From 49a9243d29586e9354d82f22a0aa59769b2a759b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 22 Jun 2026 22:35:57 +0000 Subject: [PATCH] Bump the pip-backend-patch-minor group across 1 directory with 14 updates Bumps the pip-backend-patch-minor group with 14 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [asgiref](https://github.com/django/asgiref) | `3.8.1` | `3.11.1` | | [billiard](https://github.com/celery/billiard) | `4.2.1` | `4.2.4` | | [celery](https://github.com/celery/celery) | `5.5.3` | `5.6.3` | | [click](https://github.com/pallets/click) | `8.2.1` | `8.4.1` | | [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.4.0` | `4.9.0` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.16.0` | `3.17.1` | | [kombu](https://github.com/celery/kombu) | `5.5.4` | `5.6.2` | | [prompt-toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit) | `3.0.51` | `3.0.52` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.12` | | [redis](https://github.com/redis/redis-py) | `6.2.0` | `6.4.0` | | [tzdata](https://github.com/python/tzdata) | `2025.2` | `2025.3` | | [wcwidth](https://github.com/jquast/wcwidth) | `0.2.13` | `0.8.1` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` | | [idna](https://github.com/kjd/idna) | `3.15` | `3.18` | Updates `asgiref` from 3.8.1 to 3.11.1 - [Changelog](https://github.com/django/asgiref/blob/main/CHANGELOG.txt) - [Commits](https://github.com/django/asgiref/compare/3.8.1...3.11.1) Updates `billiard` from 4.2.1 to 4.2.4 - [Release notes](https://github.com/celery/billiard/releases) - [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt) - [Commits](https://github.com/celery/billiard/compare/v4.2.1...v4.2.4) Updates `celery` from 5.5.3 to 5.6.3 - [Release notes](https://github.com/celery/celery/releases) - [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst) - [Commits](https://github.com/celery/celery/compare/v5.5.3...v5.6.3) Updates `click` from 8.2.1 to 8.4.1 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](https://github.com/pallets/click/compare/8.2.1...8.4.1) Updates `django-cors-headers` from 4.4.0 to 4.9.0 - [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst) - [Commits](https://github.com/adamchainz/django-cors-headers/compare/4.4.0...4.9.0) Updates `djangorestframework` from 3.16.0 to 3.17.1 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](https://github.com/encode/django-rest-framework/compare/3.16.0...3.17.1) Updates `kombu` from 5.5.4 to 5.6.2 - [Release notes](https://github.com/celery/kombu/releases) - [Changelog](https://github.com/celery/kombu/blob/main/Changelog.rst) - [Commits](https://github.com/celery/kombu/compare/v5.5.4...v5.6.2) Updates `prompt-toolkit` from 3.0.51 to 3.0.52 - [Release notes](https://github.com/prompt-toolkit/python-prompt-toolkit/releases) - [Changelog](https://github.com/prompt-toolkit/python-prompt-toolkit/blob/main/CHANGELOG) - [Commits](https://github.com/prompt-toolkit/python-prompt-toolkit/compare/3.0.51...3.0.52) Updates `psycopg2-binary` from 2.9.10 to 2.9.12 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](https://github.com/psycopg/psycopg2/compare/2.9.10...2.9.12) Updates `redis` from 6.2.0 to 6.4.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](https://github.com/redis/redis-py/compare/v6.2.0...v6.4.0) Updates `tzdata` from 2025.2 to 2025.3 - [Release notes](https://github.com/python/tzdata/releases) - [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md) - [Commits](https://github.com/python/tzdata/compare/2025.2...2025.3) Updates `wcwidth` from 0.2.13 to 0.8.1 - [Release notes](https://github.com/jquast/wcwidth/releases) - [Commits](https://github.com/jquast/wcwidth/compare/0.2.13...0.8.1) Updates `pytest` from 9.0.3 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.1) Updates `idna` from 3.15 to 3.18 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18) --- updated-dependencies: - dependency-name: asgiref dependency-version: 3.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: billiard dependency-version: 4.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-backend-patch-minor - dependency-name: celery dependency-version: 5.6.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: click dependency-version: 8.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: django-cors-headers dependency-version: 4.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: djangorestframework dependency-version: 3.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: kombu dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: prompt-toolkit dependency-version: 3.0.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-backend-patch-minor - dependency-name: psycopg2-binary dependency-version: 2.9.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-backend-patch-minor - dependency-name: redis dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: tzdata dependency-version: '2025.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: wcwidth dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor - dependency-name: idna dependency-version: '3.18' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-backend-patch-minor ... Signed-off-by: dependabot[bot] --- backend/requirements.txt | 28 ++++++++++++++-------------- 1 file changed, 14 insertions(+), 14 deletions(-) diff --git a/backend/requirements.txt b/backend/requirements.txt index 17b26dc9..7d9bee97 100644 --- a/backend/requirements.txt +++ b/backend/requirements.txt @@ -1,29 +1,29 @@ amqp==5.3.1 -asgiref==3.8.1 -billiard==4.2.1 -celery==5.5.3 -click==8.2.1 +asgiref==3.11.1 +billiard==4.2.4 +celery==5.6.3 +click==8.4.1 click-didyoumean==0.3.1 click-plugins==1.1.1 click-repl==0.3.0 colorama==0.4.6 Django==5.2.15 -django-cors-headers==4.4.0 -djangorestframework==3.16.0 +django-cors-headers==4.9.0 +djangorestframework==3.17.1 djangorestframework_simplejwt==5.5.1 -kombu==5.5.4 +kombu==5.6.2 packaging==25.0 -prompt_toolkit==3.0.51 -psycopg2-binary==2.9.10 +prompt_toolkit==3.0.52 +psycopg2-binary==2.9.12 PyJWT==2.13.0 python-dateutil==2.9.0.post0 -redis==6.2.0 +redis==6.4.0 six==1.17.0 sqlparse==0.5.5 -tzdata==2025.2 +tzdata==2025.3 vine==5.1.0 -wcwidth==0.2.13 -pytest==9.0.3 +wcwidth==0.8.1 +pytest==9.1.1 pytest-django==4.12.0 pytest-cov==7.1.0 django-allauth==65.18.0 @@ -35,5 +35,5 @@ cryptography==49.0.0 # Transitive deps pinned to patched versions to clear osv-scanner findings: # idna <- requests (PYSEC-2026-215 / GHSA-65pc-fj4g-8rjx) # pygments <- pytest (PYSEC-2023-117, GHSA-5239-wwwm-4pmq) -idna==3.15 +idna==3.18 pygments==2.20.0