chore(deps): Bump the dependencies group across 1 directory with 17 updates by dependabot[bot] · Pull Request #274 · Debakel/Dumpstermap

dependabot · 2026-02-01T06:15:30Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the dependencies group with 16 updates in the / directory:

Package	From	To
django-cors-headers	`4.7.0`	`4.9.0`
djangorestframework	`3.15.2`	`3.16.1`
djangorestframework-gis	`1.1`	`1.2.0`
psycopg2-binary	`2.9.10`	`2.9.11`
requests	`2.32.3`	`2.32.5`
gunicorn	`23.0.0`	`24.1.1`
dj-database-url	`2.3.0`	`3.1.0`
pytest	`8.3.5`	`9.0.2`
pytest-django	`4.10.0`	`4.11.1`
python-dotenv	`1.1.0`	`1.2.1`
sentry-sdk	`2.25.0`	`2.51.0`
fastkml	`1.1.0`	`1.4.0`
whitenoise	`6.9.0`	`6.11.0`
geopandas	`1.0.1`	`1.1.2`
freezegun	`1.5.1`	`1.5.5`
pre-commit	`4.2.0`	`4.5.1`

Updates django-cors-headers from 4.7.0 to 4.9.0

Changelog

Sourced from django-cors-headers's changelog.

4.9.0 (2025-09-18)

Support Django 6.0.

4.8.0 (2025-09-08)

Support Python 3.14.

Commits

a3a3ad2 Version 4.9.0
2f5a94b Correct testing of Django 6.0 (#1015)
4356514 Support Django 6.0 (#1014)
eeaa041 Version 4.8.0
b760e4d Support Python 3.14 (#1013)
bf6abfb [pre-commit.ci] pre-commit autoupdate (#1012)
5d0c651 Upgrade dependencies (#1011)
873fd5f Use uvx to run tox on GitHub Actions (#1010)
f8aa330 [pre-commit.ci] pre-commit autoupdate (#1009)
b04460f [pre-commit.ci] pre-commit autoupdate (#1008)
Additional commits viewable in compare view

Updates djangorestframework from 3.15.2 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

Fix regression in unique_together validation with SerializerMethodField in #9712

Fix UniqueTogetherValidator to handle fields with source attribute in #9688

Drop HTML line breaks on long headers in browsable API in #9438

Translations

Add Kazakh locale support in #9713

Update translations for Korean translations in #9571

Update German translations in #9676

Update Chinese translations in #9675

Update Arabic translations-sal in #9595

Update Persian translations in #9576

Update Spanish translations in #9701

Update Turkish Translations in #9749

Fix some typos in Brazilian Portuguese translations in #9673

Documentation

Removed reference to GitHub Issues and Discussions in #9660

Add drf-restwind and update outdated images in browsable-api.md in #9680

Updated funding page to represent current scope in #9686

Fix broken Heroku JSON Schema link in #9693

Update Django documentation links to use stable version in #9698

Expand docs on unique constraints cause 'required=True' in #9725

Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734

Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

Update GitHub Actions to use Ubuntu 24.04 for testing in #9677

Update test matrix to use Django 5.2 stable version in #9679

Add pyupgrade to pre-commit hooks in #9682

Fix test with Django 5 when pytz is available in #9715

New Contributors

@araggohnxd made their first contribution in #9673

@mbeijen made their first contribution in #9660

@stefan6419846 made their first contribution in #9676

@ren000thomas made their first contribution in #9675

@ulgens made their first contribution in #9682

... (truncated)

Commits

de018df Prepare 3.16.1 release (#9752)
a7d050f Turkish Translation updates (#9749)
853969c Fix test with Django 5 when pytz is available (#9715)
2ae8c11 Add note to tutorial about required request in serializer context when using ...
70e54f4 Revert docs back to djangorestframework-guardian (#9734)
3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
4bb46c2 Add Kazakh(kk) locale support (#9713)
e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
33d59fe Update Spanish translations (#9701)
c0202a0 Update Django documentation links to use stable version (#9698)
Additional commits viewable in compare view

Updates djangorestframework-gis from 1.1 to 1.2.0

Release notes

Sourced from djangorestframework-gis's releases.

1.2.0 [2025-06-02]

Features

Added transform optional argument to GeometryField
#188

Changes

Dependencies:

Added Django 5.2 to automated testing build.

Added Python 3.13 to automated testing build.

Added support for Django REST Framework 3.16.0.

Changelog

Sourced from djangorestframework-gis's changelog.

Version 1.2.0 [2025-06-02]

Features


- Added ``transform`` optional argument to ``GeometryField`` `[#188](https://github.com/openwisp/django-rest-framework-gis/issues/188)
  <https://github.com/openwisp/django-rest-framework-gis/issues/188>`_.
Changes

**Dependencies:**

Added Django 5.2 to automated testing build.
Added Python 3.13 to automated testing build.
Added support for Django REST Framework 3.16.0.

Version 1.1.0 [2024-08-17]
Features

</code></pre>

<ul>

<li>Allowed <code>GeoFeatureModelSerializer</code> to support models without geometry

field.</li>

</ul>

<p>Changes</p>

<pre><code>

Dependencies:


Bumped django-filters~=23.5.


Added Django 4.2, 5.0, 5.1 to automated testing build.


Dropped several EOL dependencies from automated testing build:

Python 3.6 and 3.7.
Django 2.2, 3.0, 3.1 and 4.0.
djangorestframework &amp;lt; 3.12.

The library may continue working with the dependencies listed above, but

it's not guaranteed.
Upgrading to more recent dependencies is highly recommended.


Bugfixes

</code></pre>

<ul>

<li>Fixed schema generation for <code>DistanceToPointOrderingFilter</code>.</li>

</ul>

<!-- raw HTML omitted -->

</blockquote>

<p>... (truncated)</p>

</details>

<details>

<summary>Commits</summary>
<ul>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/81f14f817b6162e7b68130539dde9013fab6113b&quot;&gt;&lt;code&gt;81f14f8&lt;/code&gt;&lt;/a> 1.2.0 release</li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/1ad8e0c6b9020e73fefbf2eda97192a0499a07b3&quot;&gt;&lt;code&gt;1ad8e0c&lt;/code&gt;&lt;/a> [fix] Make GeoJSON output valid by transforming to WGS84 <a href="https://redirect.github.com/openwisp/django-rest-framework-gis/issues/188&quot;&gt;#188&lt;/a&gt;&lt;/li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/27ff1d91786c7002af5a8501520e948b7e95c396&quot;&gt;&lt;code&gt;27ff1d9&lt;/code&gt;&lt;/a> [docs] Updated Compatibility Table in README</li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/66e7bcc6eeba030a99af8991a15770e0a0dd8484&quot;&gt;&lt;code&gt;66e7bcc&lt;/code&gt;&lt;/a> Merge pull request <a href="https://redirect.github.com/openwisp/django-rest-framework-gis/issues/332&quot;&gt;#332&lt;/a> from adamchainz/update_tested_versions</li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/59dfd898e69958d573b1d933f98c79310464f23b&quot;&gt;&lt;code&gt;59dfd89&lt;/code&gt;&lt;/a> [ci] Updated postgis to 17-3.5-alpine</li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/0abd49437b4b5e17cf147073075ba3b44a88cdd1&quot;&gt;&lt;code&gt;0abd494&lt;/code&gt;&lt;/a> [chores] Updated Development Status classifier in setup.py</li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/965940e0b4f1b917c3d2507daea3656ad02b8011&quot;&gt;&lt;code&gt;965940e&lt;/code&gt;&lt;/a> [chores] Use stable django versions in tox.ini</li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/a6ffefd18af9fd8f6c65f8798e11e81a7bc4d022&quot;&gt;&lt;code&gt;a6ffefd&lt;/code&gt;&lt;/a> [qa] Switched to double quotes (black formatter)</li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/84310997ea0031bc71689c5f2da242d9001c5d28&quot;&gt;&lt;code&gt;8431099&lt;/code&gt;&lt;/a> [chores] Updated CI build URL</li>

<li><a href="https://github.com/openwisp/django-rest-framework-gis/commit/37fa36c8ab017318c9295122002f617c1e1b0c99&quot;&gt;&lt;code&gt;37fa36c&lt;/code&gt;&lt;/a> [ci] Run on Ubuntu 20.04</li>

<li>Additional commits viewable in <a href="https://github.com/openwisp/django-rest-framework-gis/compare/v1.1.0...v1.2.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Updates psycopg2-binary from 2.9.10 to 2.9.11

Changelog
Sourced from psycopg2-binary's changelog.

Current release
What's new in psycopg 2.9.11
^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.
Avoid a segfault passing more arguments than placeholders if Python is built
with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).
Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).
~psycopg2.errorcodes map and ~psycopg2.errors classes updated to
PostgreSQL 18.
Drop support for Python 3.8.

What's new in psycopg 2.9.10
^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.
Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).
~psycopg2.errorcodes map and ~psycopg2.errors classes updated to
PostgreSQL 17.
Drop support for Python 3.7.

What's new in psycopg 2.9.9
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.
Drop support for Python 3.6.

What's new in psycopg 2.9.8
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for
recent features, such as sslcertmode.

What's new in psycopg 2.9.7
^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization
(:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).
Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).
Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6
^^^^^^^^^^^^^^^^^^^^^^^^^^^


... (truncated)


Commits

fd9ae8c chore: bump to version 2.9.11
d923840 chore: update docs requirements
d42dc71 Merge branch 'fix-1791'
4fde656 fix: avoid failed assert passing more arguments than placeholders
8308c19 fix: drop warning about the use of deprecated PyWeakref_GetObject function
1a1eabf build(deps): bump actions/github-script from 7 to 8
897af8b build(deps): bump peter-evans/repository-dispatch from 3 to 4
ceefd30 build(deps): bump actions/checkout from 4 to 5
4dc5854 build(deps): bump actions/setup-python from 5 to 6
1945788 Merge pull request #1802 from edgarrmondragon/cp314-wheels
Additional commits viewable in compare view




Updates requests from 2.32.3 to 2.32.5

Release notes
Sourced from requests's releases.

v2.32.5
2.32.5 (2025-08-18)
Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created
a new class of issues in Requests that have had negative impact across a number
of use cases. The Requests team has decided to revert this feature as long term
maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.
Dropped support for Python 3.8 following its end of support.

v2.32.4
2.32.4 (2025-06-10)
Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted
environment will retrieve credentials for the wrong hostname/machine from a
netrc file. (#6965)

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS. (#6926)
Dropped support for pypy 3.9 following its end of support. (#6926)




Changelog
Sourced from requests's changelog.

2.32.5 (2025-08-18)
Bugfixes

The SSLContext caching feature originally introduced in 2.32.0 has created
a new class of issues in Requests that have had negative impact across a number
of use cases. The Requests team has decided to revert this feature as long term
maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

Added support for Python 3.14.
Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)
Security

CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted
environment will retrieve credentials for the wrong hostname/machine from a
netrc file.

Improvements

Numerous documentation improvements

Deprecations

Added support for pypy 3.11 for Linux and macOS.
Dropped support for pypy 3.9 following its end of support.




Commits

b25c87d v2.32.5
131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
46e939b Update publish workflow to use artifact-id instead of name
4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
fec96cd Update Makefile rules (#6996)
d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
Additional commits viewable in compare view




Updates gunicorn from 23.0.0 to 24.1.1

Release notes
Sourced from gunicorn's releases.

24.1.1
Bug Fixes

Fix forwarded_allow_ips and proxy_allow_ips to remain as strings for backward
compatibility with external tools like uvicorn. Network validation now uses strict
mode to detect invalid CIDR notation (e.g., 192.168.1.1/24 where host bits are set)
(#3458,
[PR #3459](benoitc/gunicorn#3459))


Full Changelog: https://github.com/benoitc/gunicorn/compare/24.1.0...24.1.1
Gunicorn 24.1.0
New Features


Official Docker Image: Gunicorn now publishes official Docker images to GitHub Container Registry ([PR #3454](benoitc/gunicorn#3454))

Available at ghcr.io/benoitc/gunicorn
Based on Python 3.12 slim image
Uses recommended worker formula (2 × CPU + 1)
Configurable via environment variables



PROXY Protocol v2 Support: Extended PROXY protocol implementation to support the binary v2 format in addition to the existing text-based v1 format ([PR #3451](benoitc/gunicorn#3451))

New --proxy-protocol modes: off, v1, v2, auto
auto mode (default when enabled) detects v1 or v2 automatically
v2 binary format is more efficient and supports additional metadata
Works with HAProxy, AWS NLB/ALB, and other PROXY protocol v2 sources



CIDR Network Support: --forwarded-allow-ips and --proxy-allow-from now accept CIDR notation (e.g., 192.168.0.0/16) for specifying trusted networks ([PR #3449](benoitc/gunicorn#3449))


Socket Backlog Metric: New gunicorn.socket.backlog gauge metric reports the current socket backlog size on Linux systems ([PR #3450](benoitc/gunicorn#3450))


InotifyReloader Enhancement: The inotify-based reloader now watches newly imported modules, not just those loaded at startup ([PR #3447](benoitc/gunicorn#3447))


Bug Fixes

Fix signal handling regression where SIGCLD alias caused "Unhandled signal: cld" errors on Linux when workers fail during boot (#3453)
Fix socket blocking mode on keepalive connections preventing SSL handshake failures with async workers ([PR #3452](benoitc/gunicorn#3452))
Use smaller buffer size in finish_body() for faster timeout detection on slow or abandoned connections ([PR #3453](benoitc/gunicorn#3453))
Handle SSLWantReadError in finish_body() to prevent worker hangs during SSL renegotiation ([PR #3448](benoitc/gunicorn#3448))
Log SIGTERM as info level instead of warning to reduce noise in orchestrated environments ([PR #3446](benoitc/gunicorn#3446))
Print exception details to stderr when worker fails to boot ([PR #3443](benoitc/gunicorn#3443))
Fix unreader.unread() to prepend data to buffer instead of appending ([PR #3442](benoitc/gunicorn#3442))
Prevent RecursionError when pickling Config objects ([PR #3441](benoitc/gunicorn#3441))
Use proper exception chaining with raise from in glogging.py ([PR #3440](benoitc/gunicorn#3440))

Installation
pip install gunicorn==24.1.0
</tr></table> 


... (truncated)


Commits

375e79e release: bump version to 24.1.1
ad0c12d docs: add sponsors section to README
70200ee chore: add GitHub Sponsors funding configuration
6841804 docs: remove incorrect PR reference from Docker changelog entry
abce0ca docs: add 24.1.1 changelog entry for forwarded_allow_ips fix
e9a3f30 fix: keep forwarded_allow_ips as strings for backward compatibility (#3459)
d73ff4b docs: update main changelog with 24.1.0
53f2c31 ci: allow docs deploy on workflow_dispatch
eab5f0b ci: trigger Docker publish on tags with or without v prefix
a20d3fb docs: add Docker image to 24.1.0 changelog
Additional commits viewable in compare view




Updates dj-database-url from 2.3.0 to 3.1.0

Release notes
Sourced from dj-database-url's releases.

v3.1.0
What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in jazzband/dj-database-url#268
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in jazzband/dj-database-url#270
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in jazzband/dj-database-url#276
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in jazzband/dj-database-url#278
Update license to BSD-3-Clause in setup.py by @GabrielBarrantes in jazzband/dj-database-url#279
CI: run typechecks only once, not for each Django/Python version by @akx in jazzband/dj-database-url#274

New Contributors

@GabrielBarrantes made their first contribution in jazzband/dj-database-url#279
@akx made their first contribution in jazzband/dj-database-url#274

Full Changelog: https://github.com/jazzband/dj-database-url/compare/v3.0.1...v3.1.0
v3.0.1
What's Changed

Re-drop dependency on typing_extensions by @edmorley in jazzband/dj-database-url#269

Full Changelog: https://github.com/jazzband/dj-database-url/compare/v3.0.0...v3.0.1
v3.0.0
What's Changed

Drop dependency on typing_extensions by @edmorley in jazzband/dj-database-url#257
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jazzband/dj-database-url#259
Fix type errors by @adamchainz in jazzband/dj-database-url#261
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in jazzband/dj-database-url#262

New Contributors

@edmorley made their first contribution in jazzband/dj-database-url#257

Full Changelog: https://github.com/jazzband/dj-database-url/compare/v2.3.0...v3.0.0



Changelog
Sourced from dj-database-url's changelog.

v3.1.0 (2026-01-03)

Add support for Django 6.0
Update CI structure.
Migrate to UV for dependency management and builds.
Python >3.10 support.

v3.0.1 (2025-07-01)

Drop dependency on typing_extensions.

v3.0.0 (2025-05-18)

Bumping to version 3; changes to code do break some API compatibility.


Implement a new decorator registry pattern to implement checks on database connection string.
You can now support and implement your own database strings by extending the @register functionality.
Update supported python versions and django versions.




Commits

36ec238 Update CHANGELOG.md
84fd050 Switch to modern dict type hints for improved readability and consistency.
9929991 Merge branch 'akx/ci-split'
59b3cd6 Update workflow to be uv compatable
37b252e Migrate release workflow to release events, update actions, and integrate `...
a01d6b1 Update project to use uv.
9894298 Expand test matrix to support Python 3.14 and Django 6.0, update compatibilit...
438ec39 Update license to BSD-3-Clause in setup.py (#279)
8a3c372 [pre-commit.ci] pre-commit autoupdate (#278)
390d524 [pre-commit.ci] pre-commit autoupdate (#276)
Additional commits viewable in compare view




Updates django from 5.1.7 to 6.0.1

Commits

85eb963 [6.0.x] Bumped version for 6.0.1 release.
ac4a550 [6.0.x] Added release date for 6.0.1.
dcfc5b0 [6.0.x] Added release date for 5.2.10.
42bab76 [6.0.x] Fixed #36843, #36793 -- Reverted "Fixed #27489 -- Renamed permissions...
764af47 [6.0.x] Refs #33647 -- Fixed silent data truncation in bulk_create on Postgres.
b7b5465 [6.0.x] Fixed #36829 -- Reverted value of ClearableFileInput.use_fieldset to ...
90daa65 [6.0.x] Fixed #30515 -- Documented resolve_url() in docs/topics/http/shortcut...
d35daf8 [6.0.x] Fixed #36796 -- Handled lazy routes correctly in RoutePattern.match().
16107ab [6.0.x] Refs #36810 -- Avoided infinite recursion in LazyNonce.repr().
774543e [6.0.x] Fixed #36305 -- Added documentation indentation guidelines to contrib...
Additional commits viewable in compare view




Updates pytest from 8.3.5 to 9.0.2

Release notes
Sourced from pytest's releases.

9.0.2
pytest 9.0.2 (2025-12-06)
Bug fixes


#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.
You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.
Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.


#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.


#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0.
Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim.
It will be deprecated in pytest 9.1 and removed in pytest 10.


#13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.


Improved documentation

#4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.

9.0.1
pytest 9.0.1 (2025-11-12)
Bug fixes

#13895: Restore support for skipping tests via raise unittest.SkipTest.
#13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.
#13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.
#13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

#13933: The tox configuration has been adjusted to make sure the desired
version string can be passed into its package_env through
the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment
variable as a part of the release process -- by webknjaz.

Contributor-facing changes

#13891, #13942: The CI/CD part of the release automation is now capable of
creating GitHub Releases without having a Git checkout on
disk -- by bluetech and webknjaz.
#13933: The tox configuration has been adjusted to make sure the desired
version string can be passed into its package_env through
the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment
variable as a part of the release process -- by webknjaz.



... (truncated)


Commits

3d10b51 Prepare release version 9.0.2
188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
b7d7bef Merge pull request #14014 from bluetech/compat-note
bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
bc78386 Add CLI options reference documentation (#13930)
5a4e398 Fix docs typo (#14005) (#14008)
d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
Additional commits viewable in compare view




Updates pytest-django from 4.10.0 to 4.11.1

Release notes
Sourced from pytest-django's releases.

v4.11.1
https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4111-2025-04-03
v4.11.0
https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4110-2025-04-01



Changelog
Sourced from pytest-django's changelog.

v4.11.1 (2025-04-03)
Bugfixes
^^^^^^^^

Fixed a regression in v4.11.0 for Django TestCase tests using the databases class variable ([#1188](https://github.com/pytest-dev/pytest-django/issues/1188) <https://github.com/pytest-dev/pytest-django/issues/1188>__).

v4.11.0 (2025-04-01)
Compatibility
^^^^^^^^^^^^^

Added official support for Django 5.2 (PR [#1179](https://github.com/pytest-dev/pytest-django/issues/1179) <https://github.com/pytest-dev/pytest-django/pull/1179>__).
Dropped testing on MySQL’s MyISAM storage engine (PR [#1180](https://github.com/pytest-dev/pytest-django/issues/1180) <https://github.com/pytest-dev/pytest-django/pull/1180>__).

Bugfixes
^^^^^^^^


Stopped setting up and serializing databases on test session setup when not needed (the database is not requested / serialized_rollback is not used).
On test databases with large amounts of pre-seeded data, this may remove a delay of a few seconds when running pytest --reuse-db.
The determination of which databases to setup is done by static inspection of the test suite.
Using pytest's dynamic features to request db access, such as :meth:request.getfixturevalue("db") <pytest.FixtureRequest.getfixturevalue>, may throw off this analysis.
If you start seeing DatabaseOperationForbidden or "unable to open database" errors, this is likely the cause.
To fix this, decorate at least one test with the :func:django_db <pytest.mark.django_db> marker with appropriate databases and serialized_rollback settings.





Commits

5ada9c1 Release 4.11.1
cf3f0bb fixtures: fixup a regression in previous release for TestCase multi-db support
6d5c272 Release 4.11.0
8000db0 Only setup and serialize databases as needed by tests
6f7fc26 Add optional integration of pytest into django's manage.py test
3071a66 docs/conf.py: format with ruff format
3f44e50 fixtures: avoid unnecessary closure
b732869 Remove testing on MyISAM (#1180)
e362f4c Add support for Django 5.2 (#1179)
See full diff in compare view




Updates python-dotenv from 1.1.0 to 1.2.1

Release notes
Sourced from python-dotenv's releases.

v1.2.1
What's Changed

Support reading .env from FIFOs (Unix) by @sidharth-sudhir in theskumar/python-dotenv#586
Update CI to use trusted publishing on PyPI

New Contributors

@sidharth-sudhir made their first contribution in theskumar/python-dotenv#586

Full Changelog: https://github.com/theskumar/python-dotenv/compare/v1.2.0...v1.2.1
v1.2.0
What's Changed

style: upgrade to use ruff by @theskumar in theskumar/python-dotenv#567
Use sys.exit() instead of exit() by @theskumar in theskumar/python-dotenv#568
feat:  add PYTHON_DOTENV_DISABLED flag to disable load_dotenv (fixes #510) by @matthewfranglen in theskumar/python-dotenv#569
Added Python@3.14: Github CI & tox.ini by @23f3001135 in theskumar/python-dotenv#579
ocs: clarify what load_dotenv() does in README by @cybercoded in theskumar/python-dotenv#575
Bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in theskumar/python-dotenv#577
Move project metadata and config to pyproject.toml by @EpicWink in theskumar/python-dotenv#583

New Contributors

@matthewfranglen made their first contribution in theskumar/python-dotenv#569
@23f3001135 made their first contribution in theskumar/python-dotenv#579
@cybercoded made their first contribution in theskumar/python-dotenv#575
@EpicWink made their first contribution in theskumar/python-dotenv#583

Full Changelog: https://github.com/theskumar/python-dotenv/compare/v1.1.1...v1.2.0
v1.1.1
What's Changed

fix: ensure find_dotenv work reliably on python 3.13 by @theskumar in theskumar/python-dotenv#563
fix(cli): issue with execvpe on Windows by @wrongontheinternet in theskumar/python-dotenv#566

New Contributors

@wrongontheinternet made their first contribution in theskumar/python-dotenv#566

Full Changelog: https://github.com/theskumar/python-dotenv/compare/v1.1.0...v1.1.1



Changelog
Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

Move more config to pyproject.toml, removed setup.cfg
Add support for reading .env from FIFOs (Unix) by [@sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Upgrade build system to use PEP 517 & PEP 518 to use build and pyproject.toml by [@EpicWink] in #583
Add support for Python 3.14 by [@23f3001135] in #579
Add support for disabling of load_dotenv() using PYTHON_DOTENV_DISABLED env var. by [@matthewfranglen] in #569

[1.1.1] - 2025-06-24
Fixed

CLI: Ensure find_dotenv work reliably on python 3.13 by [@theskumar] in #563
CLI: revert the use of execvpe on Windows by [@wrongontheinternet] in #566




Commits

eaf2a91 Do not remove .coverage file
8716196 Bump version: 1.2.0 → 1.2.1
b87807f Update changelog
3af77d3 Support reading .env from FIFOs (Unix) (#586)
...
Description has been truncated

…pdates Bumps the dependencies group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django-cors-headers](https://github.com/adamchainz/django-cors-headers) | `4.7.0` | `4.9.0` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.15.2` | `3.16.1` | | [djangorestframework-gis](https://github.com/openwisp/django-rest-framework-gis) | `1.1` | `1.2.0` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` | | [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.5` | | [gunicorn](https://github.com/benoitc/gunicorn) | `23.0.0` | `24.1.1` | | [dj-database-url](https://github.com/jazzband/dj-database-url) | `2.3.0` | `3.1.0` | | [pytest](https://github.com/pytest-dev/pytest) | `8.3.5` | `9.0.2` | | [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.10.0` | `4.11.1` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.0` | `1.2.1` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.25.0` | `2.51.0` | | [fastkml](https://github.com/cleder/fastkml) | `1.1.0` | `1.4.0` | | [whitenoise](https://github.com/evansd/whitenoise) | `6.9.0` | `6.11.0` | | [geopandas](https://github.com/geopandas/geopandas) | `1.0.1` | `1.1.2` | | [freezegun](https://github.com/spulec/freezegun) | `1.5.1` | `1.5.5` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.5.1` | Updates `django-cors-headers` from 4.7.0 to 4.9.0 - [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst) - [Commits](adamchainz/django-cors-headers@4.7.0...4.9.0) Updates `djangorestframework` from 3.15.2 to 3.16.1 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.15.2...3.16.1) Updates `djangorestframework-gis` from 1.1 to 1.2.0 - [Release notes](https://github.com/openwisp/django-rest-framework-gis/releases) - [Changelog](https://github.com/openwisp/django-rest-framework-gis/blob/master/CHANGES.rst) - [Commits](openwisp/django-rest-framework-gis@v1.1.0...v1.2.0) Updates `psycopg2-binary` from 2.9.10 to 2.9.11 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.10...2.9.11) Updates `requests` from 2.32.3 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.3...v2.32.5) Updates `gunicorn` from 23.0.0 to 24.1.1 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@23.0.0...24.1.1) Updates `dj-database-url` from 2.3.0 to 3.1.0 - [Release notes](https://github.com/jazzband/dj-database-url/releases) - [Changelog](https://github.com/jazzband/dj-database-url/blob/master/CHANGELOG.md) - [Commits](jazzband/dj-database-url@v2.3.0...v3.1.0) Updates `django` from 5.1.7 to 6.0.1 - [Commits](django/django@5.1.7...6.0.1) Updates `pytest` from 8.3.5 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.5...9.0.2) Updates `pytest-django` from 4.10.0 to 4.11.1 - [Release notes](https://github.com/pytest-dev/pytest-django/releases) - [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst) - [Commits](pytest-dev/pytest-django@v4.10.0...v4.11.1) Updates `python-dotenv` from 1.1.0 to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.1.0...v1.2.1) Updates `sentry-sdk` from 2.25.0 to 2.51.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.25.0...2.51.0) Updates `fastkml` from 1.1.0 to 1.4.0 - [Changelog](https://github.com/cleder/fastkml/blob/develop/docs/HISTORY.rst) - [Commits](cleder/fastkml@1.1.0...1.4.0) Updates `whitenoise` from 6.9.0 to 6.11.0 - [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst) - [Commits](evansd/whitenoise@6.9.0...6.11.0) Updates `geopandas` from 1.0.1 to 1.1.2 - [Release notes](https://github.com/geopandas/geopandas/releases) - [Changelog](https://github.com/geopandas/geopandas/blob/main/CHANGELOG.md) - [Commits](geopandas/geopandas@v1.0.1...v1.1.2) Updates `freezegun` from 1.5.1 to 1.5.5 - [Release notes](https://github.com/spulec/freezegun/releases) - [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG) - [Commits](spulec/freezegun@1.5.1...1.5.5) Updates `pre-commit` from 4.2.0 to 4.5.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.2.0...v4.5.1) --- updated-dependencies: - dependency-name: django-cors-headers dependency-version: 4.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: djangorestframework dependency-version: 3.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: djangorestframework-gis dependency-version: 1.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: psycopg2-binary dependency-version: 2.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: requests dependency-version: 2.32.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: gunicorn dependency-version: 24.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: dj-database-url dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: django dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pytest-django dependency-version: 4.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sentry-sdk dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: fastkml dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: whitenoise dependency-version: 6.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: geopandas dependency-version: 1.1.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: freezegun dependency-version: 1.5.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pre-commit dependency-version: 4.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 1, 2026

Debakel self-assigned this Feb 2, 2026

Debakel force-pushed the dependabot/pip/dependencies-748be069cd branch from be6ec2d to 426e60c Compare February 2, 2026 17:18

Debakel merged commit 4eb1227 into main Feb 2, 2026
2 checks passed

Debakel deleted the dependabot/pip/dependencies-748be069cd branch February 2, 2026 17:18

Conversation

dependabot Bot commented on behalf of github Feb 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.9.0 (2025-09-18)

4.8.0 (2025-09-08)

v3.16.1

Minor changes

Bug fixes

Translations

Documentation

Internal changes

New Contributors

1.2.0 [2025-06-02]

Features

Changes

Version 1.2.0 [2025-06-02]

Version 1.1.0 [2024-08-17]

Current release

v2.32.5

2.32.5 (2025-08-18)

v2.32.4

2.32.4 (2025-06-10)

2.32.5 (2025-08-18)

2.32.4 (2025-06-10)

24.1.1

Bug Fixes

Gunicorn 24.1.0

New Features

Bug Fixes

Installation

v3.1.0

What's Changed

New Contributors

v3.0.1

What's Changed

v3.0.0

What's Changed

New Contributors

v3.1.0 (2026-01-03)

v3.0.1 (2025-07-01)

v3.0.0 (2025-05-18)

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

Improved documentation

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

v4.11.1

v4.11.0

v4.11.1 (2025-04-03)

v4.11.0 (2025-04-01)

v1.2.1

What's Changed

New Contributors

v1.2.0

What's Changed

New Contributors

v1.1.1

What's Changed

New Contributors

[1.2.1] - 2025-10-26

[1.2.0] - 2025-10-26

[1.1.1] - 2025-06-24

Fixed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Feb 1, 2026 •

edited

Loading