chore(deps): bump the dependencies group across 1 directory with 29 updates by dependabot[bot] · Pull Request #11954 · inventree/InvenTree

dependabot · 2026-05-15T18:56:29Z

Bumps the dependencies group with 29 updates in the /src/backend directory:

Package	From	To
bleach	`4.1.0`	`6.3.0`
blessed	`1.38.0`	`1.39.0`
boto3	`1.42.96`	`1.43.6`
botocore	`1.42.96`	`1.43.6`
cryptography	`47.0.0`	`48.0.0`
dulwich	`1.2.0`	`1.2.1`
googleapis-common-protos	`1.74.0`	`1.75.0`
gunicorn	`25.3.0`	`26.0.0`
icalendar	`7.0.3`	`7.1.0`
importlib-metadata	`8.7.1`	`9.0.0`
nh3	`0.3.4`	`0.3.5`
opentelemetry-exporter-otlp-proto-common	`1.40.0`	`1.41.1`
opentelemetry-exporter-otlp-proto-grpc	`1.40.0`	`1.41.1`
opentelemetry-exporter-otlp-proto-http	`1.40.0`	`1.41.1`
opentelemetry-instrumentation	`0.61b0`	`0.62b1`
opentelemetry-instrumentation-dbapi	`0.61b0`	`0.62b1`
opentelemetry-proto	`1.40.0`	`1.41.1`
opentelemetry-semantic-conventions	`0.61b0`	`0.62b1`
opentelemetry-util-http	`0.61b0`	`0.62b1`
protobuf	`6.33.6`	`7.34.1`
s3transfer	`0.16.1`	`0.17.0`
sentry-sdk	`2.58.0`	`2.59.0`
wcwidth	`0.6.0`	`0.7.0`
wrapt	`1.17.3`	`2.1.2`
markdown-it-py	`4.0.0`	`4.2.0`
pip	`26.1`	`26.1.1`
pytest-codspeed	`4.4.0`	`4.5.0`
types-psycopg2	`2.9.21.20260422`	`2.9.21.20260508`
types-pyyaml	`6.0.12.20260408`	`6.0.12.20260508`

Updates bleach from 4.1.0 to 6.3.0

Changelog

Sourced from bleach's changelog.

Version 6.3.0 (October 27th, 2025)

Backwards incompatible changes

Dropped support for Python 3.9. (#756)

Security fixes

None

Bug fixes

Add support for Python 3.14. (#758)

Fix wbr handling. (#488)

Version 6.2.0 (October 29th, 2024)

Backwards incompatible changes

Dropped support for Python 3.8. (#737)

Security fixes

None

Bug fixes

Add support for Python 3.13. (#736)

Remove six depdenncy. (#618)

Update known-good versions for tinycss2. (#732)

Fix additional < followed by characters and EOF issues. (#728)

Version 6.1.0 (October 6th, 2023)

Backwards incompatible changes

Dropped support for Python 3.7. (#709)

Security fixes

None

Bug fixes

Add support for Python 3.12. (#710)

... (truncated)

Commits

5546d5d chore: prep for 6.3.0 release
88df3ff chore: fix readthedocs
d8b2fb4 fix: fix wbr handling (#488)
55e48ce chore: add support for Python 3.14 (#758)
a4d6cdd chore: drop support for Python 3.9 (#756)
172d92f Bump actions/setup-python from 5.6.0 to 6.0.0
df88612 Bump actions/checkout from 4.2.2 to 5.0.0
cbcf6b1 Bump actions/cache from 4.2.3 to 4.3.0
d9aa7ef Switch from dependabot reviewers to CODEOWNERS
06f0f76 Update setuptools, wheel, and twine for devs
Additional commits viewable in compare view

Updates blessed from 1.38.0 to 1.39.0

Release notes

Sourced from blessed's releases.

1.17.9: Initial support for Python 3.10

bugfix: Now imports on 3.10+

1.15.0: Disable various integration tests, support python 3.7

No release notes provided.

1.14.0: bugfix term.wrap for text containing newlines

bugfix: term.wrap misbehaved for text containing newlines, #74

1.13.0: new Terminal.split_seqs() function, speed enhancement

enhancement: method Terminal.split_seqs introduced, and 4x cost reduction in related sequence-aware functions, #29.

deprecated: function blessed.sequences.measure_length superseded by blessed.sequences.iter_parse if necessary.

deprecated: warnings about "binary-packed capabilities" are no longer emitted on strange terminal types, making best effort.

1.12.0: add Terminal.get_location() method

enhancement: method Terminal.get_locationreturns the(row, col)`` position of the cursor at the time of call for attached terminal.

enhancement: a keyboard now detected as stdin when stream is sys.stderr.

Changelog

Sourced from blessed's changelog.

.. py:currentmodule:: blessed.terminal

Version History

1.39

introduced: :meth:~.Terminal.progress_bar for OSC 9;4 sequence <https://ghostty.org/docs/vt/osc/conemu#change-progress-state-(osc-94)>_.

introduced: :meth:~.Terminal.text_sized -- wrap text in Kitty text sizing protocol (OSC 66) escape sequences, with graceful fallback to plain text when the terminal does not support the protocol.

introduced: :class:~.Keystroke of name CPR_RESPONSE for asynchronous capture of Cursor Position Report responses via :meth:~.Terminal.inkey. New argument capture_cpr=True resolves the legacy F3 key ambiguity and matches against CPR_RESPONSE. New properties :attr:~.Keystroke.cpr_yx and :attr:~.Keystroke.cpr_xy return the decoded cursor coordinates. :ghpull:369.

improved: :meth:~.Terminal.inkey raises :exc:EOFError when keyboard fd is at EOF, rather than returning an empty :class:~.Keystroke. :ghpull:371.

improved: :meth:~.Terminal.ljust, :meth:~.Terminal.rjust, and :meth:~.Terminal.center now measure text containing hyperlinks, Kitty text sizing protocol sequences, and overtyping (backspace/cursor-left with painter's algorithm), introduced by wcwidth_ 0.7.0.

