Bump the python-deps group with 6 updates by dependabot[bot] · Pull Request #1092 · omec-project/upf

dependabot · 2026-04-03T04:08:44Z

Bumps the python-deps group with 6 updates:

Package	From	To
grpcio	`1.78.0`	`1.80.0`
grpcio-tools	`1.78.1`	`1.80.0`
mitogen	`0.3.44`	`0.3.45`
werkzeug	`3.1.7`	`3.1.8`
numpy	`2.4.3`	`2.4.4`
pillow	`12.1.1`	`12.2.0`

Updates grpcio from 1.78.0 to 1.80.0

Release notes

Sourced from grpcio's releases.

Release v1.80.0

This is release 1.80.0 (glimmering) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[ssl] Implement TLS private key signer in Python. (#41701)

[TLS Credentials]: Private Key Offload Implementation. (#41606)

Fix max sockaddr struct size on OpenBSD. (#40454)

[core] Enable EventEngine for Python by default, and EventEngine fork support in Python and Ruby. (#41432)

[TLS Credentials]: Create InMemoryCertificateProvider to update certificates independently. (#41484)

[Ruby] Build/test ruby 4.0 and build native gems with Ruby 4.0 support. (#41324)

[EventEngine] Remove an incorrect std::move in DNSServiceResolver constructor. (#41502)

[RR and WRR] enable change to connect from a random index. (#41472)

[xds] Implement gRFC A101. (#41051)

C++

[C++] Add SNI override option to C++ channel credentials options API. (#41460)

C#

[C# tools] Option to append Async to server side method names #39010. (#39797)

Objective-C

[Fix][Compiler] Plugins fall back to the edition 2023 for older protobuf. (#41357)

PHP

[PHP] Disable php infinite recursion check for callback from Core to PHP. (#41835)

[PHP] Fix runtime error with PHp8.5 alpha because zend_exception_get_defaul…. (#40337)

Python

[Python] Fix GRPC_TRACE not working when absl log initialized in cython. (#41814)

Revert "[Python] Align GRPC_ENABLE_FORK_SUPPORT env defaults in core and python (#41455)". (#41769)

[Python] Fix AsyncIO Server maximum_concurrent_rpcs enforcement preventing negative active_rpcs count. (#41532)

[Python] Docs: correct grpc.Compression references. (#41705)

[Python] [Typeguard] Part 4 - Add Typeguard to AIO stack in tests . (#40226)

... (truncated)

Commits

f5e2d6e [Release] Bump version to 1.80.0 (on v1.80.x branch) (#41857)
938cfec [subchannel connection scaling] fix when we reset backoff (#41935)
91778be [Backport][v1.80.x][Python] New _create method for aio.Metadata (#41888)
f10b9f2 [bzlmod] upgrade rules_swift to avoid BCR CI breakage on Windows with bazel 7...
be4c1c5 [subchannel] fix crash in connection scaling code (#41853)
a71df73 [Release] Bump version to 1.80.0-pre1 (on v1.80.x branch) (#41844)
3ca09e4 [Python] Fix GRPC_TRACE and add test to check the GRPC_TRACE logs print (#41814)
260c6fd [PHP] Disable php infinite recursion check for callback from Core to PHP (#41...
50957c5 [Flakiness] Delete flaky iomgr fd_conservation_posix_test and create an Event...
e1e1d0a [Bzlmod] Turn off bzlmod for PSM python tests. (#41810)
Additional commits viewable in compare view

Updates grpcio-tools from 1.78.1 to 1.80.0

Release notes

Sourced from grpcio-tools's releases.

Release v1.80.0

This is release 1.80.0 (glimmering) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

[ssl] Implement TLS private key signer in Python. (#41701)

[TLS Credentials]: Private Key Offload Implementation. (#41606)

Fix max sockaddr struct size on OpenBSD. (#40454)

[core] Enable EventEngine for Python by default, and EventEngine fork support in Python and Ruby. (#41432)

[TLS Credentials]: Create InMemoryCertificateProvider to update certificates independently. (#41484)

[Ruby] Build/test ruby 4.0 and build native gems with Ruby 4.0 support. (#41324)

[EventEngine] Remove an incorrect std::move in DNSServiceResolver constructor. (#41502)

[RR and WRR] enable change to connect from a random index. (#41472)

[xds] Implement gRFC A101. (#41051)

C++

[C++] Add SNI override option to C++ channel credentials options API. (#41460)

C#

[C# tools] Option to append Async to server side method names #39010. (#39797)

Objective-C

[Fix][Compiler] Plugins fall back to the edition 2023 for older protobuf. (#41357)

PHP

[PHP] Disable php infinite recursion check for callback from Core to PHP. (#41835)

[PHP] Fix runtime error with PHp8.5 alpha because zend_exception_get_defaul…. (#40337)

Python

[Python] Fix GRPC_TRACE not working when absl log initialized in cython. (#41814)

Revert "[Python] Align GRPC_ENABLE_FORK_SUPPORT env defaults in core and python (#41455)". (#41769)

[Python] Fix AsyncIO Server maximum_concurrent_rpcs enforcement preventing negative active_rpcs count. (#41532)

[Python] Docs: correct grpc.Compression references. (#41705)

[Python] [Typeguard] Part 4 - Add Typeguard to AIO stack in tests . (#40226)

... (truncated)

Commits

f5e2d6e [Release] Bump version to 1.80.0 (on v1.80.x branch) (#41857)
a71df73 [Release] Bump version to 1.80.0-pre1 (on v1.80.x branch) (#41844)
1299baa [Python] Add language features to exported proto files (#41501)
522dbbb [Release] Bump version to 1.79.0-dev (on master branch) (#41291)
See full diff in compare view

Updates mitogen from 0.3.44 to 0.3.45

Release notes

Sourced from mitogen's releases.

v0.3.45

What's Changed

Mitogen: Overhaul logging configuration by @moreati in mitogen-hq/mitogen#1487

ansible_mitogen: Hide Mitogen debugging by default at high Ansible verbosity by @moreati in mitogen-hq/mitogen#1491

Full Changelog: mitogen-hq/mitogen@v0.3.44...v0.3.45

Changelog

Sourced from mitogen's changelog.

v0.3.45 (2026-03-30)

:gh:issue:963 :mod:ansible_mitogen: Hide Mitogen debugging by default at high Ansible verbosity

:gh:issue:1485 :mod:mitogen: Remove testlib log propagtion manipulation and lingering Operon references

:gh:issue:1482 :mod:mitogen: Remove mitogen.core._v logging shortcut

:gh:issue:1482 :mod:mitogen: Remove mitogen.core._vv logging shortcut

:gh:issue:1482 :mod:mitogen: Fix :meth:mitogen.core.LogHandler.emit signature

:gh:issue:1490 :mod:mitogen: Remove unused io argument from :func:mitogen.utils.log_to_file

:gh:issue:1482 :mod:mitogen: Consolidate log levels configuration

Commits

d9806f3 Merge pull request #1495 from moreati/release-0.3.45
91cb99a Merge commit 'd6bf299' into release-0.3.45
d6bf299 Prepare v0.3.45
d05480e Merge pull request #1491 from moreati/issue963
e3799cc ansible_mitogen: Hide Mitogen debugging by default at high Ansible verbosity
51d7371 mitogen: Factor out mitogen.utils._levelname_to_level()
e9eb77a Merge pull request #1487 from moreati/issue1482-wip
36fb409 mitogen: Consolidate log levels configuration
ab5be98 mitogen: Remove unused io argument from mitogen.utils.log_to_file()
0e49fda mitogen: Fix mitogen.core.LogHandler.emit() signature
Additional commits viewable in compare view

Updates werkzeug from 3.1.7 to 3.1.8

Release notes

Sourced from werkzeug's releases.

3.1.8

This is the Werkzeug 3.1.8 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Werkzeug/3.1.8/ Changes: https://werkzeug.palletsprojects.com/page/changes/#version-3-1-8 Milestone: https://github.com/pallets/werkzeug/milestone/45?closed=1

Request.host and get_host return the empty string if the header is missing or has invalid characters. #3142

Changelog

Sourced from werkzeug's changelog.

