Skip to content

chore(deps-dev): bump the python group with 7 updates - #3339

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-bd05e189bc
Open

chore(deps-dev): bump the python group with 7 updates#3339
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-bd05e189bc

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 17, 2026

Copy link
Copy Markdown
Contributor

Bumps the python group with 7 updates:

Package From To
ruff 0.16.6 0.16.7
pygit2 1.20.0 1.20.1
djangorestframework 3.18.0 3.18.1
django-dbbackup 5.3.0 5.3.1
sentry-sdk 2.68.1 2.69.1
time-machine 3.5.0 3.5.1
ansible-core 2.21.3 2.21.4

Updates ruff from 0.16.6 to 0.16.7

Release notes

Sourced from ruff's releases.

0.16.7

Release Notes

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.7

Released on 2026-09-10.

Preview features

  • [ruff] Add rule for default values on method receivers (RUF077) (#26700)
  • [ruff] Recognize re.prefixmatch (RUF039, RUF055) (#28311)

Bug fixes

  • Alternate nested quotes inside format spec interpolations (#28259)
  • [flake8-implicit-str-concat] Mark fix unsafe when it creates a docstring (ISC003) (#27981)
  • [flake8-tidy-imports] Skip fixes for multi-member imports (TID254) (#26584)
  • [pylint] Gate ImportCycleError on Python 3.15 (PLW0133) (#28310)

Rule changes

  • Correct D211 and D203 rule conflict diagnostic (#28444)
  • Recognize slice and frozendict generics (#28477)
  • Stop defining __cached__ for Python 3.15 (#28476)
  • [pyupgrade] Stop recommending removed typing.no_type_check_decorator (UP035) (#28475)

Performance

  • Reuse parser name lookups when interning (#28399)
  • Speed up inherited configuration resolution (#28299)

Documentation

  • Fix line-length path in --config example (#28392)
  • Remove the "Who’s Using Ruff?" list (#28455)

Other changes

  • Embed archive checksums in the shell installer (#28281)

Contributors

... (truncated)

Commits

Updates pygit2 from 1.20.0 to 1.20.1

Release notes

Sourced from pygit2's releases.

1.20.1 (2026-09-12)

  • Update wheels to libgit2 1.9.7

  • New exception hierarchy: AlreadyExistsError, InvalidSpecError, InvalidError, NotFoundError, AmbiguousError, AuthError, and CertificateError all inherit from GitError and the appropriate Python built-in exception (ValueError/KeyError) for backward compatibility #830

  • Fix DiffDelta.is_binary and DiffDelta.flags returning stale values for deltas obtained from Diff.deltas; flags are now loaded lazily #962 #1100

  • Fix repo.submodules.get() and name in repo.submodules raising AlreadyExistsError when a repository exists at the submodule path but was never registered as a submodule; they now return None and False respectively as documented #1487

  • Fix BlobIO cleanup deadlock on partial reads #1488 #1491

  • Fix leaks and crashes in error paths #1478 #1479 #1480 #1481

  • Fix custom ODB and refdb backend callbacks overwriting a pending Python exception (e.g. RuntimeError) with a stale libgit2 error message.

  • Documentation fixes #1490

  • CI (macOS): build architecture-specific OpenSSL/libssh2/libgit2 dependencies instead of universal binaries, producing smaller wheels.

Changelog

Sourced from pygit2's changelog.

1.20.1 (2026-09-12)

  • Update wheels to libgit2 1.9.7

  • New exception hierarchy: AlreadyExistsError, InvalidSpecError, InvalidError, NotFoundError, AmbiguousError, AuthError, and CertificateError all inherit from GitError and the appropriate Python built-in exception (ValueError/KeyError) for backward compatibility #830

  • Fix DiffDelta.is_binary and DiffDelta.flags returning stale values for deltas obtained from Diff.deltas; flags are now loaded lazily #962 #1100

  • Fix repo.submodules.get() and name in repo.submodules raising AlreadyExistsError when a repository exists at the submodule path but was never registered as a submodule; they now return None and False respectively as documented #1487

  • Fix BlobIO cleanup deadlock on partial reads #1488 #1491

  • Fix leaks and crashes in error paths #1478 #1479 #1480 #1481

  • Fix custom ODB and refdb backend callbacks overwriting a pending Python exception (e.g. RuntimeError) with a stale libgit2 error message.

  • Documentation fixes #1490

  • CI (macOS): build architecture-specific OpenSSL/libssh2/libgit2 dependencies instead of universal binaries, producing smaller wheels.

Commits
  • 5a8e1ff Release 1.20.1
  • 0620bbf Update changelog
  • c33d3e1 Skip non-unicode branchname and status path tests on macOS
  • 487817e chore(CI): bump actions/cache from 4 to 6 in the actions group
  • 2f9ec69 tests: Add BlobIO test for reading bigger-than-chunk files
  • be67bec Fix BlobIO cleanup deadlock
  • 4e0803c Clarify Commit.commit_time and commit_time_offset documentation
  • 87c2a39 Return None from submodules.get() for a nested plain repository
  • d532da7 Update wheels to libgit2 1.9.7
  • 1fa0dfe fix(build.sh): clear ci directory without removing mount point
  • Additional commits viewable in compare view

Updates djangorestframework from 3.18.0 to 3.18.1

Release notes

Sourced from djangorestframework's releases.

3.18.1

What's Changed

Bug fixes

Other changes

New Contributors

Full Changelog: encode/django-rest-framework@3.18.0...3.18.1

Commits
  • dd23495 Prepare release 3.18.1 (#10036)
  • cb1fb66 Install gettext in prepare-release
  • 858f1fc Reject non-finite values (nan, inf) in FloatField (#9998)
  • ea695cd Ensure translations are up to date when preparing release
  • 0406c6e Update pygments requirement from >=2.17,<2.21 to ==2.21.* in the optional gro...
  • 8c92e89 Expand deprecation classes and review deprecation policy (#10034)
  • 3157a6a Update pytest config to native TOML format from v9 (#10035)
  • 4f77428 Fixing issue #9484 (#10033)
  • f17d70f Fix int64 format detection for negative IntegerField minimums in Open API s...
  • 5668281 Add a compatibility setting for ListSerializer error formats (#10027)
  • Additional commits viewable in compare view

Updates django-dbbackup from 5.3.0 to 5.3.1

Release notes

Sourced from django-dbbackup's releases.

5.3.1

Changed

  • PostgreSQL HOST that are Unix/Windows socket paths will now be automatically URI-encoded to uphold pg_restore command line requirements.

Fixed

  • --verbosity parameter now correctly outputs log messages to the console instead of suppressing all output regardless of verbosity level.
Changelog

Sourced from django-dbbackup's changelog.

[5.3.1] - 2026-09-10

Changed

  • PostgreSQL HOST that are Unix/Windows socket paths will now be automatically URI-encoded to uphold pg_restore command line requirements.

Fixed

  • --verbosity parameter now correctly outputs log messages to the console instead of suppressing all output regardless of verbosity level.
Commits

Updates sentry-sdk from 2.68.1 to 2.69.1

Release notes

Sourced from sentry-sdk's releases.

2.69.1

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Mcp

Other

2.69.0

New Features ✨

Other

Bug Fixes 🐛

Mcp

Openai

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.69.1

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Mcp

Other

2.69.0

New Features ✨

Other

Bug Fixes 🐛

Mcp

Openai

... (truncated)

Commits
  • bd30ffb release: 2.69.1
  • f4d4af7 fix(aiohttp): Preserve SigV4-signed propagation headers
  • 5e2fcf1 feat(django): Add http.route attribute (#7428)
  • 611584b test(mcp): Parametrize tests on the streaming trace lifecycle (#7424)
  • bb53bac test(mcp): Remove vacuous tests (#7420)
  • 42aa532 test(cohere): Parametrize tests on the streaming trace lifecycle (#7419)
  • f1c098a Merge branch 'release/2.69.0'
  • f186a62 Update changelog
  • 131e307 test(openai-agents): Parametrize tests on stream_gen_ai_spans and the strea...
  • 54404e1 release: 2.69.0
  • Additional commits viewable in compare view

Updates time-machine from 3.5.0 to 3.5.1

Changelog

Sourced from time-machine's changelog.

3.5.1 (2026-09-08)

  • Only pass the compiler option -mno-omit-leaf-frame-pointer when the compiler supports it, checked with a tiny probe program. The option is unsupported outside of x86 and ARM64, so this fixes building from source on other architectures, like PowerPC, which failed since the option was added in version 3.3.0.

    PR [#692](https://github.com/adamchainz/time-machine/issues/692) <https://github.com/adamchainz/time-machine/pull/692>. Thanks to Colin Watson for pointing this out and linking to the workaround in Debian Bug [#1146407](https://github.com/adamchainz/time-machine/issues/1146407) <https://bugs.debian.org/1146407>.

  • Fix the mocked datetime.date.today() and datetime.datetime.today() to be exact for all supported dates, like datetime.datetime.now(). Previously, they went through a floating-point timestamp, which could round the microseconds, or even the whole day, for dates far in the future.

    PR [#690](https://github.com/adamchainz/time-machine/issues/690) <https://github.com/adamchainz/time-machine/pull/690>__.

  • Fix the class decorator to stop time travelling when tearDownClass() raises an exception, or when setUpClass() raises an exception not deriving from Exception, such as the skip outcome from pytest.skip(). Previously, time remained mocked for the rest of the process in these cases.

    PR [#678](https://github.com/adamchainz/time-machine/issues/678) <https://github.com/adamchainz/time-machine/pull/678>__.

  • Fix Traveller.move_to() to keep the current timezone mocked when the given destination is unsupported. Previously, the timezone was restored before the destination was checked, leaving it unmocked whilst still time travelling.

    PR [#679](https://github.com/adamchainz/time-machine/issues/679) <https://github.com/adamchainz/time-machine/pull/679>__.

  • Fix the time_machine pytest fixture to not try to stop a traveller that failed to start.

    PR [#680](https://github.com/adamchainz/time-machine/issues/680) <https://github.com/adamchainz/time-machine/pull/680>__.

  • Fix the mocked time.strftime() to raise TypeError when passed None as its second argument, like the unmocked function, rather than treating it as the current time.

    PR [#681](https://github.com/adamchainz/time-machine/issues/681) <https://github.com/adamchainz/time-machine/pull/681>__.

  • Fix the :ref:Migration CLI <migration-cli> to keep the rewritten imports on the same line when a freezegun import shares its line with other code, like if TYPE_CHECKING: from freezegun import freeze_time, FakeDate. Previously, the remaining from freezegun import FakeDate was moved to a new line, outside the block.

    PR [#682](https://github.com/adamchainz/time-machine/issues/682) <https://github.com/adamchainz/time-machine/pull/682>__.

  • Extend the :ref:Migration CLI <migration-cli> to migrate uses of FrozenDateTimeFactory in string annotations, like freezer: "FrozenDateTimeFactory". Previously, the import was removed whilst such annotations were left referring to it.

    PR [#683](https://github.com/adamchainz/time-machine/issues/683) <https://github.com/adamchainz/time-machine/pull/683>__.

  • Fix the :ref:Migration CLI <migration-cli> to not rename a freezer argument when the function already has a time_machine argument, which produced invalid syntax.

    PR [#684](https://github.com/adamchainz/time-machine/issues/684) <https://github.com/adamchainz/time-machine/pull/684>__.

  • Fix the :ref:Migration CLI <migration-cli> to report positions in the rewritten file, rather than the original. Previously, positions could be off when rewrites earlier in the file changed the number of lines, or the length of the same line.

    PR [#686](https://github.com/adamchainz/time-machine/issues/686) <https://github.com/adamchainz/time-machine/pull/686>__.

... (truncated)

Commits
  • 27b1d58 Version 3.5.1
  • 59ead38 Add PR links to changelog
  • 0e75f48 Make TimeMachineFixture always available (#675)
  • 657108b Standardize the import detection test code (#694)
  • 34c2a9a Adapt tests for platforms with 32-bit time_t (#693)
  • 42b65d0 Only use -mno-omit-leaf-frame-pointer where supported (#692)
  • 9446dcd Extend runtime fuzz tests (#691)
  • 64aec53 [pre-commit.ci] pre-commit autoupdate (#676)
  • effec2d Fix mocked datetime.today() rounding microseconds for far-future dates (#690)
  • 656a7a0 Extend Migration CLI fuzz grammar and properties (#689)
  • Additional commits viewable in compare view

Updates ansible-core from 2.21.3 to 2.21.4

Release notes

Sourced from ansible-core's releases.

v2.21.4

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

v2.21.4rc1

Changelog

See the full changelog for the changes included in this release.

Release Artifacts

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps-dev): bump the python group with 7 updates
4fda249 
Bumps the python group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.6` | `0.16.7` |
| [pygit2](https://github.com/libgit2/pygit2) | `1.20.0` | `1.20.1` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.18.0` | `3.18.1` |
| [django-dbbackup](https://github.com/Archmonger/django-dbbackup) | `5.3.0` | `5.3.1` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.68.1` | `2.69.1` |
| [time-machine](https://github.com/adamchainz/time-machine) | `3.5.0` | `3.5.1` |
| [ansible-core](https://github.com/ansible/ansible) | `2.21.3` | `2.21.4` |


Updates `ruff` from 0.16.6 to 0.16.7
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.6...0.16.7)

Updates `pygit2` from 1.20.0 to 1.20.1
- [Release notes](https://github.com/libgit2/pygit2/releases)
- [Changelog](https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md)
- [Commits](libgit2/pygit2@v1.20.0...v1.20.1)

Updates `djangorestframework` from 3.18.0 to 3.18.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.18.0...3.18.1)

Updates `django-dbbackup` from 5.3.0 to 5.3.1
- [Release notes](https://github.com/Archmonger/django-dbbackup/releases)
- [Changelog](https://github.com/Archmonger/django-dbbackup/blob/master/CHANGELOG.md)
- [Commits](Archmonger/django-dbbackup@5.3.0...5.3.1)

Updates `sentry-sdk` from 2.68.1 to 2.69.1
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.68.1...2.69.1)

Updates `time-machine` from 3.5.0 to 3.5.1
- [Changelog](https://github.com/adamchainz/time-machine/blob/main/docs/changelog.rst)
- [Commits](adamchainz/time-machine@3.5.0...3.5.1)

Updates `ansible-core` from 2.21.3 to 2.21.4
- [Release notes](https://github.com/ansible/ansible/releases)
- [Commits](ansible/ansible@v2.21.3...v2.21.4)

---
updated-dependencies:
- dependency-name: ruff
  dependency-version: 0.16.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: pygit2
  dependency-version: 1.20.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: djangorestframework
  dependency-version: 3.18.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: django-dbbackup
  dependency-version: 5.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: sentry-sdk
  dependency-version: 2.69.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: time-machine
  dependency-version: 3.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: ansible-core
  dependency-version: 2.21.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 17, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner September 17, 2026 05:57
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 17, 2026
@sonarqubecloud

sonarqubecloud Bot commented Sep 17, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants