deps: bump the prod-deps group across 1 directory with 13 updates #5110

dependabot · 2025-10-06T05:36:47Z

Bumps the prod-deps group with 13 updates in the / directory:

Package	From	To
django	`4.2.24`	`4.2.25`
drf-yasg	`1.21.10`	`1.21.11`
pyyaml	`6.0.2`	`6.0.3`
xlsxwriter	`3.2.8`	`3.2.9`
lark	`1.2.2`	`1.3.0`
django-two-factor-auth[phonenumbers]	`1.17.0`	`1.18.1`
boto3	`1.40.30`	`1.40.45`
coverage	`7.10.6`	`7.10.7`
tox	`4.30.2`	`4.30.3`
psutil	`7.0.0`	`7.1.0`
faker	`37.6.0`	`37.8.0`
docutils	`0.21.2`	`0.22.2`
hypothesis	`6.138.16`	`6.140.3`

Updates django from 4.2.24 to 4.2.25

Commits

57d20b2 [4.2.x] Bumped version for 4.2.25 release.
9504bba [4.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal v...
38d9ef8 [4.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggre...
7c7d2a4 [4.2.x] Added stub release notes and release date for 4.2.25.
3e27d61 [4.2.x] Added missing backticks in docs/releases/security.txt.
07e5fb9 [4.2.x] Added CVE-2025-57833 to security archive.
5636e82 [4.2.x] Post-release version bump.
See full diff in compare view

Updates drf-yasg from 1.21.10 to 1.21.11

Release notes

Sourced from drf-yasg's releases.

1.21.11

FIXED: Fix list views with parameters in last path segment not named "list" views (#917) ADDED: Allow overriding produces/consumes with @swagger_auto_schema decorator (#916) FIXED: Fix filter parameters not appearing in swagger with django-filter>=25 (#926) IMPROVED: Update Python, Django, and DRF versions and packaging configuration (#922) IMPROVED: Remove usage of pkg_resources (#928) FIXED: Fix call_view_method warning to include the method name again (#923) ADDED: Add a hide download button option (#848) ADDED: Add ruff linters (#903)

Changelog

Sourced from drf-yasg's changelog.

######### Changelog #########

1.21.11

FIXED: Fix list views with parameters in last path segment not named "list" views (:pr:917) ADDED: Allow overriding produces/consumes with @swagger_auto_schema decorator (:pr:916) FIXED: Fix filter parameters not appearing in swagger with django-filter>=25 (:pr:926) IMPROVED: Update Python, Django, and DRF versions and packaging configuration (:pr:922) IMPROVED: Remove usage of pkg_resources (:pr:928) FIXED: Fix call_view_method warning to include the method name again (:pr:923) ADDED: Add a hide download button option (:pr:848) ADDED: Add ruff linters (:pr:903)

1.21.10

FIXED: Fix type hints when using postponed evaluation of annotations (PEP-563) (:pr:840) IMPROVED: Update JSON & YAML renderers to not use a "." in their format string (:pr:911) FIXED: Fix lint errors when comparing types with == instead of is (:pr:868) IMPROVED: Update swagger-ui-dist to address CVE-2021-46708 (:pr:904)

1.21.9

ADDED: Added support for zoneinfo object fields (:pr:908)

1.21.8

ADDED: Python 3.11 and 3.12 support (:pr:891) FIXED: Fix pkg_resources version lookups for Python 3.9+ (:pr:891)

1.21.7

Release date: Jul 20, 2023

ADDED: Added drf_yasg.inspectors.query.DrfAPICompatInspector (:pr:857) ADDED: Added DrfAPICompatInspector to serve as a replacement CoreAPICompatInspector (:pr:857) ADDED: Allow DEFAULT_SPEC_RENDERERS default renderers to be overriden in the settings (:pr:857) FIXED: Fixed redoc source mapping (:pr:859)

... (truncated)

Commits

f8cb2db Add version 1.21.11 details to the changelog (#939)
0c6d08d Update the ruff lint rules (#920)
055a74d Bump actions/setup-python from 5 to 6 in the github-actions group (#937)
a8813ac Bump actions/checkout from 4 to 5 in the github-actions group (#936)
9f4b449 Restore the live demo and replace heroku with apprunner (#935)
2983251 fix list views with parameters in last path segment not named "list" views (#...
a746893 allow overriding produces/consumes with @swagger_auto_schema decorator (#916)
e747ad6 Fixes issue with filter parameters not appearing in Swagger after upgrading t...
ee3c871 update Python, Django, and DRF versions & packaging configuration (#922)
be6eeed Remove usage of pkg_resources (#928)
Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

Commits

49790e7 Release 6.0.3 (#889)
See full diff in compare view

Updates xlsxwriter from 3.2.8 to 3.2.9

Changelog

Sourced from xlsxwriter's changelog.

Release 3.2.9 - September 16 2025

Removed the py.typed file since it was causing a lot of downstream CI failures where consumers weren't handling the xlsxwriter types correctly or taking them into account.

The file will be re-added once the xlsxwriter typing is more comprehensive.

Commits

e943bee Prep for release 3.2.9
392bd9e typing: remove py.typed file
See full diff in compare view

Updates lark from 1.2.2 to 1.3.0

Release notes

Sourced from lark's releases.

1.3.0 - Introduces text-slices, Earley fix, and various small improvements

New features

Lark can now parse in sections of strings, using TextSlice, as a faster alternative to creating a "copy-slice" with s[i:j]. Learn more

Added support to match on Tree instances

When serializing a Lark instance, added the option to include the grammar object (before compilation).

Added convenience method Tree.find_token()

Bugfixes

Bugfix of an edge case in Earley related to representation of ambiguity.

Bugfixes in the standalone parser related to imports

Bugfix in indenter - now dedents always contain line information

Various small bugfixes (see PR list below)

Full list of PRs

Docs: Rephrase v_args() documentation to underline it only applies to Transformer classes by @skepppy in lark-parser/lark#1458

Tiny refactor for PR #1451 by @erezsh in lark-parser/lark#1459

Earley: share nodes created by the scanner with the completer by @chanicpanic in lark-parser/lark#1451

Better error in Lark.parse when using on_error when parser!=lalr (issue #1311) by @erezsh in lark-parser/lark#1460

Fix Symbol.__eq__ to return false when comparing with None by @weaversam8 in lark-parser/lark#1481

Mention internal/external transformers in the documentation by @odanoburu in lark-parser/lark#1486

Add Tree.find_token() method by @makukha in lark-parser/lark#1467

Type Terminal.__init__ by @Liam-DeVoe in lark-parser/lark#1503

Add guidance on handling comments in languages with significant indentation by @nchammas in lark-parser/lark#1502

[docs] Small fix for PR 1507 by @erezsh in lark-parser/lark#1508

Add note on binding power of numeric quantifiers by @414owen in lark-parser/lark#1507

Wrap functools.partial in staticmethod() to add compatibility with Python 3.14 by @hrnciar in lark-parser/lark#1483

Fix generic type of Transformer_InPlaceRecursive by @lbhm in lark-parser/lark#1518

Added TextSlice; Lark can now parse/lex a text-slice by @erezsh in lark-parser/lark#1452

Support match on tree by @colmmurphyxyz in lark-parser/lark#1521

Docs: Updated link of DSL article to a new version by @erezsh in lark-parser/lark#1529

better error messages for shift/reduct conflicts by @skogsbaer in lark-parser/lark#1531

Serialize Lark.grammar (fixes issue #1472) by @NasalDaemon in lark-parser/lark#1506

Fixes for PR #1506, which adds the option to cache the grammar definition by @erezsh in lark-parser/lark#1540

Bugfix in indenter - now always creating dedents with line information by @erezsh in lark-parser/lark#1547

Bugfix: issue when unpickling in the standalone parser, due to lingering Token instances by @erezsh in lark-parser/lark#1553

Include missing import in standalone parser by @pdeibert in lark-parser/lark#1541

