chore(deps): bump the backend-dependencies group in /backend with 6 updates by dependabot[bot] · Pull Request #53 · DRYTRIX/CatMap

dependabot · 2026-08-17T11:25:54Z

Bumps the backend-dependencies group in /backend with 6 updates:

Package	From	To
uvicorn	`0.52.1`	`0.52.3`
sqlalchemy	`2.0.51`	`2.0.52`
alembic	`1.19.0`	`1.19.1`
numpy	`2.5.1`	`2.5.2`
sentry-sdk	`2.66.1`	`2.68.0`
ruff	`0.16.1`	`0.16.3`

Updates uvicorn from 0.52.1 to 0.52.3

Release notes

Sourced from uvicorn's releases.

Version 0.52.3

Changed

Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Changelog

Sourced from uvicorn's changelog.

0.52.3 (August 13, 2026)

Changed

Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Commits

a68da60 Version 0.52.3 (#3068)
6e3bb4c Use zttp 0.0.24 fast receive path (#3067)
2a5ff18 Version 0.52.2 (#3066)
1920297 Update zttp to 0.0.22 (#3063)
5c560da chore(deps): bump pymdown-extensions from 11.0 to 11.0.1 (#3061)
See full diff in compare view

Updates sqlalchemy from 2.0.51 to 2.0.52

Release notes

Sourced from sqlalchemy's releases.

2.0.52

Released: August 11, 2026

platform

[platform] [bug] Python 3.15 support has been added and tested, including minimal changes for full compatibility.

References: #13477

orm

[orm] [bug] Fixed a result-column misalignment bug in ORM-enabled UPDATE statements where synchronize_session="fetch" is in use, either explicitly or because the statement uses constructs such as CTEs that implicitly select for it. Columns in rows returned by .returning() could be returned under incorrect keys (e.g. row[SomeClass.a] returning the value of a different column), a problem most likely to manifest under concurrent workloads. ORM DELETE statements were not affected.

References: #13439

[orm] [bug] Fixed bug where a failed _orm.Session.bulk_insert_mappings(), _orm.Session.bulk_update_mappings() or _orm.Session.bulk_save_objects() call could leave the _orm.Session permanently in a "flushing" state, such as when the transaction could not be begun because a previous flush had left it needing a rollback. Unlike _orm.Session.flush(), the bulk methods set the internal flushing flag and began the transaction outside of the try/finally block that resets it, so that neither _orm.Session.rollback() nor _orm.Session.close() would clear it, and every subsequent flush would raise InvalidRequestError: Session is already flushing. Pull request courtesy Hamody We.

References: #13485

[orm] [bug] Fixed issue where unpickling an ORM object that were loaded using loader options making use of wildcard tokens, such as _orm.load_only() or _orm.raiseload() with "*", would fail with KeyError or IndexError if the process doing the unpickling had not yet constructed a loader path making use of that same token. This would typically be observed when the object were unpickled in a separate process, such as with the spawn or forkserver multiprocessing start methods, the latter of which became the default on POSIX platforms as of Python 3.14. The internal collection of these tokens is now established up front, so that it is identical in every process.

... (truncated)

Commits

See full diff in compare view

Updates alembic from 1.19.0 to 1.19.1

Release notes

Sourced from alembic's releases.

1.19.1

Released: August 8, 2026

bug

[bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508 that failed to take into account column bound check constraints, leading to wrong autogenerate detections.

References: #1842

Commits

See full diff in compare view

Updates numpy from 2.5.1 to 2.5.2

Release notes

Sourced from numpy's releases.

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

The NumPy 2.5.2 is a patch release that fixes bugs discovered after the 2.5.1 release. The big news is that it includes wheels for the newly released Python 3.15.0rc1.

This release supports Python versions 3.12-3.15

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

The PyArray_StringDTypeObject was accidentally exposed in NumPy 2.5 when targeting the free-threading-compatible stable ABI (Py_TARGET_ABI3T). PyArray_StringDTypeObject is now an opaque struct: extensions compiled that way cannot access its fields, since the struct layout depends on the size of the object header. Any code that accessed PyArray_StringDTypeObject fields in an abi3t build would have crashed, so we are making this API change in a bugfix release.

The NpyString allocator API remains usable by passing the descriptor object pointer, e.g. NpyString_acquire_allocator((PyArray_StringDTypeObject *)descr).

(gh-31771)

Contributors

A total of 16 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

Abhijeetsingh Meena +

Charalampos Stratakis

Charles Harris

Chris Ninham +

David Woods

Geonho +

Gopu Yeshwanth Reddy +

Iason Krommydas

Ijtihed Kilani

Jelle Zijlstra +

Joren Hammudoglu

Kumar Aditya

Mike Boyle

Nathan Goldbaum

Raghuveer Devulapalli

Sebastian Berg

... (truncated)

Commits

48fecee REL: Prepare for the NumPy 2.5.2 release (#32226)
ecf599c Merge pull request #32221 from charris/backport-32151
3c7ac97 Merge pull request #32220 from charris/backport-32205
23b30f4 BUG: avoid segfaults when legacy copyswap slot is not defined (#32151)
4964ca8 TYP: isclose shape-typing fix for 2d array-likes (#32205)
c37ed94 MAINT: Skip limited_api tests on some platforms. (#32214)
5cfd73b Merge pull request #32206 from charris/update-cibuildwheel
d8262bc MAINT: Update cibuildwheel to v4.2.0
988d94d Merge pull request #32158 from charris/backport-32133
b2e4f97 BUG: avoid possible stack overflow in arraydescr_dealloc (#32133)
Additional commits viewable in compare view

Updates sentry-sdk from 2.66.1 to 2.68.0

Release notes

Sourced from sentry-sdk's releases.

2.68.0

Important
We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

Action Needed

If you had enable_logs set to True:

If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.

If you were auto-collecting logs from either LoggingIntegration or LoguruIntegration, the auto-collection will be turned off in this release. You can switch auto-collection on explicitly with:
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration
sentry_sdk.init(
integrations=[
LoggingIntegration(capture_sentry_logs=True),
LoguruIntegration(capture_sentry_logs=True),
],
)
If you had enable_logs set to False:

If you were using it to gate usages of the sentry_sdk.logger.X API, you'll need to remove the calls entirely or define a before_send_log callback to filter out unwanted logs.

If you has enable_metrics set to False:

Any metrics emitted using the metrics API will be emitted. You'll need to drop them in a before_send_metric or remove the calls to the API.

Why We're Doing This

We recognize this is a disruptive change for some folks and want to make it clear this is a one-off. We're removing the options because they were an unnecessary hurdle that one had to jump through to be able to use logs and metrics, and it was confusing why the logging API would not just work on its own. On the other hand, we wanted to give you more fine-grained control over automatic collection.
New Features ✨

Other

Set the segment source on the scope for NoOpStreamedSpan by @alexander-alderman-webb in #7163

Remove early return for NoOpStreamedSpan in set_transaction_name() by @alexander-alderman-webb in #7164

Set the segment name on the scope with NoOpStreamedSpan by @alexander-alderman-webb in #7162

Bug Fixes 🐛

(batcher) Add global flush trigger based on the span number by @alexander-alderman-webb in #7150

Internal Changes 🔧

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.68.0

Important
We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

Action Needed

If you had enable_logs set to True:

If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.

If you were auto-collecting logs from either LoggingIntegration or LoguruIntegration, the auto-collection will be turned off in this release. You can switch auto-collection on explicitly with:
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration
sentry_sdk.init(
integrations=[
LoggingIntegration(capture_sentry_logs=True),
LoguruIntegration(capture_sentry_logs=True),
],
)
If you had enable_logs set to False:

If you were using it to gate usages of the sentry_sdk.logger.X API, you'll need to remove the calls entirely or define a before_send_log callback to filter out unwanted logs.

If you has enable_metrics set to False:

Any metrics emitted using the metrics API will be emitted. You'll need to drop them in a before_send_metric or remove the calls to the API.

Why We're Doing This

We recognize this is a disruptive change for some folks and want to make it clear this is a one-off. We're removing the options because they were an unnecessary hurdle that one had to jump through to be able to use logs and metrics, and it was confusing why the logging API would not just work on its own. On the other hand, we wanted to give you more fine-grained control over automatic collection.
New Features ✨

Other

Set the segment source on the scope for NoOpStreamedSpan by @alexander-alderman-webb in #7163

Remove early return for NoOpStreamedSpan in set_transaction_name() by @alexander-alderman-webb in #7164

Set the segment name on the scope with NoOpStreamedSpan by @alexander-alderman-webb in #7162

Bug Fixes 🐛

(batcher) Add global flush trigger based on the span number by @alexander-alderman-webb in #7150

... (truncated)

Commits

c819e66 Update README
90446df Update CHANGELOG.md
cb2499c release: 2.68.0
1c3b50d ref: Flush trace buckets when segment spans finish (#7170)
c200bdf test(django): Remove dead code and stale markers from the Django test suite (...
4e4ea83 ref(boto3): Move crumbs to integration (#7165)
0f0cd1f ref(stdlib): Move crumbs to integration (#7161)
2fef9bc chore: Make enable_logs, enable_metrics no-op (#7177)
8177739 ref(httpx,httpx2): Move crumbs to integrations (#7149)
e4d7398 ref(pyreqwest): Move crumbs to integration (#7148)
Additional commits viewable in compare view

Updates ruff from 0.16.1 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

[pylint] Fix false negatives on negative numbers (PLR6104) (#27251)

[pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

[flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)

[pylint] Allow continue in finally on Python 3.8 (#27626)

[pylint] Fix PLE1307 false positive with bools (#27651)

[pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)

[pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

[numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

Enable PGO for Linux x86-64 Ruff releases (#27570)

Enable PGO for Linux ARM64 Ruff releases (#27574)

Enable PGO for Windows x86-64 Ruff releases (#27573)

Enable PGO for macOS ARM64 Ruff releases (#27572)

Reduce Expr size to 64 bytes (#27591)

CLI

Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

[ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Use mimalloc v3 (#27586)

Contributors

@Andrej730

@alonfaraj

@romero-deshaw

@Avasam

@tjkuson

@charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

[pylint] Fix false negatives on negative numbers (PLR6104) (#27251)

[pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

[flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)

[pylint] Allow continue in finally on Python 3.8 (#27626)

[pylint] Fix PLE1307 false positive with bools (#27651)

[pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)

[pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

[numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

Enable PGO for Linux x86-64 Ruff releases (#27570)

Enable PGO for Linux ARM64 Ruff releases (#27574)

Enable PGO for Windows x86-64 Ruff releases (#27573)

Enable PGO for macOS ARM64 Ruff releases (#27572)

Reduce Expr size to 64 bytes (#27591)

CLI

Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

[ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

Use mimalloc v3 (#27586)

Contributors

@Andrej730

@alonfaraj

@romero-deshaw

@Avasam

@tjkuson

@charliermarsh

@chirizxc

... (truncated)

Commits

b0e4702 Bump 0.16.3 (#27723)
ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
59196ba [ty] Unify polarity-aware relation construction (#27707)
b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
2b0d210 [ty] Centralize matched argument relations (#27705)
a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backend-dependencies group in /backend with 6 updates: | Package | From | To | | --- | --- | --- | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.52.1` | `0.52.3` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.51` | `2.0.52` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.19.0` | `1.19.1` | | [numpy](https://github.com/numpy/numpy) | `2.5.1` | `2.5.2` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.66.1` | `2.68.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.16.1` | `0.16.3` | Updates `uvicorn` from 0.52.1 to 0.52.3 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.52.1...0.52.3) Updates `sqlalchemy` from 2.0.51 to 2.0.52 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `alembic` from 1.19.0 to 1.19.1 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `numpy` from 2.5.1 to 2.5.2 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.5.1...v2.5.2) Updates `sentry-sdk` from 2.66.1 to 2.68.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.66.1...2.68.0) Updates `ruff` from 0.16.1 to 0.16.3 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.16.1...0.16.3) --- updated-dependencies: - dependency-name: uvicorn dependency-version: 0.52.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: sqlalchemy dependency-version: 2.0.52 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: alembic dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: numpy dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend-dependencies - dependency-name: sentry-sdk dependency-version: 2.68.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend-dependencies - dependency-name: ruff dependency-version: 0.16.3 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: backend-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-24T11:26:17Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Aug 17, 2026

dependabot Bot closed this Aug 24, 2026

dependabot Bot deleted the dependabot/pip/backend/backend-dependencies-ea26ac7829 branch August 24, 2026 11:26

Navigation Menu

chore(deps): bump the backend-dependencies group in /backend with 6 updates - #53

chore(deps): bump the backend-dependencies group in /backend with 6 updates#53
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/backend-dependencies-ea26ac7829

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

Action Needed

Why We're Doing This

Action Needed

Why We're Doing This

Uh oh!

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 17, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Version 0.52.3

Changed

Version 0.52.2

Fixed

0.52.3 (August 13, 2026)

Changed

0.52.2 (August 13, 2026)

Fixed

2.0.52

platform

orm

1.19.1

bug

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

Contributors

2.68.0

Important

Action Needed

Why We're Doing This

New Features ✨

Other

Bug Fixes 🐛

Internal Changes 🔧

2.68.0

Important

Action Needed

Why We're Doing This

New Features ✨

Other

Bug Fixes 🐛

0.16.3

Release Notes

Preview features

Bug fixes

Rule changes

Performance

CLI

Documentation

Other changes

Contributors

0.16.3

Preview features

Bug fixes

Rule changes

Performance

CLI

Documentation

Other changes

Contributors

Uh oh!

dependabot Bot commented on behalf of github Aug 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 17, 2026 •

edited

Loading

`PyArray_StringDTypeObject` is opaque under the abi3t stable ABI