Skip to content

chore(deps): bump the backend group across 1 directory with 4 updates - #290

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/apps/backend/backend-dc4f49e244
Open

chore(deps): bump the backend group across 1 directory with 4 updates#290
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/pip/apps/backend/backend-dc4f49e244

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown

Bumps the backend group with 4 updates in the /apps/backend directory: drf-spectacular, sentry-sdk, pgvector and ruff.

Updates drf-spectacular from 0.29.0 to 0.30.0

Release notes

Sourced from drf-spectacular's releases.

0.30.0

After working through the backlog for several week, we are finally in a comfortable place again. Thank you to all contributors and users that waited patiently for me the catch up. It does not include all the PRs that were opened, but imho the most critical ones.

This release includes many small improvement, a few bug fixes, updates to the test suite and a renovated test matrix. Some minor schema corrections are to be expected, but nothing drastic. It is mostly fixing small inconsistencies and improving corner cases.

What's Changed

New Contributors

Full Changelog: tfranzel/drf-spectacular@0.29.0...0.30.0

Changelog

Sourced from drf-spectacular's changelog.

0.30.0 (2026-07-06)

  • Add OAS 3.2 schema for validation & test
  • Type hint build_bearer_security_scheme_object ([#1509](https://github.com/tfranzel/drf-spectacular/issues/1509) <https://github.com/tfranzel/drf-spectacular/issues/1509>_) [johnthagen]
  • Fix formatted CharField allow_blank handling ([#1511](https://github.com/tfranzel/drf-spectacular/issues/1511) <https://github.com/tfranzel/drf-spectacular/issues/1511>, ([#1499](https://github.com/tfranzel/drf-spectacular/issues/1499) <https://github.com/tfranzel/drf-spectacular/issues/1499>)) [Luciano de la Iglesia]
  • Consider allOf anyOf with nullable on OAS3.1 [#1480](https://github.com/tfranzel/drf-spectacular/issues/1480) <https://github.com/tfranzel/drf-spectacular/issues/1480>_
  • Proper handling for OAS 3.2
  • fix modification of user-provided schematas [#1500](https://github.com/tfranzel/drf-spectacular/issues/1500) <https://github.com/tfranzel/drf-spectacular/issues/1500>_
  • relax contraint on oneOf null case with OAS3.1 [#1480](https://github.com/tfranzel/drf-spectacular/issues/1480) <https://github.com/tfranzel/drf-spectacular/issues/1480>_
  • Add blueprint for django-rest-knox ([#1506](https://github.com/tfranzel/drf-spectacular/issues/1506) <https://github.com/tfranzel/drf-spectacular/issues/1506>_) [johnthagen]
  • Mitigate GeneratedField lost arguments and special case for DecimalField [#1166](https://github.com/tfranzel/drf-spectacular/issues/1166) <https://github.com/tfranzel/drf-spectacular/issues/1166>_
  • Webhook explicit operationId ([#1505](https://github.com/tfranzel/drf-spectacular/issues/1505) <https://github.com/tfranzel/drf-spectacular/issues/1505>_)
  • change conflicting license field for 3.8 ([#1504](https://github.com/tfranzel/drf-spectacular/issues/1504) <https://github.com/tfranzel/drf-spectacular/issues/1504>_)
  • Document django-rest-knox support [johnthagen]
  • add help text to spectacular management command arguments [#1175](https://github.com/tfranzel/drf-spectacular/issues/1175) <https://github.com/tfranzel/drf-spectacular/issues/1175>_ [Jean-Baptiste Braun]
  • Mark FileField as nullable in response when not required [#1493](https://github.com/tfranzel/drf-spectacular/issues/1493) <https://github.com/tfranzel/drf-spectacular/issues/1493>_ [mojtaba sohrabi]
  • Extend Choices hint fix with generated label description [#1486](https://github.com/tfranzel/drf-spectacular/issues/1486) <https://github.com/tfranzel/drf-spectacular/issues/1486>_
  • Suppress py<=3.14 deprecation warning [#1497](https://github.com/tfranzel/drf-spectacular/issues/1497) <https://github.com/tfranzel/drf-spectacular/issues/1497>_
  • Remove ancient DRF3.11 and Django2.2 due to contrib packages failing
  • feat: add support for django 6.0 and and drf 3.17 [Vjeran Grozdanic]
  • Add setting to disable docstring extraction [Phil Starkey]
  • feat: add support for polymorphic built-in drf support [Benedikt Bauer]
  • Clarifies post-processing hooks [Andy Piltser-Cowan]
  • Clarifies customizations step 5 [Andy Piltser-Cowan]
  • Fix dependency definition for Django 5.2 [Ülgen Sarıkavak]
  • Implement x-spec-enum-id for type hint Choices. [Noam Kushinsky]
  • Add Support for unsigned integers uint16, uint32 and uint64 [Nicolas Delaby]
  • Fix regression introduced in [#1450](https://github.com/tfranzel/drf-spectacular/issues/1450) <https://github.com/tfranzel/drf-spectacular/issues/1450>_ ([#1469](https://github.com/tfranzel/drf-spectacular/issues/1469) <https://github.com/tfranzel/drf-spectacular/issues/1469>_) [Oleg Höfling]

Breaking changes / important additions:

  • Many small improvement, bug fixes, updates to the test suite and renovated test matrix. Some minor schema corrections are to be expected, but nothing drastic.
Commits

Updates sentry-sdk from 2.63.0 to 2.66.0

Release notes

Sourced from sentry-sdk's releases.

2.66.0

New Features ✨

  • (tracing) Promote trace_lifecycle and ignore_spans to top-level options by @​ericapisani in #6821

Bug Fixes 🐛

Tracing

  • Skip child span creation in streaming path when no current span (HTTP clients) by @​sentrivana in #6811
  • Skip child span creation in streaming path when no current span (task queues) by @​sentrivana in #6814
  • Skip child span creation in streaming path when no current span (misc) by @​sentrivana in #6815
  • Skip child span creation in streaming path when no current span (databases) by @​sentrivana in #6808
  • Skip child span creation in streaming path when no current span (web frameworks) by @​sentrivana in #6810
  • Skip child span creation in streaming path when no current span (django) by @​sentrivana in #6809

Internal Changes 🔧

2.65.0

New Features ✨

Huey

Other

Bug Fixes 🐛

Tracing

Other

  • (django) Avoid ValueError in async middleware process_* hooks by @​r0ro in #6698
  • (scope) Drop None user attribute values in set_user by @​ericapisani in #6692
  • (starlette) Don't overwrite user set during request in AuthenticationMiddleware by @​ericapisani in #6760

Internal Changes 🔧

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.66.0

New Features ✨

  • (tracing) Promote trace_lifecycle and ignore_spans to top-level options by @​ericapisani in #6821

Bug Fixes 🐛

Tracing

  • Skip child span creation in streaming path when no current span (HTTP clients) by @​sentrivana in #6811
  • Skip child span creation in streaming path when no current span (task queues) by @​sentrivana in #6814
  • Skip child span creation in streaming path when no current span (misc) by @​sentrivana in #6815
  • Skip child span creation in streaming path when no current span (databases) by @​sentrivana in #6808
  • Skip child span creation in streaming path when no current span (web frameworks) by @​sentrivana in #6810
  • Skip child span creation in streaming path when no current span (django) by @​sentrivana in #6809

Internal Changes 🔧

2.65.0

New Features ✨

Huey

Other

Bug Fixes 🐛

Tracing

Other

  • (django) Avoid ValueError in async middleware process_* hooks by @​r0ro in #6698
  • (scope) Drop None user attribute values in set_user by @​ericapisani in #6692
  • (starlette) Don't overwrite user set during request in AuthenticationMiddleware by @​ericapisani in #6760

... (truncated)

Commits
  • 5179f60 update changelog with docs link
  • e4bcb59 release: 2.66.0
  • 5ba869c fix(tracing): Skip child span creation in streaming path when no current span...
  • efddaab fix(tracing): Skip child span creation in streaming path when no current span...
  • b199a9e fix(tracing): Skip child span creation in streaming path when no current span...
  • d695a6e fix(tracing): Skip child span creation in streaming path when no current span...
  • dbf5d03 fix(tracing): Skip child span creation in streaming path when no current span...
  • 5c14034 fix(tracing): Skip child span creation in streaming path when no current span...
  • e0d2c4a feat(tracing): Promote trace_lifecycle and ignore_spans to top-level options ...
  • baa423f test(logging): Fix flaky test_logging_captured_warnings (#6824)
  • Additional commits viewable in compare view

Updates pgvector from 0.4.2 to 0.5.0

Changelog

Sourced from pgvector's changelog.

0.5.0 (2026-07-06)

  • Added experimental support for type hints
  • Changed vector and halfvec types to return list for Django, SQLAlchemy, SQLModel, and Peewee
  • Changed vector type to return Vector object for Psycopg 3, Psycopg 2, asyncpg, and pg8000
  • Removed utils package (use top-level pgvector package instead)
  • Removed re-exported classes (use top-level pgvector package instead)
  • Removed dependency on NumPy
  • Dropped support for Python < 3.10
  • Dropped support for SQLAlchemy < 2
Commits

Updates ruff from 0.15.20 to 0.15.22

Release notes

Sourced from ruff's releases.