Version bump (1.3.0) by @erezsh in lark-parser/lark#1554

New Contributors

@skepppy made their first contribution in lark-parser/lark#1458

@weaversam8 made their first contribution in lark-parser/lark#1481

@odanoburu made their first contribution in lark-parser/lark#1486

@makukha made their first contribution in lark-parser/lark#1467

@Liam-DeVoe made their first contribution in lark-parser/lark#1503

@414owen made their first contribution in lark-parser/lark#1507

@hrnciar made their first contribution in lark-parser/lark#1483

@lbhm made their first contribution in lark-parser/lark#1518

@colmmurphyxyz made their first contribution in lark-parser/lark#1521

... (truncated)

Commits

e332c2d Version bump (1.3.0)
aa5666c Merge pull request #1541 from pdeibert/master
41934d3 Merge pull request #1553 from lark-parser/issue1552
23c95ea Bugfix: issue when unpickling in the standalone parser, due to lingering
d1a456d Merge pull request #1547 from lark-parser/dev
2e3108e UnexpectedInput.pos_in_stream now defaults to 0
0d248fc Fix in indenter - now always creating dedents with line information
c2e2048 Merge pull request #1540 from lark-parser/pr1506
2f286cc Added tests for cache_grammar
8a0b02d Small fix, comments, added some types
Additional commits viewable in compare view

Updates django-two-factor-auth[phonenumbers] from 1.17.0 to 1.18.1

Release notes

Sourced from django-two-factor-auth[phonenumbers]'s releases.

1.18.1

Added

New translations for Azerbaijani and Serbian

1.18.0

Fixed

Documentation for setting yubikey support forgot to inform users they would need to add our yubikey plugin to INSTALLED_APPS

Remove reference to release-notes that had been missed, docs now build without warnings

WebAuthn: avoid submitting the wrong form

Email gateway: tell user to use correct django-otp plugin

Fix infinite redirect on admin site with AdminSiteOTPRequiredMixin

Changed

Allow qrcode 8.x.

phonenumbers is no longer a hard requirement for users who don't require it.

Change EmailDevice.confirmed default to False

Any StaticDevice can be used as backup tokens, not just those labelled "backup"

Added

Support for Django 5.2

Support for Python 3.13

Django check for INSTALLED_APPS to make sure two_factor is present and comes before its plugins

Removed

Drop support for Python 3.8

Changelog

Sourced from django-two-factor-auth[phonenumbers]'s changelog.

1.18.1

Added

New translations for Azerbaijani and Serbian

1.18.0

Fixed

Documentation for setting yubikey support forgot to inform users they would need to add our yubikey plugin to INSTALLED_APPS

Remove reference to release-notes that had been missed, docs now build without warnings

WebAuthn: avoid submitting the wrong form

Email gateway: tell user to use correct django-otp plugin

Fix infinite redirect on admin site with AdminSiteOTPRequiredMixin

Changed

Allow qrcode 8.x.

phonenumbers is no longer a hard requirement for users who don't require it.

Change EmailDevice.confirmed default to False

Any StaticDevice can be used as backup tokens, not just those labelled "backup"

Added

Support for Django 5.2

Support for Python 3.13

Django check for INSTALLED_APPS to make sure two_factor is present and comes before its plugins

Removed

Drop support for Python 3.8

Commits

38a6ba7 Merge pull request #778 from claudep/missing_trans
004c938 Fixes #777 - Add missing Azerbaijani and Serbian translations
59f4466 Merge pull request #776 from jazzband/pre-commit-ci-update-config
d551704 [pre-commit.ci] pre-commit autoupdate
7405b6f Merge pull request #774 from moggers87/release-1.18.0
b47945c Update CHANGELOG with latest changes
b20741c Merge branch 'master' into release-1.18.0
966dab4 Merge pull request #775 from claudep/phoneplugin2
9c72f87 Refs #469 - Only import phonenumber functions when plugin is installed
ec0923b Pull latest translations from Transifex
Additional commits viewable in compare view

Updates boto3 from 1.40.30 to 1.40.45

Commits

4a131a0 Merge branch 'release-1.40.45'
c572cac Bumping version to 1.40.45
584a71b Add changelog entries from botocore
61ee934 Merge branch 'release-1.40.44'
7b6ce2a Merge branch 'release-1.40.44' into develop
01553e7 Bumping version to 1.40.44
1b47e9e Add changelog entries from botocore
a295071 Merge branch 'release-1.40.43'
a349ff9 Merge branch 'release-1.40.43' into develop
86bb6e1 Bumping version to 1.40.43
Additional commits viewable in compare view

Updates coverage from 7.10.6 to 7.10.7

Changelog

Sourced from coverage's changelog.

Version 7.10.7 — 2025-09-21

Performance: with branch coverage in large files, generating HTML, JSON, or LCOV reports could take far too long due to some quadratic behavior when creating the function and class index pages. This is now fixed, closing issue 2048_. Thanks to Daniel Diniz for help diagnosing the problem.

Most warnings and a few errors now have links to a page in the docs explaining the specific message. Closes issue 1921_.

.. _issue 1921: nedbat/coveragepy#1921 .. _issue 2048: nedbat/coveragepy#2048

.. _changes_7-10-6:

Commits

92a2af5 docs: sample HTML for 7.10.7
952afda docs: prep for 7.10.7
a301761 build: riscv64 wheels (#2055)
5daff8d docs: now source is formatted with ruff
04bbc3a docs: discuss cog in the contributing docs
c181b93 build: use cog --check-fail-msg to instruct devs
33c4ba1 chore: make upgrade
0744b73 chore: bump the action-dependencies group across 1 directory with 2 updates (...
0d5a112 perf: bulk narrowing to avoid N**2. #2048
a868ed9 docs: mention Python Discord on the index page
Additional commits viewable in compare view

Updates tox from 4.30.2 to 4.30.3

Release notes

Sourced from tox's releases.

4.30.3

What's Changed

Isolate the test suite from any existing DEFAULT_CONFIG_FILE file by @kurtmckee in tox-dev/tox#3612

Fix none config file issue 3611 by @kurtmckee in tox-dev/tox#3613

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in tox-dev/tox#3608

Fix incorrect type annotations in PythonPathPackageWithDeps (fixes #3607) by @PreistlyPython in tox-dev/tox#3616

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in tox-dev/tox#3615

New Contributors

@PreistlyPython made their first contribution in tox-dev/tox#3616

Full Changelog: tox-dev/tox@4.30.2...4.30.3

Changelog

Sourced from tox's changelog.

v4.30.3 (2025-10-02)

Bugfixes - 4.30.3

- Fix incorrect type annotation in ``PythonPathPackageWithDeps.__init__()``
  where ``deps`` was annotated as ``Sequence[Package]`` but should be
  ``Sequence[Requirement]`` to match actual runtime usage - by :user:`PreistlyPython` (:issue:`3607`)
- Fix ``None`` appearing as the config filename in error output
  when the user's default config file is corrupt. - by :user:`kurtmckee` (:issue:`3611`)

Commits

01442da release 4.30.3
984dc78 [pre-commit.ci] pre-commit autoupdate (#3615)
660adb5 Fix incorrect type annotations in PythonPathPackageWithDeps (fixes #3607) (#3...
393de39 [pre-commit.ci] pre-commit autoupdate (#3608)
6e32426 Fix none config file issue 3611 (#3613)
0805c83 Isolate the test suite from any existing DEFAULT_CONFIG_FILE file (#3612)
See full diff in compare view

Updates psutil from 7.0.0 to 7.1.0

Changelog

Sourced from psutil's changelog.

7.1.0

2025-09-17

Enhancements

2581_, [Windows]: publish ARM64 wheels. (patch by Matthieu Darbois)

2571_, [FreeBSD]: Dropped support for FreeBSD 8 and earlier. FreeBSD 8 was maintained from 2009 to 2013.

2575_: introduced dprint CLI tool to format .yml and .md files.

Bug fixes

2473_, [macOS]: Fix build issue on macOS 11 and lower.

2494_, [Windows]: All APIs dealing with paths, such as Process.memory_maps(), Process.exe() and Process.open_files()_ does not properly handle UNC paths. Paths such as \\??\\C:\\Windows\\Temp and '\\Device\\HarddiskVolume1\\Windows\\Temp' are now converted to C:\\Windows\\Temp. (patch by Ben Peddell)

2506_, [Windows]: Windows service APIs had issues with unicode services using special characters in their name.

2514_, [Linux]: Process.cwd()_ sometimes fail with FileNotFoundError due to a race condition.

2526_, [Linux]: Process.create_time(), which is used to univocally identify a process over time, is subject to system clock updates, and as such can lead to Process.is_running() returning a wrong result. A monotonic creation time is now used instead. (patch by Jonathan Kohler)

2528_, [Linux]: Process.children()_ may raise PermissionError. It will now raise AccessDenied_ instead.

2540_, [macOS]: boot_time()_ is off by 45 seconds (C precision issue).

2541_, 2570_, 2578_ [Linux], [macOS], [NetBSD]: Process.create_time()_ does not reflect system clock updates.

2542_: if system clock is updated Process.children()_ and Process.parent()_ may not be able to return the right information.

2545_: [Illumos]: Fix handling of MIB2_UDP_ENTRY in net_connections()_.

2552_, [Windows]: boot_time()_ didn't take into account the time spent during suspend / hibernation.

2560_, [Linux]: Process.memory_maps()_ may crash with IndexError on RISCV64 due to a malformed /proc/{PID}/smaps file. (patch by Julien Stephan)

2586_, [macOS], [CRITICAL]: fixed different places in C code which can trigger a segfault.

2604_, [Linux]: virtual_memory()_ "used" memory does not match recent versions of free CLI utility. (patch by Isaac K. Ko)

2605_, [Linux]: psutil.sensors_battery() reports a negative amount for seconds left.

2607_, [Windows]: WindowsService.description() method may fail with ERROR_NOT_FOUND. Now it returns an empty string instead.

2610:, [macOS], [CRITICAL]: fix cpu_freq()_ segfault on ARM architectures.

... (truncated)

Commits

0d18187 Revert HISTORY notes about #2629. We still do publish 3.6 and 3.7 wheels.
229e2de Pre-release
fb75b28 Chore: skip CI tests except on Python 3.8 and 3.13
3a4c016 Stop publishing wheels for Python 3.6 and 3.7 (#2629)
83e4f7f OSX: disable failing test
df0d4e2 Call GetExtended[Tcp|Udp]Table twice under free-threaded build (round 2) (#2627)
dcbfb81 [Windows] fix unicode issues around service APIs (#2626)
ef72dcd revert #2590 (Call GetExtended[Tcp|Udp]Table twice under free-threaded build)
8773698 small refact around UTXENT_MUTEX_LOCK
13b711f Lock around uses of getutent/setutent/endutent (#2615)
Additional commits viewable in compare view

Updates faker from 37.6.0 to 37.8.0

Release notes

Sourced from faker's releases.

Release v37.8.0

See CHANGELOG.md.

Release v37.7.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v37.8.0 - 2025-09-15

Add Automotive providers for ja_JP locale. Thanks @ItoRino424.

v37.7.0 - 2025-09-15

Add Nigerian name locales (yo_NG, ha_NG, ig_NG, en_NG). Thanks @ifeoluwaoladeji.

Commits

4bde8f5 Bump version: 37.7.0 → 37.8.0
f542f36 📝 Update CHANGELOG.md
e28d7cb fix test
e4305b0 fix padding
a359441 💄 format code
0e3f0bd Add Automotive providers for ja_JP locale (#2251)
d4fa69d Bump version: 37.6.0 → 37.7.0
f636f06 📝 Update CHANGELOG.md
9a482dd 💄 Format code
2493b2d fix: fix minor grammar typo (#2259)
Additional commits viewable in compare view

Updates docutils from 0.21.2 to 0.22.2

Commits

See full diff in compare view

Updates hypothesis from 6.138.16 to 6.140.3

Release notes

Sourced from hypothesis's releases.

Hypothesis for Python - version 6.140.3

Fixes our bundled "run_conformance_test()" not respecting "avoid_realization".

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.140.2

The automatic switch to the CI "settings profile" now works under tox (for "tox >= 4.30.0").

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.140.1

This patch re-enables the warning for incompatible "shared()" strategies that was first enabled in v6.133.0 but disabled in v6.135.15.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.140.0

"characters()" now validates that the elements of the "exclude_characters" and "include_characters" arguments are single characters, which was always assumed internally. For example, "exclude_characters=["a", "b"]" is valid while "exclude_characters=["ab"]" will now raise an error up-front.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.139.3

Add "phase" to the hypothesis-specific metadata in observability.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.139.2

Internal refactoring for new lint rules.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.139.1

Fixed another typo in error message around function-scoped fixtures.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.139.0

Add "get_current_profile_name()", which returns the name of the current settings profile.

The canonical version of these notes (with links) is on readthedocs.

Hypothesis for Python - version 6.138.17

... (truncated)

Commits

bbbb0f7 Bump hypothesis-python version to 6.140.3 and update changelog
70eda0f Merge pull request #4536 from Liam-DeVoe/provider-conformance-realization
2c062f8 pin pytest-run-parallel
6431451 make crosshair profile inherit from default
0da8df6 spacing
2934b0b Merge branch 'master' into provider-conformance-realization
275d496 Bump hypothesis-python version to 6.140.2 and update changelog
5964b65 reword recommendation
3b95a47 Merge pull request #4553 from Liam-DeVoe/tox-ci
915a8d5 Merge branch 'master' into provider-conformance-realization
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the prod-deps group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [django](https://github.com/django/django) | `4.2.24` | `4.2.25` | | [drf-yasg](https://github.com/axnsan12/drf-yasg) | `1.21.10` | `1.21.11` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` | | [xlsxwriter](https://github.com/jmcnamara/XlsxWriter) | `3.2.8` | `3.2.9` | | [lark](https://github.com/lark-parser/lark) | `1.2.2` | `1.3.0` | | [django-two-factor-auth[phonenumbers]](https://github.com/jazzband/django-two-factor-auth) | `1.17.0` | `1.18.1` | | [boto3](https://github.com/boto/boto3) | `1.40.30` | `1.40.45` | | [coverage](https://github.com/nedbat/coveragepy) | `7.10.6` | `7.10.7` | | [tox](https://github.com/tox-dev/tox) | `4.30.2` | `4.30.3` | | [psutil](https://github.com/giampaolo/psutil) | `7.0.0` | `7.1.0` | | [faker](https://github.com/joke2k/faker) | `37.6.0` | `37.8.0` | | [docutils](https://github.com/rtfd/recommonmark) | `0.21.2` | `0.22.2` | | [hypothesis](https://github.com/HypothesisWorks/hypothesis) | `6.138.16` | `6.140.3` | Updates `django` from 4.2.24 to 4.2.25 - [Commits](django/django@4.2.24...4.2.25) Updates `drf-yasg` from 1.21.10 to 1.21.11 - [Release notes](https://github.com/axnsan12/drf-yasg/releases) - [Changelog](https://github.com/axnsan12/drf-yasg/blob/master/docs/changelog.rst) - [Commits](axnsan12/drf-yasg@1.21.10...1.21.11) Updates `pyyaml` from 6.0.2 to 6.0.3 - [Release notes](https://github.com/yaml/pyyaml/releases) - [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES) - [Commits](yaml/pyyaml@6.0.2...6.0.3) Updates `xlsxwriter` from 3.2.8 to 3.2.9 - [Changelog](https://github.com/jmcnamara/XlsxWriter/blob/main/Changes) - [Commits](jmcnamara/XlsxWriter@RELEASE_3.2.8...RELEASE_3.2.9) Updates `lark` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/lark-parser/lark/releases) - [Changelog](https://github.com/lark-parser/lark/blob/master/CHANGELOG.md) - [Commits](lark-parser/lark@1.2.2...1.3.0) Updates `django-two-factor-auth[phonenumbers]` from 1.17.0 to 1.18.1 - [Release notes](https://github.com/jazzband/django-two-factor-auth/releases) - [Changelog](https://github.com/jazzband/django-two-factor-auth/blob/master/CHANGELOG.md) - [Commits](jazzband/django-two-factor-auth@1.17.0...1.18.1) Updates `boto3` from 1.40.30 to 1.40.45 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.40.30...1.40.45) Updates `coverage` from 7.10.6 to 7.10.7 - [Release notes](https://github.com/nedbat/coveragepy/releases) - [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst) - [Commits](nedbat/coveragepy@7.10.6...7.10.7) Updates `tox` from 4.30.2 to 4.30.3 - [Release notes](https://github.com/tox-dev/tox/releases) - [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst) - [Commits](tox-dev/tox@4.30.2...4.30.3) Updates `psutil` from 7.0.0 to 7.1.0 - [Changelog](https://github.com/giampaolo/psutil/blob/master/HISTORY.rst) - [Commits](giampaolo/psutil@release-7.0.0...release-7.1.0) Updates `faker` from 37.6.0 to 37.8.0 - [Release notes](https://github.com/joke2k/faker/releases) - [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md) - [Commits](joke2k/faker@v37.6.0...v37.8.0) Updates `docutils` from 0.21.2 to 0.22.2 - [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md) - [Commits](https://github.com/rtfd/recommonmark/commits) Updates `hypothesis` from 6.138.16 to 6.140.3 - [Release notes](https://github.com/HypothesisWorks/hypothesis/releases) - [Commits](HypothesisWorks/hypothesis@hypothesis-python-6.138.16...hypothesis-python-6.140.3) --- updated-dependencies: - dependency-name: django dependency-version: 4.2.25 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: drf-yasg dependency-version: 1.21.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: pyyaml dependency-version: 6.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: xlsxwriter dependency-version: 3.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: lark dependency-version: 1.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: django-two-factor-auth[phonenumbers] dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: boto3 dependency-version: 1.40.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: coverage dependency-version: 7.10.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: tox dependency-version: 4.30.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: prod-deps - dependency-name: psutil dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: faker dependency-version: 37.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: docutils dependency-version: 0.22.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps - dependency-name: hypothesis dependency-version: 6.140.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: prod-deps ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-10-13T05:32:36Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added the Maintenance Tag as maintenance if the issue relates to general cleanup, maintenance, etc. Do not delete label. label Oct 6, 2025

dependabot bot closed this Oct 13, 2025

dependabot bot deleted the dependabot/pip/prod-deps-874ee92761 branch October 13, 2025 05:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

deps: bump the prod-deps group across 1 directory with 13 updates #5110

deps: bump the prod-deps group across 1 directory with 13 updates #5110

Uh oh!

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Oct 13, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

deps: bump the prod-deps group across 1 directory with 13 updates #5110

deps: bump the prod-deps group across 1 directory with 13 updates #5110

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

1.21.11

6.0.3

What's Changed

Release 3.2.9 - September 16 2025

1.3.0 - Introduces text-slices, Earley fix, and various small improvements

New features

Bugfixes

Full list of PRs

New Contributors

1.18.1

Added

1.18.0

Fixed

Changed

Added

Removed

1.18.1

Added

1.18.0

Fixed

Changed

Added

Removed

Version 7.10.7 — 2025-09-21

4.30.3

What's Changed

New Contributors

v4.30.3 (2025-10-02)

7.1.0

Release v37.8.0

Release v37.7.0

v37.8.0 - 2025-09-15

v37.7.0 - 2025-09-15

Hypothesis for Python - version 6.140.3

Hypothesis for Python - version 6.140.2

Hypothesis for Python - version 6.140.1

Hypothesis for Python - version 6.140.0

Hypothesis for Python - version 6.139.3

Hypothesis for Python - version 6.139.2

Hypothesis for Python - version 6.139.1

Hypothesis for Python - version 6.139.0

Hypothesis for Python - version 6.138.17

Uh oh!

dependabot bot commented on behalf of github Oct 13, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Oct 6, 2025 •

edited

Loading