Skip to content

chore(deps): bump the package-updates group across 1 directory with 6 updates#3782

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/package-updates-90d7bb85b7
Closed

chore(deps): bump the package-updates group across 1 directory with 6 updates#3782
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/package-updates-90d7bb85b7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 11, 2026 •
edited
Loading

Updates the requirements on django-storages[s3], django, environs[django], bandit[toml], django-stubs and pyrefly to permit the latest version.
Updates django-storages[s3] to 1.14.6

Changelog

Sourced from django-storages[s3]'s changelog.

1.14.6 (2025-04-01)

Google Cloud

  • Add option to sign URLs via IAM Blob API ([#1427](https://github.com/jschneier/django-storages/issues/1427)_)

S3

  • Fix exists calls when using SSE-C ([#1451](https://github.com/jschneier/django-storages/issues/1451)_)
  • Default url_protocol to https: if set to None ([#1483](https://github.com/jschneier/django-storages/issues/1483)_)

.. _#1427: jschneier/django-storages#1427 .. _#1451: jschneier/django-storages#1451 .. _#1483: jschneier/django-storages#1483

1.14.5 (2025-02-15)

General

  • Revert exists() behavior to pre-1.14.4 semantics with additional hardening for Django versions < 4.2 to fix CVE-2024-39330. This change matches the eventual behavior Django itself shipped with. ([#1484](https://github.com/jschneier/django-storages/issues/1484), [#1486](https://github.com/jschneier/django-storages/issues/1486))
  • Add support for Django 5.1 ([#1444](https://github.com/jschneier/django-storages/issues/1444)_)

Azure

  • Deprecated: The setting AZURE_API_VERSION/api_version setting is deprecated in favor of the new AZURE_CLIENT_OPTIONS setting. A future version will remove support for this setting.
  • Add AZURE_CLIENT_OPTIONS settings to enable customization of all BlobServiceClient parameters such as api_version and all retry* options. ([#1432](https://github.com/jschneier/django-storages/issues/1432)_)

Dropbox

  • As part of the above hardening fix a bug was uncovered whereby a root_path setting would be applied multiple times during save() ([#1484](https://github.com/jschneier/django-storages/issues/1484)_)
  • Fix setting OAuth2 access token via env var ([#1452](https://github.com/jschneier/django-storages/issues/1452)_)

FTP

  • Fix incorrect exists() results due to an errant appended slash ([#1438](https://github.com/jschneier/django-storages/issues/1438)_)

Google Cloud

... (truncated)

Commits

Updates django from 5.2.13 to 6.0.4

Commits

Updates environs[django] to 15.0.1

Changelog

Sourced from environs[django]'s changelog.

15.0.1 (2026-04-06)

Bug fixes:

  • Exported environment variables take precedence over .env files (regression from 15.0.0) (#464). Thanks DougEdey-Slice for reporting.

15.0.0 (2026-03-31)

Features:

  • Env.read_env no longer mutates os.environ (#393). Values from .env files are loaded into the Env instance only. This comes with two breaking changes:
    • Env.read_env is now an instance method rather than a @staticmethod. Env.read_env() -> env.read_env()
    • The verbose parameter of read_env is been removed.

Other changes:

  • Drop support for marshmallow 3, which is EOL. marshmallow>=4.0.0 is supported.
  • Minor typing improvements (#463).

14.6.0 (2026-02-19)

Bug fixes:

  • Fix variable expansion with other characters (#359). Thanks flymanzhao for reporting and veeceey for the PR.

Other changes:

  • Update lowest supported marshmallow version to 3.26.2 (#448). Thanks whyscream for the PR.

14.5.0 (2025-11-02)

Features:

  • Add strip_whitespace param to FileAwareEnv (#431). Thanks eandersons for the suggestion and PR.

Other changes:

  • Drop support for Python 3.9, which is EOL.

14.4.0 (2025-10-29)

Features:

  • Add support for ISO 8601 durations to env.timedelta. (#434). Thanks lucas-bremond for the suggestion and PR.

... (truncated)

Commits

Updates bandit[toml] to 1.9.4

Release notes

Sourced from bandit[toml]'s releases.

1.9.4

What's Changed

New Contributors

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

Commits
  • 92ae8b8 Fix B106 reporting wrong line number on multiline function calls (#1360)
  • c8c8a55 Lower version guard in check_ast_node to Python 3.12 (#1355)
  • 8f2f928 Fix B615 false positive when revision is set via variable (#1358)
  • e27493f Include filename in nosec 'no failed test' warning (#1363)
  • b69b336 Fix B613 crash when reading from stdin (#1361)
  • e418b79 Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
  • ff646fd Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
  • c0def6c chore: fixed some typos in comments (#1351)
  • 765f00d Limit B614 to torch.load deserializers (#1348)
  • 06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
  • Additional commits viewable in compare view

Updates django-stubs from 5.2.9 to 6.0.2

Commits
  • 44df163 Version 6.0.2 release (#3254)
  • 28eafd8 Update dependency mypy to >=1.13,<1.21 & fix tests (#3252)
  • 047a72f chore(deps): update dependency pyrefly to v0.59.0 (#3251)
  • f2ff7ca chore(deps): update dependency ty to v0.0.27 (#3249)
  • b73fe6e Use newer syntax and enable more mypy configuration options (#3203)
  • 925fbda Resolve .values() field types on annotated querysets (#3232)
  • 29e03bb Use getattr for field.attname with fallback to field.name (#3248)
  • 0867431 Bump pygments from 2.19.2 to 2.20.0 (#3246)
  • 1151636 [pre-commit.ci] pre-commit autoupdate (#3245)
  • 1f73fcf Disallow mutually exclusive arguments boolean and empty_value in admin `d...
  • Additional commits viewable in compare view

Updates pyrefly from 0.60.1 to 0.60.2

Release notes

Sourced from pyrefly's releases.

Pyrefly v0.60.2

Fixes exponential memory usage on unannotated dictionaries in 0.60.1.

Full Changelog: facebook/pyrefly@0.60.1...0.60.2

Commits
  • ce6194e Bump version to 0.60.2
  • 1fdd157 Save and restore partial vars around overload calls
  • c0a8389 Add var snapshot + restore functionality
  • 76ce196 Revert partial var freshening that led to exponential memory consumption
  • 06e1989 Add snapshot test for dotted names in string literal annotations
  • cb766ec Deduplicate find_definition_for_str_literal by delegating to find_definition_...
  • 964fa7f Refactor find definition for attribute
  • 2a7ce79 Add test: None guard + Any assignment should preserve annotation
  • 0dd866b add test for gradual annotation (list[Any]) preserved on assignment
  • fdb7259 Fix list * literal int spurious error
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the package-updates group across 1 directory with 6…
577d40f 
… updates

Updates the requirements on [django-storages[s3]](https://github.com/jschneier/django-storages), [django](https://github.com/django/django), [environs[django]](https://github.com/sloria/environs), [bandit[toml]](https://github.com/PyCQA/bandit), [django-stubs](https://github.com/typeddjango/django-stubs) and [pyrefly](https://github.com/facebook/pyrefly) to permit the latest version.

Updates `django-storages[s3]` to 1.14.6
- [Changelog](https://github.com/jschneier/django-storages/blob/master/CHANGELOG.rst)
- [Commits](jschneier/django-storages@1.14.4...1.14.6)

Updates `django` from 5.2.13 to 6.0.4
- [Commits](django/django@5.2.13...6.0.4)

Updates `environs[django]` to 15.0.1
- [Changelog](https://github.com/sloria/environs/blob/main/CHANGELOG.md)
- [Commits](sloria/environs@11.0.0...15.0.1)

Updates `bandit[toml]` to 1.9.4
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.7.9...1.9.4)

Updates `django-stubs` from 5.2.9 to 6.0.2
- [Release notes](https://github.com/typeddjango/django-stubs/releases)
- [Commits](typeddjango/django-stubs@5.2.9...6.0.2)

Updates `pyrefly` from 0.60.1 to 0.60.2
- [Release notes](https://github.com/facebook/pyrefly/releases)
- [Commits](facebook/pyrefly@0.60.1...0.60.2)

---
updated-dependencies:
- dependency-name: django-storages[s3]
  dependency-version: 1.14.6
  dependency-type: direct:production
  dependency-group: package-updates
- dependency-name: django
  dependency-version: 6.0.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: package-updates
- dependency-name: environs[django]
  dependency-version: 15.0.1
  dependency-type: direct:production
  dependency-group: package-updates
- dependency-name: bandit[toml]
  dependency-version: 1.9.4
  dependency-type: direct:development
  dependency-group: package-updates
- dependency-name: django-stubs
  dependency-version: 6.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: package-updates
- dependency-name: pyrefly
  dependency-version: 0.60.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: package-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update Python:uv code labels Apr 11, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 11, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 11, 2026
@dependabot dependabot bot deleted the dependabot/uv/package-updates-90d7bb85b7 branch April 11, 2026 06:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@derkweijers derkweijers

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update Python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@derkweijers