chore: bump the python-dependencies group across 1 directory with 12 updates by dependabot[bot] · Pull Request #242 · electionscience/vote.electionscience.org

dependabot · 2026-06-22T07:15:57Z

Updates the requirements on django, pytz, django-environ, gunicorn, django-upgrade, whitenoise, django-structlog, django-allauth[socialaccount], djlint, sentry-sdk[django], pytest and django-import-export[all] to permit the latest version.
Updates django from 5.2.11 to 6.0.6

Commits

ee93f65 [6.0.x] Bumped version for 6.0.6 release.
1721035 [6.0.x] Fixed CVE-2026-48587 -- Ignored whitespace padding when checking Vary...
664652f [6.0.x] Fixed CVE-2026-35193 -- Varied on Authorization when caching non-publ...
b433025 [6.0.x] Fixed CVE-2026-8404 -- Used Cache-Control directives case-insensitive...
625a670 [6.0.x] Fixed CVE-2026-7666 -- Delayed setting SMTP connection until fully co...
c807d9c [6.0.x] Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace collisi...
98a75e3 [6.0.x] Included commit hash in checksum file when building artifacts for rel...
dd895d6 [6.0.x] Updated translations from Transifex.
49ca2db [6.0.x] Updated links to severity levels in release notes.
c9f32a2 [6.0.x] Added stub release notes and release date for 6.0.6 and 5.2.15.
Additional commits viewable in compare view

Updates pytz from 2025.2 to 2026.2

Commits

45957c5 Bump github actions/checkout to @v6
8e927c6 Bump version numbers to 2026.2 (IANA 2026b)
6f08ade IANA 2026b
edbfbdf Squashed 'tz/' changes from dd6be6d155..8be0d5483d
a148b03 Fix typo in README
b841195 fix typo
02509d0 Update test runners for new Pythons and github actions
43c1cb2 Bump version number to 2026.1.post1
6ee7e56 Try to access resource using importlib.resources
95fe75d Bump version number to 2026.1 (2026a)
Additional commits viewable in compare view

Updates django-environ from 0.13.0 to 0.14.0

Release notes

Sourced from django-environ's releases.

v0.14.0

django-environ 0.14.0 improves type annotations across Env and updates Env.read_env() to support caller-owned file-like objects without closing them.

This is the final django-environ release supporting Python 3.9.

Added

Type annotations and matching docstring information for Env methods.

A conditional typing_extensions dependency providing TypeAlias on Python 3.9.

Changed

Env.read_env() now accepts path-like and file-like objects without closing file-like objects supplied by the caller.

Fixed

Env.read_env() now raises an explicit error when it cannot determine the caller frame used to resolve the default .env path.

Full changelog: joke2k/django-environ@v0.13.0...v0.14.0

PyPI: https://pypi.org/project/django-environ/0.14.0/

Changelog

Sourced from django-environ's changelog.

v0.14.0_ - 18-June-2026

Added +++++

Added type annotations and matching docstring information to Env methods [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Added a Python 3.9 compatibility dependency on typing_extensions for TypeAlias [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Changed +++++++

Updated Env.read_env() to accept path-like and file-like objects without closing file-like objects supplied by the caller [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Fixed +++++

Added an explicit error when Env.read_env() cannot determine its caller frame while resolving the default .env path [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Commits

6e1b461 Merge pull request #635 from joke2k/release/0.14.0
b65f66e chore(release): prepare 0.14.0
39f980a Merge pull request #633 from joke2k/hotfix/0.14-apply-pr-600
020825c ci: allow release and hotfix PRs to target main
6c1dd5b fix(typing): support TypeAlias on Python 3.9
c0d7b2b Ensure Env.read_env supports any file-like object
c41ee54 Guard against an inability to read stack frames
64bfe4b Add type information to docstrings
791df95 Add type annotations to str and bool parameters of methods in Env
4370592 Merge branch 'develop' into main
See full diff in compare view

Updates gunicorn from 25.1.0 to 26.0.0

Release notes

Sourced from gunicorn's releases.

26.0.0

Breaking Changes

Eventlet worker removed: The eventlet worker class has been dropped. Migrate to gevent, gthread, or tornado.

New Features

ASGI Framework Compatibility Suite: New end-to-end compatibility test harness covering Starlette, FastAPI, Litestar, Quart, Sanic, and BlackSheep. Current grid passes 438/444 tests (98%).

ASGI Test Suite Expansion: 134 additional ASGI unit tests covering protocol semantics, lifespan, websockets, and chunked framing.

