Skip to content

Bump the python-minor-patch group across 1 directory with 9 updates#211

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/python-minor-patch-261dad52db
Closed

Bump the python-minor-patch group across 1 directory with 9 updates#211
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/python-minor-patch-261dad52db

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 2, 2026 •
edited
Loading

Bumps the python-minor-patch group with 9 updates in the / directory:

Package From To
django-axes 8.0.0 8.3.1
bandit 1.9.2 1.9.4
coverage 7.13.0 7.13.5
mypy 1.19.1 1.20.0
pylint-django 2.6.1 2.7.0
pytest-django 4.11.1 4.12.0
sauceclient 1.0.1 1.0.2
selenium 4.39.0 4.41.0
types-requests 2.32.4.20250913 2.33.0.20260402

Updates django-axes from 8.0.0 to 8.3.1

Release notes

Sourced from django-axes's releases.

Version 8.3.1

What's Changed

Full Changelog: jazzband/django-axes@8.3.0...8.3.1

Version 8.3.0

What's Changed

Full Changelog: jazzband/django-axes@8.2.0...8.3.0

Version 8.2.0

What's Changed

New Contributors

Full Changelog: jazzband/django-axes@8.1.0...8.2.0

Version 8.1.0

What's Changed

... (truncated)

Changelog

Sourced from django-axes's changelog.

8.3.1 (2026-02-11)

  • Fix configuration JSON serialization errors for Celery. [aleksihakli]

8.3.0 (2026-02-09)

  • Remove deprecated pkg_resources in favour of new importlib. [hugovk]

8.2.0 (2026-02-06)

  • Fix AttributeError when optional settings are undefined. [rodrigo.nogueira]
  • Fix circular import with custom user models. [rodrigo.nogueira]
  • Add unit tests for security check W006. [shayanTaki]

8.1.0 (2025-12-19)

  • Add Persion (fa) translations for django-axes. [AmirAli-BahramJerdi]
  • Add individual attempt expiry support. [kuldeepkhatke]
  • Add checks for missing ip_address in lockout params. [shayanTaki]
  • Add missing settings.AXES_IPWARE_PROXY_ORDER documentation. [ram98kgp]
  • Enhance get_lockout_response to receive original response as parameter. [mounirmesselmeni]
  • Update documentation.
  • Add Python 3.14 support.
  • Add Django 6.0 support.
  • Remove Python 3.9 support (EOL).
  • Remove Django 5.1 support (EOL).
Commits
  • e27ce89 Version 8.3.1
  • c3dcd1b chore(deps): bump coverage from 7.13.3 to 7.13.4
  • 41ebdc3 Try to run all tox QA commands even if some fail
  • 31c69db Simplify black formatting rules
  • bdd0c95 Fix prospector errors
  • 4b77eb6 Run black autoformatting
  • 5acae05 Update Black formatting rules
  • d59a289 Suppress mypy type errors
  • 23ee2fc Update version support matrix to run tox QA tests properly on GitHub
  • 4ea6158 Implement custom lazy object to avoid JSON errors with Celery
  • Additional commits viewable in compare view

Updates bandit from 1.9.2 to 1.9.4

Release notes

Sourced from bandit's releases.

1.9.4

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

1.9.3

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

Commits
  • 92ae8b8 Fix B106 reporting wrong line number on multiline function calls (#1360)
  • c8c8a55 Lower version guard in check_ast_node to Python 3.12 (#1355)
  • 8f2f928 Fix B615 false positive when revision is set via variable (#1358)
  • e27493f Include filename in nosec 'no failed test' warning (#1363)
  • b69b336 Fix B613 crash when reading from stdin (#1361)
  • e418b79 Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
  • ff646fd Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
  • c0def6c chore: fixed some typos in comments (#1351)
  • 765f00d Limit B614 to torch.load deserializers (#1348)
  • 06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
  • Additional commits viewable in compare view

Updates coverage from 7.13.0 to 7.13.5

Changelog

Sourced from coverage's changelog.

Version 7.13.5 — 2026-03-17

  • Fix: issue 2138_ describes a memory leak that happened when repeatedly using the Coverage API with in-memory data. This is now fixed.

  • Fix: the markdown-formatted coverage report didn't fully escape special characters in file paths (issue 2141). This would be very unlikely to cause a problem, but now it's done properly, thanks to Ellie Ayla <pull 2142_>.

  • Fix: the C extension wouldn't build on VS2019, but now it does (issue 2145_).

.. _issue 2138: coveragepy/coveragepy#2138 .. _issue 2141: coveragepy/coveragepy#2141 .. _pull 2142: coveragepy/coveragepy#2142 .. _issue 2145: coveragepy/coveragepy#2145

.. _changes_7-13-4:

Version 7.13.4 — 2026-02-09

  • Fix: the third-party code fix in 7.13.3 required examining the parent directories where coverage was run. In the unusual situation that one of the parent directories is unreadable, a PermissionError would occur, as described in issue 2129_. This is now fixed.

  • Fix: in test suites that change sys.path, coverage.py could fail with "RuntimeError: Set changed size during iteration" as described and fixed in pull 2130_. Thanks, Noah Fatsi.

  • We now publish ppc64le wheels, thanks to Pankhudi Jain <pull 2121_>_.

.. _pull 2121: coveragepy/coveragepy#2121 .. _issue 2129: coveragepy/coveragepy#2129 .. _pull 2130: coveragepy/coveragepy#2130

.. _changes_7-13-3:

Version 7.13.3 — 2026-02-03

  • Fix: in some situations, third-party code was measured when it shouldn't have been, slowing down test execution. This happened with layered virtual environments such as uv sometimes makes. The problem is fixed, closing issue 2082_. Now any directory on sys.path that is inside a virtualenv is considered third-party code.

... (truncated)

Commits
  • c88da14 docs: sample HTML for 7.13.5
  • e2ac3e1 build: sample HTML shouldn't include the status.json file
  • 910f8f3 docs: prep for 7.13.5
  • 3a4819c style: make workflows more uniform
  • 2a53705 chore: bump the action-dependencies group across 1 directory with 4 updates (...
  • e7c878d chore: make upgrade
  • ab4db40 build: use --generate-hashes when pinning
  • a438753 chore: make upgrade
  • 7b33457 refactor: some leftover pyupgrade 3.10 bits
  • 2ff968d refactor: this type wasn't used anywhere
  • Additional commits viewable in compare view

Updates mypy from 1.19.1 to 1.20.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 1.20

We’ve just uploaded mypy 1.20.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Planned Changes to Defaults and Flags in Mypy 2.0

As a reminder, we are planning to enable --local-partial-types by default in mypy 2.0, which will likely be the next feature release. This will often require at least minor code changes. This option is implicitly enabled by mypy daemon, so this makes the behavior of daemon and non-daemon modes consistent.

Note that this release improves the compatibility of --local-partial-types significantly to make the switch easier (see below for more).

This can also be configured in a mypy configuration file (use False to disable):

local_partial_types = True

For more information, refer to the documentation.

We will also enable --strict-bytes by default in mypy 2.0. This usually requires at most minor code changes to adopt. For more information, refer to the documentation.

Finally, --allow-redefinition-new will be renamed to --allow-redefinition. If you want to continue using the older --allow-redefinition semantics which are less flexible (e.g. limited support for conditional redefinitions), you can switch to --allow-redefinition-old, which is currently supported as an alias to the legacy --allow-redefinition behavior. To use --allow-redefinition in the upcoming mypy 2.0, you can't use --no-local-partial-types. For more information, refer to the documentation.

Better Type Narrowing

Mypy's implementation of narrowing has been substantially reworked. Mypy will now narrow more aggressively, more consistently, and more correctly. In particular, you are likely to notice new narrowing behavior in equality expressions (==), containment expressions (in),

... (truncated)

Commits
  • 770d3ca Remove +dev from version
  • 4738ffa Changelog updates for 1.20 (#21109)
  • b4f07a7 Use 'native-parser' instead of 'native-parse' for optional dependency (#21115)
  • 7bec7b7 [mypyc] Document librt and librt.base64 (#21114)
  • c482596 --allow-redefinition-new is no longer experimental (#21110)
  • c916ca3 sdist: include misc/{diff-cache,apply-cache-diff}.py for `mypy/test/test_di...
  • b137e4e [mypyc] Speed up native-to-native imports within the same group (#21101)
  • 978b711 [mypyc] Fix range loop variable off-by-one after loop exit (#21098)
  • 67ada30 [stubtest] Check runtime availability of private types not marked `@type_chec...
  • bdef6ef librt cache tests: build respecting MYPY_TEST_PREFIX (#21097)
  • Additional commits viewable in compare view

Updates pylint-django from 2.6.1 to 2.7.0

Release notes

Sourced from pylint-django's releases.

Version 2.7.0 (1 Jan 2026)

Changelog

We added support for pylint 4.0.0+.

Other


- CI now tests against Django 5.2
- CI now tests against python 3.13
- CI now tests against python 3.14
- CI now tests against pylint 4.0.0+
Changelog

Sourced from pylint-django's changelog.

Version 2.7.0

We added support for pylint 4.0.0+.

Other


- CI now tests against Django 5.2
- CI now tests against python 3.13
- CI now tests against python 3.14
- CI now tests against pylint 4.0.0+
Commits
  • ec4124e Updating changelog for 2.7 release
  • 778342f Fixes for pylint 4.
  • c41afac Permit to use pylint 4+, bump own version
  • 8f9b230 [pre-commit.ci] pre-commit autoupdate
  • d61ef5f Remove the compat layer for 'only_required_for_messages'
  • e40d785 Use anchor to exclude functional tests in pre-commit (#473)
  • 64279cb Add support for python 3.14 (#472)
  • 7a63f43 Disable the test for DecimalField to be able to release for python 3.13, 3.14...
  • 100ec5c Fix a typo in pylint_django/tests/test_func.py
  • 156b99d Add typing to '_attribute_is_magic'
  • Additional commits viewable in compare view

Updates pytest-django from 4.11.1 to 4.12.0

Changelog

Sourced from pytest-django's changelog.

v4.12.0 (2026-02-14)

Compatibility ^^^^^^^^^^^^^

  • Official Python 3.14 support.
  • Dropped support for Python 3.9, minimum version is now Python 3.10.
  • Official Django 6.0 support.

Improvements ^^^^^^^^^^^^

  • The :ref:multiple databases <multi-db> support added in v4.3.0 is no longer considered experimental.
  • Added :func:@pytest.mark.django_isolate_apps <pytest.mark.django_isolate_apps> for isolating Django's app registry in pytest tests, and a :fixture:django_isolated_apps fixture to access the isolated Apps registry instance if needed.
Commits
  • a2a9495 Release 4.12.0
  • 020bc23 tests: make sure access to default can also be blocked
  • bcefbe8 Add support for isolating apps in tests
  • 39c8dcc plugin: add a note why we reorder tests
  • 1830acd pyproject.toml: require pytest 9 for self tests, switch to native toml config...
  • f19da08 Fix the order of the test cases that use the live_server fixture
  • 92858ee docs: add pytest 9.0+ native TOML configuration format
  • 3f550d9 build(deps): bump hynek/build-and-inspect-python-package
  • 1f50dd2 Drop obsolete traces of Django 5.0 in CI
  • 247ec1c Fix PytestCollectionWarning for TestRunner class (#1259)
  • Additional commits viewable in compare view

Updates sauceclient from 1.0.1 to 1.0.2

Commits

Updates selenium from 4.39.0 to 4.41.0

Release notes

Sourced from selenium's releases.

Selenium 4.41.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Commits
  • 9fc754f [build] Prepare for release of selenium-4.41.0 (#17098)
  • d5f22ec [java] mark tests passing in latest chrome beta
  • 89c5993 [build] fix auto-updating of browsers
  • 4592f1b [build] ci-python jobs not currently matching by default
  • 755d44c [build] put cdp version support in changelogs
  • 9aff5c7 [build] cannot invoke a rake task twice by default
  • 3a680a3 [build] ignore the staging branch for the PR and apply all patches in order
  • 20de9b9 [build] stage changes to an ephemeral staging branch since not all updates ar...
  • aac9a28 [py] Update test to check it's an integer rather than a value (#17114)
  • 02ec15f [rb] Update dependencies (#17111)
  • Additional commits viewable in compare view

Updates types-requests from 2.32.4.20250913 to 2.33.0.20260402

Commits

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 2, 2026
@dependabot dependabot bot requested a review from djbrown as a code owner April 2, 2026 06:02
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 2, 2026
@dependabot
Bump the python-minor-patch group across 1 directory with 9 updates
6516791 
Bumps the python-minor-patch group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [django-axes](https://github.com/jazzband/django-axes) | `8.0.0` | `8.3.1` |
| [bandit](https://github.com/PyCQA/bandit) | `1.9.2` | `1.9.4` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.13.0` | `7.13.5` |
| [mypy](https://github.com/python/mypy) | `1.19.1` | `1.20.0` |
| [pylint-django](https://github.com/pylint-dev/pylint-django) | `2.6.1` | `2.7.0` |
| [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.11.1` | `4.12.0` |
| [sauceclient](https://github.com/cgoldberg/sauceclient) | `1.0.1` | `1.0.2` |
| [selenium](https://github.com/SeleniumHQ/Selenium) | `4.39.0` | `4.41.0` |
| [types-requests](https://github.com/python/typeshed) | `2.32.4.20250913` | `2.33.0.20260402` |



Updates `django-axes` from 8.0.0 to 8.3.1
- [Release notes](https://github.com/jazzband/django-axes/releases)
- [Changelog](https://github.com/jazzband/django-axes/blob/master/CHANGES.rst)
- [Commits](jazzband/django-axes@8.0.0...8.3.1)

Updates `bandit` from 1.9.2 to 1.9.4
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.9.2...1.9.4)

Updates `coverage` from 7.13.0 to 7.13.5
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.0...7.13.5)

Updates `mypy` from 1.19.1 to 1.20.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.19.1...v1.20.0)

Updates `pylint-django` from 2.6.1 to 2.7.0
- [Release notes](https://github.com/pylint-dev/pylint-django/releases)
- [Changelog](https://github.com/pylint-dev/pylint-django/blob/master/CHANGELOG.rst)
- [Commits](pylint-dev/pylint-django@v2.6.1...v2.7.0)

Updates `pytest-django` from 4.11.1 to 4.12.0
- [Release notes](https://github.com/pytest-dev/pytest-django/releases)
- [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst)
- [Commits](pytest-dev/pytest-django@v4.11.1...v4.12.0)

Updates `sauceclient` from 1.0.1 to 1.0.2
- [Commits](cgoldberg/sauceclient@1.0.1...1.0.2)

Updates `selenium` from 4.39.0 to 4.41.0
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.39.0...selenium-4.41.0)

Updates `types-requests` from 2.32.4.20250913 to 2.33.0.20260402
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: django-axes
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: coverage
  dependency-version: 7.13.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: mypy
  dependency-version: 1.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pylint-django
  dependency-version: 2.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pytest-django
  dependency-version: 4.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: sauceclient
  dependency-version: 1.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: selenium
  dependency-version: 4.41.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: types-requests
  dependency-version: 2.33.0.20260402
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/python-minor-patch-261dad52db branch from bc05760 to 6516791 Compare April 6, 2026 22:33
@sonarqubecloud
Copy link
Copy Markdown

sonarqubecloud bot commented Apr 6, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 9, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 9, 2026
@dependabot dependabot bot deleted the dependabot/pip/python-minor-patch-261dad52db branch April 9, 2026 22:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@djbrown djbrown Awaiting requested review from djbrown djbrown is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants