build: Bump the python-dependencies group across 1 directory with 28 updates by dependabot[bot] · Pull Request #647 · django/djangosnippets.org

dependabot · 2026-01-05T01:28:22Z

Bumps the python-dependencies group with 28 updates in the / directory:

Package	From	To
dj-database-url	`3.0.1`	`3.1.0`
django	`5.2.7`	`5.2.9`
django-allauth	`65.9.0`	`65.13.1`
django-components	`0.141.2`	`0.143.2`
django-htmx	`1.15.0`	`1.27.0`
django-taggit	`5.0.1`	`6.1.0`
django-tailwind	`4.0.1`	`4.4.2`
djangorestframework	`3.15.2`	`3.16.1`
bleach	`6.2.0`	`6.3.0`
markdown	`3.4.4`	`3.10`
pillow	`12.0.0`	`12.1.0`
psycopg2-binary	`2.9.10`	`2.9.11`
pydantic	`2.11.7`	`2.12.5`
python-akismet	`0.4.2`	`0.4.3`
python-dotenv	`1.1.1`	`1.2.1`
requests	`2.32.4`	`2.32.5`
requests-oauthlib	`1.3.1`	`2.0.0`
six	`1.15.0`	`1.17.0`
urllib3	`2.5.0`	`2.6.2`
whitenoise	`6.1.0`	`6.11.0`
certifi	`2025.10.5`	`2026.1.4`
redis	`3.5.3`	`7.1.0`
gunicorn	`20.1.0`	`23.0.0`
sentry-sdk	`1.5.12`	`2.48.0`
greenlet	`3.2.4`	`3.3.0`
ipython	`7.33.0`	`9.8.0`
ruff	`0.14.3`	`0.14.10`
pre-commit	`2.19.0`	`4.5.1`

Updates dj-database-url from 3.0.1 to 3.1.0

Release notes

Sourced from dj-database-url's releases.

v3.1.0

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in jazzband/dj-database-url#268

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in jazzband/dj-database-url#270

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in jazzband/dj-database-url#276

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in jazzband/dj-database-url#278

Update license to BSD-3-Clause in setup.py by @GabrielBarrantes in jazzband/dj-database-url#279

CI: run typechecks only once, not for each Django/Python version by @akx in jazzband/dj-database-url#274

New Contributors

@GabrielBarrantes made their first contribution in jazzband/dj-database-url#279

@akx made their first contribution in jazzband/dj-database-url#274

Full Changelog: jazzband/dj-database-url@v3.0.1...v3.1.0

Changelog

Sourced from dj-database-url's changelog.

v3.1.0 (2026-01-03)

Add support for Django 6.0

Update CI structure.

Migrate to UV for dependency management and builds.

Python >3.10 support.

Commits

36ec238 Update CHANGELOG.md
84fd050 Switch to modern dict type hints for improved readability and consistency.
9929991 Merge branch 'akx/ci-split'
59b3cd6 Update workflow to be uv compatable
37b252e Migrate release workflow to release events, update actions, and integrate `...
a01d6b1 Update project to use uv.
9894298 Expand test matrix to support Python 3.14 and Django 6.0, update compatibilit...
438ec39 Update license to BSD-3-Clause in setup.py (#279)
8a3c372 [pre-commit.ci] pre-commit autoupdate (#278)
390d524 [pre-commit.ci] pre-commit autoupdate (#276)
Additional commits viewable in compare view

Updates django from 5.2.7 to 5.2.9

Commits

c14b756 [5.2.x] Bumped version for 5.2.9 release.
99e7d22 [5.2.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation i...
479415c [5.2.x] Fixed CVE-2025-13372 -- Protected FilteredRelation against SQL inject...
da1dfe6 [5.2.x] Fixed #36712 -- Evaluated type annotations lazily in template tag reg...
e2ddec4 [5.2.x] Refs #36743 -- Corrected docstring for DisallowedRedirect.
b83ee61 [5.2.x] Closed temporary files in OverwritingStorageTests.test_save_overwrite...
645dc99 [5.2.x] Refs #35535 -- Used intended decorator in test_simple_block_tag_paren...
8558605 [5.2.x] Added link to Python Pickle documentation in docs/topics/cache.txt.
de1dc3a [5.2.x] Fixed outdated redis-py link in cache docs.
ee92d41 [5.2.x] Highlighted community package upgrade utilities in docs/howto/upgrade...
Additional commits viewable in compare view

Updates django-allauth from 65.9.0 to 65.13.1

Commits

See full diff in compare view

Updates django-components from 0.141.2 to 0.143.2

Commits

See full diff in compare view

Updates django-htmx from 1.15.0 to 1.27.0

Changelog

Sourced from django-htmx's changelog.

1.27.0 (2025-11-28)

Drop Python 3.9 support.

Fix CSP nonce support in the template tags when they’re the first use of csp_nonce.

PR [#572](https://github.com/adamchainz/django-htmx/issues/572) <https://github.com/adamchainz/django-htmx/pull/572>__.

1.26.0 (2025-09-22)

The :ref:django-htmx-extension-script now displays responses with status codes 400 (bad request) and 403 (forbidden), like the existing support for codes 404 and 500. This change can help you debug

Issue [#521](https://github.com/adamchainz/django-htmx/issues/521) <https://github.com/adamchainz/django-htmx/issues/521>__.

Add :func:.reselect to set the HX-Reselect header.

Issue [#559](https://github.com/adamchainz/django-htmx/issues/559) <https://github.com/adamchainz/django-htmx/issues/559>__.

Improve typing of :func:.reswap to only accept valid HTMX swap methods.

Thanks to Thibaut Decombe in PR [#555](https://github.com/adamchainz/django-htmx/issues/555) <https://github.com/adamchainz/django-htmx/pull/555>__.

Prevent :class:.HttpResponseClientRedirect from being called with preserve_request=True, which was added to redirect responses <https://docs.djangoproject.com/en/stable/ref/request-response/#django.http.HttpResponseRedirect>__ in Django 5.2. It doesn’t make sense in the context of a client-side redirect, which always returns a status code of 200, and would crash anyway.

Issue [#517](https://github.com/adamchainz/django-htmx/issues/517) <https://github.com/adamchainz/django-htmx/issues/517>__.

1.25.0 (2025-09-18)

Support Django 6.0.

Add Content Security Policy (CSP) nonce support to the template tags.

Thanks to waifudegen for the report in Issue [#542](https://github.com/adamchainz/django-htmx/issues/542) <https://github.com/adamchainz/django-htmx/issues/542>__.

1.24.1 (2025-09-11)

Upgrade the vendored htmx to version 2.0.7 <https://github.com/bigskysoftware/htmx/blob/master/CHANGELOG.md#207---2025-09-08>__.

1.24.0 (2025-09-10)

Support Python 3.14.

Fix crashes in the extension script for custom error pages.

... (truncated)

Commits

7416a03 Version 1.27.0
117418c Fix CSP nonce first use (#572)
e4b01b6 Build documentation on Python 3.14 (#571)
24e4da2 Drop Python 3.9 support (#570)
9cafb80 Bump the github-actions group with 3 updates (#567)
2ad42aa [pre-commit.ci] pre-commit autoupdate (#568)
34cc611 Fix broken links
bca6e75 [pre-commit.ci] pre-commit autoupdate (#566)
714046e Bump actions/setup-python from 5 to 6 in the github-actions group (#565)
5ac0abc Improve CSP nonce docs
Additional commits viewable in compare view

Updates django-taggit from 5.0.1 to 6.1.0

Changelog

Sourced from django-taggit's changelog.

6.1.0 (2024-09-29)
* Add a management command (``remove_orphaned_tags``) to remove orphaned tags
* Add a fallback for when multiple tags are found in case-insensitivity mode (the earliest by PK is returned)
* Add a ``deduplicate_tags`` management command to remove duplicate tags based on case insensitivity. This feature is enabled when ``TAGGIT_CASE_INSENSITIVE`` is set to ``True`` in the settings.
* We no longer package tests, docs, or the sample taggit app into the distributed wheels. While we believe this shouldn't affect anything for users of the library, please tell us if you find yourself hitting issues (like around import errors)
* Fix missing template file for admin merge tag action
6.0.0 (2024-07-27)
By default, order tag items on instances by the primary key. This generally means that they will be ordered by "creation date" for the tag item. The previous behavior for this was that by default tag items were not ordered. In practice tag items often end up ordered by creation date anyways, just due to how databases work, but this was not a guarantee. If you wish to have the old behavior, set ordering=[] to your TaggableManager instance. We believe that this should not cause a noticable performance change, and the number of queries involved should not change.

Added the ability to merge tags via the admin

Add Django 5.0 support (no code changes were needed, but now we test this release).

Add Python 3.12 support

Add support for dumpdata/loaddata using natural keys

Commits

4e5f7de Merge pull request #922 from jazzband/6-1-0
1535f06 Fix missing template file in packaging
4f3ec30 Merge pull request #921 from jazzband/prepare-6-1-0
0436236 Prepare django-taggit 6.1.0
0cd1f24 Merge pull request #914 from fazeelghafoor/feat/resolve-duplicate-tags
0e3c865 Merge remote-tracking branch 'origin/master' into feat/resolve-duplicate-tags
f4effb2 Remove unused import
e851a84 Simplify deduplication management command
0e10963 sort imports
150c025 Make sure ordering is always by pk for handling multiples
Additional commits viewable in compare view

Updates django-tailwind from 4.0.1 to 4.4.2

Changelog

Sourced from django-tailwind's changelog.

4.4.2

Fixes an issue with CSS path configuration.

4.4.1

Fixes an issue when raw_input is used instead of input.

4.4.0

Standalone Tailwind CSS binary support via pytailwindcss;

TAILWIND_USE_STANDALONE_BINARY setting to force standalone binary mode;

TAILWIND_STANDALONE_BINARY_VERSION setting to control standalone binary version (default: v4.1.16);

Automatic detection of standalone vs npm-based installations (checks for package.json presence);

app_template_v4_standalone/ cookiecutter template for standalone binary apps;

Updates documentation;

Node.js is now optional when using standalone binary mode;

4.3.0

Replaces Poetry with UV for dependency management;

Fixes extract_host_and_port to support standalone port numbers (e.g., python manage.py runserver 55555);

Updates tox configuration to use dev dependency group;

Removes Docker instructions from documentation;

4.2.0

Adds new manage.py tailwind plugin_install command to manage Tailwind CSS plugins;

Adds optional daisyUI support;

4.1.0

Adds new dev command that starts Django development server and Tailwind watcher simultaneously;

Automatically installs Honcho if not available when using dev command;

Creates Procfile.tailwind for customizable process management;

Updates documentation with dev command usage;

4.0.0

Adds support for Tailwind CSS v4+;

Sets Tailwind CSS v4+ as the default version, with the option to use v3.x via --tailwind-version 3 flag;

3.9.1

Brings Python 3.10 support back;

Adds Python 3.13 support;

3.9.0

Adds --no-package-lock option to python manage.py tailwind install command to optionally skip creating package-lock.json file;

... (truncated)

Commits

dfb5a00 Releases 4.4.2
216c9e9 Merge pull request #244 from synthghost/patch-1
2b5a013 Fix settings-based CSS path configuration
bfd4250 Add Star History section to README
4c8ef98 Delete manage.py
4b0e428 Releases 4.4.1
46fb9a9 Merge pull request #241 from evangeloskp/fix-distlib-import-error
34150e8 Fix ImportError by replacing distlib.compat.raw_input with built-in input()
91c509a Update CI badge in README.md
4ac8150 Releases 4.4.0
Additional commits viewable in compare view

Updates djangorestframework from 3.15.2 to 3.16.1

Release notes

Sourced from djangorestframework's releases.

v3.16.1

This release fixes a few bugs, clean-up some old code paths for unsupported Python versions and improve translations.

Minor changes

Cleanup optional backports.zoneinfo dependency and conditions on unsupported Python 3.8 and lower in #9681. Python versions prior to 3.9 were already unsupported so this isn't considered as a breaking change.

Bug fixes

Fix regression in unique_together validation with SerializerMethodField in #9712

Fix UniqueTogetherValidator to handle fields with source attribute in #9688

Drop HTML line breaks on long headers in browsable API in #9438

Translations

Add Kazakh locale support in #9713

Update translations for Korean translations in #9571

Update German translations in #9676

Update Chinese translations in #9675

Update Arabic translations-sal in #9595

Update Persian translations in #9576

Update Spanish translations in #9701

Update Turkish Translations in #9749

Fix some typos in Brazilian Portuguese translations in #9673

Documentation

Removed reference to GitHub Issues and Discussions in #9660

Add drf-restwind and update outdated images in browsable-api.md in #9680

Updated funding page to represent current scope in #9686

Fix broken Heroku JSON Schema link in #9693

Update Django documentation links to use stable version in #9698

Expand docs on unique constraints cause 'required=True' in #9725

Revert extension back from djangorestframework-guardian2 to djangorestframework-guardian in #9734

Add note to tutorial about required request in serializer context when using HyperlinkedModelSerializer in #9732

Internal changes

Update GitHub Actions to use Ubuntu 24.04 for testing in #9677

Update test matrix to use Django 5.2 stable version in #9679

Add pyupgrade to pre-commit hooks in #9682

Fix test with Django 5 when pytz is available in #9715

New Contributors

@araggohnxd made their first contribution in #9673

@mbeijen made their first contribution in #9660

@stefan6419846 made their first contribution in #9676

@ren000thomas made their first contribution in #9675

@ulgens made their first contribution in #9682

... (truncated)

Commits

de018df Prepare 3.16.1 release (#9752)
a7d050f Turkish Translation updates (#9749)
853969c Fix test with Django 5 when pytz is available (#9715)
2ae8c11 Add note to tutorial about required request in serializer context when using ...
70e54f4 Revert docs back to djangorestframework-guardian (#9734)
3038494 Document that unique constraints cause required=True in ModelSerializer (#9...
4bb46c2 Add Kazakh(kk) locale support (#9713)
e454758 Fix regression in unique_together validation with SerializerMethodField (#9712)
33d59fe Update Spanish translations (#9701)
c0202a0 Update Django documentation links to use stable version (#9698)
Additional commits viewable in compare view

Updates bleach from 6.2.0 to 6.3.0

Changelog

Sourced from bleach's changelog.

Version 6.3.0 (October 27th, 2025)

Backwards incompatible changes

Dropped support for Python 3.9. (#756)

Security fixes

None

Bug fixes

Add support for Python 3.14. (#758)

Fix wbr handling. (#488)

Commits

5546d5d chore: prep for 6.3.0 release
88df3ff chore: fix readthedocs
d8b2fb4 fix: fix wbr handling (#488)
55e48ce chore: add support for Python 3.14 (#758)
a4d6cdd chore: drop support for Python 3.9 (#756)
172d92f Bump actions/setup-python from 5.6.0 to 6.0.0
df88612 Bump actions/checkout from 4.2.2 to 5.0.0
cbcf6b1 Bump actions/cache from 4.2.3 to 4.3.0
d9aa7ef Switch from dependabot reviewers to CODEOWNERS
06f0f76 Update setuptools, wheel, and twine for devs
Additional commits viewable in compare view

Updates markdown from 3.4.4 to 3.10

Release notes

Sourced from markdown's releases.

Release 3.10.0

Changed

Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).

Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

Release 3.9.0

Changed

Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

Ensure inline processing iterates through elements in document order (#1546).

Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

Release 3.8.2

Fixed

Fix codecs deprecation in Python 3.14.

Fix issue with unclosed comment parsing in Python 3.14.

Fix issue with unclosed declarations in Python 3.14.

Fix issue with unclosed HTML tag <foo and Python 3.14.

Release 3.8.1

Fixed

Ensure incomplete markup declaration in raw HTML doesn't crash parser (#1534).

Fixed dropped content in md_in_html (#1526).

Fixed HTML handling corner case that prevented some content from not being rendered (#1528).

Release 3.8

Changed

DRY fix in abbr extension by introducing method create_element (#1483).

Clean up test directory by removing some redundant tests and port non-redundant cases to the newer test framework.

Improved performance of the raw HTML post-processor (#1510).

... (truncated)

Changelog

Sourced from markdown's changelog.

title: Changelog toc_depth: 2

Python-Markdown Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to the Python Version Specification. See the Contributing Guide for details.

[Unreleased]

Fixed

Ensure nested elements inside inline comments are properly unescaped (#1571).

Make the docs build successfully with mkdocstrings-python 2.0 (#1575).

Fix infinite loop when multiple bogus or unclosed HTML comments appear in input (#1578).

[3.10.0] - 2025-11-03

Changed

Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).

Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

[3.9.0] - 2025-09-04

Changed

Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

Ensure inline processing iterates through elements in document order (#1546).

Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

[3.8.2] - 2025-06-19

... (truncated)

Commits

22e89c1 Bump version to 3.10
c138aea + PY314 - PY39
746f7f5 cleanup
a5ee2b4 Revert the default behavior of USE_DEFINITION_ORDER
5354daf Fix an HTML comment parsing case that can cause an infinite loop
f39cf84 Bump version to 3.9
07bf207 Order footnotes by reference
23c301d Fix failing cases for Python 3.14
4669a09 fix typo
d9c8431 Bump version to 3.8.2
Additional commits viewable in compare view

Updates pillow from 12.0.0 to 12.1.0

Release notes

Sourced from pillow's releases.

12.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Deprecate getdata(), in favour of new get_flattened_data() #9292 [@radarhere]

Documentation

Specify APNG duration type when opening #9368 [@radarhere]

Added release notes for #9350 #9366 [@radarhere]

Update ImageMorph documentation #9349 [@radarhere]

Docs: update major bump cadence #9334 [@hugovk]

Add release notes for #9070 #9320 [@radarhere]

Updated Ubuntu version #9306 [@radarhere]

Update macOS tested Pillow versions #9265 [@radarhere]

Dependencies

Update harfbuzz to 12.3.0 #9355 [@radarhere]

Update xz to 5.8.2 #9343 [@radarhere]

Updated libjpeg-turbo to 3.1.3 #9333 [@radarhere]

Updated zlib-ng to 2.3.2 #9324 [@radarhere]

Updated libpng to 1.6.53 #9325 [@radarhere]

Update actions/checkout action to v6 #9323 [@renovate[bot]]

Update dependency mypy to v1.19.0 #9322 [@renovate[bot]]

Updated libpng to 1.6.51 #9305 [@radarhere]

Updated brotli to 1.2.0 #9284 [@radarhere]

Update libimagequant to 4.4.1 #9301 [@radarhere]

Update zlib-ng to 2.3.1, except on manylinux2014 aarch64 #9312 [@radarhere]

Updated harfbuzz to 12.2.0 #9289 [@radarhere]

Update github-actions #9277 [@renovate[bot]]

Testing

Replace pre-commit with prek #9360 [@hugovk]

Test PyQt6 on Python 3.14 on Windows #9353 [@radarhere]

Test 32-bit Windows on Windows Server 2022 #9345 [@radarhere]

Correct variable type #9335 [@radarhere]

Fix ResourceWarnings in selftest.py #9332 [@hugovk]

Fix testing good P mode BMP images #9319 [@radarhere]

Test Python 3.15 pre-release #9331 [@hugovk]

Test ImageFont.ImageFont, in case freetype2 is not supported #9287 [@radarhere]

Add Fedora 43 #9290 [@radarhere]

Remove Fedora 41 #9260 [@radarhere]

Type hints

Add ImageFile context manager #9367 [@radarhere]

Assert fp is not None #8617 [@radarhere]

... (truncated)

Commits

46f45f6 12.1.0 version bump
c9ac097 Simplify band splitting (#9291)
3baedf2 Deprecate getdata(), in favour of new get_flattened_data() (#9292)
b51a036 Specify APNG duration type when opening (#9368)
8d08e31 Add release notes for #9348 (#9369)
432707e Added release notes for #9348
2d58910 Specify APNG duration type when opening
8dee8dd Add ImageFile context manager (#9367)
b2d9bc3 Support saving APNG float durations (#9365)
f130c10 Allow 1 mode images in MorphOp (#9348)
Additional commits viewable in compare view

Updates psycopg2-binary from 2.9.10 to 2.9.11

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).

Fix building when pg_config returns an empty string (:ticket:[#1599](https://github.com/psycopg/psycopg2/issues/1599)).

Wheel package bundled with OpenSSL 1.1.1v.

What's new in psycopg 2.9.6 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

... (truncated)

Commits

fd9ae8c chore: bump to version 2.9.11
d923840 chore: update docs requirements
d42dc71 Merge branch 'fix-1791'
4fde656 fix: avoid failed assert passing more arguments than placeholders
8308c19 fix: drop warning about the use of deprecated PyWeakref_GetObject function
1a1eabf build(deps): bump actions/github-script from 7 to 8
897af8b build(deps): bump peter-evans/repository-dispatch from 3 to 4
ceefd30 build(deps): bump actions/checkout from 4 to 5
4dc5854 build(deps): bump actions/setup-python from 5 to 6
1945788 Merge pull request #1802 from edgarrmondragon/cp314-wheels
Additional commits viewable in compare view

Updates pydantic from 2.11.7 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by @davidhewitt in pydantic-core#1868.

The 2.12 changes to the serialize_as_any behavior made it so that IP address types could not properly serialize to JSON.

Avoid getting default values from defaultdict by @davidhewitt in pydantic-core#1853.

This fixes a subtle regression in the validation behavior of the collections.defaultdict type.

Fix issue with field serializers on nested typed dictionaries by @davidhewitt in pydantic-core#1879.

Add more pydantic-core builds for the three-threaded version of Python 3.14 by @davidhewitt in pydantic-core#1864.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

This is the third 2.13 patch release, fixing issues related to the FieldInfo class, and reverting a change to the supported after model validator function signatures.

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

Fix pickle error when using model_construct() on a model with MISSING as a default value by @ornariece in #12522.

Several updates to the documentation by @Viicos.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Fix issue with forward references in parent TypedDict classes by @Viicos in #12427.

This issue is only relevant on Python 3.14 and greater.

Exclude fields with exclude_if from JSON Schema required fields by @Viicos in #12430

Revert URL percent-encoding of credentials in the build() method of the AnyUrl and Dsn types by @davidhewitt in pydantic-core#1833.

This was initially considered as a bugfix, but caused regressions and as such was fully reverted. The next release will include an opt-in option to percent-encode components of the URL.

Add type inference for IP address types by

…updates Bumps the python-dependencies group with 28 updates in the / directory: | Package | From | To | | --- | --- | --- | | [dj-database-url](https://github.com/jazzband/dj-database-url) | `3.0.1` | `3.1.0` | | [django](https://github.com/django/django) | `5.2.7` | `5.2.9` | | [django-allauth](https://github.com/sponsors/pennersr) | `65.9.0` | `65.13.1` | | [django-components](https://github.com/sponsors/EmilStenstrom) | `0.141.2` | `0.143.2` | | [django-htmx](https://github.com/adamchainz/django-htmx) | `1.15.0` | `1.27.0` | | [django-taggit](https://github.com/jazzband/django-taggit) | `5.0.1` | `6.1.0` | | [django-tailwind](https://github.com/timonweb/django-tailwind) | `4.0.1` | `4.4.2` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.15.2` | `3.16.1` | | [bleach](https://github.com/mozilla/bleach) | `6.2.0` | `6.3.0` | | [markdown](https://github.com/Python-Markdown/markdown) | `3.4.4` | `3.10` | | [pillow](https://github.com/python-pillow/Pillow) | `12.0.0` | `12.1.0` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` | | [pydantic](https://github.com/pydantic/pydantic) | `2.11.7` | `2.12.5` | | [python-akismet](https://github.com/Nekmo/python-akismet) | `0.4.2` | `0.4.3` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` | | [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` | | [requests-oauthlib](https://github.com/requests/requests-oauthlib) | `1.3.1` | `2.0.0` | | [six](https://github.com/benjaminp/six) | `1.15.0` | `1.17.0` | | [urllib3](https://github.com/urllib3/urllib3) | `2.5.0` | `2.6.2` | | [whitenoise](https://github.com/evansd/whitenoise) | `6.1.0` | `6.11.0` | | [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.1.4` | | [redis](https://github.com/redis/redis-py) | `3.5.3` | `7.1.0` | | [gunicorn](https://github.com/benoitc/gunicorn) | `20.1.0` | `23.0.0` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `1.5.12` | `2.48.0` | | [greenlet](https://github.com/python-greenlet/greenlet) | `3.2.4` | `3.3.0` | | [ipython](https://github.com/ipython/ipython) | `7.33.0` | `9.8.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.3` | `0.14.10` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `2.19.0` | `4.5.1` | Updates `dj-database-url` from 3.0.1 to 3.1.0 - [Release notes](https://github.com/jazzband/dj-database-url/releases) - [Changelog](https://github.com/jazzband/dj-database-url/blob/master/CHANGELOG.md) - [Commits](jazzband/dj-database-url@v3.0.1...v3.1.0) Updates `django` from 5.2.7 to 5.2.9 - [Commits](django/django@5.2.7...5.2.9) Updates `django-allauth` from 65.9.0 to 65.13.1 - [Commits](https://github.com/sponsors/pennersr/commits) Updates `django-components` from 0.141.2 to 0.143.2 - [Commits](https://github.com/sponsors/EmilStenstrom/commits) Updates `django-htmx` from 1.15.0 to 1.27.0 - [Changelog](https://github.com/adamchainz/django-htmx/blob/main/docs/changelog.rst) - [Commits](adamchainz/django-htmx@1.15.0...1.27.0) Updates `django-taggit` from 5.0.1 to 6.1.0 - [Changelog](https://github.com/jazzband/django-taggit/blob/master/CHANGELOG.rst) - [Commits](jazzband/django-taggit@5.0.1...6.1.0) Updates `django-tailwind` from 4.0.1 to 4.4.2 - [Changelog](https://github.com/timonweb/django-tailwind/blob/master/CHANGELOG.md) - [Commits](timonweb/django-tailwind@4.0.1...4.4.2) Updates `djangorestframework` from 3.15.2 to 3.16.1 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.15.2...3.16.1) Updates `bleach` from 6.2.0 to 6.3.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v6.2.0...v6.3.0) Updates `markdown` from 3.4.4 to 3.10 - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](Python-Markdown/markdown@3.4.4...3.10.0) Updates `pillow` from 12.0.0 to 12.1.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.0.0...12.1.0) Updates `psycopg2-binary` from 2.9.10 to 2.9.11 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.10...2.9.11) Updates `pydantic` from 2.11.7 to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.11.7...v2.12.5) Updates `python-akismet` from 0.4.2 to 0.4.3 - [Release notes](https://github.com/Nekmo/python-akismet/releases) - [Commits](Nekmo/python-akismet@v0.4.2...v0.4.3) Updates `python-dotenv` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1) Updates `requests` from 2.32.4 to 2.32.5 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v2.32.4...v2.32.5) Updates `requests-oauthlib` from 1.3.1 to 2.0.0 - [Release notes](https://github.com/requests/requests-oauthlib/releases) - [Changelog](https://github.com/requests/requests-oauthlib/blob/master/HISTORY.rst) - [Commits](requests/requests-oauthlib@v1.3.1...v2.0.0) Updates `six` from 1.15.0 to 1.17.0 - [Changelog](https://github.com/benjaminp/six/blob/main/CHANGES) - [Commits](benjaminp/six@1.15.0...1.17.0) Updates `urllib3` from 2.5.0 to 2.6.2 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.5.0...2.6.2) Updates `whitenoise` from 6.1.0 to 6.11.0 - [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst) - [Commits](evansd/whitenoise@6.1.0...6.11.0) Updates `certifi` from 2025.10.5 to 2026.1.4 - [Commits](certifi/python-certifi@2025.10.05...2026.01.04) Updates `redis` from 3.5.3 to 7.1.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@3.5.3...v7.1.0) Updates `gunicorn` from 20.1.0 to 23.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@20.1.0...23.0.0) Updates `sentry-sdk` from 1.5.12 to 2.48.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@1.5.12...2.48.0) Updates `greenlet` from 3.2.4 to 3.3.0 - [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst) - [Commits](python-greenlet/greenlet@3.2.4...3.3.0) Updates `ipython` from 7.33.0 to 9.8.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@7.33.0...9.8.0) Updates `ruff` from 0.14.3 to 0.14.10 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.3...0.14.10) Updates `pre-commit` from 2.19.0 to 4.5.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v2.19.0...v4.5.1) --- updated-dependencies: - dependency-name: dj-database-url dependency-version: 3.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django dependency-version: 5.2.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: django-allauth dependency-version: 65.13.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-components dependency-version: 0.143.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-htmx dependency-version: 1.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: django-taggit dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: django-tailwind dependency-version: 4.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: djangorestframework dependency-version: 3.16.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: bleach dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: markdown dependency-version: '3.10' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pillow dependency-version: 12.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: psycopg2-binary dependency-version: 2.9.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: python-akismet dependency-version: 0.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: requests dependency-version: 2.32.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: requests-oauthlib dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: six dependency-version: 1.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: urllib3 dependency-version: 2.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: whitenoise dependency-version: 6.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: certifi dependency-version: 2026.1.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: redis dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: gunicorn dependency-version: 23.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: sentry-sdk dependency-version: 2.48.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: greenlet dependency-version: 3.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: ipython dependency-version: 9.8.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: ruff dependency-version: 0.14.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: pre-commit dependency-version: 4.5.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-12T01:18:39Z

Looks like these dependencies are no longer updatable, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jan 5, 2026

dependabot Bot closed this Jan 12, 2026

dependabot Bot deleted the dependabot/uv/python-dependencies-4e824b9174 branch January 12, 2026 01:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build: Bump the python-dependencies group across 1 directory with 28 updates#647

build: Bump the python-dependencies group across 1 directory with 28 updates#647
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/python-dependencies-4e824b9174

dependabot Bot commented on behalf of github Jan 5, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jan 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.1.0

What's Changed

New Contributors

v3.1.0 (2026-01-03)

1.27.0 (2025-11-28)

1.26.0 (2025-09-22)

1.25.0 (2025-09-18)

1.24.1 (2025-09-11)

1.24.0 (2025-09-10)

4.4.2

4.4.1

4.4.0

4.3.0

4.2.0

4.1.0

4.0.0

3.9.1

3.9.0

v3.16.1

Minor changes

Bug fixes

Translations

Documentation

Internal changes

New Contributors

Version 6.3.0 (October 27th, 2025)

Release 3.10.0

Changed

Fixed

Release 3.9.0

Changed

Fixed

Release 3.8.2

Fixed

Release 3.8.1

Fixed

Release 3.8

Changed

Python-Markdown Changelog

[Unreleased]

Fixed

[3.10.0] - 2025-11-03

Changed

Fixed

[3.9.0] - 2025-09-04

Changed

Fixed

[3.8.2] - 2025-06-19

12.1.0

Deprecations

Documentation

Dependencies

Testing

Type hints

Current release

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

v2.12.3 2025-10-17

v2.12.3 (2025-10-17)

What's Changed

v2.12.5 (2025-11-26)

v2.12.4 (2025-11-05)

Uh oh!

dependabot Bot commented on behalf of github Jan 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jan 5, 2026 •

edited

Loading