Security

HTTP/1.1 Request-Target Validation (RFC 9112 sections 3.2.3, 3.2.4):

Reject authority-form request-target outside CONNECT

Reject asterisk-form request-target outside OPTIONS

Reject relative-reference request-targets

Header Field Hardening (RFC 9110):

Reject control characters in header field-value (section 5.5)

Reject forbidden trailer field-names (section 6.5.1)

Reject Content-Length list form (RFC 9112 section 6.3)

Request Smuggling Hardening:

Tighten keepalive gate and scope finish_body byte cap

Keep _body_receiver alive across the keepalive smuggling gate so pipelined requests cannot re-enter a closed body

Address parser/protocol findings from a six-point WSGI/ASGI audit

PROXY Protocol (ASGI): Enforce proxy_allow_ips and tighten v1/v2 parsing in the ASGI callback parser.

Connection Draining: Drain the connection on close per RFC 9112 section 9.6 to prevent reset-on-close truncation.

Bug Fixes

Body Framing on HEAD/204/304:

Keep Content-Length on HEAD and 304 responses (#3621)

Drop body framing on HEAD/204/304 even when the framework set it

Warn once when an ASGI app emits a body for a no-body response

HTTP/2 ASGI:

Fix _handle_stream_ended to set _body_complete in the async HTTP/2 handler so request bodies finalize correctly on stream end

Add InvalidChunkExtension mapping and fast-parser support in ASGI tests (#3565)

HTTP/1.1 100-Continue: Stop adding Transfer-Encoding: chunked to 100-Continue interim responses.

WebSocket Close Handshake (RFC 6455):

Comply with the close handshake state machine

Close the transport after the close handshake completes

Fix binary send when the text key is None

Early Hints: Validate headers in the early_hints callback to match process_headers; pass only the header name to InvalidHeader (#3588).

ASGI Framework Fixes:

Fix ASGI disconnect handling for Django-style apps

Fix Litestar request handling (use raw ASGI receive for body/headers)

Fix Litestar HTTP endpoints for compatibility tests

Fix Quart headers endpoint to normalize keys to lowercase

Fix Quart WebSocket close test app (missing accept())

Fix duplicate Transfer-Encoding header for BlackSheep streaming

... (truncated)

Commits

5d819cf release: 26.0.0
b45c70d Merge pull request #3611 from zc-mattcen/docs-typo
99c8d48 Merge pull request #3623 from benoitc/chore/drop-eventlet-add-h2-uvloop-test-...
5a655af Merge pull request #3622 from benoitc/test/docker-port-and-ipv4-fixes
201df19 chore: remove eventlet worker; add h2 and uvloop to test deps
f4ac8e1 test: pass action name to dirty client and stabilize after TTOU spam
54d38af test: unblock docker fixtures on macOS hosts
68843c8 Merge pull request #3621 from benoitc/fix/asgi-preserve-content-length-on-hea...
31f2618 Merge pull request #3620 from benoitc/fix/asgi-proxy-protocol-trust-and-parsing
41ec752 fix: keep Content-Length on HEAD and 304 responses
Additional commits viewable in compare view

Updates django-upgrade from 1.29.1 to 1.30.0

Changelog

Sourced from django-upgrade's changelog.

1.30.0 (2026-02-24)

Support parsing Django versions without a minor part from pyproject.toml. For example, django>=6 will be parsed as for Django 6.0+.

PR [#625](https://github.com/adamchainz/django-upgrade/issues/625) <https://github.com/adamchainz/django-upgrade/pull/625>__.

Drop Python 3.9 support.

Commits

1db0cbd Version 1.30.0
b5daf9e Remove unused Coverage exclusion comment (#627)
2a6c4e8 Remove tokenization fallback branch (#626)
79e4450 Support parsing Django versions without a minor part (#625)
97a600d Upgrade dependencies (#624)
539e59a [pre-commit.ci] pre-commit autoupdate (#623)
36288c6 Bump the github-actions group with 2 updates (#621)
966b32b [pre-commit.ci] pre-commit autoupdate (#622)
47de383 Remove tokenize-rt from test dependency group (#620)
1f491fc Add Django 6.0 classifier (#619)
Additional commits viewable in compare view

Updates whitenoise from 6.11.0 to 6.12.0

Changelog

Sourced from whitenoise's changelog.

6.12.0 (2026-02-27)

Drop Python 3.9 support.