0.15.22

Release Notes

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

Install ruff 0.15.22

Install prebuilt binaries via shell script

</tr></table> 

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.22

Released on 2026-07-16.

Preview features

  • [pycodestyle] Add an autofix for E402 (#22212)
  • [refurb] Allow subclassing builtins in stub files (FURB189) (#26812)
  • [ruff] Add rule to replace noqa comments with ruff:ignore (RUF105) (#26423)
  • [ruff] Add rule to use human-readable names in ruff:ignore comments (RUF106) (#26682)
  • [ruff] Add rule to use human-readable names in configuration selectors (RUF201) (#26772)

Bug fixes

  • [flake8-pyi] Fix false positive in __all__ (PYI053) (#26872)

Rule changes

  • [pylint] Ignore mutable type updates in redefined-loop-name (PLW2901) (#25733)

Performance

  • Avoid redundant lexer token bookkeeping (#26765)
  • Avoid redundant pending-indentation writes (#26774)
  • Avoid unnecessary identifier lookahead (#26525)
  • Reuse parser scratch buffers (#26798)

Documentation

  • Document argfile support (#26803)
  • [flake8-datetimez] Clarify naming guidance for datetime.today (DTZ002) (#26658)
  • [pycodestyle] Document E731 fix safety (#26847)
  • [ruff] Clarify intentional async contexts for unused-async (RUF029) (#26641)

Contributors

0.15.21

Released on 2026-07-09.

Preview features

... (truncated)

Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 22, 2026
@dependabot
dependabot Bot requested a review from Barsoomx as a code owner July 22, 2026 02:26
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 22, 2026
@Barsoomx

Barsoomx commented Jul 22, 2026

Copy link
Copy Markdown
Owner

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codecov-commenter

codecov-commenter commented Jul 22, 2026

Copy link
Copy Markdown

❌ 6 Tests Failed:

Tests completed Failed Passed Skipped
3389 6 3383 0
View the top 3 failed test(s) by shortest run time
engram/memory/curation_shortlist_tests.py::test_query_embedding_with_unembedded_corpus_retries_without_blind_completion
Stack Traces | 0.285s run time
engram/memory/curation_shortlist_tests.py:468: in test_query_embedding_with_unembedded_corpus_retries_without_blind_completion
    assert getattr(error.value, 'code', None) == 'embedding_unavailable'
E   AssertionError: assert 'shortlist_query_failed' == 'embedding_unavailable'
E     
E     - embedding_unavailable
E     + shortlist_query_failed
engram/memory/curation_shortlist_tests.py::test_revalidation_detects_selected_vector_rank_and_membership_change
Stack Traces | 0.296s run time
engram/memory/curation_shortlist.py:250: in execute
    distance=CosineDistance('embedding_pgvector', embedding),
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../pgvector/django/functions.py:14: in __init__
    vector = Value(Vector(vector).to_text())
                   ^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../site-packages/pgvector/vector.py:31: in __init__
    raise ValueError('expected list or ndarray')
E   ValueError: expected list or ndarray

The above exception was the direct cause of the following exception:
engram/memory/curation_shortlist_tests.py:567: in test_revalidation_detects_selected_vector_rank_and_membership_change
    frozen = module.BuildCurationShortlist.execute(data)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
engram/memory/curation_shortlist.py:375: in execute
    raise CurationShortlistError('shortlist_query_failed') from exc
E   engram.memory.curation_shortlist.CurationShortlistError: shortlist_query_failed
engram/memory/curation_shortlist_tests.py::test_shortlist_applies_effective_visibility_and_excludes_inactive_rows[project-None-True]
Stack Traces | 0.319s run time
engram/memory/curation_shortlist.py:250: in execute
    distance=CosineDistance('embedding_pgvector', embedding),
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../pgvector/django/functions.py:14: in __init__
    vector = Value(Vector(vector).to_text())
                   ^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../site-packages/pgvector/vector.py:31: in __init__
    raise ValueError('expected list or ndarray')
E   ValueError: expected list or ndarray

The above exception was the direct cause of the following exception:
engram/memory/curation_shortlist_tests.py:296: in test_shortlist_applies_effective_visibility_and_excludes_inactive_rows
    result = _shortlist_module().BuildCurationShortlist.execute(
engram/memory/curation_shortlist.py:375: in execute
    raise CurationShortlistError('shortlist_query_failed') from exc
E   engram.memory.curation_shortlist.CurationShortlistError: shortlist_query_failed
engram/memory/curation_shortlist_tests.py::test_shortlist_applies_effective_visibility_and_excludes_inactive_rows[team-same-True]
Stack Traces | 0.321s run time
engram/memory/curation_shortlist.py:250: in execute
    distance=CosineDistance('embedding_pgvector', embedding),
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../pgvector/django/functions.py:14: in __init__
    vector = Value(Vector(vector).to_text())
                   ^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../site-packages/pgvector/vector.py:31: in __init__
    raise ValueError('expected list or ndarray')
E   ValueError: expected list or ndarray

The above exception was the direct cause of the following exception:
engram/memory/curation_shortlist_tests.py:296: in test_shortlist_applies_effective_visibility_and_excludes_inactive_rows
    result = _shortlist_module().BuildCurationShortlist.execute(
engram/memory/curation_shortlist.py:375: in execute
    raise CurationShortlistError('shortlist_query_failed') from exc
E   engram.memory.curation_shortlist.CurationShortlistError: shortlist_query_failed
engram/memory/curation_shortlist_tests.py::test_pgvector_shortlist_authorizes_before_distance_ordering
Stack Traces | 0.593s run time
engram/memory/curation_shortlist.py:250: in execute
    distance=CosineDistance('embedding_pgvector', embedding),
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../pgvector/django/functions.py:14: in __init__
    vector = Value(Vector(vector).to_text())
                   ^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../site-packages/pgvector/vector.py:31: in __init__
    raise ValueError('expected list or ndarray')
E   ValueError: expected list or ndarray

The above exception was the direct cause of the following exception:
engram/memory/curation_shortlist_tests.py:193: in test_pgvector_shortlist_authorizes_before_distance_ordering
    result = _shortlist_module().BuildCurationShortlist.execute(
engram/memory/curation_shortlist.py:375: in execute
    raise CurationShortlistError('shortlist_query_failed') from exc
E   engram.memory.curation_shortlist.CurationShortlistError: shortlist_query_failed
engram/memory/curation_shortlist_tests.py::test_shortlist_enforces_three_bounded_legs_union_cap_and_tie_order
Stack Traces | 2.68s run time
engram/memory/curation_shortlist.py:250: in execute
    distance=CosineDistance('embedding_pgvector', embedding),
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../pgvector/django/functions.py:14: in __init__
    vector = Value(Vector(vector).to_text())
                   ^^^^^^^^^^^^^^
....../home/runner/.cache....../pypoetry/virtualenvs/non-package-mode-oQ80OP7S-py3.12/lib/python3.12.../site-packages/pgvector/vector.py:31: in __init__
    raise ValueError('expected list or ndarray')
E   ValueError: expected list or ndarray

The above exception was the direct cause of the following exception:
engram/memory/curation_shortlist_tests.py:229: in test_shortlist_enforces_three_bounded_legs_union_cap_and_tie_order
    result = _shortlist_module().BuildCurationShortlist.execute(
engram/memory/curation_shortlist.py:375: in execute
    raise CurationShortlistError('shortlist_query_failed') from exc
E   engram.memory.curation_shortlist.CurationShortlistError: shortlist_query_failed

To view more test analytics, go to the Test Analytics Dashboard
📋 Got 3 mins? Take this short survey to help us improve Test Analytics.

Bumps the backend group with 4 updates in the /apps/backend directory: [drf-spectacular](https://github.com/tfranzel/drf-spectacular), [sentry-sdk](https://github.com/getsentry/sentry-python), [pgvector](https://github.com/pgvector/pgvector-python) and [ruff](https://github.com/astral-sh/ruff).


Updates `drf-spectacular` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/tfranzel/drf-spectacular/releases)
- [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst)
- [Commits](tfranzel/drf-spectacular@0.29.0...0.30.0)

Updates `sentry-sdk` from 2.63.0 to 2.66.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.63.0...2.66.0)

Updates `pgvector` from 0.4.2 to 0.5.0
- [Changelog](https://github.com/pgvector/pgvector-python/blob/master/CHANGELOG.md)
- [Commits](pgvector/pgvector-python@v0.4.2...v0.5.0)

Updates `ruff` from 0.15.20 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/0.15.22/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.20...0.15.22)

---
updated-dependencies:
- dependency-name: drf-spectacular
  dependency-version: 0.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: pgvector
  dependency-version: 0.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: ruff
  dependency-version: 0.15.21
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: sentry-sdk
  dependency-version: 2.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/apps/backend/backend-dc4f49e244 branch from b615928 to 5755b03 Compare July 29, 2026 02:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants