Skip to content

Bump the dependencies group across 1 directory with 7 updates#617

Open
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/uv/dependencies-2efe8f7705
Open

Bump the dependencies group across 1 directory with 7 updates#617
dependabot[bot] wants to merge 2 commits intomainfrom
dependabot/uv/dependencies-2efe8f7705

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 15, 2026 •
edited
Loading

Updates the requirements on channels[daphne], click, djangorestframework, dramatiq[redis,watch], marshmallow, numpydoc and tom-tns to permit the latest version.
Updates channels[daphne] to 4.3.2

Changelog

Sourced from channels[daphne]'s changelog.

4.3.2 (2025-11-20)

  • Confirmed support for Django 6.0.

  • Confirmed support for Python 3.14.

  • Added types extra for types-channels stubs. See installation docs.

4.3.1 (2025-08-01)

  • Fixed testing live server setup when test DB name was not set.

4.3.0 (2025-07-28)

  • Updated asgiref dependency to v3.9+.

  • Dropped support for EOL Python and Django versions. Python 3.9 is now the minimum supported version.

  • Fixed compatibility of ChannelsLiveServerTestCase with Django 5.2.

  • Fixed DB setup for spawned testing subprocess, typically on Windows and macOS.

See the Version 4.3.0 release notes <https://channels.readthedocs.io/en/latest/releases/4.3.0.html>_ for more details.

4.2.2 (2025-03-30)

  • Added fallbacks for old valid channel/group name checks.

    These were renamed in 4.2.1 but (as internal methods) without deprecation. They are restored (and deprecated) here to allow updating channel layers using them.

4.2.1 (2025-03-29)

Channels 4.2.1 primarily updates the metadata for supported Python and Django versions.

  • Added official support for Django 5.2 LTS.

  • Added official support for Python 3.13.

  • Added a warning for the length of the channel layer group names.

... (truncated)

Commits
  • 15333cd Version 4.3.2
  • 10be531 Add explicit dj60 to test matrix.
  • f726845 Update .github/workflows/tests.yml
  • 0c1e533 tox.ini: envlist py{310,311,312,313,314}-dj52
  • b2ad89f GitHub Actions: Test on Python 3.14 release candidate 2
  • a135228 Bump actions/checkout from 4 to 5 (#2180)
  • 7dfcc7b Add types extra and installation docs for type checking support.
  • 95589a7 Version 4.3.1.
  • 5038d69 Fix live server setup when test DB name not set.
  • f17a8fe Bump browser-actions/setup-chrome from 1 to 2 (#2175)
  • Additional commits viewable in compare view

Updates click from 8.3.1 to 8.3.2

Release notes

Sourced from click's releases.

8.3.2

This is the Click 8.3.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-2 Milestone: https://github.com/pallets/click/milestone/29

  • Fix handling of flag_value when is_flag=False to allow such options to be used without an explicit value. #3084 #3152
  • Hide Sentinel.UNSET values as None when using lookup_default(). #3136 #3199 #3202 #3209 #3212 #3224
  • Prevent _NamedTextIOWrapper from closing streams owned by StreamMixer. #824 #2991 #2993 #3110 #3139 #3140
  • Add comprehensive tests for CliRunner stream lifecycle, covering logging interaction, multi-threaded safety, and sequential invocation isolation. Add high-iteration stress tests behind a stress marker with a dedicated CI job. #3139
  • Fix callable flag_value being instantiated when used as a default via default=True. #3121 #3201 #3213 #3225
Changelog

Sourced from click's changelog.

Version 8.3.2

Released 2026-04-02

  • Fix handling of flag_value when is_flag=False to allow such options to be used without an explicit value. :issue:3084 :pr:3152
  • Hide Sentinel.UNSET values as None when using lookup_default(). :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224
  • Prevent _NamedTextIOWrapper from closing streams owned by StreamMixer. :issue:824 :issue:2991 :issue:2993 :issue:3110 :pr:3139 :pr:3140
  • Add comprehensive tests for CliRunner stream lifecycle, covering logging interaction, multi-threaded safety, and sequential invocation isolation. Add high-iteration stress tests behind a stress marker with a dedicated CI job. :pr:3139
  • Fix callable flag_value being instantiated when used as a default via default=True. :issue:3121 :pr:3201 :pr:3213 :pr:3225
Commits

Updates djangorestframework from 3.16.1 to 3.17.1

Release notes

Sourced from djangorestframework's releases.

3.17.1

What's Changed

Bug fixes

Full Changelog: encode/django-rest-framework@3.17.0...3.17.1

3.17.0

What's Changed

Breaking changes

Features

Bug fixes

Translations

Packaging

Other changes

New Contributors

... (truncated)

Commits
  • 22e231c Prepare bug fix release 3.17.1 (#9931)
  • 8e99b53 Add condition to skip pushed tags from forks (#9924)
  • c0407de Fix HTMLFormRenderer with empty datetime values (#9928)
  • 30d58a7 Fix the book sizing in the documentation (#9926)
  • 6f03b79 Tweak order of changes in release notes
  • 021ab56 Bump version and update release notes for 3.17.0 (#9921)
  • 19ebad7 Bump mkdocs-material[imaging] from 9.7.4 to 9.7.5 (#9923)
  • f222c55 Correct requires-python key in pyproject.toml
  • 7e7de6f Remove code fences from release checklist
  • c599d30 Update release process
  • Additional commits viewable in compare view

Updates dramatiq[redis,watch] to 2.1.0

Release notes

Sourced from dramatiq[redis,watch]'s releases.

v2.1.0

See the documentation changelog for more information about the release.

Fixed

Added

Changed

Deprecated

Project Maintenance

Full Changelog: Bogdanp/dramatiq@v2.0.1...v2.1.0

Commits
  • bec74a5 Version 2.1.0 (#839)
  • fc564f8 Add *args and **kwargs to base generic actor class perform() method (#837)
  • 1989177 Fix #821: Improvements to errors/warnings when dynamic Backend class lookups ...
  • 3f00c03 Fix #798: Recognize the --watch arg even when watchdog not installed (#836)
  • de63332 Merge pull request #835 from LincolnPuzey/fix_800
  • 435f075 Test against latest rabbitMQ server version (#833)
  • fcbd37e Add deadline to env var deprecation
  • c326281 Rename class ConnectionError to BrokerConnectionError
  • 634277f Adjust pytest and coverage config (#831)
  • 3f51943 Do not install gevent for regular python test suite (#830)
  • Additional commits viewable in compare view

Updates marshmallow from 3.26.1 to 3.26.2

Changelog

Sourced from marshmallow's changelog.

3.26.2 (2025-12-19)

Bug fixes:

  • :cve:2025-68480: Merge error store messages without rebuilding collections. Thanks 카푸치노 for reporting and :user:deckar01 for the fix.
Commits
  • 1407d51 Merge pull request #2878 from marshmallow-code/3.x-mypy-unreachable
  • b2292f5 Fix mypy errors
  • 8acd211 Merge pull request #2877 from marshmallow-code/3.x-delint
  • b4bcb4a [pre-commit.ci] auto fixes from pre-commit.com hooks
  • b78af7a Delint
  • 2c4451e Merge commit from fork
  • 86d101a Bump version and update changelog
  • 489a8d4 Only deep copy error message collections
  • 6d4a17d Add test coverage for error message modification
  • 0356a3f Merge error store messages without rebuilding collections
  • Additional commits viewable in compare view

Updates numpydoc from 1.9.0 to 1.10.0

Commits

Updates tom-tns from 0.3.4 to 0.3.5

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Apr 15, 2026
@dependabot
Bump the dependencies group across 1 directory with 7 updates
9fc2b17 
Updates the requirements on [channels[daphne]](https://github.com/django/channels), [click](https://github.com/pallets/click), [djangorestframework](https://github.com/encode/django-rest-framework), [dramatiq[redis,watch]](https://github.com/Bogdanp/dramatiq), [marshmallow](https://github.com/marshmallow-code/marshmallow), [numpydoc](https://github.com/numpy/numpydoc) and tom-tns to permit the latest version.

Updates `channels[daphne]` to 4.3.2
- [Changelog](https://github.com/django/channels/blob/main/CHANGELOG.txt)
- [Commits](django/channels@4.0.0...4.3.2)

Updates `click` from 8.3.1 to 8.3.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.3.1...8.3.2)

Updates `djangorestframework` from 3.16.1 to 3.17.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.16.1...3.17.1)

Updates `dramatiq[redis,watch]` to 2.1.0
- [Release notes](https://github.com/Bogdanp/dramatiq/releases)
- [Commits](Bogdanp/dramatiq@v1.18.0...v2.1.0)

Updates `marshmallow` from 3.26.1 to 3.26.2
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...3.26.2)

Updates `numpydoc` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/numpy/numpydoc/releases)
- [Changelog](https://github.com/numpy/numpydoc/blob/main/RELEASE.rst)
- [Commits](numpy/numpydoc@v1.9.0...v1.10.0)

Updates `tom-tns` from 0.3.4 to 0.3.5

---
updated-dependencies:
- dependency-name: channels[daphne]
  dependency-version: 4.3.2
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: click
  dependency-version: 8.3.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: djangorestframework
  dependency-version: 3.17.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: dramatiq[redis,watch]
  dependency-version: 2.1.0
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: marshmallow
  dependency-version: 3.26.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: numpydoc
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tom-tns
  dependency-version: 0.3.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot Bot force-pushed the dependabot/uv/dependencies-2efe8f7705 branch from 41ec8d9 to 9fc2b17 Compare April 17, 2026 18:52
@codecov
Copy link
Copy Markdown

codecov Bot commented Apr 22, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 79.62%. Comparing base (e28c53e) to head (7362f15).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #617   +/-   ##
=======================================
  Coverage   79.62%   79.62%           
=======================================
  Files         312      312           
  Lines       11850    11850           
  Branches      684      684           
=======================================
  Hits         9435     9435           
  Misses       2275     2275           
  Partials      140      140

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@miguelgomezgomez