1.38

introduced: :meth:~.Terminal.does_osc52_clipboard, :meth:~.Terminal.clipboard_copy, and :meth:~.Terminal.clipboard_paste to detect, copy, and read from clipboard.

introduced: :meth:~.Terminal.get_color_scheme.

introduced: :meth:~.Terminal.does_kitty_query for Kitty's XTGETTCAP query extensions.

introduced: :meth:~.Terminal.does_decrqss for DECRQSS (Request Status String).

introduced: :meth:~.Terminal.does_styled_underlines and :meth:~.Terminal.does_colored_underlines -- detect extended underline styles (Smulx) and colored underlines (Setulc) via XTGETTCAP.

introduced: :meth:~.Terminal.set_window_title and :meth:~.Terminal.window_title -- set the terminal window and/or icon title via xterm OSC sequences, with a context manager that pushes and pops the title stack (XTWINOPS).

introduced: :attr:DecModeResponse.recognized and :attr:DecModeResponse.supported properties -- distinguish modes the terminal acknowledges from those it can actually use.

improved: Smulx and Setulc added to XTGETTCAP capability list.

bugfix: EOF when stdin is connected to a Pipe (eg. pytest capture) caused infinite loop :ghpull:366.

bugfix: Background SGR not applying to text/suggestion content in :class:blessed.line_editor.LineEditor, now prepend bg_sgr before each content SGR sequence.

bugfix: OSC responses for 'ST' in addition to 'BEL' terminated iTerm2 capabilities, Kitty notifications, Kitty pointer shapes responses

1.37

bugfix: legacy CSI letter-form sequences with explicit modifiers and event type (e.g., \x1b[1;1:1A for arrow key press) were not resolved to key names, this affected only some terminals, such as Ghostty. :ghpull:363.

... (truncated)

Commits

See full diff in compare view

Updates boto3 from 1.42.96 to 1.43.6

Commits

f2ccf9f Merge branch 'release-1.43.6'
ffb5712 Bumping version to 1.43.6
cc7756a Add changelog entries from botocore
500f6a7 Merge branch 'release-1.43.5'
05f5628 Merge branch 'release-1.43.5' into develop
65d9798 Bumping version to 1.43.5
357614a Add changelog entries from botocore
5128f23 Bump https://github.com/astral-sh/ruff-pre-commit (#4785)
96f1897 Merge branch 'release-1.43.4'
91de1d8 Merge branch 'release-1.43.4' into develop
Additional commits viewable in compare view

Updates botocore from 1.42.96 to 1.43.6

Commits

4fa2154 Merge branch 'release-1.43.6'
9835cd8 Bumping version to 1.43.6
9246f14 Update endpoints model
b99db2c Update to latest models
3734ccb Bump https://github.com/astral-sh/ruff-pre-commit (#3700)
7068f3e Merge branch 'release-1.43.5'
cdd9b5c Merge branch 'release-1.43.5' into develop
8a75d89 Bumping version to 1.43.5
486f1a3 Update to latest models
d2715d8 Merge customizations for SecurityHub
Additional commits viewable in compare view

Updates cryptography from 47.0.0 to 48.0.0

Changelog

Sourced from cryptography's changelog.

48.0.0 - 2026-05-04

* **BACKWARDS INCOMPATIBLE:** Support for Python 3.8 has been removed. ``cryptography`` now requires Python 3.9 or later. * **BACKWARDS INCOMPATIBLE:** Loading an X.509 CRL whose inner ``TBSCertList.signature`` algorithm does not match the outer ``signatureAlgorithm`` now raises ``ValueError``. Previously, such CRLs were parsed successfully and only rejected during signature validation. * Added support for :doc:`/hazmat/primitives/asymmetric/mlkem` and :doc:`/hazmat/primitives/asymmetric/mldsa` when using OpenSSL 3.5.0 or later, in addition to the existing AWS-LC and BoringSSL support. This means post-quantum algorithms are now available to users of our wheels. Note: Going forward, we do not guarantee that all functionality in cryptography will be available when building against OpenSSL. See :doc:/statements/state-of-openssl for more information.

.. _v47-0-0:

Commits

8e03e30 bump for 48.0.0 release (#14796)
295e0d2 Add AGENTS.md with CLAUDE.md symlink (#14794)
104a2de Bump BoringSSL, OpenSSL, AWS-LC in CI (#14793)
67ec1e5 call check_length early on AesSiv::encrypt (#14792)
b2da57a changelog for mldsa/mlkem for openssl (#14791)
3cf44ad ML-KEM OpenSSL support (#14781)
2e31639 ML-DSA OpenSSL support (#14773)
5affe5a fix rust nightly clippy (#14790)
2e73ca4 bump rust-openssl dep and update EcPoint::mul_generator to mul_generator2 (#1...
82ebd3b Bump BoringSSL, OpenSSL, AWS-LC in CI (#14785)
Additional commits viewable in compare view

Updates dulwich from 1.2.0 to 1.2.1

Release notes

Sourced from dulwich's releases.

dulwich-1.2.1

Changes since 1.2.0

Derive the LFS endpoint as the remote's on-disk LFS store (<remote>/.git/lfs for worktrees, <remote>/lfs for bare repos) when remote.origin.url points at a local filesystem path or file:// URL, matching git-lfs behaviour. Previously the built-in smudge filter constructed an HTTP-style <remote>.git/info/lfs path that did not exist on disk, leaving LFS-tracked files as pointers when cloning from a local repo.

Deduplicate objects when writing a multi-pack-index. Objects present in multiple packs (e.g. after git gc creates a cruft pack) would otherwise produce an OIDL chunk with repeated SHAs, causing git multi-pack-index verify to fail with "oid lookup out of order". (#2152)

Extend ignorecase and precomposeunicode support to index lookups. (#1807)

Changelog

Sourced from dulwich's changelog.

1.2.1 2026-04-29

Recover from concurrent pack removals (e.g. a racing git repack or git gc --auto) instead of raising spurious KeyError / FileNotFoundError. Pack.index and Pack.data now translate FileNotFoundError during lazy load into PackFileDisappeared, and PackBasedObjectStore evicts the stale pack and rescans the pack directory before retrying — equivalent to git's reprepare_packed_git(). (Jelmer Vernooĳ, #2159)

Derive the LFS endpoint as the remote's on-disk LFS store (<remote>/.git/lfs for worktrees, <remote>/lfs for bare repos) when remote.origin.url points at a local filesystem path or file:// URL, matching git-lfs behaviour. Previously the built-in smudge filter constructed an HTTP-style <remote>.git/info/lfs path that did not exist on disk, leaving LFS-tracked files as pointers when cloning from a local repo. (Jelmer Vernooĳ)

Deduplicate objects when writing a multi-pack-index. Objects present in multiple packs (e.g. after git gc creates a cruft pack) would otherwise produce an OIDL chunk with repeated SHAs, causing git multi-pack-index verify to fail with "oid lookup out of order". (Jelmer Vernooĳ, #2152)

Extend ignorecase and precomposeunicode support to index lookups. (Jelmer Vernooĳ, #1807)

