Skip to content

Bump the python-dependencies group across 1 directory with 21 updates - #103

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-81ee730643
Closed

Bump the python-dependencies group across 1 directory with 21 updates#103
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-81ee730643

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the python-dependencies group with 21 updates in the / directory:

Package From To
boto3 1.43.40 1.43.46
botocore 1.43.40 1.43.46
cbor2 5.9.0 6.1.3
coverage 7.15.0 7.15.1
django-unfold 0.99.1 0.100.0
django 6.0.6 6.0.7
djlint 1.40.2 1.40.6
langchain-core 1.4.8 1.4.9
langgraph 1.2.7 1.2.9
langsmith 0.9.7 0.10.2
librt 0.12.0 0.13.0
pyasn1 0.6.3 0.6.4
pylint-django 2.7.0 2.8.0
pyopenssl 26.2.0 26.3.0
ruff 0.15.20 0.15.21
s3transfer 0.19.0 0.19.1
service-identity 24.2.0 26.1.0
types-psycopg2 2.9.21.20260518 2.9.21.20260712
types-requests 2.33.0.20260518 2.33.0.20260712
uuid-utils 0.16.2 0.17.0
xxhash 3.8.0 3.8.1

Updates boto3 from 1.43.40 to 1.43.46

Commits
  • c7888d6 Merge branch 'release-1.43.46'
  • 1479621 Bumping version to 1.43.46
  • 54abdb4 Add changelog entries from botocore
  • 75de637 Merge branch 'release-1.43.45'
  • d3449aa Merge branch 'release-1.43.45' into develop
  • 497253d Bumping version to 1.43.45
  • 5e9768e Add changelog entries from botocore
  • 19a915b Merge branch 'release-1.43.44'
  • 1b69a06 Merge branch 'release-1.43.44' into develop
  • b0e3f6a Bumping version to 1.43.44
  • Additional commits viewable in compare view

Updates botocore from 1.43.40 to 1.43.46

Commits
  • 4249fcd Merge branch 'release-1.43.46'
  • 089203a Bumping version to 1.43.46
  • 601925e Update endpoints model
  • 7831fa1 Update to latest models
  • af6622c Merge branch 'release-1.43.45'
  • d65eb2a Merge branch 'release-1.43.45' into develop
  • 98cb2a8 Bumping version to 1.43.45
  • 2788423 Update to latest models
  • c945566 Merge branch 'release-1.43.44'
  • da12f11 Merge branch 'release-1.43.44' into develop
  • Additional commits viewable in compare view

Updates cbor2 from 5.9.0 to 6.1.3

Release notes

Sourced from cbor2's releases.

6.1.3

  • Fixed the decoder registering 6-byte strings in the string reference namespace at indices 65536–4294967295 where the encoder does not, desynchronising the namespace and resolving later string references to the wrong value (#313; PR by @​sahvx655-wq)
  • Fixed the IPv4/IPv6 network decoders (tags 52 and 54) silently truncating an address byte string that is longer than the address size instead of rejecting it as malformed (#309; PR by @​sahvx655-wq)
  • Fixed quadratic decoding time for indefinite-length and large definite-length byte and text strings, caused by concatenating each chunk onto the accumulated result with + instead of building the result once (#316; PR by @​sahvx655-wq)
  • Fixed datetime_as_timestamp encoding whole-second datetimes before 1970 or after 2106 as floats instead of integers, because the timestamp was narrowed through an unsigned 32-bit integer (#317; PR by @​sahvx655-wq)
  • Fixed the encoder measuring text strings by code point count instead of UTF-8 byte length when deciding whether to add them to the string reference namespace, desynchronising it from the decoder (which counts bytes) and corrupting later string references for non-ASCII strings (#314; PR by @​sahvx655-wq)
  • Fixed the decoder rejecting scoped IPv6 addresses (tag 54) with a CBORDecodeError reading invalid types in input array; the encoder emits them as [address, null, zone id] but the decoder only handled the network and interface array forms, so a scoped ~ipaddress.IPv6Address could not be decoded back (#324; PR by @​sahvx655-wq)