Fix potential unauthorised file access vulnerability in "autorefesh" mode. See PR [#684](https://github.com/evansd/whitenoise/issues/684) <https://github.com/evansd/whitenoise/pull/684>__ for details, and a reminder that autorefresh mode has always been documented as unsuitable for production use. Thanks Seth Larson for reporting.

Commits

1e3a30b Version 6.12.0
bc4c738 Merge pull request #684 from evansd/use-commonpath
505ed8d Use os.path.commonpath() to identify child paths
b6d8ed4 Upgrade dependencies (#683)
edc79de [pre-commit.ci] pre-commit autoupdate (#682)
79fb2f1 Bump the github-actions group with 2 updates (#680)
2b245df [pre-commit.ci] pre-commit autoupdate (#681)
dcb50f3 Upgrade dependencies (#678)
1c4a746 [pre-commit.ci] pre-commit autoupdate (#677)
e7f970a Bump actions/checkout from 5 to 6 in the github-actions group (#676)
Additional commits viewable in compare view

Updates django-structlog from 10.0.0 to 10.1.0

Changelog

Sourced from django-structlog's changelog.

10.1.0 (May 30, 2025)

New: - Add settings to configure the logging levels for the request middleware and celery task events. See [#1022](https://github.com/jrobichaud/django-structlog/issues/1022) <https://github.com/jrobichaud/django-structlog/issues/1022>_.

Commits

a53b04e Bump version
4c2e49a Merge pull request #1024 from offbyone/push-tkpuvxrrvkvu
770a6b2 Make the log level for the request middleware fully configurable
dd60535 Merge pull request #1001 from jrobichaud/dependabot/pip/docs/sphinx-9.1.0
1cc4dc0 Merge pull request #1011 from jrobichaud/dependabot/pip/requirements/coverage...
e110580 Merge pull request #1012 from jrobichaud/dependabot/github_actions/peter-evan...
960a1ea Merge pull request #1014 from jrobichaud/dependabot/pip/docs/importlib-metada...
f0c6d5c Merge pull request #1015 from jrobichaud/dependabot/github_actions/codecov/co...
d3383c0 Merge pull request #1016 from jrobichaud/dependabot/pip/docs/celery-5.6.3
944199e chore(deps): bump celery from 5.6.2 to 5.6.3 in /docs
Additional commits viewable in compare view

Updates django-allauth[socialaccount] to 65.18.0

Commits

See full diff in compare view

Updates djlint from 1.36.4 to 1.39.2

Release notes

Sourced from djlint's releases.

v1.39.2

v1.39.1 was not published due to mypyc compilation error.

Packaging

Fix mypyc compilation.

v1.39.1

This release was not published due to mypyc compilation error.

Fix

Avoid false T027 reports for apostrophes inside quoted template strings.

Format Alpine.js object methods in attributes when format_attribute_js_json is enabled.

Preserve indentation after inline Jinja control-flow blocks that start with whitespace trim markers, such as {%- if ... %}...{% endif %}.

Preserve safe inner quote style for Jinja function calls inside quoted HTML attributes.

v1.39.0

Feature

Add preserve_class_newlines / --preserve-class-newlines to keep authored line breaks inside multiline class attributes. #495

Fix

Fix Django 6.0 {% partialdef %} block indentation so {% endpartialdef %} aligns with its opener. #1556

Preserve multiline Django/Jinja control-flow blocks instead of condensing short bodies onto one line. #1597

Preserve single-line inline HTML and template tag bodies during expansion, even when they exceed max_line_length.

v1.38.2

Fix python -m djlint not working due to mypyc compilation.

v1.38.1

Fix

Match exclude paths on path boundaries. #1028

v1.38.0

Feature

Add support for .djlint.toml project and global config files. #1181

Fix

Preserve single-line inline HTML tag bodies when they fit within max_line_length. #637 #2041

Avoid evaluating template expressions while formatting tag contents. #784 #828 #1030 #1158

Packaging

Fix npm publish workflow.

... (truncated)

Changelog

Sourced from djlint's changelog.

[1.39.2] - 2026-06-11

v1.39.1 was not published due to mypyc compilation error.

Packaging

Fix mypyc compilation.

[1.39.1] - 2026-06-11

Fix

Avoid false T027 reports for apostrophes inside quoted template strings.

Format Alpine.js object methods in attributes when format_attribute_js_json is enabled.

Preserve indentation after inline Jinja control-flow blocks that start with whitespace trim markers, such as {%- if ... %}...{% endif %}.

Preserve safe inner quote style for Jinja function calls inside quoted HTML attributes.

[1.39.0] - 2026-06-05

Feature

Add preserve_class_newlines / --preserve-class-newlines to keep authored line breaks inside multiline class attributes.

Fix

Fix Django 6.0 {% partialdef %} block indentation so {% endpartialdef %} aligns with its opener.

Preserve multiline Django/Jinja control-flow blocks instead of condensing short bodies onto one line.

Preserve single-line inline HTML and template tag bodies during expansion, even when they exceed max_line_length.

[1.38.2] - 2026-06-05

Fix

Fix python -m djlint not working due to mypyc compilation.

[1.38.1] - 2026-06-04

Fix

Match exclude paths on path boundaries.

[1.38.0] - 2026-06-04

Feature

Add support for .djlint.toml project and global config files.

Fix

Preserve single-line inline HTML tag bodies when they fit within max_line_length.

... (truncated)

Commits

a8264dd v1.39.2
0a59136 fix mypyc compilation
5daa5dd v1.39.1
27bae44 fix(linter): avoid false T027 for apostrophes in quoted strings
8a9d8f0 Fix Alpine x-data method attribute formatting
c12d4e1 improve parenthesis tests
d575507 fix(formatter): preserve Jinja quotes in HTML attributes
4129b05 chore(deps): update pre-commit hook types-tqdm to v4.68.0.20260608 (#2074)
0730bff Fix indentation after inline trim-marker Jinja blocks
338dee3 chore(deps): lock file maintenance (#2073)
Additional commits viewable in compare view

Updates sentry-sdk[django] to 2.63.0

Release notes

Sourced from sentry-sdk[django]'s releases.

2.63.0

Bug Fixes 🐛

Fastapi

Prevent double wrapping of sync handlers on FastAPI >= 0.137 by @jhonny-on in #6569

Use effective_route_context path for prefixed routers by @ericapisani in #6572

Other

(asgi) Gate query string and client IP behind send_default_pii by @ericapisani in #6501

(serializer) Avoid creating reference cycles on every call by @Malkiz223 in #6563

(user) Set user.ip_address on telemetry if present by @sentrivana in #6555

Remove 0000 trace_id fallbacks by @sl0thentr0py in #6570

MANIFEST.in: Graft tests directory. by @charlesroelli in #6237

Internal Changes 🔧

(fastapi) Verify request info capture with POST endpoints by @alexander-alderman-webb in #6287

(starlette) Verify request info capture with POST endpoints by @alexander-alderman-webb in #6269

Changelog

Sourced from sentry-sdk[django]'s changelog.

2.63.0

Bug Fixes 🐛

Fastapi

Prevent double wrapping of sync handlers on FastAPI >= 0.137 by @jhonny-on in #6569

Use effective_route_context path for prefixed routers by @ericapisani in #6572

Other

(asgi) Gate query string and client IP behind send_default_pii by @ericapisani in #6501

(serializer) Avoid creating reference cycles on every call by @Malkiz223 in #6563

(user) Set user.ip_address on telemetry if present by @sentrivana in #6555

Remove 0000 trace_id fallbacks by @sl0thentr0py in #6570

MANIFEST.in: Graft tests directory. by @charlesroelli in #6237

Internal Changes 🔧

(fastapi) Verify request info capture with POST endpoints by @alexander-alderman-webb in #6287

(starlette) Verify request info capture with POST endpoints by @alexander-alderman-webb in #6269

2.62.0

New Features ✨
Add integration for aiomysql by @tonal in #4703

We're adding support for the aiomysql package. To enable the integration, add it to your integrations list:
import sentry_sdk
from sentry_sdk.integrations.aiomysql import AioMySQLIntegration
sentry_sdk.init(
traces_sample_rate=1.0,
integrations=[AioMySQLIntegration()],
)
Support HTTPX2 by @sentrivana in #6463

We're adding out-of-the-box support for HTTPX2. As long as use the package, the Sentry integration will be enabled automatically and you should see your requests instrumented in Sentry.
import httpx2
import sentry_sdk
sentry_sdk.init(...)

... (truncated)

Commits

44b008a update changelog
0b2af51 Update CHANGELOG.md
250caad release: 2.63.0
72a57de fix(flask): Set user data on scope at request start (#6566)
6a4c3a1 fix: Remove 0000 trace_id fallbacks (#6570)
1df9835 feat(falcon): Set name and source on request span when streaming (#6562)
77874bd test(falcon): Support span streaming (#6561)
6bcfb9c fix(fastapi): Prevent double wrapping of sync handlers on FastAPI >= 0.137 (#...
72d972c fix(fastapi): use effective_route_context path for prefixed routers (#6572)
cc802f6 feat(chalice): Add span streaming support to Chalice integration (#6503)
Additional commits viewable in compare view

Updates pytest from 9.0.2 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates django-import-export[all] to 4.4.1

Release notes

Sourced from django-import-export[all]'s releases.

4.4.1

Changelog

Changelog

Sourced from django-import-export[all]'s changelog.

4.4.1 (2026-05-05)

Refactor lookup value retrieval in Field and CachedForeignKeyWidget (2146 <https://github.com/django-import-export/django-import-export/pull/2146>_)

Fix IncorrectLookupParameters when exporting from filtered change view (2154 <https://github.com/django-import-export/django-import-export/pull/2154>_)

Fix console error 'resource select input not found' on export (2158 <https://github.com/django-import-export/django-import-export/pull/2158>_)

Fix CachedForeignKeyWidget type mismatch on non-string lookup fields (2159 <https://github.com/django-import-export/django-import-export/pull/2159>_)

4.4.0 (2026-01-10)

Added CachedForeignKeyWidget (2142 <https://github.com/django-import-export/django-import-export/pull/2142>_)

4.3.14 (2025-11-13)

Add Ukrainian translation (2132 <https://github.com/django-import-export/django-import-export/pull/2132>_)

4.3.13 (2025-10-31)

Fix: file_name is None in before_import_row when skip_import_confirm=True (2129 <https://github.com/django-import-export/django-import-export/pull/2129>_)

4.3.12 (2025-10-19)

Minor documentation fix

4.3.11 (2025-10-19)

Fix for export not retaining URI query params (2097 <https://github.com/django-import-export/django-import-export/pull/2097>_)

4.3.10 (2025-09-26)

Improved field value extraction for dict-based querysets (2098 <https://github.com/django-import-export/django-import-export/pull/2098>_)

Performance improvements for membership checks (2090 <https://github.com/django-import-export/django-import-export/pull/2090>_)

Fix ForeignKeyWidget export issue (2117 <https://github.com/django-import-export/django-import-export/pull/2117>_)

Improved documentation for clean() methods (2115 <https://github.com/django-import-export/django-import-export/pull/2115>_)

Documentation updates: JSONField export with attribute syntax (2100 <https://github.com/django-import-export/django-import-export/pull/2100>_)

Documentation updates: handling TooManyFieldsSent (2103 <https://github.com/django-import-export/django-import-export/pull/2103>_)

Updated Turkish translation (2101 <https://github.com/django-import-export/django-import-export/pull/2101>_)

Updated Czech translation (2111 <https://github.com/django-import-export/django-import-export/pull/2111>_)

4.3.9 (2025-07-21)

Allow specifying meta options in the :ref:model_resourcefactory<using_modelresource_factory> (2078 <https://github.com/django-import-export/django-import-export/pull/2078>_)

Allow custom fields and methods in :ref:model_resourcefactory<using_modelresource_factory> (2081 <https://github.com/django-import-export/django-import-export/pull/2081>_)

... (truncated)

Commits

f4cfc4d updated changelog
a31ac47 corrected release date
c088cf6 Added CachedForeignKeyWidget
b438b97 added CachedForeignKeyWidget (#2142)
7422d0e updated changelog
9cd201d Fix: file_name is None in before_import_row when skip_import_confirm=True (#2...
3cc1be8 updated changelog
3b17353 minor documentation fix
2ad9bf8 corrected documentation
6e89f0e Fix retain query string params in export action (#2121)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Updates the requirements on [django](https://github.com/django/django), [pytz](https://github.com/stub42/pytz), [django-environ](https://github.com/joke2k/django-environ), [gunicorn](https://github.com/benoitc/gunicorn), [django-upgrade](https://github.com/adamchainz/django-upgrade), [whitenoise](https://github.com/evansd/whitenoise), [django-structlog](https://github.com/jrobichaud/django-structlog), [django-allauth[socialaccount]](https://github.com/sponsors/pennersr), [djlint](https://github.com/djlint/djLint), [sentry-sdk[django]](https://github.com/getsentry/sentry-python), [pytest](https://github.com/pytest-dev/pytest) and [django-import-export[all]](https://github.com/django-import-export/django-import-export) to permit the latest version. Updates `django` from 5.2.11 to 6.0.6 - [Commits](django/django@5.2.11...6.0.6) Updates `pytz` from 2025.2 to 2026.2 - [Release notes](https://github.com/stub42/pytz/releases) - [Commits](stub42/pytz@release_2025.2...release_2026.2) Updates `django-environ` from 0.13.0 to 0.14.0 - [Release notes](https://github.com/joke2k/django-environ/releases) - [Changelog](https://github.com/joke2k/django-environ/blob/v0.14.0/CHANGELOG.rst) - [Commits](joke2k/django-environ@v0.13.0...v0.14.0) Updates `gunicorn` from 25.1.0 to 26.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@25.1.0...26.0.0) Updates `django-upgrade` from 1.29.1 to 1.30.0 - [Changelog](https://github.com/adamchainz/django-upgrade/blob/main/docs/changelog.rst) - [Commits](adamchainz/django-upgrade@1.29.1...1.30.0) Updates `whitenoise` from 6.11.0 to 6.12.0 - [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst) - [Commits](evansd/whitenoise@6.11.0...6.12.0) Updates `django-structlog` from 10.0.0 to 10.1.0 - [Changelog](https://github.com/jrobichaud/django-structlog/blob/main/docs/changelog.rst) - [Commits](jrobichaud/django-structlog@10.0.0...10.1.0) Updates `django-allauth[socialaccount]` to 65.18.0 - [Commits](https://github.com/sponsors/pennersr/commits) Updates `djlint` from 1.36.4 to 1.39.2 - [Release notes](https://github.com/djlint/djLint/releases) - [Changelog](https://github.com/djlint/djLint/blob/master/CHANGELOG.md) - [Commits](djlint/djLint@v1.36.4...v1.39.2) Updates `sentry-sdk[django]` to 2.63.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.8.0...2.63.0) Updates `pytest` from 9.0.2 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.2...9.1.1) Updates `django-import-export[all]` to 4.4.1 - [Release notes](https://github.com/django-import-export/django-import-export/releases) - [Changelog](https://github.com/django-import-export/django-import-export/blob/main/docs/changelog.rst) - [Commits](django-import-export/django-import-export@4.3.4...4.4.1) --- updated-dependencies: - dependency-name: django dependency-version: 6.0.6 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: pytz dependency-version: '2026.2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: django-environ dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: gunicorn dependency-version: 26.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: django-upgrade dependency-version: 1.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: whitenoise dependency-version: 6.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-structlog dependency-version: 10.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-allauth[socialaccount] dependency-version: 65.18.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: djlint dependency-version: 1.39.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: sentry-sdk[django] dependency-version: 2.63.0 dependency-type: direct:production dependency-group: python-dependencies - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-import-export[all] dependency-version: 4.4.1 dependency-type: direct:production dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jun 22, 2026

dependabot Bot temporarily deployed to test June 22, 2026 07:16 Inactive

dependabot Bot had a problem deploying to review June 22, 2026 07:16 Failure

Navigation Menu

Uh oh!

chore: bump the python-dependencies group across 1 directory with 12 updates - #242

chore: bump the python-dependencies group across 1 directory with 12 updates#242
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-6894e21703

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.14.0

Added

Changed

Fixed

v0.14.0_ - 18-June-2026

26.0.0

Breaking Changes

New Features

Security

Bug Fixes

1.30.0 (2026-02-24)

6.12.0 (2026-02-27)

10.1.0 (May 30, 2025)

v1.39.2

Packaging

v1.39.1

Fix

v1.39.0

Feature

Fix

v1.38.2

v1.38.1

Fix

v1.38.0

Feature

Fix

Packaging

[1.39.2] - 2026-06-11

Packaging

[1.39.1] - 2026-06-11

Fix

[1.39.0] - 2026-06-05

Feature

Fix

[1.38.2] - 2026-06-05

Fix

[1.38.1] - 2026-06-04

Fix

[1.38.0] - 2026-06-04

Feature

Fix

2.63.0

Bug Fixes 🐛

Fastapi

Other

Internal Changes 🔧

2.63.0

Bug Fixes 🐛

Fastapi

Other

Internal Changes 🔧

2.62.0

New Features ✨

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

4.4.1

4.4.1 (2026-05-05)

4.4.0 (2026-01-10)

4.3.14 (2025-11-13)

4.3.13 (2025-10-31)

4.3.12 (2025-10-19)

4.3.11 (2025-10-19)

4.3.10 (2025-09-26)

4.3.9 (2025-07-21)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

`v0.14.0`_ - 18-June-2026