Commits

57806b8 Release 1.2.1
a127d33 Honor GIT_PROTOCOL env var when picking default protocol version (#1862) (#2149)
6c1697a lfs: derive correct file:// LFS endpoint from local remote URL (#2161)
6685fde lfs: use pathlib.Path.as_uri() for portable file:// URLs
0d0b9f8 Migrate from testrepository to inquest (#2160)
a0dac57 Migrate from testrepository to inquest
cd6ebd9 lfs: derive correct file:// LFS endpoint from local remote URL
bfaf192 Disable background processes to prevent issues with races (#2158)
06d7afd Move GIT_SSH/GIT_SSH_COMMAND env lookup from client.py to cli.py (#2156)
e60e0c1 Disable background processes to prevent issues with races
Additional commits viewable in compare view

Updates googleapis-common-protos from 1.74.0 to 1.75.0

Release notes

Sourced from googleapis-common-protos's releases.

googleapis-common-protos: v1.75.0

v1.75.0 (2026-05-06)

Commits

3997a10 chore: librarian release pull request: 20260506T163115Z (#16964)
f655e49 chore: add type annotation to SYNCPOINTS (#16973)
f149bd7 refactor(bigframes): Modularize compiler routing as proxy executor (#16907)
19db82f chore(bigframes): remove leftover support for Python <= 3.9 (#16961)
2dedaac chore: test CommonResource resource name alias (#16965)
9652a08 fix: pass resource aliases to file-level CommonResources (#16945)
78a48b0 fix(google-cloud-core): Drop support for Python 3.9 (#16953)
5975c48 fix(dns): Drop support for Python 3.9 (#16954)
d5bea2e fix(crc32c): Drop support for Python 3.8 and 3.9 (#16955)
63f6d96 fix(sqlalchemy-bigquery): Drop support for Python 3.8 and 3.9 (#16956)
Additional commits viewable in compare view

Updates gunicorn from 25.3.0 to 26.0.0

Release notes

Sourced from gunicorn's releases.

26.0.0

Breaking Changes

Eventlet worker removed: The eventlet worker class has been dropped. Migrate to gevent, gthread, or tornado.

New Features

ASGI Framework Compatibility Suite: New end-to-end compatibility test harness covering Starlette, FastAPI, Litestar, Quart, Sanic, and BlackSheep. Current grid passes 438/444 tests (98%).

ASGI Test Suite Expansion: 134 additional ASGI unit tests covering protocol semantics, lifespan, websockets, and chunked framing.

Security

HTTP/1.1 Request-Target Validation (RFC 9112 sections 3.2.3, 3.2.4):

Reject authority-form request-target outside CONNECT

Reject asterisk-form request-target outside OPTIONS

Reject relative-reference request-targets

Header Field Hardening (RFC 9110):

Reject control characters in header field-value (section 5.5)

Reject forbidden trailer field-names (section 6.5.1)

Reject Content-Length list form (RFC 9112 section 6.3)

Request Smuggling Hardening:

Tighten keepalive gate and scope finish_body byte cap

Keep _body_receiver alive across the keepalive smuggling gate so pipelined requests cannot re-enter a closed body

Address parser/protocol findings from a six-point WSGI/ASGI audit

PROXY Protocol (ASGI): Enforce proxy_allow_ips and tighten v1/v2 parsing in the ASGI callback parser.

Connection Draining: Drain the connection on close per RFC 9112 section 9.6 to prevent reset-on-close truncation.

Bug Fixes

Body Framing on HEAD/204/304:

Keep Content-Length on HEAD and 304 responses (#3621)

Drop body framing on HEAD/204/304 even when the framework set it

Warn once when an ASGI app emits a body for a no-body response

HTTP/2 ASGI:

Fix _handle_stream_ended to set _body_complete in the async HTTP/2 handler so request bodies finalize correctly on stream end

Add InvalidChunkExtension mapping and fast-parser support in ASGI tests (#3565)

HTTP/1.1 100-Continue: Stop adding Transfer-Encoding: chunked to 100-Continue interim responses.

WebSocket Close Handshake (RFC 6455):

Comply with the close handshake state machine

Close the transport after the close handshake completes

Fix binary send when the text key is None

Early Hints: Validate headers in the early_hints callback to match process_headers; pass only the header name to InvalidHeader (#3588).

ASGI Framework Fixes:

Fix ASGI disconnect handling for Django-style apps

Fix Litestar request handling (use raw ASGI receive for body/headers)

Fix Litestar HTTP endpoints for compatibility tests

Fix Quart headers endpoint to normalize keys to lowercase

Fix Quart WebSocket close test app (missing accept())

Fix duplicate Transfer-Encoding header for BlackSheep streaming

... (truncated)

Commits

5d819cf release: 26.0.0
b45c70d Merge pull request #3611 from zc-mattcen/docs-typo
99c8d48 Merge pull request #3623 from benoitc/chore/drop-eventlet-add-h2-uvloop-test-...
5a655af Merge pull request #3622 from benoitc/test/docker-port-and-ipv4-fixes
201df19 chore: remove eventlet worker; add h2 and uvloop to test deps
f4ac8e1 test: pass action name to dirty client and stabilize after TTOU spam
54d38af test: unblock docker fixtures on macOS hosts
68843c8 Merge pull request #3621 from benoitc/fix/asgi-preserve-content-length-on-hea...
31f2618 Merge pull request #3620 from benoitc/fix/asgi-proxy-protocol-trust-and-parsing
41ec752 fix: keep Content-Length on HEAD and 304 responses
Additional commits viewable in compare view

Updates icalendar from 7.0.3 to 7.1.0

Release notes

Sourced from icalendar's releases.

v7.1.0

To view the changes, please see the Changelog. This release can be installed from PyPI.

Changelog

Sourced from icalendar's changelog.

7.1.0 (2026-04-30)

Minor changes


- Deprecate ``icalendar.parser.escape_string`` and ``icalendar.parser.unescape_string`` for icalendar version 8. Use ``_escape_string`` and ``_unescape_string`` internally. :issue:`1011`
- Added behavioral tests for :class:`~icalendar.cal.lazy.LazyCalendar` covering serialization round-trips, ``.todos``, ``.journals``, forward timezone references, and ``with_uid()`` substring false-positives. :issue:`1050`
- Added edge case tests for :class:`~icalendar.prop.conference.Conference` parameter normalization covering string passthrough, empty list filtering, and ``None`` omission. :issue:`925`
- Make icalendar an explicit editable install for clarity. :pr:`1268`
- Do not run some tests until a pull request is approved. :pr:`1246`
- Mark skipped CI tasks as skipped instead of running them. :issue:`1286`
- Created an :meth:`~icalendar.prop.boolean.vBoolean.ical_value` property for the :class:`~icalendar.prop.boolean.vBoolean` component. :issue:`876`
- Created an :meth:`~icalendar.prop.float.vFloat.ical_value` property for the :class:`~icalendar.prop.float.vFloat` component. :issue:`876`
- Created an :meth:`~icalendar.prop.integer.vInt.ical_value` property for the :class:`~icalendar.prop.integer.vInt` component. :issue:`876`
- Created an :meth:`~icalendar.prop.binary.vBinary.ical_value` property for the :class:`~icalendar.prop.binary.vBinary` component. :issue:`876`
- Put the link check as the last documentation CI task, allowing the documentation build and Vale to run first and fail faster. :pr:`1295`
- Extended :func:`~icalendar.timezone.tzp.TZP.localize` to support localizing both :class:`datetime.datetime` and :class:`datetime.time` objects, returning timezone-aware :class:`datetime.time` objects for the latter. :issue:`1142`
- Add type hints to tests directory functions. :issue:`938`
- Update to Contributor Covenant 3.0 Code of Conduct, hosted at https://pycal.org/code-of-conduct/.
New features

- Added :class:`~icalendar.cal.lazy.LazyCalendar` for lazy parsing of subcomponents. :issue:`158`, :issue:`1050`
- Updated :func:`icalendar.prop.dt.time.vTime.from_ical` to support parsing time values with TZID parameters, returning timezone-aware :class:`datetime.time` objects. :issue:`1142`
- Added ``subcomponents`` parameter to :meth:`Component.new &lt;icalendar.cal.component.Component.new&gt;`, :meth:`Event.new &lt;icalendar.cal.event.Event.new&gt;`, :meth:`Todo.new &lt;icalendar.cal.todo.Todo.new&gt;`, and :meth:`Availability.new &lt;icalendar.cal.availability.Availability.new&gt;`. :issue:`1065`
- Switch to uv for development. :issue:`1102`
Bug fixes

- Allow lenient parsing of content lines with optional whitespace around property and parameter delimiters (for example, ``REFRESH - INTERVAL; VALUE = DURATION:PT48H``) when parsing calendars with ``strict=False``. :issue:`351`
- X-properties with a ``VALUE`` parameter are now parsed using the correct type instead of falling back to :class:`~icalendar.prop.unkown.vUnknown`. :issue:`1238`
- Test that the ``DURATION`` property catches :class:`datetime.timedelta` objects without vProperty wrappers. :issue:`884`
- Fixed :func:`~icalendar.attr.get_end_property` to avoid allowing the creating of VEVENT components with negative durations. Only VTODO components are allowed to have negative durations. :issue:`999`
- GitHub Actions: conditional tests now show as &amp;quot;skipped&amp;quot; instead of &amp;quot;pending&amp;quot;. :issue:`1264`
- Fixed :meth:`Component.__eq__ &amp;lt;icalendar.cal.component.Component.__eq__&amp;gt;` method not being commutative when comparing subcomponents. :issue:`1224`
- Verified that the ``VALUE`` parameter of jCal components is used for the type of the component property. :issue:`1237`
- Fix :func:`~icalendar.parser.string.escape_char` handling of ``bytes`` input by converting with :func:`icalendar.parser_tools.to_unicode` before escaping. :issue:`1226`
- Fixed ``RecursionError`` in ``walk()``, ``property_items()``, and ``to_ical()`` by using iterative implementations for component traversal and property extraction. :pr:`1348`

Documentation
&lt;/code&gt;&lt;/pre&gt;
&lt;ul&gt;
&lt;li&gt;Convert docstring of :func:&lt;code&gt;~icalendar.param.string_parameter&lt;/code&gt; to Google style. :issue:&lt;code&gt;1072&lt;/code&gt;, :pr:&lt;code&gt;1316&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Run &lt;code&gt;sphinx-build&lt;/code&gt; with &lt;code&gt;-W&lt;/code&gt; to turn warnings into errors. :issue:&lt;code&gt;1306&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Added &lt;code&gt;sphinx-llms-txt &amp;lt;https://sphinx-llms-txt.readthedocs.io/en/stable/&amp;gt;&lt;/code&gt;_ extension to generate :file:&lt;code&gt;llms.txt&lt;/code&gt; and :file:&lt;code&gt;llms-full.txt&lt;/code&gt; files for AI/LLM documentation consumption. :issue:&lt;code&gt;1302&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Fixed CI Vale check reporting and resolved Vale errors. :issue:&lt;code&gt;1277&lt;/code&gt;&lt;/li&gt;
&lt;li&gt;Include :file:&lt;code&gt;Makefile&lt;/code&gt; in documentation workflow path filters so documentation CI runs when Makefile logic changes, and keep Vale failures visible in CI output. :issue:&lt;code&gt;1277&lt;/code&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;!-- raw HTML omitted --&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/1300b76fb3fe40d987cc3715735c026b3c1a2191&quot;&gt;&lt;code&gt;1300b76&lt;/code&gt;&lt;/a&gt; Merge branch 'main' into 7.x&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/255e6b841331e2d5cf2901402e08ab788899d465&quot;&gt;&lt;code&gt;255e6b8&lt;/code&gt;&lt;/a&gt; add 7.x to run the tests&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/fc8a4f5674eaa05bf3546b296f166583f670561a&quot;&gt;&lt;code&gt;fc8a4f5&lt;/code&gt;&lt;/a&gt; disable the version switcher on the 7.x branch&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/f5aa35d2ff6d106f5a7b286970b65b5f9d9211b4&quot;&gt;&lt;code&gt;f5aa35d&lt;/code&gt;&lt;/a&gt; version 7.1.0&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/b4ffb8345deea76e4cca72689907ed2f8488e7de&quot;&gt;&lt;code&gt;b4ffb83&lt;/code&gt;&lt;/a&gt; Merge pull request &lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1348&quot;&gt;#1348&lt;/a&gt; from uwezkhan/fix/property-items-recursion&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/1d6d18d357335367d72f4628b7158dd4800caf39&quot;&gt;&lt;code&gt;1d6d18d&lt;/code&gt;&lt;/a&gt; Merge branch 'main' into fix/property-items-recursion&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/05a34d48d3223b2780c9afffd0cdbab9d5c50ffd&quot;&gt;&lt;code&gt;05a34d4&lt;/code&gt;&lt;/a&gt; Merge pull request &lt;a href=&quot;https://redirect.github.com/collective/icalendar/issues/1346&quot;&gt;#1346&lt;/a&gt; from uwezkhan/fix/deep-component-walk-dos&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/a4829d4d43b29e430b97ab66313f6357edd3742d&quot;&gt;&lt;code&gt;a4829d4&lt;/code&gt;&lt;/a&gt; Merge branch 'main' into fix/property-items-recursion&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/66579fbf8fb4aeb6bf1ded0cfa353ba3d500e35a&quot;&gt;&lt;code&gt;66579fb&lt;/code&gt;&lt;/a&gt; fix formatting&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/collective/icalendar/commit/1f55c2035315e53b8d9a6eeacf1aee046d794fd3&quot;&gt;&lt;code&gt;1f55c20&lt;/code&gt;&lt;/a&gt; Merge branch 'main' into fix/deep-component-walk-dos&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/collective/icalendar/compare/v7.0.3...v7.1.0&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;</code></pre>

Updates `importlib-metadata` from 8.7.1 to 9.0.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/python/importlib_metadata/blob/main/NEWS.rst">importlib-metadata's changelog</a>.</em></p>
<blockquote>
<h1>v9.0.0</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>Added <code>MetadataNotFound</code> (subclass of <code>FileNotFoundError</code>) and updated <code>Distribution.metadata</code>/<code>metadata()</code> to raise it when the metadata files are missing instead of returning <code>None</code><code>python/cpython#143387</code><a href="https://redirect.github.com/python/importlib_metadata/issues/532">#532</a>)</li>
</ul>
<h1>v8.9.0</h1>
<h2>Features</h2>
<ul>
<li><code>python/cpython#110937</code><a href="https://redirect.github.com/python/cpython/issues/140141">python/cpython#140141</a>, <a href="https://redirect.github.com/python/cpython/issues/143658">python/cpython#143658</a>)</li>
</ul>
<h1>v8.8.0</h1>
<h2>Features</h2>
<ul>
<li>Removed Python 3.9 compatibility.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/python/importlib_metadata/commit/a9f883fef337c667a81a987bc0cbc0dbb43b2bfe"><code>a9f883f</code></a> Finalize</li>
<li><a href="https://github.com/python/importlib_metadata/commit/9b0dfdfe2e187dca6644007570189aadc6c97a34"><code>9b0dfdf</code></a> Raise an exception when no metadata file is found (<a href="https://redirect.github.com/python/importlib_metadata/issues/532">#532</a>)</li>
<li><a href="https://github.com/python/importlib_metadata/commit/0f2229ca84f20be2ceaaa4c62a276fa9b003f5bc"><code>0f2229c</code></a> Merge branch 'main' into feature/no-metadata-exception</li>
<li><a href="https://github.com/python/importlib_metadata/commit/2f4088e490a73ac7f39b86214d2da16d2eb1ff39"><code>2f4088e</code></a> Remove news fragments about internal details.</li>
<li><a href="https://github.com/python/importlib_metadata/commit/0ac27203f8044daf634c22f385838122a0707449"><code>0ac2720</code></a> Add news fragment.</li>
<li><a href="https://github.com/python/importlib_metadata/commit/a5c2154835facb4a9d0a6f5b3aac1f3d1ff86170"><code>a5c2154</code></a> Finalize</li>
<li><a href="https://github.com/python/importlib_metadata/commit/e66e22634f7522e7778b66e8a8b19782a11d4943"><code>e66e226</code></a> Drop support for EOL Python 3.9 (<a href="https://redirect.github.com/python/importlib_metadata/issues/530">#530</a>)</li>
<li><a href="https://github.com/python/importlib_metadata/commit/6027933ae96c9e51dd0b7ce392cb30f6fcae1940"><code>6027933</code></a> Add news fragment.</li>
<li><a href="https://github.com/python/importlib_metadata/commit/b89388a53bf857127e0a6860dfcfe2cd69a79ab8"><code>b89388a</code></a> Import os_helper directly.</li>
<li><a href="https://github.com/python/importlib_metadata/commit/2dcb761d940b0115b786ab3b6f336af7d94630f4"><code>2dcb761</code></a> Add uniform exclusions for test.support.</li>
<li>Additional commits viewable in <a href="https://github.com/python/importlib_metadata/compare/v8.7.1...v9.0.0">compare view</a></li>
</ul>
</details>
<br />

Updates `nh3` from 0.3.4 to 0.3.5
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/messense/nh3/releases">nh3's releases</a>.</em></p>
<blockquote>
<h2>v0.3.5</h2>
<h2>What's Changed</h2>
<ul>
<li>Add usage examples for clean() and Cleaner arguments by <a href="https://github.com/gghez"><code>@gghez</code></a> in <a href="https://redirect.github.com/messense/nh3/pull/120">messense/nh3#120</a></li>
<li>Add doctest coverage for module docstrings and RST files by <a href="https://github.com/gghez"><code>@gghez</code></a> in <a href="https://redirect.github.com/messense/nh3/pull/121">messense/nh3#121</a></li>
<li>Bump pyo3 from 0.28.2 to 0.28.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/messense/nh3/pull/123">messense/nh3#123</a></li>
<li>Add tags parameter to clean_text by <a href="https://github.com/gghez"><code>@gghez</code></a> in <a href="https://redirect.github.com/messense/nh3/pull/122">messense/nh3#122</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/messense/nh3/compare/v0.3.4...v0.3.5">https://github.com/messense/nh3/compare/v0.3.4...v0.3.5</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/messense/nh3/commit/9e78e6af74267c6789c62e98512460990415fb91"><code>9e78e6a</code></a> Bump version to 0.3.5</li>
<li><a href="https://github.com/messense/nh3/commit/5225ec29f6ba74349d158676461fa6081cf804d8"><code>5225ec2</code></a> Add tags parameter to clean_text (<a href="https://redirect.github.com/messense/nh3/issues/122">#122</a>)</li>
<li><a href="https://github.com/messense/nh3/commit/129df5295dd98b263a3f24bd4f9bd5e43a7bb677"><code>129df52</code></a> Bump pyo3 from 0.28.2 to 0.28.3 (<a href="https://redirect.github.com/messense/nh3/issues/123">#123</a>)</li>
<li><a href="https://github.com/messense/nh3/commit/25348dffb9f1373008a3f0f7d85f2ebb37883e07"><code>25348df</code></a> Add doctest coverage for module docstrings and RST files (<a href="https://redirect.github.com/messense/nh3/issues/121">#121</a>)</li>
<li><a href="https://github.com/messense/nh3/commit/bf48b37d0b8e1e1bddc62ae058f880eae1a4abc2"><code>bf48b37</code></a> Add usage examples for clean() and Cleaner arguments (<a href="https://redirect.github.com/messense/nh3/issues/120">#120</a>)</li>
<li>See full diff in <a href="https://github.com/messense/nh3/compare/v0.3.4...v0.3.5">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-exporter-otlp-proto-common` from 1.40.0 to 1.41.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md">opentelemetry-exporter-otlp-proto-common's changelog</a>.</em></p>
<blockquote>
<h2>Version 1.41.1/0.62b1 (2026-04-24)</h2>
<h2>Version 1.41.0/0.62b0 (2026-04-09)</h2>
<ul>
<li><code>opentelemetry-sdk</code>: Add <code>host</code> resource detector support to declarative file configuration via <code>detection_development.detectors[].host</code>
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5002">#5002</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>container</code> resource detector support to declarative file configuration via <code>detection_development.detectors[].container</code>, using entry point loading of the <code>opentelemetry-resource-detector-containerid</code> contrib package
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5004">#5004</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>create_tracer_provider</code>/<code>configure_tracer_provider</code> to declarative file configuration, enabling TracerProvider instantiation from config files without reading env vars
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4985">#4985</a>)</li>
<li>Enabled the flake8-tidy-import plugins rules for the ruff linter. These rules throw warnings for relative imports in the modules.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5019">#5019</a>)</li>
<li><code>opentelemetry-sdk</code>: Fix <code>AttributeError</code> in <code>ExplicitBucketHistogramAggregation</code> when applied to non-Histogram instruments without explicit boundaries
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5034">#5034</a>)</li>
<li>Fix <code>BatchLogRecordProcessor</code> default <code>schedule_delay_millis</code> from 5000ms to 1000ms to comply with the OTel specification. Note: logs may be exported 5x more frequently by default (e.g. for users who don't explicitly set the <code>OTEL_BLRP_SCHEDULE_DELAY</code> env var).
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4998">#4998</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>process</code> resource detector support to declarative file configuration via <code>detection_development.detectors[].process</code>
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5001">#5001</a>)</li>
<li><code>opentelemetry-sdk</code>: Add shared <code>_parse_headers</code> helper for declarative config OTLP exporters
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5021">#5021</a>)</li>
<li><code>opentelemetry-api</code>: Replace a broad exception in attribute cleaning tests to satisfy pylint in the <code>lint-opentelemetry-api</code> CI job</li>
<li><code>opentelemetry-sdk</code>: Add <code>create_meter_provider</code>/<code>configure_meter_provider</code> to declarative file configuration, enabling MeterProvider instantiation from config files without reading env vars
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4987">#4987</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>create_resource</code> and <code>create_propagator</code>/<code>configure_propagator</code> to declarative file configuration, enabling Resource and propagator instantiation from config files without reading env vars
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4979">#4979</a>)</li>
<li><code>opentelemetry-sdk</code>: Map Python <code>CRITICAL</code> log level to OTel <code>FATAL</code> severity text per the specification
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4984">#4984</a>)</li>
<li><code>opentelemetry-sdk</code>: Add file configuration support with YAML/JSON loading, environment variable substitution, and schema validation against the vendored OTel config JSON schema
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4898">#4898</a>)</li>
<li>Fix intermittent CI failures in <code>getting-started</code> and <code>tracecontext</code> jobs caused by GitHub git CDN SHA propagation lag by installing contrib packages from the already-checked-out local copy instead of a second git clone
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4958">#4958</a>)</li>
<li><code>opentelemetry-sdk</code>: fix type annotations on <code>MetricReader</code> and related types
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4938/">#4938</a>)</li>
<li><code>opentelemetry-sdk</code>: implement log creation metric
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4935">#4935</a>)</li>
<li><code>opentelemetry-sdk</code>: implement metric reader metrics
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4970">#4970</a>)</li>
<li><code>opentelemetry-sdk</code>: implement processor metrics
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5012">#5012</a>)</li>
<li><code>opentelemetry-sdk</code>: upgrade vendored OTel configuration schema from v1.0.0-rc.3 to v1.0.0
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4965">#4965</a>)</li>
<li>improve check-links ci job
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4978">#4978</a>)</li>
<li>Resolve some Pyright type errors in Span/ReadableSpan and utility stubs
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4973">#4973</a>)</li>
<li><code>opentelemetry-exporter-prometheus</code>: Fix metric name prefix
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4895">#4895</a>)</li>
