⬆️(dependencies) update python dependencies #1047

renovate · 2025-02-10T01:52:12Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
SQLAlchemy (changelog)	`==2.0.37` -> `==2.0.38`
WeasyPrint (changelog)	`==63.1` -> `==64.1`
cryptography (changelog)	`==44.0.0` -> `==44.0.1`
django-cors-headers (changelog)	`==4.6.0` -> `==4.7.0`
django-filter (changelog)	`==24.3` -> `==25.1`
djangorestframework-simplejwt	`==5.4.0` -> `==5.5.0`
drf-spectacular-sidecar	`==2024.12.1` -> `==2025.2.1`
factory_boy	`==3.3.1` -> `==3.3.3`
ipython	`==8.31.0` -> `==8.32.0`
lxml (source, changelog)	`==5.3.0` -> `==5.3.1`
psycopg (source, changelog)	`==3.2.4` -> `==3.2.5`
pylint (changelog)	`==3.3.3` -> `==3.3.4`
pytest-django (changelog)	`==4.9.0` -> `==4.10.0`
ruff (source, changelog)	`==0.9.3` -> `==0.9.7`
sentry-sdk (changelog)	`==2.20.0` -> `==2.22.0`
whitenoise (changelog)	`==6.8.2` -> `==6.9.0`

Release Notes

Kozea/WeasyPrint (WeasyPrint)

`v64.1`

Compare Source

Bug fixes

#2368: Fix ascent and descent font values
#2370: Avoid endless recursion for variables in nested functions
#2275: Use correct containing block to render waiting children
#2375: Ensure that we handle text-anchor only on text content elements
#2090: Only create font temporary folder when adding fonts
#2383: Fix grid-template-areas validation and allow uppercase identifiers for grid lines

Contributors

Guillaume Ayoub

`v64.0`

Compare Source

Read about this release on our blog.

Features

#2338: Allow custom RDF metadata for PDF/A and eInvoices
#123, #2345: Handle small-caps synthesis
#2343: Support outline-offset
#2361: Support text-underline-offset and text-decoration-thickness
#2296: Don’t crash with tables with rounded corners split between pages

Bug fixes

#2360: Fix gradients with non-RGB colors
#2355, #2358: Align png emojis to the surrounding text
#2353: Fix alignment of SVG text with multiple nested text-anchor values
#2350: Fix logging restoration in capture_logs
#2341: Fix page groups
#2314: Use CSS 'image-rendering' attribute for images in SVGs
#2332: Fix opacity for translated SVG elements
#2329: Refactor text.line_break.get_log_attrs
#2325, #2326: Fix table overflow edge cases

Performance

#2347, #2364: Improve rendering speed for text

Documentation

#2352: Add more use cases in documentation, use Furo theme

Contributors

Guillaume Ayoub
Kesara Rathnayake
Xavid Pretzer
David Tagatac
Ernesto Ruge
Niko Abeler
Noam Kushinsky

pyca/cryptography (cryptography)

`v44.0.1`

Compare Source

adamchainz/django-cors-headers (django-cors-headers)

`v4.7.0`

Compare Source

Support Django 5.2.

carltongibson/django-filter (django-filter)

`v25.1`

Compare Source

Removed the in-built API schema generation methods, which have been
deprecated since v23.2.

You should use drf-spectacular <https://drf-spectacular.readthedocs.io/en/latest/>_
for generating OpenAPI schemas with DRF.
Dropped support for EOL Python 3.8.
Added testing against Python 3.13.
Added official support for Django 5.2.

jazzband/djangorestframework-simplejwt (djangorestframework-simplejwt)

`v5.5.0`

Compare Source

Cap PyJWT version to <2.10.0 to avoid incompatibility with subject claim type requirement by @grayver in https://github.com/jazzband/djangorestframework-simplejwt/pull/843
Add specific "token expired" exceptions by @vainu-arto in https://github.com/jazzband/djangorestframework-simplejwt/pull/830
Fix user_id type mismatch when user claim is not pk by @jdg-journeyfront in https://github.com/jazzband/djangorestframework-simplejwt/pull/851
Caching signing key by @henryfool91 in https://github.com/jazzband/djangorestframework-simplejwt/pull/859
Adds new refresh tokens to OutstandingToken db. by @thecarpetjasp in https://github.com/jazzband/djangorestframework-simplejwt/pull/866

tfranzel/drf-spectacular-sidecar (drf-spectacular-sidecar)

`v2025.2.1`

Compare Source

FactoryBoy/factory_boy (factory_boy)

`v3.3.3`

Compare Source

`v3.3.2`

Compare Source

ipython/ipython (ipython)

`v8.32.0`

Compare Source

lxml/lxml (lxml)

`v5.3.1`

Compare Source

==================

Bugs fixed

GH#440: Some tests were adapted for libxml2 2.14.0.
Patch by Nick Wellnhofer.
LP#2097175: DTD(external_id="…") erroneously required a byte string as ID value.
GH#450: iterparse() internally triggered the `DeprecationWarning`` added in lxml 5.3.0 when parsing HTML.

Other changes

GH#442: Binary wheels for macOS no longer use the linker flag -flat_namespace.

psycopg/psycopg (psycopg)

`v3.2.5`

Compare Source

pylint-dev/pylint (pylint)

`v3.3.4`: 3.3.4

Compare Source

Other Bug Fixes

Fixes "skipped files" count calculation; the previous method was displaying an arbitrary number.

Closes #10073
Fixes a crash that occurred when pylint was run in a container on a host with cgroupsv2 and restrictions on CPU usage.

Closes #10103
Relaxed the requirements for isort so pylint can benefit from isort 6.

Closes #10203

pytest-dev/pytest-django (pytest-django)

`v4.10.0`

Compare Source

https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4100-2025-02-10

astral-sh/ruff (ruff)

`v0.9.7`

Compare Source

Preview features

Consider __new__ methods as special function type for enforcing class method or static method rules (#13305)
[airflow] Improve the internal logic to differentiate deprecated symbols (AIR303) (#16013)
[refurb] Manual timezone monkeypatching (FURB162) (#16113)
[ruff] Implicit class variable in dataclass (RUF045) (#14349)
[ruff] Skip singleton starred expressions for incorrectly-parenthesized-tuple-in-subscript (RUF031) (#16083)
[refurb] Check for subclasses includes subscript expressions (FURB189) (#16155)

Rule changes

[flake8-debugger] Also flag sys.breakpointhook and sys.__breakpointhook__ (T100) (#16191)
[pycodestyle] Exempt site.addsitedir(...) calls (E402) (#16251)

Formatter

Fix unstable formatting of trailing end-of-line comments of parenthesized attribute values (#16187)

Server

Fix handling of requests received after shutdown message (#16262)
Ignore source.organizeImports.ruff and source.fixAll.ruff code actions for a notebook cell (#16154)
Include document specific debug info for ruff.printDebugInformation (#16215)
Update server to return the debug info as string with ruff.printDebugInformation (#16214)

CLI

Warn on invalid noqa even when there are no diagnostics (#16178)
Better error messages while loading configuration extends (#15658)

Bug fixes

[flake8-comprehensions] Handle trailing comma in C403 fix (#16110)
[flake8-pyi] Avoid flagging custom-typevar-for-self on metaclass methods (PYI019) (#16141)
[pydocstyle] Handle arguments with the same names as sections (D417) (#16011)
[pylint] Correct ordering of arguments in fix for if-stmt-min-max (PLR1730) (#16080)
[pylint] Do not offer fix for raw strings (PLE251) (#16132)
[pyupgrade] Do not upgrade functional TypedDicts with private field names to the class-based syntax (UP013) (#16219)
[pyupgrade] Handle micro version numbers correctly (UP036) (#16091)
[pyupgrade] Unwrap unary expressions correctly (UP018) (#15919)
[refurb] Correctly handle lengths of literal strings in slice-to-remove-prefix-or-suffix (FURB188) (#16237)
[ruff] Skip RUF001 diagnostics when visiting string type definitions (#16122)

Documentation

Add FAQ entry for source.* code actions in Notebook (#16212)
Add SECURITY.md (#16224)

`v0.9.6`

Compare Source

Preview features

[airflow] Add external_task.{ExternalTaskMarker, ExternalTaskSensor} for AIR302 (#16014)
[flake8-builtins] Make strict module name comparison optional (A005) (#15951)
[flake8-pyi] Extend fix to Python <= 3.9 for redundant-none-literal (PYI061) (#16044)
[pylint] Also report when the object isn't a literal (PLE1310) (#15985)
[ruff] Implement indented-form-feed (RUF054) (#16049)
[ruff] Skip type definitions for missing-f-string-syntax (RUF027) (#16054)

Rule changes

[flake8-annotations] Correct syntax for typing.Union in suggested return type fixes for ANN20x rules (#16025)
[flake8-builtins] Match upstream module name comparison (A005) (#16006)
[flake8-comprehensions] Detect overshadowed list/set/dict, ignore variadics and named expressions (C417) (#15955)
[flake8-pie] Remove following comma correctly when the unpacked dictionary is empty (PIE800) (#16008)
[flake8-simplify] Only trigger SIM401 on known dictionaries (#15995)
[pylint] Do not report calls when object type and argument type mismatch, remove custom escape handling logic (PLE1310) (#15984)
[pyupgrade] Comments within parenthesized value ranges should not affect applicability (UP040) (#16027)
[pyupgrade] Don't introduce invalid syntax when upgrading old-style type aliases with parenthesized multiline values (UP040) (#16026)
[pyupgrade] Ensure we do not rename two type parameters to the same name (UP049) (#16038)
[pyupgrade] [ruff] Don't apply renamings if the new name is shadowed in a scope of one of the references to the binding (UP049, RUF052) (#16032)
[ruff] Update RUF009 to behave similar to B008 and ignore attributes with immutable types (#16048)

Server

Root exclusions in the server to project root (#16043)

Bug fixes

[flake8-datetime] Ignore .replace() calls while looking for .astimezone (#16050)
[flake8-type-checking] Avoid TC004 false positive where the runtime definition is provided by __getattr__ (#16052)

Documentation

Improve ruff-lsp migration document (#16072)
Undeprecate ruff.nativeServer (#16039)

`v0.9.5`

Compare Source

Preview features

Recognize all symbols named TYPE_CHECKING for in_type_checking_block (#15719)
[flake8-comprehensions] Handle builtins at top of file correctly for unnecessary-dict-comprehension-for-iterable (C420) (#15837)
[flake8-logging] .exception() and exc_info= outside exception handlers (LOG004, LOG014) (#15799)
[flake8-pyi] Fix incorrect behaviour of custom-typevar-return-type preview-mode autofix if typing was already imported (PYI019) (#15853)
[flake8-pyi] Fix more complex cases (PYI019) (#15821)
[flake8-pyi] Make PYI019 autofixable for .py files in preview mode as well as stubs (#15889)
[flake8-pyi] Remove type parameter correctly when it is the last (PYI019) (#15854)
[pylint] Fix missing parens in unsafe fix for unnecessary-dunder-call (PLC2801) (#15762)
[pyupgrade] Better messages and diagnostic range (UP015) (#15872)
[pyupgrade] Rename private type parameters in PEP 695 generics (UP049) (#15862)
[refurb] Also report non-name expressions (FURB169) (#15905)
[refurb] Mark fix as unsafe if there are comments (FURB171) (#15832)
[ruff] Classes with mixed type variable style (RUF053) (#15841)
[airflow] BashOperator has been moved to airflow.providers.standard.operators.bash.BashOperator (AIR302) (#15922)
[flake8-pyi] Add autofix for unused-private-type-var (PYI018) (#15999)
[flake8-pyi] Significantly improve accuracy of PYI019 if preview mode is enabled (#15888)

Rule changes

Preserve triple quotes and prefixes for strings (#15818)
[flake8-comprehensions] Skip when TypeError present from too many (kw)args for C410,C411, and C418 (#15838)
[flake8-pyi] Rename PYI019 and improve its diagnostic message (#15885)
[pep8-naming] Ignore @override methods (N803) (#15954)
[pyupgrade] Reuse replacement logic from UP046 and UP047 to preserve more comments (UP040) (#15840)
[ruff] Analyze deferred annotations before enforcing mutable-(data)class-default and function-call-in-dataclass-default-argument (RUF008,RUF009,RUF012) (#15921)
[pycodestyle] Exempt sys.path += ... calls (E402) (#15980)

Configuration

Config error only when flake8-import-conventions alias conflicts with isort.required-imports bound name (#15918)
Workaround Even Better TOML crash related to allOf (#15992)

Bug fixes

[flake8-comprehensions] Unnecessary list comprehension (rewrite as a set comprehension) (C403) - Handle extraneous parentheses around list comprehension (#15877)
[flake8-comprehensions] Handle trailing comma in fixes for unnecessary-generator-list/set (C400,C401) (#15929)
[flake8-pyi] Fix several correctness issues with custom-type-var-return-type (PYI019) (#15851)
[pep8-naming] Consider any number of leading underscore for N801 (#15988)
[pyflakes] Visit forward annotations in TypeAliasType as types (F401) (#15829)
[pylint] Correct min/max auto-fix and suggestion for (PL1730) (#15930)
[refurb] Handle unparenthesized tuples correctly (FURB122, FURB142) (#15953)
[refurb] Avoid None | None as well as better detection and fix (FURB168) (#15779)

Documentation

Add deprecation warning for ruff-lsp related settings (#15850)
Docs (linter.md): clarify that Python files are always searched for in subdirectories (#15882)
Fix a typo in non_pep695_generic_class.rs (#15946)
Improve Docs: Pylint subcategories' codes (#15909)
Remove non-existing lint.extendIgnore editor setting (#15844)
Update black deviations (#15928)
Mention UP049 in UP046 and UP047, add See also section to UP040 (#15956)
Add instance variable examples to RUF012 (#15982)
Explain precedence for ignore and select config (#15883)

`v0.9.4`

Compare Source

Preview features

[airflow] Extend airflow context parameter check for BaseOperator.execute (AIR302) (#15713)
[airflow] Update AIR302 to check for deprecated context keys (#15144)
[flake8-bandit] Permit suspicious imports within stub files (S4) (#15822)
[pylint] Do not trigger PLR6201 on empty collections (#15732)
[refurb] Do not emit diagnostic when loop variables are used outside loop body (FURB122) (#15757)
[ruff] Add support for more re patterns (RUF055) (#15764)
[ruff] Check for shadowed map before suggesting fix (RUF058) (#15790)
[ruff] Do not emit diagnostic when all arguments to zip() are variadic (RUF058) (#15744)
[ruff] Parenthesize fix when argument spans multiple lines for unnecessary-round (RUF057) (#15703)

Rule changes

Preserve quote style in generated code (#15726, #15778, #15794)
[flake8-bugbear] Exempt NewType calls where the original type is immutable (B008) (#15765)
[pylint] Honor banned top-level imports by TID253 in PLC0415. (#15628)
[pyupgrade] Ignore is_typeddict and TypedDict for deprecated-import (UP035) (#15800)

CLI

Fix formatter warning message for flake8-quotes option (#15788)
Implement tab autocomplete for ruff config (#15603)

Bug fixes

[flake8-comprehensions] Do not emit unnecessary-map diagnostic when lambda has different arity (C417) (#15802)
[flake8-comprehensions] Parenthesize sorted when needed for unnecessary-call-around-sorted (C413) (#15825)
[pyupgrade] Handle end-of-line comments for quoted-annotation (UP037) (#15824)

Documentation

Add missing config docstrings (#15803)
Add references to trio.run_process and anyio.run_process (#15761)
Use uv init --lib in tutorial (#15718)

getsentry/sentry-python (sentry-sdk)

`v2.22.0`

Compare Source

Various fixes & improvements

New integration: Add Statsig integration (#4022) by @aliu39

For more information, see the documentation for the StatsigIntegration.
Profiling: Continuous profiling lifecycle (#4017) by @Zylphrex
Fix: Revert "feat(tracing): Add propagate_traces deprecation warning (#3899)" (#4055) by @cmanallen
Tests: Generate Web 1 group tox entries by toxgen script (#3980) by @sentrivana
Tests: Generate Web 2 group tox entries by toxgen script (#3981) by @sentrivana
Tests: Generate Tasks group tox entries by toxgen script (#3976) by @sentrivana
Tests: Generate AI group tox entries by toxgen script (#3977) by @sentrivana
Tests: Generate DB group tox entries by toxgen script (#3978) by @sentrivana
Tests: Generate Misc group tox entries by toxgen script (#3982) by @sentrivana
Tests: Generate Flags group tox entries by toxgen script (#3974) by @sentrivana
Tests: Generate gRPC tox entries by toxgen script (#3979) by @sentrivana
Tests: Remove toxgen cutoff, add statsig (#4048) by @sentrivana
Tests: Reduce continuous profiling test flakiness (#4052) by @Zylphrex
Tests: Fix Clickhouse test (#4053) by @sentrivana
Tests: Fix flaky HTTPS test (#4057) by @Zylphrex
Update sample rate in DSC (#4018) by @sentrivana
Move the GraphQL group over to the tox gen script (#3975) by @sentrivana
Update changelog with profile_session_sample_rate (#4046) by @sentrivana

`v2.21.0`

Compare Source

Various fixes & improvements

Fix incompatibility with new Strawberry version (#4026) by @sentrivana
Add failed_request_status_codes to Litestar (#4021) by @vrslev

See https://docs.sentry.io/platforms/python/integrations/litestar/ for details.
Deprecate enable_tracing option (#3935) by @antonpirker

The enable_tracing option is now deprecated. Please use traces_sample_rate instead. See https://docs.sentry.io/platforms/python/configuration/options/#traces_sample_rate for more information.
Explicitly use None default when checking metadata (#4039) by @mpurnell1
Fix bug where concurrent accesses to the flags property could raise a RuntimeError (#4034) by @cmanallen
Add more min versions of frameworks (#3973) by @sentrivana
Set level based on status code for HTTP client breadcrumbs (#4004) by @sentrivana
Don't set transaction status to error on sys.exit(0) (#4025) by @sentrivana
Continuous profiling sample rate (#4002) by @Zylphrex

Set profile_session_sample_rate=1.0 in your init() to collect continuous profiles for 100% of profile sessions. See https://docs.sentry.io/platforms/python/profiling/#enable-continuous-profiling for more information.
Track and report spans that were dropped (#4005) by @constantinius
Change continuous profile buffer size (#3987) by @Zylphrex
Handle MultiPartParserError to avoid internal sentry crash (#4001) by @orhanhenrik
Handle None lineno in get_source_context (#3925) by @sentrivana
Add support for Python 3.12 and 3.13 to AWS Lambda integration (#3965) by @antonpirker
Add propagate_traces deprecation warning (#3899) by @mgaligniana
Check that __module__ is str (#3942) by @szokeasaurusrex
Add __repr__ to Baggage (#4043) by @szokeasaurusrex
Fix a typo (#3923) by @antonpirker
Fix various CI errors on master (#4009) by @Zylphrex
Split gevent tests off (#3964) by @sentrivana
Add tox generation script, but don't use it yet (#3971) by @sentrivana
Use httpx_mock in test_httpx (#3967) by @sl0thentr0py
Fix typo in test name (#4036) by @szokeasaurusrex
Fix mypy (#4019) by @sentrivana
Test Celery's latest RC (#3938) by @sentrivana
Bump actions/create-github-app-token from 1.11.2 to 1.11.3 (#4023) by @dependabot
Bump actions/create-github-app-token from 1.11.1 to 1.11.2 (#4015) by @dependabot
Bump codecov/codecov-action from 5.1.2 to 5.3.1 (#3995) by @dependabot

evansd/whitenoise (whitenoise)

`v6.9.0`

Compare Source

Configuration

📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the dependencies Dependency-related tasks. label Feb 10, 2025

renovate bot force-pushed the renovate/python-dependencies branch 13 times, most recently from 29c71db to fb831b9 Compare February 14, 2025 18:36

renovate bot force-pushed the renovate/python-dependencies branch 5 times, most recently from bcd3981 to 65a96ed Compare February 22, 2025 22:36

⬆️(dependencies) update python dependencies

7e27f77

renovate bot force-pushed the renovate/python-dependencies branch from 65a96ed to 7e27f77 Compare February 26, 2025 22:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

⬆️(dependencies) update python dependencies #1047

⬆️(dependencies) update python dependencies #1047

renovate bot commented Feb 10, 2025 •

edited

Loading

⬆️(dependencies) update python dependencies #1047

Are you sure you want to change the base?

⬆️(dependencies) update python dependencies #1047

Conversation

renovate bot commented Feb 10, 2025 • edited Loading

Release Notes

Bug fixes

Contributors

Backers and sponsors

Features

Bug fixes

Performance

Documentation

Contributors

Backers and sponsors

Bugs fixed

Other changes

v3.3.4: 3.3.4

Other Bug Fixes

Preview features

Rule changes

Formatter

Server

CLI

Bug fixes

Documentation

Preview features

Rule changes

Server

Bug fixes

Documentation

Preview features

Rule changes

Configuration

Bug fixes

Documentation

Preview features

Rule changes

CLI

Bug fixes

Documentation

Various fixes & improvements

Various fixes & improvements

Configuration

renovate bot commented Feb 10, 2025 •

edited

Loading

`v3.3.4`: 3.3.4