Version 3.1.8

Released 2026-04-02

Request.host and get_host return the empty string if the header is missing or has invalid characters. :issue:3142

Commits

c1a26b4 release version 3.1.8
7926f0b relax get_host strictness (#3148)
deab88f relax get_host strictness
65eb639 start version 3.1.8
7720b76 release version 3.1.7 (#3135)
See full diff in compare view

Updates numpy from 2.4.3 to 2.4.4

Release notes

Sourced from numpy's releases.

2.4.4 (Mar 29, 2026)

NumPy 2.4.4 Release Notes

The NumPy 2.4.4 is a patch release that fixes bugs discovered after the 2.4.3 release. It should finally close issue #30816, the OpenBLAS threading problem on ARM.

This release supports Python versions 3.11-3.14

Contributors

A total of 8 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

Charles Harris

Daniel Haag +

Denis Prokopenko +

Harshith J +

Koki Watanabe

Marten van Kerkwijk

Matti Picus

Nathan Goldbaum

Pull requests merged

A total of 7 pull requests were merged for this release.

#30978: MAINT: Prepare 2.4.x for further development

#31049: BUG: Add test to reproduce problem described in #30816 (#30818)

#31052: BUG: fix FNV-1a 64-bit selection by using NPY_SIZEOF_UINTP (#31035)

#31053: BUG: avoid warning on ufunc with where=True and no output

#31058: DOC: document caveats of ndarray.resize on 3.14 and newer

#31079: TST: fix POWER VSX feature mapping (#30801)

#31084: MAINT: numpy.i: Replace deprecated sprintf with snprintf...

Commits

be93fe2 Merge pull request #31090 from charris/prepare-2.4.4
f5245dc REL: Prepare for the NumPy 2.4.4 release
02e838b Merge pull request #31084 from charris/backport-31056
fa74b2d MAINT: numpy.i: Replace deprecated sprintf with snprintf (#31056)
533a6db Merge pull request #31079 from charris/backport-20801
9e496cb TST: fix POWER VSX feature mapping (#30801)
8052c4b Merge pull request #31058 from charris/backport-31021
7f13b5a MAINT: Skip test on PyPy.
4c5fdd6 MAINT: Remove unused import of tracemalloc.
a3ca5ed Update numpy/_core/src/multiarray/shape.c
Additional commits viewable in compare view

Updates pillow from 12.1.1 to 12.2.0

Release notes

Sourced from pillow's releases.

12.2.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Documentation

Update 12.2.0 release notes #9522 [@hugovk]

Add loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm #9482 [@bitplane]

Update Python versions #9515 [@radarhere]

Jeffrey A. Clark -> Jeffrey 'Alex' Clark #9513 [@aclark4life]

Add release notes for #9394, #9419 and #9456 #9467 [@radarhere]

Add Amiga Workbench .info loader to 3rd party plugins list #9459 [@bitplane]

Merge PFM documentation into PPM #9434 [@radarhere]

Update macOS tested Pillow versions #9431 [@radarhere]

Fix CVE number #9430 [@hugovk]

Dependencies

Update xz to 5.8.3 #9523 [@radarhere]

Update libjpeg-turbo to 3.1.4.1 #9507 [@radarhere]

Update libpng to 1.6.56 #9499 [@radarhere]

Update freetype to 2.14.3 #9485 [@radarhere]

Updated libavif to 1.4.1 #9479 [@radarhere]

Updated harfbuzz to 13.2.1 #9461 [@radarhere]

Update Ghostscript to 10.7.0 #9469 [@radarhere]

Update harfbuzz to 13.0.1 #9453 [@radarhere]

Update libavif to 1.4.0 #9460 [@radarhere]

Update freetype to 2.14.2 #9449 [@radarhere]

Update actions/download-artifact action to v8 #9451 [@renovate[bot]]

Updated libpng to 1.6.55 #9425 [@radarhere]

Testing

Cleanup .spider extension in the same test where it is added #9517 [@radarhere]

Run tests in parallel via tox for 3.5x speedup #9516 [@hugovk]

Enable colour in CI logs #9486 [@hugovk]

Update Ghostscript to 10.7.0 #9469 [@radarhere]

Simplify TGA test code #9477 [@radarhere]

Update tests to check for ValueError when encoding an empty image #9464 [@radarhere]

Upgrade CI from macos-15-intel to macos-26-intel #9454 [@hugovk]

Add check-case-conflict hook #9446 [@radarhere]

Specify platform when pulling docker image #9440 [@radarhere]

GHA: Cache libavif and webp builds for Ubuntu #9437 [@hugovk]

Update macOS tested Pillow versions #9431 [@radarhere]

Other changes

Check calloc return value #9527 [@radarhere]

Check all allocs in the Arrow tree #9488 [@wiredfool]

Reject non-numeric elements inside list coords #9526 [@hugovk]

Move variable declaration inside define #9525 [@radarhere]

... (truncated)

Commits

3c41c09 12.2.0 version bump
cdaa29e Check calloc return value (#9527)
585b2f5 Check calloc return value
ecf011e Check all allocs in the Arrow tree (#9488)
cf6de8c Reject non-numeric elements inside list coords (#9526)
ffdcede Update 12.2.0 release notes (#9522)
7929d77 Added security release notes (#149)
c4f7aa5 Added security release notes
22cdb5f Move variable declaration inside define (#9525)
fc15b3b Resize tall images vertically first (#9524)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-deps group with 6 updates: | Package | From | To | | --- | --- | --- | | [grpcio](https://github.com/grpc/grpc) | `1.78.0` | `1.80.0` | | [grpcio-tools](https://github.com/grpc/grpc) | `1.78.1` | `1.80.0` | | [mitogen](https://github.com/mitogen-hq/mitogen) | `0.3.44` | `0.3.45` | | [werkzeug](https://github.com/pallets/werkzeug) | `3.1.7` | `3.1.8` | | [numpy](https://github.com/numpy/numpy) | `2.4.3` | `2.4.4` | | [pillow](https://github.com/python-pillow/Pillow) | `12.1.1` | `12.2.0` | Updates `grpcio` from 1.78.0 to 1.80.0 - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](grpc/grpc@v1.78.0...v1.80.0) Updates `grpcio-tools` from 1.78.1 to 1.80.0 - [Release notes](https://github.com/grpc/grpc/releases) - [Commits](grpc/grpc@v1.78.1...v1.80.0) Updates `mitogen` from 0.3.44 to 0.3.45 - [Release notes](https://github.com/mitogen-hq/mitogen/releases) - [Changelog](https://github.com/mitogen-hq/mitogen/blob/master/docs/changelog.rst) - [Commits](mitogen-hq/mitogen@v0.3.44...v0.3.45) Updates `werkzeug` from 3.1.7 to 3.1.8 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.1.7...3.1.8) Updates `numpy` from 2.4.3 to 2.4.4 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.4.3...v2.4.4) Updates `pillow` from 12.1.1 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.1...12.2.0) --- updated-dependencies: - dependency-name: grpcio dependency-version: 1.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: grpcio-tools dependency-version: 1.80.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps - dependency-name: mitogen dependency-version: 0.3.45 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: werkzeug dependency-version: 3.1.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: numpy dependency-version: 2.4.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-deps - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-deps ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Apr 3, 2026

dependabot Bot requested a review from a team April 3, 2026 04:08

dependabot Bot added the python Pull requests that update Python code label Apr 3, 2026

gab-arrobo approved these changes Apr 6, 2026

View reviewed changes

gab-arrobo merged commit c755ac5 into main Apr 6, 2026
13 checks passed

gab-arrobo deleted the dependabot/pip/python-deps-290493bfa1 branch April 6, 2026 17:15

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python-deps group with 6 updates#1092

Bump the python-deps group with 6 updates#1092
gab-arrobo merged 1 commit intomainfrom
dependabot/pip/python-deps-290493bfa1

dependabot Bot commented on behalf of github Apr 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Apr 3, 2026

Release v1.80.0

Core

C++

C#

Objective-C

PHP

Python

Release v1.80.0

Core

C++

C#

Objective-C

PHP

Python

v0.3.45

What's Changed

v0.3.45 (2026-03-30)

3.1.8

Version 3.1.8

2.4.4 (Mar 29, 2026)

NumPy 2.4.4 Release Notes

Contributors

Pull requests merged

12.2.0

Documentation

Dependencies

Testing

Other changes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant