements. #2805

    • :class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
    • :attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
    • The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

  • Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.1

Released 2026-05-21

  • get_parameter_source() is available during eager callbacks and type conversion again. {issue}3458 {pr}3484
  • Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
  • Shell completion of Enum values used as Choice options produces a valid completion result. {issue}3015 {pr}3471
  • Fix empty byte-string handling in echo. {issue}3487 {pr}3493
  • Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
  • Fix open_url on Windows when the file path contains spaces. {issue}2994 {pr}3478

Version 8.4.0

Released 2026-05-17

  • {class}ParamType typing improvements. {pr}3371

    • {class}ParamType is now a generic abstract base class, parameterized by its converted value type.
    • {meth}~ParamType.convert return types are narrowed on all concrete types (str for {class}STRING, int for {class}INT, etc.).
    • {meth}~ParamType.to_info_dict returns specific {class}~typing.TypedDict subclasses instead of dict[str, Any].
    • {class}CompositeParamType and the number-range base are now generic with abstract methods.

  • Refactor convert_type to extract type inference into a private _guess_type helper, and add {func}typing.overload signatures. {pr}3372

  • {class}Parameter typing improvements. {pr}2805

    • {class}Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
    • {attr}Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
    • The ctx parameter of {meth}Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

  • Split string values from default_map for parameters with nargs > 1 or {class}Tuple type, matching environment variable behavior. {issue}2745 {pr}3364

  • Auto-detect type=UNPROCESSED for flag_value of non-basic types

... (truncated)

Commits
  • 6eeb50e release version 8.4.1
  • 67921d5 change log and doc fixes (#3495)
  • 9c41f46 Fix changelog and version admonitions
  • 6cb3477 fix skip condition
  • 5ee8e31 fix I/O operation on closed file error with CliRunner and echo_via_pager (#3482)
  • becbde5 pager doesn't close std streams
  • a5f5aa6 Handle empty bytes in echo (#3493)
  • 4d3db84 handle empty bytes in echo
  • d42f15b Fix get_parameter_source() during type conversion and eager callbacks (#3484)
  • 0baa8db Document ctx.params bypass with test and doc
  • Additional commits viewable in compare view

Updates django-cors-headers from 4.4.0 to 4.9.0

Changelog

Sourced from django-cors-headers's changelog.

4.9.0 (2025-09-18)

  • Support Django 6.0.

4.8.0 (2025-09-08)

  • Support Python 3.14.

4.7.0 (2025-02-06)

  • Support Django 5.2.

4.6.0 (2024-10-29)

  • Drop Django 3.2 to 4.1 support.

4.5.0 (2024-10-12)

  • Drop Python 3.8 support.

  • Support Python 3.13.

Commits

Updates djangorestframework from 3.16.0 to 3.17.1

Release notes

Sourced from djangorestframework's releases.

3.17.1

What's Changed

Bug fixes

Full Changelog: encode/django-rest-framework@3.17.0...3.17.1

3.17.0

What's Changed

Breaking changes

Features

Bug fixes

Translations

Packaging

Other changes

New Contributors

... (truncated)

Commits
  • 22e231c Prepare bug fix release 3.17.1 (#9931)
  • 8e99b53 Add condition to skip pushed tags from forks (#9924)
  • c0407de Fix HTMLFormRenderer with empty datetime values (#9928)
  • 30d58a7 Fix the book sizing in the documentation (#9926)
  • 6f03b79 Tweak order of changes in release notes
  • 021ab56 Bump version and update release notes for 3.17.0 (#9921)
  • 19ebad7 Bump mkdocs-material[imaging] from 9.7.4 to 9.7.5 (#9923)
  • f222c55 Correct requires-python key in pyproject.toml
  • 7e7de6f Remove code fences from release checklist
  • c599d30 Update release process
  • Additional commits viewable in compare view

Updates kombu from 5.5.4 to 5.6.2

Release notes

Sourced from kombu's releases.

v5.6.2

What's Changed

New Contributors

Full Changelog: celery/kombu@v5.6.1...v5.6.2

v5.6.1

What's Changed

New Contributors

Full Changelog: celery/kombu@v5.6.0...v5.6.1

v5.6.0

Key Highlights

QoS Max Prefetch Limit celery/kombu#2348

Prevent Out Of Memory crashes when queues flood with ETA/countdown tasks. The new optional max_prefetch parameter caps how many messages workers hold in memory. Defaults to unlimited (None) to preserve existing behavior.

from kombu.common import QoS
Limit prefetch to maximum 100 messages
qos = QoS(callback=consumer.qos, initial_value=10, max_prefetch=100)

Redis Polling Interval Support celery/kombu#2346

Fix Redis transport to properly propagate polling_interval and brpop_timeout from transport_options to the Channel's _brpop_start timeout.

app.conf.broker_transport_options = {"polling_interval": 10}
</tr></table>

... (truncated)

Changelog

Sourced from kombu's changelog.

5.6.2

:release-date: 29 December, 2025 :release-by: Tomer Nosrati

What's Changed


- Improve error handling in GCP Pub/Sub ack deadline extension ([#2430](https://github.com/celery/kombu/issues/2430))
- Fix SentinelChannel to pass ACL credentials to master_for() ([#2426](https://github.com/celery/kombu/issues/2426))
- Fix credential_provider compatibility with redis-py < 5.3.0 ([#2423](https://github.com/celery/kombu/issues/2423))
- Simplify requirements given Py3.9+ baseline ([#2414](https://github.com/celery/kombu/issues/2414))
- Prepare for release: v5.6.2 ([#2434](https://github.com/celery/kombu/issues/2434))

.. _version-5.6.1:


5.6.1


:release-date: 25 November, 2025
:release-by: Tomer Nosrati


What's Changed

  • fix: ensure hub close does also remove global event loop reference (#2404)
  • fix: default value for SQS's receive message (#2405)
  • Feat: add support for credential_provider to redis broker (#2408)
  • Prepare for release: v5.6.1 (#2416)

.. _version-5.6.0:

5.6.0

:release-date: 1 November, 2025 :release-by: Tomer Nosrati

Key Highlights


QoS Max Prefetch Limit
----------------------

PR [#2348](https://github.com/celery/kombu/issues/2348) &lt;https://github.com/celery/kombu/pull/2348&gt;_


Prevent Out Of Memory crashes when queues flood with ETA/countdown tasks. The new optional max_prefetch parameter caps how many messages workers hold in memory. Defaults to unlimited (None) to preserve existing behavior.


.. code-block:: python


from kombu.common import QoS



</tr></table>

... (truncated)

Commits

@dependabot
Bump the pip-backend-patch-minor group across 1 directory with 14 upd…
49a9243 
…ates

Bumps the pip-backend-patch-minor group with 14 updates in the /backend directory:

| Package | From | To |
| --- | --- | --- |
| [asgiref](https://github.com/django/asgiref) | `3.8.1` | `3.11.1` |
| [billiard](https://github.com/celery/billiard) | `4.2.1` | `4.2.4` |
| [celery](https://github.com/celery/celery) | `5.5.3` | `5.6.3` |
| [click](https://github.com/pallets/click) | `8.2.1` | `8.4.1` |
| [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.4.0` | `4.9.0` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.16.0` | `3.17.1` |
| [kombu](https://github.com/celery/kombu) | `5.5.4` | `5.6.2` |
| [prompt-toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit) | `3.0.51` | `3.0.52` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.12` |
| [redis](https://github.com/redis/redis-py) | `6.2.0` | `6.4.0` |
| [tzdata](https://github.com/python/tzdata) | `2025.2` | `2025.3` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.2.13` | `0.8.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |



Updates `asgiref` from 3.8.1 to 3.11.1
- [Changelog](https://github.com/django/asgiref/blob/main/CHANGELOG.txt)
- [Commits](django/asgiref@3.8.1...3.11.1)

Updates `billiard` from 4.2.1 to 4.2.4
- [Release notes](https://github.com/celery/billiard/releases)
- [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt)
- [Commits](celery/billiard@v4.2.1...v4.2.4)

Updates `celery` from 5.5.3 to 5.6.3
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst)
- [Commits](celery/celery@v5.5.3...v5.6.3)

Updates `click` from 8.2.1 to 8.4.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.2.1...8.4.1)

Updates `django-cors-headers` from 4.4.0 to 4.9.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.4.0...4.9.0)

Updates `djangorestframework` from 3.16.0 to 3.17.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.16.0...3.17.1)

Updates `kombu` from 5.5.4 to 5.6.2
- [Release notes](https://github.com/celery/kombu/releases)
- [Changelog](https://github.com/celery/kombu/blob/main/Changelog.rst)
- [Commits](celery/kombu@v5.5.4...v5.6.2)

Updates `prompt-toolkit` from 3.0.51 to 3.0.52
- [Release notes](https://github.com/prompt-toolkit/python-prompt-toolkit/releases)
- [Changelog](https://github.com/prompt-toolkit/python-prompt-toolkit/blob/main/CHANGELOG)
- [Commits](prompt-toolkit/python-prompt-toolkit@3.0.51...3.0.52)

Updates `psycopg2-binary` from 2.9.10 to 2.9.12
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.10...2.9.12)

Updates `redis` from 6.2.0 to 6.4.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v6.2.0...v6.4.0)

Updates `tzdata` from 2025.2 to 2025.3
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2025.2...2025.3)

Updates `wcwidth` from 0.2.13 to 0.8.1
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Commits](jquast/wcwidth@0.2.13...0.8.1)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.3...9.1.1)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.15...v3.18)

---
updated-dependencies:
- dependency-name: asgiref
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: billiard
  dependency-version: 4.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-backend-patch-minor
- dependency-name: celery
  dependency-version: 5.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: click
  dependency-version: 8.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: django-cors-headers
  dependency-version: 4.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: djangorestframework
  dependency-version: 3.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: kombu
  dependency-version: 5.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: prompt-toolkit
  dependency-version: 3.0.52
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-backend-patch-minor
- dependency-name: psycopg2-binary
  dependency-version: 2.9.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-backend-patch-minor
- dependency-name: redis
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: tzdata
  dependency-version: '2025.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: wcwidth
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
- dependency-name: idna
  dependency-version: '3.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-backend-patch-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jun 22, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: area:ci, type:chore. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Jun 25, 2026

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Jun 25, 2026

Copy link
Copy Markdown

Codex usage limits have been reached for code reviews. Please check with the admins of this repo to increase the limits by adding credits.
Credits must be used to enable repository wide code reviews.

@Prekzursil Prekzursil merged commit 488f504 into main Jun 26, 2026
9 checks passed
@dependabot dependabot Bot deleted the dependabot/pip/backend/pip-backend-patch-minor-22211653fa branch June 26, 2026 00:04
@Prekzursil Prekzursil mentioned this pull request Jun 26, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@Prekzursil