build(deps): bump the backend group across 1 directory with 18 updates by dependabot[bot] · Pull Request #176 · jhd3197/ServerKit

dependabot · 2026-10-17T11:44:27Z

Bumps the backend group with 18 updates in the /backend directory:

Package	From	To
sqlalchemy	`2.0.52`	`2.0.55`
flask-migrate	`4.0.7`	`4.1.0`
flask-jwt-extended	`4.6.0`	`4.7.4`
flask-cors	`6.0.2`	`6.0.5`
flask-socketio	`5.6.1`	`5.7.0`
python-socketio	`5.16.3`	`5.17.0`
python-engineio	`4.13.3`	`4.14.0`
python-dotenv	`1.2.2`	`1.2.4`
pyyaml	`6.0.1`	`6.0.3`
click	`8.3.3`	`8.5.0`
croniter	`6.0.0`	`6.2.4`
cryptography	`50.0.0`	`50.0.2`
pyotp	`2.9.0`	`2.10.0`
requests	`2.33.1`	`2.34.2`
boto3	`1.35.0`	`1.43.118`
authlib	`1.6.12`	`1.9.1`
apispec	`6.4.0`	`6.10.0`
prompture	`1.11.0`	`1.15.1`

Updates sqlalchemy from 2.0.52 to 2.0.55

Release notes

Sourced from sqlalchemy's releases.

2.0.55

Released: October 16, 2026

orm

[orm] [bug] Fixed issue in Annotated Declarative where an annotation naming an undefined symbol, where the annotation is not wrapped in _orm.Mapped, would raise TypeError rather than the expected MappedAnnotationError when running under Python 3.14 without from __future__ import annotations in effect. Under PEP 649, such an annotation is delivered as a ForwardRef rather than a string, a form which was not accommodated by the check that determines whether an unresolvable annotation was intended to be mapped.

References: #13602

[orm] [bug] [regression] Fixed regression caused by #11917 in version 2.0.36 where an ORM enabled _sql.update() using WHERE criteria which matched more than one object present in the _orm.Session would expire server-side onupdate columns, as well as columns that were SET to a SQL expression, on only one of the matched objects, leaving the remaining objects with stale values for those attributes. The columns are now expired for all matched objects.

References: #13675

orm extensions

[bug] [orm extensions] Fixed issue in the mutable_toplevel extension where the in-place |= operator on MutableDict and the in-place *= operator on MutableList did not emit change events, so that the modification was not detected and was not persisted on the next flush. These operators now invoke Mutable.changed() in the same way as the in-place set operators of MutableSet and the += operator of MutableList.

References: #13643

engine

[engine] [bug] [regression] Fixed regression from the 1.4 series where the DBAPI cursor used for a compiled statement that returns no rows, which includes DDL constructs such as CreateTable and DropTable as well as the SAVEPOINT, ROLLBACK TO SAVEPOINT and RELEASE SAVEPOINT statements emitted by _engine.Connection.begin_nested(), was not closed after execution, and was instead left to be released when garbage collected.

... (truncated)

Commits

See full diff in compare view

Updates flask-migrate from 4.0.7 to 4.1.0

Release notes

Sourced from flask-migrate's releases.

Release 4.1.0

See CHANGES.md for release notes.

Changelog

Sourced from flask-migrate's changelog.

Flask-Migrate Change Log

Release 4.1.0 - 2025-01-10

Accept arguments such as --directory in environment variables #553 (commit)

Fix minor typos in documentation #552 (commit) (thanks Kevin Kirsche!)

Release 4.0.7 - 2024-03-11

Regression from #438: check g.x_arg exists before accessing it #541 (commit) (thanks Skye Im!)

Release 4.0.6 - 2024-03-09

Accept -x options for all db commands #438 (commit)

Add --purge flag to the stamp command #540 (commit) (thanks Jono N!)

Release 4.0.5 - 2023-09-12

Compatibility fixes for Flask-SQLAlchemy >= 3.1 #526 (commit) (thanks David Lord!)

Allow process_revision_directives option to be configurable #523 (commit) (thanks llc!)

Stop testing Python 3.7, as Flask-SQLAlchemy 3.1 stopped supporting it (commit)

Release 4.0.4 - 2023-02-02

Correctly obtain database URL with SQLAlchemy 2.0 #505 (commit)

Release 4.0.3 - 2023-01-29

Remove legacy future import in Alembic templates #504 (commit) (thanks Pamela Fox!)

Add SQLAlchemy 1.4 and 2.0 to the test matrix (commit)

Switch to pytest as test runner (commit)

Release 4.0.2 - 2023-01-18

Support "check" command #502 (commit) (thanks Masamitsu MURASE!)

Release 4.0.1 - 2023-01-05

Do not use deprecated functions in Flask-SQLAlchemy 3.0 (commit)

Stop building Python 3.6 (commit)

Remove tests from pypi package (commit)

Release 4.0.0 - 2022-11-13

Updates for Flask-SQLAlchemy 3.x compatibility (commit)

Enable type comparison and batch mode by default (commit)

Option to rename "db" command group to a custom name (commit)

Better handling of MetaData instances in templates (commit)

Set options correctly when revision --autogenerate is used #463 (commit) (thanks Frazer McLean!)

Documentation section on configuring Alembic (commit)

... (truncated)

Commits

dd098cc Release 4.1.0
12a181c Accept arguments such as --directory via environment variables (Fixes #553)
0c0e828 revert to default funding file #nolog
3b073a2 Fix: minor typos (#552)
f5f70fb add a .readthedocs.yml configuration #nolog
f312c2e Version 4.0.8.dev0
See full diff in compare view

Updates flask-jwt-extended from 4.6.0 to 4.7.4

Release notes

Sourced from flask-jwt-extended's releases.

4.7.4

What's Changed

setup.py: bump PyJWT floor to >=2.11.0 to match the actual runtime requirement by @potiuk in vimalloc/flask-jwt-extended#577

New Contributors

@potiuk made their first contribution in vimalloc/flask-jwt-extended#577

Full Changelog: vimalloc/flask-jwt-extended@4.7.3...4.7.4

4.7.3

I'm skipping 4.7.2 because I forgot to bump the python version in code. This is the same as 4.7.2, with things setup correctly.

Oops

4.7.2

What's Changed

fix: a unexpected token by @Dog-Egg in vimalloc/flask-jwt-extended#567

Update active python versions by @vimalloc in vimalloc/flask-jwt-extended#575

Bump PyJWT to 2.12.1 by @oomichi-melco in vimalloc/flask-jwt-extended#574

New Contributors

@Dog-Egg made their first contribution in vimalloc/flask-jwt-extended#567

@oomichi-melco made their first contribution in vimalloc/flask-jwt-extended#574

Full Changelog: vimalloc/flask-jwt-extended@4.7.1...4.7.2

4.7.1

What's Changed

Add controls for verify_sub option in PyJWT by @jlucier in vimalloc/flask-jwt-extended#562

New Contributors

@jlucier made their first contribution in vimalloc/flask-jwt-extended#562

Full Changelog: vimalloc/flask-jwt-extended@4.7.0...4.7.1

4.7.0

What's Changed

Drop support for python 3.7 and 3.8, add 3.13 by @vimalloc in vimalloc/flask-jwt-extended#559

Fix documentation around identity needing to be a string by @vimalloc in vimalloc/flask-jwt-extended#558

Full Changelog: vimalloc/flask-jwt-extended@4.6.0...4.7.0

Commits

fdad1cd Bump to 4.7.4
a049882 setup.py: bump PyJWT floor to >=2.11.0 to match the actual runtime requiremen...
03b6435 Bump to 4.7.3
9bf8d35 Bump PyJWT to 2.12.1 (#574)
78cf944 Update active python versions (#575)
1910726 fix: a unexpected token (#567)
410b4b0 Bump to 4.7.1
c3ac3db Add controls for verify_sub option (#562)
49cf2e9 Remove python 3.8 workaround in tests. (#560)
f005c11 Bump to 4.7.0
Additional commits viewable in compare view

Updates flask-cors from 6.0.2 to 6.0.5

Release notes

Sourced from flask-cors's releases.

6.0.5

Supersedes 6.0.4

What's Changed

Add MyPy Typing and modernize options parsing by @corydolphin in corydolphin/flask-cors#409 (this broke strict type checking when using Blueprints)

Restore Blueprint support in CORS type signatures (#410) by @corydolphin in corydolphin/flask-cors#411

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.5

6.0.4

What's Changed

Add MyPy Typing by @corydolphin in corydolphin/flask-cors#409

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.4

6.0.3

What's Changed

Derive package version from git tag via setuptools-scm by @corydolphin in corydolphin/flask-cors#405

Improve CI/CD security with least privilege and build separation by @corydolphin in corydolphin/flask-cors#406

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

6.0.3-pre

What's Changed

Derive package version from git tag via setuptools-scm by @corydolphin in corydolphin/flask-cors#405

Improve CI/CD security with least privilege and build separation by @corydolphin in corydolphin/flask-cors#406

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

Commits

91ebc49 Typing Hotfix: support blueprints in the type system
d601665 Add strict MyPy Typing
c8e8871 Harden release publishing workflow (#406)
e1d4034 Derive package version from git tag via setuptools-scm (#405)
See full diff in compare view

Updates flask-socketio from 5.6.1 to 5.7.0

Updates python-socketio from 5.16.3 to 5.17.0

Commits

See full diff in compare view

Updates python-engineio from 4.13.3 to 4.14.0

Release notes

Sourced from python-engineio's releases.

Release 4.14.0

See CHANGES.md for release notes.

Release 4.13.5

See CHANGES.md for release notes.

Release 4.13.4

See CHANGES.md for release notes.

Changelog

Sourced from python-engineio's changelog.

python-engineio change log

Release 4.14.0 - 2026-08-30

Client: abort connection when connect handler raises an error #10001 (commit)

Release 4.13.5 - 2026-08-12

Prevent unnecessary resource allocation in ASGI driver (commit)

Release 4.13.4 - 2026-07-31

Prevent a race condition in the sync client's connection close handling #458 (commit)

Cleaner WebSocket exit for Werkzeug #457 (commit)

Release 4.13.3 - 2026-06-20

Make sure client disconnects when write loop exits #455 (commit)

Address flaky unit test #444 (commit)

Stop using codecov service, since it has been failing for a long time (commit)

Release 4.13.2 - 2026-05-21

Prevent unnecessary resource allocations #441 (commit)

Add zizmor to CI builds #437 (commit)

Release 4.13.1 - 2026-02-06

Document that a process can have only one custom JSON module (commit)

Switch to Furo documentation template (commit)

Release 4.13.0 - 2025-12-24

Apply escaping rules when parsing cookie values (commit)

Several minor improvements to the aiohttp integration #419 (commit) (thanks PaulWasTaken!)

Clarify logging behavior in documentation #421 (commit) (thanks ZipFile!)

Address deprecation warnings #422 (commit)

Add 3.14 and pypy-3.11 CI builds (commit)

Drop Python 3.8 and 3.9 from CI builds (commit)

Release 4.12.3 - 2025-09-28

Reset client queue upon disconnection #414 (commit)

Support ['*'] in addition to '*' in the cors_allowed_origins option #410 (commit) (thanks Wu Clan!)

Release 4.12.2 - 2025-06-04

Support new monkey-patched gevent Queue class in the client #403 (commit)

Better support of the ASGI spec when interpreting WebSocket events #405 (commit) (thanks Eric Zhang!)

... (truncated)

Commits

1401f1a Release 4.14.0
2cd05b0 Client: abort connection when connect handler errors (Fixes #10001)
754b76f Update project URLs in metadata
9914031 Forgejo migration
e937342 Version 4.13.6.dev0
86f17f7 Release 4.13.5
064f902 Updated readme file
fc5e2f0 prevent unnecessary resource allocation in asgi driver
d061390 Version 4.13.5.dev0
0583161 Release 4.13.4
Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

dotenv get no longer exits with code 1 for empty string values (KEY=) by [@ShamikOfficial] in #700

An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@Noethix55555] in #663

dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@ROTl24] in #698

v1.2.3

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

dotenv get no longer exits with code 1 for empty string values (KEY=) by [@ShamikOfficial] in #700

An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@Noethix55555] in #663

dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@ROTl24] in #698

[1.2.3] - 2026-08-16

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Commits

a565c2c Bump version: 1.2.3 → 1.2.4
4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
f215c02 fix: dotenv get exits 0 for empty string values (#700)
58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
f5485a6 fix: parse empty unquoted value with inline comment as empty string
49515af Bump version: 1.2.2 → 1.2.3
8ac846f chore: add release runbook (RELEASING.md) and make release target
bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
Additional commits viewable in compare view

Updates pyyaml from 6.0.1 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

6.0.2

What's Changed

Support for Cython 3.x and Python 3.13.

Full Changelog: yaml/pyyaml@6.0.1...6.0.2

6.0.2rc1

Support for extension build with Cython 3.x

Support for Python 3.13

Added PyPI wheels for musllinux on aarch64

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

6.0.2 (2024-08-06)

yaml/pyyaml#808 -- Support for Cython 3.x and Python 3.13

Commits

49790e7 Release 6.0.3 (#889)
41309b0 Release 6.0.2 (#819)
dd9f0e1 6.0.2rc1 (#809)
f5527a2 disable CI trigger on PR edits
b4d80a7 Python 3.12 + musllinux_1_1_x86_64 wheel support
See full diff in compare view

Updates click from 8.3.3 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](https://github.com/pallets/click/discussions/3527). #3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653

Fix test failures when using pytest >= 9.1. {pr}3656

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](https://github.com/pallets/click/discussions/3527). {pr}3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641

{func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695

The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits

8b19813 Release version 8.5.0
2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
131c86a Add FAQ entry about UnicodeEncodeError on Windows
e1fd594 Add support of pathlib.Path to edit (#3781)
a1d8785 Add support of pathlib.Path to edit
2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
a6256bf Forwards all user's parameters set in PAGER
61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
9835b0f Resolve the pager command once, in _pager_contextmanager
f36d58b Refactor pager stream handling (#3767)
Additional commits viewable in compare view

Updates croniter from 6.0.0 to 6.2.4

Release notes

Sourced from croniter's releases.

6.2.4

croniter 6.2.4

Bugfixes

Fix expand_from_start_time day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (isoweekday() % 7 instead of weekday() + 1). (#239, thanks @alhudz)

Packaging

Bump pinned GitHub Actions via dependabot. (#238, #240)

Install: pip install croniter==6.2.4 · PyPI

6.2.3

No release notes provided.

6.2.2

No release notes provided.

6.2.1

No release notes provided.

6.2.0

No release notes provided.

6.1.0

No release notes provided.

6.1.0rc3

No release notes provided.

6.1.0rc2

No release notes provided.

Changelog

Sourced from croniter's changelog.

6.2.4 (2026-07-10)

Bugfixes

- Fix ``expand_from_start_time`` day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (``isoweekday() % 7`` instead of ``weekday() + 1``). [44e3090, [#239](https://github.com/pallets-eco/croniter/issues/239), @alhudz]
Packaging

Bump pinned GitHub Actions via dependabot. [fd13d2e, #240; 5cd2e46, #238]

6.2.3 (2026-07-02)

Features and Improvements

- Fix quadratic expansion of comma-separated range lists for a large speed-up on expressions with many ranges. [1d79fc6, [#231](https://github.com/pallets-eco/croniter/issues/231), @alhudz]
Bugfixes
- Reject a zero step (e.g. ``5-5/0``) in equal and reversed cron ranges instead of silently accepting it. [ab27767, [#232](https://github.com/pallets-eco/croniter/issues/232), @alhudz]
- Fix ``expand_from_start_time`` month low-bound off-by-one so stepped month ranges start on the correct month. [f329964, [#235](https://github.com/pallets-eco/croniter/issues/235), @alhudz]
Packaging



Fix zizmor-reported security findings in GitHub Actions workflows. [ed19f94, #230]
Bump pinned build and CI dependencies via dependabot.
Upgrade locked development and build dependencies (uv lock --upgrade).

6.2.2 (2026-03-15)
Packaging
- Switch build backend from ``flit_core`` to ``hatchling`` with pinned dependencies. [4cce160]
- Add PEP 639 license expression (``license = &quot;MIT&quot;``) to project metadata. [4cce160]
- Pin all GitHub Actions to SHA hashes across CI workflows. [4cce160]
- Add dependabot for automated dependency updates. [4cce160]
- Add zizmor workflow for CI security scanning. [4cce160]
6.2.1 (2026-03-15)
Bugfixes
- Fix ``get_prev`` skipping Feb 29 on leap years for day-of-month expressions. [441a0b5, [#203](https://github.com/pallets-eco/croniter/issues/203), @Souls-R]

&amp;lt;/tr&amp;gt;&amp;lt;/table&amp;gt; 
&lt;/code&gt;&lt;/pre&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/58534997eb4634344f00d407fb199d4d1bd057e7&quot;&gt;&lt;code&gt;5853499&lt;/code&gt;&lt;/a&gt; Prepare for release 6.2.4 (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/241&quot;&gt;#241&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/fd13d2ec447efd854806638cb5f71a2a3a90a0b5&quot;&gt;&lt;code&gt;fd13d2e&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/240&quot;&gt;#240&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/44e3090ae47ccf72e4027ed6fabf6a31eca42f85&quot;&gt;&lt;code&gt;44e3090&lt;/code&gt;&lt;/a&gt; wrap sunday in expand_from_start_time day-of-week low bound (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/239&quot;&gt;#239&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/5cd2e4611e8ebea446a9d0edef3f9d8e1f30c0e3&quot;&gt;&lt;code&gt;5cd2e46&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/238&quot;&gt;#238&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/f1eeddd7b9057b66406d162d04879258b29601d5&quot;&gt;&lt;code&gt;f1eeddd&lt;/code&gt;&lt;/a&gt; Prepare for 6.2.4 development (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/237&quot;&gt;#237&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/22b59e05f5ca485c45596b2a9b580fddffbf753f&quot;&gt;&lt;code&gt;22b59e0&lt;/code&gt;&lt;/a&gt; Prepare for release 6.2.3 (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/236&quot;&gt;#236&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/ab277671adc8e446e8dc7f1e939eabf024b6199e&quot;&gt;&lt;code&gt;ab27767&lt;/code&gt;&lt;/a&gt; reject zero step in equal and reversed cron ranges (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/232&quot;&gt;#232&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/f329964223eeb29e7788b1a9d615b525148fec96&quot;&gt;&lt;code&gt;f329964&lt;/code&gt;&lt;/a&gt; fix expand_from_start_time month low bound off-by-one (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/235&quot;&gt;#235&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/9810279c20030954e2f1ed2cf5f1d34b98c6b07f&quot;&gt;&lt;code&gt;9810279&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/233&quot;&gt;#233&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/d051aaf6342fbe9c559b9fcd99e6fb6f3bb63cb7&quot;&gt;&lt;code&gt;d051aaf&lt;/code&gt;&lt;/a&gt; Bump hatchling from 1.29.0 to 1.30.1 in the pip-dependencies group (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/234&quot;&gt;#234&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/pallets-eco/croniter/compare/6.0.0...6.2.4&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;</code></pre>

Updates `cryptography` from 50.0.0 to 50.0.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>50.0.2 - 2026-09-30</p>
<pre><code>
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
* Added ``abi3.abi3t`` wheels for free-threaded CPython 3.15 and later.
* Updated to PyO3 0.29.2, which fixes building ``cryptography`` on Cygwin and
  MSYS2.
<p>.. _v50-0-1:</p>
<p>50.0.1 - 2026-08-25
</code></pre></p>
<ul>
<li>Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.</li>
</ul>
<p>.. _v50-0-0:</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/4dda5c7fe4ae71b8925f2551910a0ef959df9c7a"><code>4dda5c7</code></a> [50.0.x] Bump for 50.0.2 release + changelog (<a href="https://redirect.github.com/pyca/cryptography/issues/15733">#15733</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/70c881cd7ea97d38df09f57c1117470cd1a5a2f7"><code>70c881c</code></a> [50.0.x] Bump pyo3 to 0.29.2 (<a href="https://redirect.github.com/pyca/cryptography/issues/15731">#15731</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/a8c45c449b8d29908a14561afd45fee8bf27d044"><code>a8c45c4</code></a> [50.0.x] Build abi3.abi3t wheels for CPython 3.15+ (<a href="https://redirect.github.com/pyca/cryptography/issues/15496">#15496</a>) (<a href="https://redirect.github.com/pyca/cryptography/issues/15732">#15732</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/ffde75a2b594822c740a2e4748b56c00548302bf"><code>ffde75a</code></a> bump for 50.0.1 + changelog (<a href="https://redirect.github.com/pyca/cryptography/issues/15520">#15520</a>)</li>
<li>See full diff in <a href="https://github.com/pyca/cryptography/compare/50.0.0...50.0.2">compare view</a></li>
</ul>
</details>
<br />

Updates `pyotp` from 2.9.0 to 2.10.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pyauth/pyotp/releases">pyotp's releases</a>.</em></p>
<blockquote>
<h2>v2.10.0</h2>
<ul>
<li>
<p>Fix parse_uri mis-parsing of encoded colon in issuer/account name (<a href="https://redirect.github.com/pyauth/pyotp/issues/187">#187</a>)</p>
<ul>
<li>
<p>Simplified and improved generate_otp() performance in Steam class (<a href="https://redirect.github.com/pyauth/pyotp/issues/179">#179</a>)</p>
</li>
<li>
<p>Check digest function to prevent error on OTP Generation (<a href="https://redirect.github.com/pyauth/pyotp/issues/170">#170</a>)</p>
</li>
<li>
<p>Ignore non-standard otpauth parameters</p>
</li>
<li>
<p>use strings as immutable default arguments (<a href="https://redirect.github...

_Description has been truncated_

Bumps the backend group with 18 updates in the /backend directory: | Package | From | To | | --- | --- | --- | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.52` | `2.0.55` | | [flask-migrate](https://github.com/miguelgrinberg/flask-migrate) | `4.0.7` | `4.1.0` | | [flask-jwt-extended](https://github.com/vimalloc/flask-jwt-extended) | `4.6.0` | `4.7.4` | | [flask-cors](https://github.com/corydolphin/flask-cors) | `6.0.2` | `6.0.5` | | [flask-socketio](https://code.miguelgrinberg.com/miguelgrinberg/flask-socketio) | `5.6.1` | `5.7.0` | | [python-socketio](https://github.com/sponsors/miguelgrinberg) | `5.16.3` | `5.17.0` | | [python-engineio](https://github.com/miguelgrinberg/python-engineio) | `4.13.3` | `4.14.0` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.4` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.1` | `6.0.3` | | [click](https://github.com/pallets/click) | `8.3.3` | `8.5.0` | | [croniter](https://github.com/pallets-eco/croniter) | `6.0.0` | `6.2.4` | | [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.2` | | [pyotp](https://github.com/pyauth/pyotp) | `2.9.0` | `2.10.0` | | [requests](https://github.com/psf/requests) | `2.33.1` | `2.34.2` | | [boto3](https://github.com/boto/boto3) | `1.35.0` | `1.43.118` | | [authlib](https://github.com/authlib/authlib) | `1.6.12` | `1.9.1` | | [apispec](https://github.com/marshmallow-code/apispec) | `6.4.0` | `6.10.0` | | [prompture](https://github.com/jhd3197/prompture) | `1.11.0` | `1.15.1` | Updates `sqlalchemy` from 2.0.52 to 2.0.55 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `flask-migrate` from 4.0.7 to 4.1.0 - [Release notes](https://github.com/miguelgrinberg/flask-migrate/releases) - [Changelog](https://github.com/miguelgrinberg/Flask-Migrate/blob/main/CHANGES.md) - [Commits](miguelgrinberg/Flask-Migrate@v4.0.7...v4.1.0) Updates `flask-jwt-extended` from 4.6.0 to 4.7.4 - [Release notes](https://github.com/vimalloc/flask-jwt-extended/releases) - [Commits](vimalloc/flask-jwt-extended@4.6.0...4.7.4) Updates `flask-cors` from 6.0.2 to 6.0.5 - [Release notes](https://github.com/corydolphin/flask-cors/releases) - [Changelog](https://github.com/corydolphin/flask-cors/blob/main/CHANGELOG.md) - [Commits](corydolphin/flask-cors@6.0.2...6.0.5) Updates `flask-socketio` from 5.6.1 to 5.7.0 Updates `python-socketio` from 5.16.3 to 5.17.0 - [Commits](https://github.com/sponsors/miguelgrinberg/commits) Updates `python-engineio` from 4.13.3 to 4.14.0 - [Release notes](https://github.com/miguelgrinberg/python-engineio/releases) - [Changelog](https://github.com/miguelgrinberg/python-engineio/blob/main/CHANGES.md) - [Commits](miguelgrinberg/python-engineio@v4.13.3...v4.14.0) Updates `python-dotenv` from 1.2.2 to 1.2.4 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.2...v1.2.4) Updates `pyyaml` from 6.0.1 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.1...6.0.3) Updates `click` from 8.3.3 to 8.5.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.3.3...8.5.0) Updates `croniter` from 6.0.0 to 6.2.4 - [Release notes](https://github.com/pallets-eco/croniter/releases) - [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst) - [Commits](pallets-eco/croniter@6.0.0...6.2.4) Updates `cryptography` from 50.0.0 to 50.0.2 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@50.0.0...50.0.2) Updates `pyotp` from 2.9.0 to 2.10.0 - [Release notes](https://github.com/pyauth/pyotp/releases) - [Changelog](https://github.com/pyauth/pyotp/blob/main/Changes.rst) - [Commits](pyauth/pyotp@v2.9.0...v2.10.0) Updates `requests` from 2.33.1 to 2.34.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.33.1...v2.34.2) Updates `boto3` from 1.35.0 to 1.43.118 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.35.0...1.43.118) Updates `authlib` from 1.6.12 to 1.9.1 - [Release notes](https://github.com/authlib/authlib/releases) - [Commits](authlib/authlib@v1.6.12...v1.9.1) Updates `apispec` from 6.4.0 to 6.10.0 - [Changelog](https://github.com/marshmallow-code/apispec/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/apispec@6.4.0...6.10.0) Updates `prompture` from 1.11.0 to 1.15.1 - [Release notes](https://github.com/jhd3197/prompture/releases) - [Commits](jhd3197/Prompture@v1.11.0...v1.15.1) --- updated-dependencies: - dependency-name: apispec dependency-version: 6.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: authlib dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: boto3 dependency-version: 1.43.113 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: click dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: croniter dependency-version: 6.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: cryptography dependency-version: 50.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: flask-cors dependency-version: 6.0.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: flask-jwt-extended dependency-version: 4.7.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: flask-migrate dependency-version: 4.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: flask-socketio dependency-version: 5.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: prompture dependency-version: 1.13.11 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: pyotp dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: python-dotenv dependency-version: 1.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: python-engineio dependency-version: 4.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: python-socketio dependency-version: 5.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: requests dependency-version: 2.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: sqlalchemy dependency-version: 2.0.54 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 17, 2026

dependabot Bot force-pushed the dependabot/pip/backend/dev/backend-5c856fdf58 branch from 2332c5b to cfd1c72 Compare October 24, 2026 11:44

dependabot Bot changed the title ~~Bump the backend group across 1 directory with 18 updates~~ build(deps): bump the backend group across 1 directory with 18 updates Oct 26, 2026

dependabot Bot force-pushed the dependabot/pip/backend/dev/backend-5c856fdf58 branch from cfd1c72 to 4bb4bb7 Compare October 26, 2026 17:34

Navigation Menu

Repository navigation

build(deps): bump the backend group across 1 directory with 18 updates - #176

build(deps): bump the backend group across 1 directory with 18 updates#176
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/pip/backend/dev/backend-5c856fdf58

dependabot Bot commented on behalf of github Oct 17, 2026 •

edited

Loading

6.2.2 (2026-03-15)

6.2.1 (2026-03-15)

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

2.0.55

orm

orm extensions

engine

Release 4.1.0

Flask-Migrate Change Log

4.7.4

What's Changed

New Contributors

4.7.3

4.7.2

What's Changed

New Contributors

4.7.1

What's Changed

New Contributors

4.7.0

What's Changed

6.0.5

What's Changed

6.0.4

What's Changed

6.0.3

What's Changed

6.0.3-pre

What's Changed

Release 4.14.0

Release 4.13.5

Release 4.13.4

python-engineio change log

v1.2.4

Fixed

v1.2.3

Fixed

[1.2.4] - 2026-10-01

Fixed

[1.2.3] - 2026-08-16

Fixed

6.0.3

What's Changed

6.0.2

What's Changed

6.0.2rc1

8.5.0

Version 8.5.0

6.2.4

croniter 6.2.4

Bugfixes

Packaging

6.2.3

6.2.2

6.2.1

6.2.0

6.1.0

6.1.0rc3

6.1.0rc2

6.2.4 (2026-07-10)

6.2.3 (2026-07-02)

6.2.2 (2026-03-15)

6.2.1 (2026-03-15)

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 17, 2026 •

edited

Loading