<li><code>opentelemetry-api</code>, <code>opentelemetry-sdk</code>: Add deepcopy support for <code>BoundedAttributes</code> and <code>BoundedList</code>
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4934">#4934</a>)</li>
<li><code>opentelemetry-proto-json</code>, <code>opentelemetry-codegen-json</code>: Implement custom protoc plugin to generate OTLP JSON class definitions</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/760e0248edbd01ae817941c1dfa61c07241b0727"><code>760e024</code></a> Prepare release 1.41.1/0.62b1 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5138">#5138</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/90e06bcd8c024a38ecf388c19c5a15fc094ea0ed"><code>90e06bc</code></a> Unreleased changelog for 1.41.1 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5137">#5137</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/1a178fcc5c689516849ced80fb2533fe7db7a80f"><code>1a178fc</code></a> [release/v1.41.x-0.62bx] Prepare release 1.41.0/0.62b0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5064">#5064</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/37dea4bbdb1a3c83b96fc22c2f68a848b4989fb5"><code>37dea4b</code></a> feat: add experimental logger configurator (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4980">#4980</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/7c860ca40eb87c15fb608ce3598cfec4a5da2d1c"><code>7c860ca</code></a> misc: update version for codegen-json and proto-json packages (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5061">#5061</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/b3d98b392fd1fa1a501e11ce8e126f2003edb895"><code>b3d98b3</code></a> [chore]: update readme (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5060">#5060</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/dbbd1bca26f12d0cefff721a857d08a82476f434"><code>dbbd1bc</code></a> feat(config): Add MeterProvider support for declarative config (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4987">#4987</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/6faa58c58782313283a87a7c61fbbdd9cd2054d6"><code>6faa58c</code></a> feat(config): add host resource detector support for declarative config (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5002">#5002</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/c0cbfbd62fa59e2c41cd2c88371dc6478fa95716"><code>c0cbfbd</code></a> feat(config): wire container resource detector via entry point loading (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5004">#5004</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/f764e45f52952f5a0287e5a6c094cbfd56accd2b"><code>f764e45</code></a> feat(config): Add TracerProvider support for declarative config (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4985">#4985</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/open-telemetry/opentelemetry-python/compare/v1.40.0...v1.41.1">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.40.0 to 1.41.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md">opentelemetry-exporter-otlp-proto-grpc's changelog</a>.</em></p>
<blockquote>
<h2>Version 1.41.1/0.62b1 (2026-04-24)</h2>
<h2>Version 1.41.0/0.62b0 (2026-04-09)</h2>
<ul>
<li><code>opentelemetry-sdk</code>: Add <code>host</code> resource detector support to declarative file configuration via <code>detection_development.detectors[].host</code>
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5002">#5002</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>container</code> resource detector support to declarative file configuration via <code>detection_development.detectors[].container</code>, using entry point loading of the <code>opentelemetry-resource-detector-containerid</code> contrib package
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5004">#5004</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>create_tracer_provider</code>/<code>configure_tracer_provider</code> to declarative file configuration, enabling TracerProvider instantiation from config files without reading env vars
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4985">#4985</a>)</li>
<li>Enabled the flake8-tidy-import plugins rules for the ruff linter. These rules throw warnings for relative imports in the modules.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5019">#5019</a>)</li>
<li><code>opentelemetry-sdk</code>: Fix <code>AttributeError</code> in <code>ExplicitBucketHistogramAggregation</code> when applied to non-Histogram instruments without explicit boundaries
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5034">#5034</a>)</li>
<li>Fix <code>BatchLogRecordProcessor</code> default <code>schedule_delay_millis</code> from 5000ms to 1000ms to comply with the OTel specification. Note: logs may be exported 5x more frequently by default (e.g. for users who don't explicitly set the <code>OTEL_BLRP_SCHEDULE_DELAY</code> env var).
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4998">#4998</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>process</code> resource detector support to declarative file configuration via <code>detection_development.detectors[].process</code>
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5001">#5001</a>)</li>
<li><code>opentelemetry-sdk</code>: Add shared <code>_parse_headers</code> helper for declarative config OTLP exporters
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5021">#5021</a>)</li>
<li><code>opentelemetry-api</code>: Replace a broad exception in attribute cleaning tests to satisfy pylint in the <code>lint-opentelemetry-api</code> CI job</li>
<li><code>opentelemetry-sdk</code>: Add <code>create_meter_provider</code>/<code>configure_meter_provider</code> to declarative file configuration, enabling MeterProvider instantiation from config files without reading env vars
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4987">#4987</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>create_resource</code> and <code>create_propagator</code>/<code>configure_propagator</code> to declarative file configuration, enabling Resource and propagator instantiation from config files without reading env vars
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4979">#4979</a>)</li>
<li><code>opentelemetry-sdk</code>: Map Python <code>CRITICAL</code> log level to OTel <code>FATAL</code> severity text per the specification
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/4984">#4984</a>)</li>
<li><code>opentelemetry-sdk</code>: Add file configuration support with YAML/JSON loading, environment variable substitution, and schema validation against the vendored OTel config JSON schema
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4898">#4898</a>)</li>
<li>Fix intermittent CI failures in <code>getting-started</code> and <code>tracecontext</code> jobs caused by GitHub git CDN SHA propagation lag by installing contrib packages from the already-checked-out local copy instead of a second git clone
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4958">#4958</a>)</li>
<li><code>opentelemetry-sdk</code>: fix type annotations on <code>MetricReader</code> and related types
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4938/">#4938</a>)</li>
<li><code>opentelemetry-sdk</code>: implement log creation metric
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4935">#4935</a>)</li>
<li><code>opentelemetry-sdk</code>: implement metric reader metrics
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4970">#4970</a>)</li>
<li><code>opentelemetry-sdk</code>: implement processor metrics
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5012">#5012</a>)</li>
<li><code>opentelemetry-sdk</code>:...

_Description has been truncated_

…pdates Bumps the dependencies group with 29 updates in the /src/backend directory: | Package | From | To | | --- | --- | --- | | [bleach](https://github.com/mozilla/bleach) | `4.1.0` | `6.3.0` | | [blessed](https://github.com/jquast/blessed) | `1.38.0` | `1.39.0` | | [boto3](https://github.com/boto/boto3) | `1.42.96` | `1.43.6` | | [botocore](https://github.com/boto/botocore) | `1.42.96` | `1.43.6` | | [cryptography](https://github.com/pyca/cryptography) | `47.0.0` | `48.0.0` | | [dulwich](https://github.com/dulwich/dulwich) | `1.2.0` | `1.2.1` | | [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) | `1.74.0` | `1.75.0` | | [gunicorn](https://github.com/benoitc/gunicorn) | `25.3.0` | `26.0.0` | | [icalendar](https://github.com/collective/icalendar) | `7.0.3` | `7.1.0` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `9.0.0` | | [nh3](https://github.com/messense/nh3) | `0.3.4` | `0.3.5` | | [opentelemetry-exporter-otlp-proto-common](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` | | [opentelemetry-exporter-otlp-proto-grpc](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` | | [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` | | [opentelemetry-instrumentation](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` | | [opentelemetry-instrumentation-dbapi](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` | | [opentelemetry-proto](https://github.com/open-telemetry/opentelemetry-python) | `1.40.0` | `1.41.1` | | [opentelemetry-semantic-conventions](https://github.com/open-telemetry/opentelemetry-python) | `0.61b0` | `0.62b1` | | [opentelemetry-util-http](https://github.com/open-telemetry/opentelemetry-python-contrib) | `0.61b0` | `0.62b1` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.6` | `7.34.1` | | [s3transfer](https://github.com/boto/s3transfer) | `0.16.1` | `0.17.0` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.58.0` | `2.59.0` | | [wcwidth](https://github.com/jquast/wcwidth) | `0.6.0` | `0.7.0` | | [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.3` | `2.1.2` | | [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `4.0.0` | `4.2.0` | | [pip](https://github.com/pypa/pip) | `26.1` | `26.1.1` | | [pytest-codspeed](https://github.com/CodSpeedHQ/pytest-codspeed) | `4.4.0` | `4.5.0` | | [types-psycopg2](https://github.com/python/typeshed) | `2.9.21.20260422` | `2.9.21.20260508` | | [types-pyyaml](https://github.com/python/typeshed) | `6.0.12.20260408` | `6.0.12.20260508` | Updates `bleach` from 4.1.0 to 6.3.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v4.1.0...v6.3.0) Updates `blessed` from 1.38.0 to 1.39.0 - [Release notes](https://github.com/jquast/blessed/releases) - [Changelog](https://github.com/jquast/blessed/blob/master/docs/history.rst) - [Commits](https://github.com/jquast/blessed/commits) Updates `boto3` from 1.42.96 to 1.43.6 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.42.96...1.43.6) Updates `botocore` from 1.42.96 to 1.43.6 - [Commits](boto/botocore@1.42.96...1.43.6) Updates `cryptography` from 47.0.0 to 48.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@47.0.0...48.0.0) Updates `dulwich` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/dulwich/dulwich/releases) - [Changelog](https://github.com/jelmer/dulwich/blob/main/NEWS) - [Commits](jelmer/dulwich@dulwich-1.2.0...dulwich-1.2.1) Updates `googleapis-common-protos` from 1.74.0 to 1.75.0 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.74.0...googleapis-common-protos-v1.75.0) Updates `gunicorn` from 25.3.0 to 26.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@25.3.0...26.0.0) Updates `icalendar` from 7.0.3 to 7.1.0 - [Release notes](https://github.com/collective/icalendar/releases) - [Changelog](https://github.com/collective/icalendar/blob/main/CHANGES.rst) - [Commits](collective/icalendar@v7.0.3...v7.1.0) Updates `importlib-metadata` from 8.7.1 to 9.0.0 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v8.7.1...v9.0.0) Updates `nh3` from 0.3.4 to 0.3.5 - [Release notes](https://github.com/messense/nh3/releases) - [Commits](messense/nh3@v0.3.4...v0.3.5) Updates `opentelemetry-exporter-otlp-proto-common` from 1.40.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1) Updates `opentelemetry-exporter-otlp-proto-grpc` from 1.40.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1) Updates `opentelemetry-exporter-otlp-proto-http` from 1.40.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1) Updates `opentelemetry-instrumentation` from 0.61b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-instrumentation-dbapi` from 0.61b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `opentelemetry-proto` from 1.40.0 to 1.41.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/v1.41.1/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.40.0...v1.41.1) Updates `opentelemetry-semantic-conventions` from 0.61b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/commits) Updates `opentelemetry-util-http` from 0.61b0 to 0.62b1 - [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits) Updates `protobuf` from 6.33.6 to 7.34.1 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `s3transfer` from 0.16.1 to 0.17.0 - [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst) - [Commits](boto/s3transfer@0.16.1...0.17.0) Updates `sentry-sdk` from 2.58.0 to 2.59.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.58.0...2.59.0) Updates `wcwidth` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/jquast/wcwidth/releases) - [Commits](jquast/wcwidth@0.6.0...0.7.0) Updates `wrapt` from 1.17.3 to 2.1.2 - [Release notes](https://github.com/GrahamDumpleton/wrapt/releases) - [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst) - [Commits](GrahamDumpleton/wrapt@1.17.3...2.1.2) Updates `markdown-it-py` from 4.0.0 to 4.2.0 - [Release notes](https://github.com/executablebooks/markdown-it-py/releases) - [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md) - [Commits](executablebooks/markdown-it-py@v4.0.0...v4.2.0) Updates `pip` from 26.1 to 26.1.1 - [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst) - [Commits](pypa/pip@26.1...26.1.1) Updates `pytest-codspeed` from 4.4.0 to 4.5.0 - [Release notes](https://github.com/CodSpeedHQ/pytest-codspeed/releases) - [Changelog](https://github.com/CodSpeedHQ/pytest-codspeed/blob/master/CHANGELOG.md) - [Commits](CodSpeedHQ/pytest-codspeed@v4.4.0...v4.5.0) Updates `types-psycopg2` from 2.9.21.20260422 to 2.9.21.20260508 - [Commits](https://github.com/python/typeshed/commits) Updates `types-pyyaml` from 6.0.12.20260408 to 6.0.12.20260508 - [Commits](https://github.com/python/typeshed/commits) --- updated-dependencies: - dependency-name: bleach dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: blessed dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: boto3 dependency-version: 1.43.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: botocore dependency-version: 1.43.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: cryptography dependency-version: 48.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: dulwich dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: googleapis-common-protos dependency-version: 1.75.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: gunicorn dependency-version: 26.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: icalendar dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: importlib-metadata dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: nh3 dependency-version: 0.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: opentelemetry-exporter-otlp-proto-common dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: opentelemetry-exporter-otlp-proto-grpc dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: opentelemetry-instrumentation dependency-version: 0.62b1 dependency-type: direct:production dependency-group: dependencies - dependency-name: opentelemetry-instrumentation-dbapi dependency-version: 0.62b1 dependency-type: direct:production dependency-group: dependencies - dependency-name: opentelemetry-proto dependency-version: 1.41.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: opentelemetry-semantic-conventions dependency-version: 0.62b1 dependency-type: direct:production dependency-group: dependencies - dependency-name: opentelemetry-util-http dependency-version: 0.62b1 dependency-type: direct:production dependency-group: dependencies - dependency-name: protobuf dependency-version: 7.34.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: s3transfer dependency-version: 0.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sentry-sdk dependency-version: 2.59.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: wcwidth dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: wrapt dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: markdown-it-py dependency-version: 4.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pip dependency-version: 26.1.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: pytest-codspeed dependency-version: 4.5.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: types-psycopg2 dependency-version: 2.9.21.20260508 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: types-pyyaml dependency-version: 6.0.12.20260508 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

netlify · 2026-05-15T18:56:35Z

✅ Deploy Preview for inventree-web-pui-preview canceled.

Name	Link
🔨 Latest commit	`42b4a52`
🔍 Latest deploy log	https://app.netlify.com/projects/inventree-web-pui-preview/deploys/6a076c60fa36a400081dba22

dependabot Bot assigned matmair May 15, 2026

dependabot Bot requested a review from SchrodingersGat as a code owner May 15, 2026 18:56

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 15, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the dependencies group across 1 directory with 29 updates#11954

chore(deps): bump the dependencies group across 1 directory with 29 updates#11954
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/src/backend/dependencies-6fc99bd511

dependabot Bot commented on behalf of github May 15, 2026

Uh oh!

netlify Bot commented May 15, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 15, 2026

Version 6.3.0 (October 27th, 2025)

Version 6.2.0 (October 29th, 2024)

Version 6.1.0 (October 6th, 2023)

1.17.9: Initial support for Python 3.10

1.15.0: Disable various integration tests, support python 3.7

1.14.0: bugfix term.wrap for text containing newlines

1.13.0: new Terminal.split_seqs() function, speed enhancement

1.12.0: add Terminal.get_location() method

Version History

dulwich-1.2.1

Changes since 1.2.0

googleapis-common-protos: v1.75.0

v1.75.0 (2026-05-06)

26.0.0

Breaking Changes

New Features

Security

Bug Fixes

v7.1.0

7.1.0 (2026-04-30)

Uh oh!

netlify Bot commented May 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for inventree-web-pui-preview canceled.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

netlify Bot commented May 15, 2026 •

edited

Loading