6.1.2

  • Fixed incorrect tracking of string references for definite-length text strings of length greater than 65536 (#308; PR by @​sahvx655-wq)
  • Fixed cbor2.load() crash caused by incorrect handling of internal read buffer extension during stream deserialization. (#307; PR by @​noderyos)

6.1.1

  • Fixed cbor2.load() returning corrupted data for payloads exceeding 4096 bytes (#304)

6.1.0

  • Added the allow_duplicate_keys parameter to CBORDecoder, load and loads (default: True). When set to False, a CBORDecodeError is raised upon encountering a duplicate key within the same map. (#283)
  • Added support for decoding from any object supporting the buffer API (e.g. memoryview or bytearray) in addition to bytes (#297)
  • Fixed compatibility issues with 32-bit systems (#300)

6.0.1

  • Fixed an error in the mutability logic during decoding, leading to values being decoded as immutable in unexpected places (#295)

6.0.0

  • No changes since v6.0.0rc1

6.0.0rc1

  • MAJOR REWRITE: The Python and C implementations of the encoder and decoder were replaced with a single, Rust-based implementation in the interest of maintainability.

    Here are some of the highlights:

    • Improved memory safety (100% safe-mode Rust)
    • Complete elimination of reference leaks
    • Support for free-threading and subinterpreters
    • Substantially improved performance
    • Improved decoder error handling where any non-base exception gets wrapped in a CBORDecodeError
    • Iterative, rather than recursive decoding, meaning the container nesting depth is limited only by the available memory, rather than the C stack size

  • BACKWARD INCOMPATIBLE Changed the signature of the tag_hook decoder callables to accept (CBORTag, immutable as arguments instead of CBORDecoder, CBORTag)

  • BACKWARD INCOMPATIBLE Changed the signature of the object_hook decoder callables to accept (Mapping[Any, Any], bool) instead of (CBORDecoder, dict[Any, Any])

  • BACKWARD INCOMPATIBLE Removed the break_marker singleton as no longer necessary

  • BACKWARD INCOMPATIBLE Removed the CBORDecodeValueError exception, instead chaining ValueError or TypeError to a CBORDecodeError

  • BACKWARD INCOMPATIBLE Changed the decoding of semantic tag 261 to yield an IPv4Interface or IPv6Interface if the address contains host bits

  • BACKWARD INCOMPATIBLE Removed the individual decoding functions from the API as they were mistakenly called directly by users. Please open an issue if you need them back.

... (truncated)

Commits
  • 5820bd4 Bumped up the version
  • 8bb0466 Bump the github-actions group with 2 updates (#323)
  • 00e3dea Decode scoped IPv6 addresses instead of rejecting them (#324)
  • aeff00b Measure text strings by byte length in maybe_stringref (#314)
  • 1c827f1 Encode whole-second datetime timestamps as integers across full range (#317)
  • 791172c Worked around coveralls not working with Homebrew 6
  • 32f66ee [pre-commit.ci] pre-commit autoupdate (#322)
  • 1d5054e Switched to quarterly pre-commit updates
  • c348bbf [pre-commit.ci] pre-commit autoupdate (#319)
  • 6625bc1 Optimized bytestring and text string decoding (#316)
  • Additional commits viewable in compare view

Updates coverage from 7.15.0 to 7.15.1

Changelog

Sourced from coverage's changelog.

Version 7.15.1 — 2026-07-12

  • Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare <pull 2224_>_.

  • A number of performance improvements thanks to Paul Kehrer, in pull requests 2213 <pull 2213_>, 2214 <pull 2214_>, 2215 <pull 2215_>, 2216 <pull 2216_>, 2218 <pull 2218_>, 2220 <pull 2220_>, and 2221 <pull 2221_>_.

.. _pull 2213: coveragepy/coveragepy#2213 .. _pull 2214: coveragepy/coveragepy#2214 .. _pull 2215: coveragepy/coveragepy#2215 .. _pull 2216: coveragepy/coveragepy#2216 .. _pull 2218: coveragepy/coveragepy#2218 .. _pull 2220: coveragepy/coveragepy#2220 .. _pull 2221: coveragepy/coveragepy#2221 .. _pull 2224: coveragepy/coveragepy#2224

.. _changes_7-15-0:

Commits
  • da63bed docs: sample HTML for 7.15.1
  • bc35e64 docs: prep for 7.15.1
  • 182b010 perf: resolve sysmon branch events lazily, one pair at a time (#2221)
  • ee271ee perf: compute multiline maps cheaply in the sysmon core (#2220)
  • 1441b96 chore: bump the action-dependencies group with 6 updates (#2225)
  • dd80635 fix: escape context labels in html report inline script block (#2224)
  • 7c3ae71 docs: normalize earlier history order (#2222)
  • 088dc60 chore: make upgrade
  • f7e15a8 test: upload .json and .xml coverage reports
  • 3b62112 docs: thanks, Paul Kehrer
  • Additional commits viewable in compare view

Updates django-unfold from 0.99.1 to 0.100.0

Release notes

Sourced from django-unfold's releases.

0.100.0

v0.100.0 (2026-07-06)

This release is published under the MIT License.

Bug Fixes

Documentation

Features

Detailed Changes: 0.99.1...0.100.0

Changelog

Sourced from django-unfold's changelog.

v0.100.0 (2026-07-06)

Bug Fixes

Documentation

Features

Commits

Updates django from 6.0.6 to 6.0.7

Commits
  • e2a4246 [6.0.x] Bumped version for 6.0.7 release.
  • a5de13f [6.0.x] Fixed CVE-2026-53878 -- Prevented newlines from being accepted in Dom...
  • 38dfbd2 [6.0.x] Fixed CVE-2026-53877 -- Prevented heap buffer over-read when creating...
  • 64f9a2b [6.0.x] Fixed CVE-2026-48588 -- Prevented caching of responses that set cooki...
  • c26957a [6.0.x] Fixed flatpages synopsis in docs.
  • 0b60f44 [6.0.x] Added FILE_UPLOAD_DIRECTORY_PERMISSIONS to docs settings index.
  • d928e30 [6.0.x] Fixed #37172 -- Linked to upload handlers section in FILE_UPLOAD_* se...
  • e18935c [6.0.x] Fixed #37158 -- Reordered the contribution checklist sections.
  • 490eb9c [6.0.x] Fixed document referenced in multiple toctrees warning in docs/intern...
  • 748a9b5 [6.0.x] Fixed duplicate target name in docs/internals/howto-release-django.txt.
  • Additional commits viewable in compare view

Updates djlint from 1.40.2 to 1.40.6

Release notes

Sourced from djlint's releases.

v1.40.6

Performance and refactoring

  • Replace repeated HTML regex scans with tokenization.

v1.40.4

Fix

  • Keep Jinja comments and set tags idempotently indented with preserve_leading_space.
  • Avoid false H026 reports when id appears inside quoted attribute values.
  • Avoid false D018/J018 reports for action parameters inside quoted template URL helper attributes.
  • Report H007 when leading template tags appear before an HTML tag without a preceding doctype.
  • Keep blank_line_after_tag from inserting blank lines inside multiline HTML attribute values, preserving idempotent reformatting for embedded template tags.
  • Report T003 when {% endblock name %} does not match its opening {% block name %}.
  • Report H025 when list tags are nested inside <p> tags.

v1.40.3

Fix

  • Preserve djlint:off blocks inside tag attributes and avoid false H025 orphan reports when a matching tag crosses a djlint:off block boundary.
  • Keep repeated single-line Django {% if %} blocks idempotent after one reformat pass.
Changelog

Sourced from djlint's changelog.

[1.40.6] - 2026-07-13

Performance and refactoring

  • Replace repeated HTML regex scans with tokenization.

[1.40.5] - 2026-07-12

Fix

  • Avoid false H037 reports when attribute names appear inside quoted values or other attribute names.
  • Preserve template expressions in HTML attribute names when wrapping attributes.
  • Preserve indentation after void tags containing markup in quoted attributes.

[1.40.4] - 2026-07-07

Fix

  • Keep Jinja comments and set tags idempotently indented with preserve_leading_space.
  • Avoid false H026 reports when id appears inside quoted attribute values.
  • Avoid false D018/J018 reports for action parameters inside quoted template URL helper attributes.
  • Report H007 when leading template tags appear before an HTML tag without a preceding doctype.
  • Keep blank_line_after_tag from inserting blank lines inside multiline HTML attribute values, preserving idempotent reformatting for embedded template tags.
  • Report T003 when {% endblock name %} does not match its opening {% block name %}.
  • Report H025 when list tags are nested inside <p> tags.

[1.40.3] - 2026-07-04

Fix

  • Preserve djlint:off blocks inside tag attributes and avoid false H025 orphan reports when a matching tag crosses a djlint:off block boundary.
  • Keep repeated single-line Django {% if %} blocks idempotent after one reformat pass.
Commits
  • 7c313f5 fix ci
  • 8d3ff0b fix ci
  • 0ce3a19 v1.40.6
  • b7a2cce refactor: add typing.Final to constants
  • 6f1a93a perf: replace repeated HTML regex scans with tokenization
  • 00b40c1 chore(deps): update pre-commit hook charliermarsh/ruff-pre-commit to v0.15.21...
  • 465a097 chore(deps): update dependency ruff to v0.15.21 (#2220)
  • 187935b chore(deps): update dependency prettier to v3.9.5 (#2219)
  • e863699 chore(deps): lock file maintenance (#2218)
  • 3d315c5 chore(deps): lock file maintenance (#2217)
  • Additional commits viewable in compare view

Updates langchain-core from 1.4.8 to 1.4.9

Release notes

Sourced from langchain-core's releases.

langchain-core==1.4.9

Changes since langchain-core==1.4.8

release(core): 1.4.9 (#38728) fix(core): improve langsmith loader error messages (#35648) fix(core): output parser bugs in xml.py and pydantic.py (#35641) style(core): fix some ruff preview rules (#38656) fix(core): avoid dict shadowing in language models (#38480) fix(core): _parse_google_docstring mishandling continuation lines with colons (#35680) fix(core): add messages to bare raise ValueError calls (#38158) fix(core): use asyncio.get_running_loop() in async contexts (#38157) chore: bump langsmith from 0.8.0 to 0.8.18 in /libs/core (#38319) chore: bump jupyterlab from 4.5.7 to 4.5.9 in /libs/core (#38326) chore: bump vcrpy from 8.1.1 to 8.2.1 in /libs/core (#38327)

Commits
  • 1c3a418 release(core): 1.4.9 (#38728)
  • 1619f3d chore(standard-tests): fix some typings detected by ty (#38707)
  • a6f0369 chore(qdrant): bump fastembed to latest (#38726)
  • fca0a97 fix(langchain): propagate interrupts through ToolRetryMiddleware (#38722)
  • 874bada chore(model-profiles): refresh model profile data (#38712)
  • 6e51a7e chore(model-profiles): refresh model profile data (#38699)
  • 2d8100c fix(langchain-classic): fix Chain.save() regression from dict-to-`model_dum...
  • b08c391 test(openai): skip Codex VCR tests before cassette setup (#38690)
  • 83386b5 chore(model-profiles): refresh model profile data (#38689)
  • 701cc0e test(deps): Include Python 3.14 in integration test matrix (#34993)
  • Additional commits viewable in compare view

Updates langgraph from 1.2.7 to 1.2.9

Release notes

Sourced from langgraph's releases.

langgraph==1.2.9

Changes since 1.2.8

  • release(langgraph): 1.2.9 (#8316)
  • fix: updateState metadata/counters for delta channel (#8315)

langgraph==1.2.8

Changes since 1.2.7

  • release(langgraph): 1.2.8 (#8292)
  • fix: delta channel bug with updateState on fresh thread will force snapshot instead of stub checkpoint (#8290)
  • chore(deps): bump the minor-and-patch group in /libs/langgraph with 8 updates (#8255)
  • chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/langgraph in the major group (#8256)
  • chore(deps): bump the minor-and-patch group in /libs/sdk-py with 9 updates (#8252)
Commits
  • 95af6a0 release(langgraph): 1.2.9 (#8316)
  • 7d0b33c fix: updateState metadata/counters for delta channel (#8315)
  • 23652c5 release(langgraph): 1.2.8 (#8292)
  • b45d96b fix: delta channel bug with updateState on fresh thread will force snapshot i...
  • be999ad chore(deps): bump the minor-and-patch group in /libs/cli with 5 updates (#8251)
  • 4df294f chore(deps): bump the minor-and-patch group in /libs/langgraph with 8 updates...
  • 84e065a chore(deps): bump websockets from 15.0.1 to 16.0 in /libs/langgraph in the ma...
  • 64a3e68 chore(deps): bump the minor-and-patch group in /libs/cli/js-examples with 6 u...
  • 7989e59 chore(deps): bump the minor-and-patch group in /libs/sdk-py with 9 updates (#...
  • 2390d6f chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 in the minor-and-p...
  • Additional commits viewable in compare view

Updates langsmith from 0.9.7 to 0.10.2

Release notes

Sourced from langsmith's releases.

v0.10.2

What's Changed

New Contributors

Full Changelog: langchain-ai/langsmith-sdk@v0.10.1...v0.10.2

v0.10.1

What's Changed

New Contributors

Full Changelog: langchain-ai/langsmith-sdk@v0.10.0...v0.10.1

v0.10.0

What's Changed

New Contributors

Full Changelog: langchain-ai/langsmith-sdk@v0.9.8...v0.10.0

v0.9.8

... (truncated)

Commits
  • 687fc8d release(python): bump py version to 0.10.2 (#3189)
  • 08cbc91 feat(py): re-export OpenAPI client exceptions from langsmith package (#3188)
  • d309be5 refactor(livekit + pipecat): Refactor for clarity (#3187)
  • 2e61f54 feat: add SmithDB by-key path to add_runs_to_annotation_queue (runs= param) [...
  • fab828a refactor(voice): move span attribute setters onto TranslatedSpan (#3179)
  • 2f7709c release(js): 0.8.1 (#3185)
  • 6388e48 release(py): 0.10.1 (#3184)
  • de74fb8 feat(js): expose openapi client error classes (#3181)
  • 6c0729a Fix URL Path Injection via Unencoded Resource Names in Python Sandbox Client ...
  • 996073e chore: bump _MIN_BACKEND_VERSION to 0.16.12rc1 (#3178)
  • Additional commits viewable in compare view

Updates librt from 0.12.0 to 0.13.0

Commits

Updates pyasn1 from 0.6.3 to 0.6.4

Release notes

Sourced from pyasn1's releases.

Release 0.6.4

This is a security release.

  • CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders. A small crafted substrate encoding many arcs could consume excessive CPU.
  • CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag IDs to 20 octets (140 bits). Unbounded tag IDs allowed a crafted substrate to consume excessive CPU and memory.
  • CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and CPU consumption in Real.__float__() for values with large base-10 exponents.
  • Pinned PyPI publish GitHub Action to an immutable commit.

All changes are noted in the CHANGELOG.

Changelog

Sourced from pyasn1's changelog.

Revision 0.6.4, released 08-07-2026

  • CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders. A small crafted substrate encoding many arcs could consume excessive CPU. Arcs are now accumulated in linear time; decoded values are unchanged (thanks for reporting, tynus2)
  • CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag IDs to 20 octets (140 bits), matching the OID arc limit introduced in 0.6.2. Unbounded tag IDs allowed a crafted substrate to consume excessive CPU and memory; longer tag IDs are now rejected with PyAsn1Error. Also fixed Tag and TagSet repr() failing on huge tag (thanks for reporting, mikeappsec) IDs due to the integer-to-string conversion limit (Python 3.11+)
  • CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and CPU consumption in Real.float() for values with large base-10 exponents. Conversion no longer materializes huge intermediate integers; values too large to represent as a Python float raise OverflowError promptly, and prettyPrint() renders them as '' as before. Also fixed base-10 mantissa normalization to use exact integer arithmetic; mantissas larger than 2**53 could previously lose precision through float division (thanks for reporting, gvozdila)
  • Pinned PyPI publish GitHub Action to an immutable commit [pr #113](pyasn1/pyasn1#113)
Commits

Updates pylint-django from 2.7.0 to 2.8.0

Release notes

Sourced from pylint-django's releases.

Version 2.8.0 (11 Jul 2026)

New checks

  • Added format-html-interpolation (W5150) and mark-safe-interpolation (W5151) checks which warn when the format string of format_html() / format_html_join() or the argument of mark_safe() is built with an f-string, str.format(), %-formatting or + concatenation. Such values bypass Django's HTML escaping; pass them as arguments instead.

Other

  • CI now tests against Django 6.0
Changelog

Sourced from pylint-django's changelog.

Version 2.8.0

New checks


- Added ``format-html-interpolation`` (W5150) and ``mark-safe-interpolation`` (W5151) checks
  which warn when the format string of ``format_html()`` / ``format_html_join()`` or the
  argument of ``mark_safe()`` is built with an f-string, ``str.format()``, ``%``-formatting or
  ``+`` concatenation. Such values bypass Django's HTML escaping; pass them as arguments instead.

Other



- CI now tests against Django 6.0
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>

<ul>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/9cd335fa7cf85b44ad66f39876baaad11368f516&quot;&gt;&lt;code&gt;9cd335f&lt;/code&gt;&lt;/a> Updating release notes</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/39dbb5c3d3ca8eaac686b809d33f082e99222724&quot;&gt;&lt;code&gt;39dbb5c&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/20ecf099f5d6e861ec5317740c56b2344e599265&quot;&gt;&lt;code&gt;20ecf09&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/bf641aaff84ce2cbc5ecd1a52885734fd5002ab4&quot;&gt;&lt;code&gt;bf641aa&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/8b7953df366ace9edaad0b4b97821a89583c07b8&quot;&gt;&lt;code&gt;8b7953d&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/3fdb2c01478650f9fccdcd1a3ebe7e36d15c5573&quot;&gt;&lt;code&gt;3fdb2c0&lt;/code&gt;&lt;/a> [pre-commit.ci] pre-commit autoupdate</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/f01056452f5998c1fcd5ca0c81425b0fcf5127f0&quot;&gt;&lt;code&gt;f010564&lt;/code&gt;&lt;/a> Added Django references</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/75c59ff30b8e9351d0a196d30c5e0148ec0e33b4&quot;&gt;&lt;code&gt;75c59ff&lt;/code&gt;&lt;/a> Added format-html-interpolation and mark-safe-interpolation checkers</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/4d1ff7b570bcdde68787b0a646415cdd8fa1f84d&quot;&gt;&lt;code&gt;4d1ff7b&lt;/code&gt;&lt;/a> [pre-commit.ci] auto fixes from pre-commit.com hooks</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/ece47862d9a87a1e111dd37b3d65518abd6f46a2&quot;&gt;&lt;code&gt;ece4786&lt;/code&gt;&lt;/a> [pre-commit.ci] pre-commit autoupdate</li>

<li>See full diff in <a href="https://github.com/pylint-dev/pylint-django/compare/v2.7.0...v2.8.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />


Updates pyopenssl from 26.2.0 to 26.3.0



Changelog

Sourced from pyopenssl's changelog.




26.3.0 (2026-06-12)


Backward-incompatible changes:
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^


    

  • Dropped support for Python 3.8.
    • 

  • The minimum cryptography version is now 49.0.0.
    • 

  • Removed deprecated OpenSSL.crypto.X509Req, OpenSSL.crypto.dump_certificate_request, and OpenSSL.crypto.load_certificate_request. cryptography.x509 should be used instead.
    • 

  • OpenSSL.SSL.Connection.set_session now raises ValueError if the Session was obtained from a Connection that was using a different Context than this one. OpenSSL requires (but does not verify) that sessions only be re-used with a compatible SSL_CTX, so this contract is now enforced.
    • 



Deprecations:
^^^^^^^^^^^^^


    

  • Deprecated OpenSSL.crypto.PKey.generate_key and OpenSSL.crypto.PKey.check. The key generation and loading APIs in cryptography should be used instead.
    • 

  • Deprecated OpenSSL.crypto.dump_privatekey. The serialization APIs on cryptography private key types should be used instead.
    • 

  • Deprecated all the mutable APIs on OpenSSL.crypto.X509: set_version, set_pubkey, sign, set_serial_number, gmtime_adj_notAfter, gmtime_adj_notBefore, set_notBefore, set_notAfter, set_issuer, and set_subject. cryptography.x509.CertificateBuilder should be used instead.
    • 

  • Deprecated OpenSSL.SSL.Context.set_passwd_cb. Users should decrypt and load their private keys themselves, with cryptography's key loading APIs, and then call OpenSSL.SSL.Context.use_privatekey.
    • 

  • Deprecated OpenSSL.crypto.X509Name, as well as the remaining APIs that consume or return it: OpenSSL.crypto.X509.get_issuer, OpenSSL.crypto.X509.get_subject, and OpenSSL.SSL.Context.set_client_ca_list. The APIs in cryptography.x509 should be used instead.
    • 



Changes:
^^^^^^^^


    

  • OpenSSL.SSL.Connection.get_client_ca_list now takes an as_cryptography keyword-argument. When True is passed then cryptography.x509.Name are returned, instead of OpenSSL.crypto.X509Name. In the future, passing False (the default) will be deprecated.
    • 








Commits

    

  • a34aa1d Prepare 26.3.0 release (#1515)
    • 

  • 24db880 Deprecate X509Name and the remaining APIs that consume or return it (#1514)
    • 

  • 1dc08be Add as_cryptography parameter to Connection.get_client_ca_list (#1508)
    • 

  • 55653a5 Require cryptography 49, drop Python 3.8 (#1513)
    • 

  • 9bad760 Remove deprecated CSR functionality (#1507)
    • 

  • 98ca874 Enforce that Session is only re-used with the Context it came from (#1512)
    • 

  • cbcb1da Deprecate Context.set_passwd_cb (#1511)
    •

@dependabot
Bump the python-dependencies group across 1 directory with 21 updates
d57bd7e 
Bumps the python-dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.40` | `1.43.46` |
| [botocore](https://github.com/boto/botocore) | `1.43.40` | `1.43.46` |
| [cbor2](https://github.com/agronholm/cbor2) | `5.9.0` | `6.1.3` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.15.0` | `7.15.1` |
| [django-unfold](https://github.com/unfoldadmin/django-unfold) | `0.99.1` | `0.100.0` |
| [django](https://github.com/django/django) | `6.0.6` | `6.0.7` |
| [djlint](https://github.com/djlint/djLint) | `1.40.2` | `1.40.6` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `1.4.8` | `1.4.9` |
| [langgraph](https://github.com/langchain-ai/langgraph) | `1.2.7` | `1.2.9` |
| [langsmith](https://github.com/langchain-ai/langsmith-sdk) | `0.9.7` | `0.10.2` |
| [librt](https://github.com/mypyc/librt) | `0.12.0` | `0.13.0` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.3` | `0.6.4` |
| [pylint-django](https://github.com/pylint-dev/pylint-django) | `2.7.0` | `2.8.0` |
| [pyopenssl](https://github.com/pyca/pyopenssl) | `26.2.0` | `26.3.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.15.21` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.19.0` | `0.19.1` |
| [service-identity](https://github.com/pyca/service-identity) | `24.2.0` | `26.1.0` |
| [types-psycopg2](https://github.com/python/typeshed) | `2.9.21.20260518` | `2.9.21.20260712` |
| [types-requests](https://github.com/python/typeshed) | `2.33.0.20260518` | `2.33.0.20260712` |
| [uuid-utils](https://github.com/aminalaee/uuid-utils) | `0.16.2` | `0.17.0` |
| [xxhash](https://github.com/ifduyue/python-xxhash) | `3.8.0` | `3.8.1` |



Updates `boto3` from 1.43.40 to 1.43.46
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.40...1.43.46)

Updates `botocore` from 1.43.40 to 1.43.46
- [Commits](boto/botocore@1.43.40...1.43.46)

Updates `cbor2` from 5.9.0 to 6.1.3
- [Release notes](https://github.com/agronholm/cbor2/releases)
- [Commits](agronholm/cbor2@5.9.0...6.1.3)

Updates `coverage` from 7.15.0 to 7.15.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.15.0...7.15.1)

Updates `django-unfold` from 0.99.1 to 0.100.0
- [Release notes](https://github.com/unfoldadmin/django-unfold/releases)
- [Changelog](https://github.com/unfoldadmin/django-unfold/blob/main/CHANGELOG.md)
- [Commits](unfoldadmin/django-unfold@0.99.1...0.100.0)

Updates `django` from 6.0.6 to 6.0.7
- [Commits](django/django@6.0.6...6.0.7)

Updates `djlint` from 1.40.2 to 1.40.6
- [Release notes](https://github.com/djlint/djLint/releases)
- [Changelog](https://github.com/djlint/djLint/blob/master/CHANGELOG.md)
- [Commits](djlint/djLint@v1.40.2...v1.40.6)

Updates `langchain-core` from 1.4.8 to 1.4.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==1.4.8...langchain-core==1.4.9)

Updates `langgraph` from 1.2.7 to 1.2.9
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@1.2.7...1.2.9)

Updates `langsmith` from 0.9.7 to 0.10.2
- [Release notes](https://github.com/langchain-ai/langsmith-sdk/releases)
- [Commits](langchain-ai/langsmith-sdk@v0.9.7...v0.10.2)

Updates `librt` from 0.12.0 to 0.13.0
- [Commits](mypyc/librt@v0.12.0...v0.13.0)

Updates `pyasn1` from 0.6.3 to 0.6.4
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.3...v0.6.4)

Updates `pylint-django` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/pylint-dev/pylint-django/releases)
- [Changelog](https://github.com/pylint-dev/pylint-django/blob/master/CHANGELOG.rst)
- [Commits](pylint-dev/pylint-django@v2.7.0...v2.8.0)

Updates `pyopenssl` from 26.2.0 to 26.3.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@26.2.0...26.3.0)

Updates `ruff` from 0.15.20 to 0.15.21
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.15.21)

Updates `s3transfer` from 0.19.0 to 0.19.1
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.19.0...0.19.1)

Updates `service-identity` from 24.2.0 to 26.1.0
- [Release notes](https://github.com/pyca/service-identity/releases)
- [Changelog](https://github.com/pyca/service-identity/blob/main/CHANGELOG.md)
- [Commits](pyca/service-identity@24.2.0...26.1.0)

Updates `types-psycopg2` from 2.9.21.20260518 to 2.9.21.20260712
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-requests` from 2.33.0.20260518 to 2.33.0.20260712
- [Commits](https://github.com/python/typeshed/commits)

Updates `uuid-utils` from 0.16.2 to 0.17.0
- [Release notes](https://github.com/aminalaee/uuid-utils/releases)
- [Commits](aminalaee/uuid-utils@0.16.2...0.17.0)

Updates `xxhash` from 3.8.0 to 3.8.1
- [Release notes](https://github.com/ifduyue/python-xxhash/releases)
- [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst)
- [Commits](ifduyue/python-xxhash@v3.8.0...v3.8.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: botocore
  dependency-version: 1.43.46
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: cbor2
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: coverage
  dependency-version: 7.15.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: django-unfold
  dependency-version: 0.100.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: django
  dependency-version: 6.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: djlint
  dependency-version: 1.40.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langchain-core
  dependency-version: 1.4.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langgraph
  dependency-version: 1.2.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: langsmith
  dependency-version: 0.10.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: librt
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyasn1
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pylint-django
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pyopenssl
  dependency-version: 26.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.15.21
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: s3transfer
  dependency-version: 0.19.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: service-identity
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: types-psycopg2
  dependency-version: 2.9.21.20260712
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: types-requests
  dependency-version: 2.33.0.20260712
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: uuid-utils
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: xxhash
  dependency-version: 3.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 13, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 20, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/python-dependencies-81ee730643 branch July 20, 2026 17:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants