Skip to content

Bump the backend-dependencies group across 1 directory with 31 updates - #14

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/backend-dependencies-33f175fb27
Open

Bump the backend-dependencies group across 1 directory with 31 updates#14
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/backend-dependencies-33f175fb27

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 24, 2026 •
edited
Loading

Copy link
Copy Markdown

Updates the requirements on django, djangorestframework, drf-spectacular, django-cors-headers, psycopg, channels, channels-redis, celery, django-celery-beat, redis, scikit-learn, joblib, numpy, scipy, requests, sgp4, python-dotenv, daphne, websockets, eventlet, sentry-sdk, opentelemetry-sdk, opentelemetry-exporter-otlp, opentelemetry-instrumentation-django, opentelemetry-instrumentation-celery, opentelemetry-instrumentation-redis, opentelemetry-instrumentation-psycopg, django-prometheus, structlog, prometheus-client and pip-audit to permit the latest version.
Updates django to 6.0.5

Commits
  • 8f8ad09 [6.0.x] Bumped version for 6.0.5 release.
  • 44ad76e [6.0.x] Fixed CVE-2026-6907 -- Prevented caching of requests when Vary header...
  • 1b0184a [6.0.x] Fixed CVE-2026-35192 -- Ensured Vary header is sent when setting sess...
  • ad8f9e1 [6.0.x] Fixed CVE-2026-5766 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE in Memory...
  • 990ab01 [6.0.x] Fixed #37039 -- Removed outdated note from QuerySet.iterator() docs.
  • f0c269f [6.0.x] Fixed typo in stub release notes for 5.2.14.
  • 8bcd15b [6.0.x] Fixed #37067 -- Added trailing slash in django_file_prefixes().
  • 3cdec64 [6.0.x] Refs CVE-2026-25674 -- Clarified role of umask in upload permissions.
  • 5dd5c70 [6.0.x] Added stub release notes and release date for 6.0.5 and 5.2.14.
  • 8ee7341 [6.0.x] Refs #373, #34122 -- Removed warning that ForeignObject is an interna...
  • Additional commits viewable in compare view

Updates djangorestframework to 3.17.1

Release notes

Sourced from djangorestframework's releases.

3.17.1

What's Changed

Bug fixes

Full Changelog: encode/django-rest-framework@3.17.0...3.17.1

Commits
  • 22e231c Prepare bug fix release 3.17.1 (#9931)
  • 8e99b53 Add condition to skip pushed tags from forks (#9924)
  • c0407de Fix HTMLFormRenderer with empty datetime values (#9928)
  • 30d58a7 Fix the book sizing in the documentation (#9926)
  • 6f03b79 Tweak order of changes in release notes
  • 021ab56 Bump version and update release notes for 3.17.0 (#9921)
  • 19ebad7 Bump mkdocs-material[imaging] from 9.7.4 to 9.7.5 (#9923)
  • f222c55 Correct requires-python key in pyproject.toml
  • 7e7de6f Remove code fences from release checklist
  • c599d30 Update release process
  • Additional commits viewable in compare view

Updates drf-spectacular to 0.29.0

Release notes

Sourced from drf-spectacular's releases.

0.29.0

Thank you for all the patience with the release!

Important notes

  • Finally fixed the memory leak thanks to @​artKucher.
  • Another performance improvement is the usage of the C versions of yaml, if available.
  • Apart from that, there are a lot of small improvements and bugfixes.

PRs

New Contributors

... (truncated)

Changelog

Sourced from drf-spectacular's changelog.

0.29.0 (2025-11-01)

  • Add l18n handling for Decimal field [#1466](https://github.com/tfranzel/drf-spectacular/issues/1466) <https://github.com/tfranzel/drf-spectacular/issues/1466>_
  • Fix LogoutSerializer for JWT/dj_rest_auth [#1392](https://github.com/tfranzel/drf-spectacular/issues/1392) <https://github.com/tfranzel/drf-spectacular/issues/1392>_
  • fix: support token blacklist feature in rest_auth [Bart van Andel]
  • [django-filter] Add null_label if set in ChoiceFilter ([#1450](https://github.com/tfranzel/drf-spectacular/issues/1450) <https://github.com/tfranzel/drf-spectacular/issues/1450>_) [Enric Pou]
  • fix: camelize tuples/fixed length array ([#1432](https://github.com/tfranzel/drf-spectacular/issues/1432) <https://github.com/tfranzel/drf-spectacular/issues/1432>_) [Chris Wesseling]
  • Fix items:False case in enum hook [#1432](https://github.com/tfranzel/drf-spectacular/issues/1432) <https://github.com/tfranzel/drf-spectacular/issues/1432>_
  • Add option to overwrite serializer description [#1463](https://github.com/tfranzel/drf-spectacular/issues/1463) <https://github.com/tfranzel/drf-spectacular/issues/1463>_
  • Fix OpenApiViewExtension not providing view instance under self.target ([#1405](https://github.com/tfranzel/drf-spectacular/issues/1405) <https://github.com/tfranzel/drf-spectacular/issues/1405>_) [astro-stan]
  • Move list default fix to source of the problem [#1436](https://github.com/tfranzel/drf-spectacular/issues/1436) <https://github.com/tfranzel/drf-spectacular/issues/1436>_
  • Improve confusing doc [#1461](https://github.com/tfranzel/drf-spectacular/issues/1461) <https://github.com/tfranzel/drf-spectacular/issues/1461>_
  • Add assert to pagination test [#1459](https://github.com/tfranzel/drf-spectacular/issues/1459) <https://github.com/tfranzel/drf-spectacular/issues/1459>_
  • fix SafeString handling for picky CDumper ([#1435](https://github.com/tfranzel/drf-spectacular/issues/1435) <https://github.com/tfranzel/drf-spectacular/issues/1435>_)
  • Remove EOL 3.7 from suite; pydantic not updated for <=3.8
  • Fix DecimalField with decimal_places and max_digits equal. [keter2002]
  • fix test for i18n changes on DRF ([#1444](https://github.com/tfranzel/drf-spectacular/issues/1444) <https://github.com/tfranzel/drf-spectacular/issues/1444>_)
  • Improve to_filter_name support for django_filter [Matwey V. Kornilov]
  • fixes prefix estimation on windows [Luis Nell]
  • Fix default for array types [Stanislav Khlud]
  • fix: use CSafeDumper for render yaml if available [florian]
  • fix: sort list to produce same hash [florian]
  • Add typing.Generic to default lib_doc_excludes [Max Howald]
  • Add get_doc test for class that inherits from Generic [Max Howald]
  • Add Django REST framework 3.16 support [Paolo Melchiorre]
  • Fix memory leak [artemkucher]
  • Fix python 3.11 slice index [Egor Litvinov]
  • fix: correct port mapping for the container in README [Maksym Bieńkowski]
  • Update docs [q0w]
  • Allow setting callable for ENUM_NAME_OVERRIDES [q0w]
  • Add allauth's DRF token auth [#1401](https://github.com/tfranzel/drf-spectacular/issues/1401) <https://github.com/tfranzel/drf-spectacular/issues/1401>_
  • update away from retired GH worker image
  • add condition to check, that serializer Meta has model attribute [aliev_vt]
  • Fix docs compile issue and update some old code ([#1389](https://github.com/tfranzel/drf-spectacular/issues/1389) <https://github.com/tfranzel/drf-spectacular/issues/1389>_) [Mike Manger]
  • Fix location of @​extend_schema_field [johnthagen]
  • Remove reference to non-exposed lazy_serializer [johnthagen]
  • Document how to lazily define a recursive SerializerMethod [johnthagen]
  • Link to SerializerMethod docs [johnthagen]
  • Document Django 5.1 support in README [johnthagen]
  • Bump django from 4.2.11 to 4.2.18 in /requirements [dependabot[bot]]
  • Enhance bug report template with instructions for better clarity [antoliny0919]
  • add pydantic computed field to tests [#1354](https://github.com/tfranzel/drf-spectacular/issues/1354) <https://github.com/tfranzel/drf-spectacular/issues/1354>_

Breaking changes / important additions:

  • Finally fixed the memory leak thanks to @​artKucher.
  • Another performance improvement is the usage of the C versions of yaml, if available.
  • Apart from that, there are a lot of small improvements and bugfixes.

... (truncated)

Commits

Updates django-cors-headers to 4.9.0

Changelog

Sourced from django-cors-headers's changelog.

4.9.0 (2025-09-18)

  • Support Django 6.0.

4.8.0 (2025-09-08)

  • Support Python 3.14.

4.7.0 (2025-02-06)

  • Support Django 5.2.

4.6.0 (2024-10-29)

  • Drop Django 3.2 to 4.1 support.

4.5.0 (2024-10-12)

  • Drop Python 3.8 support.

  • Support Python 3.13.

4.4.0 (2024-06-19)

  • Support Django 5.1.

4.3.1 (2023-11-14)

  • Fixed ASGI compatibility on Python 3.12.

    Thanks to Adrian Capitanu for the report in Issue [#908](https://github.com/adamchainz/django-cors-headers/issues/908) <https://github.com/adamchainz/django-cors-headers/issues/908>__ and Rooyal in PR [#911](https://github.com/adamchainz/django-cors-headers/issues/911) <https://github.com/adamchainz/django-cors-headers/pull/911>__.

4.3.0 (2023-10-11)

  • Avoid adding the access-control-allow-credentials header to unallowed responses.

    Thanks to Adam Romanek in PR [#888](https://github.com/adamchainz/django-cors-headers/issues/888) <https://github.com/adamchainz/django-cors-headers/pull/888>__.

  • Support Django 5.0.

4.2.0 (2023-07-10)

... (truncated)

Commits

Updates psycopg to 3.3.4

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.5 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Discard prepared statements upon :sql:ALTER * or DISCARD * (:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).

Current release

Psycopg 3.3.4 ^^^^^^^^^^^^^

  • Fix possible spurious connection timeout in systems with very long uptimes in C extension (:ticket:[#1280](https://github.com/psycopg/psycopg/issues/1280)).
  • Fix client-side adaptation of enums whose name require quotes (:ticket:[#1298](https://github.com/psycopg/psycopg/issues/1298)).
  • Consistently populate ~Cursor.statusmessage after ~Cursor.executemany() (:ticket:[#1302](https://github.com/psycopg/psycopg/issues/1302)).

Psycopg 3.3.3 ^^^^^^^^^^^^^

  • Retain Error.pgconn when raising a single exception for multiple connection attempt errors (:ticket:[#1246](https://github.com/psycopg/psycopg/issues/1246)).
  • Return a proper error when server sends ErrorResponse for a Sync after a Parse (:ticket:[#1260](https://github.com/psycopg/psycopg/issues/1260)).

Psycopg 3.3.2 ^^^^^^^^^^^^^

Fix race condition in adapters at startup (:ticket:[#1230](https://github.com/psycopg/psycopg/issues/1230)).

Psycopg 3.3.1 ^^^^^^^^^^^^^

... (truncated)

Commits
  • 83f1103 chore: bump psycopg_pool package version to 3.3.1
  • 1828770 chore: bump psycopg package version to 3.3.4
  • 8be14bb Merge pull request #1301 from oliverhaas/fix/sync-pool-open-race
  • aee0bf2 fix(pool): fix race in the construction of the sync ConnectionPool lock
  • bc4d303 chore(deps): bump the actions group across 1 directory with 4 updates
  • 785379f fix: retain statusmessage after executemany with returning=False
  • 8882a73 perf: do less if X in Y: return Y[X] for cache-like patterns
  • 2f78539 Merge pull request #1299 from dvarrazzo/fix-camel-enum
  • 37ef1dc test: skip test on crdb depending on precise regtype behaviour
  • 7f2f1d1 fix: fix client-side representation of enums requiring quotes
  • Additional commits viewable in compare view

Updates channels to 4.3.2

Changelog

Sourced from channels's changelog.

4.3.2 (2025-11-20)

  • Confirmed support for Django 6.0.

  • Confirmed support for Python 3.14.

  • Added types extra for types-channels stubs. See installation docs.

4.3.1 (2025-08-01)

  • Fixed testing live server setup when test DB name was not set.

4.3.0 (2025-07-28)

  • Updated asgiref dependency to v3.9+.

  • Dropped support for EOL Python and Django versions. Python 3.9 is now the minimum supported version.

  • Fixed compatibility of ChannelsLiveServerTestCase with Django 5.2.

  • Fixed DB setup for spawned testing subprocess, typically on Windows and macOS.

See the Version 4.3.0 release notes <https://channels.readthedocs.io/en/latest/releases/4.3.0.html>_ for more details.

4.2.2 (2025-03-30)

  • Added fallbacks for old valid channel/group name checks.

    These were renamed in 4.2.1 but (as internal methods) without deprecation. They are restored (and deprecated) here to allow updating channel layers using them.

4.2.1 (2025-03-29)

Channels 4.2.1 primarily updates the metadata for supported Python and Django versions.

  • Added official support for Django 5.2 LTS.

  • Added official support for Python 3.13.

  • Added a warning for the length of the channel layer group names.

... (truncated)

Commits
  • 15333cd Version 4.3.2
  • 10be531 Add explicit dj60 to test matrix.
  • f726845 Update .github/workflows/tests.yml
  • 0c1e533 tox.ini: envlist py{310,311,312,313,314}-dj52
  • b2ad89f GitHub Actions: Test on Python 3.14 release candidate 2
  • a135228 Bump actions/checkout from 4 to 5 (#2180)
  • 7dfcc7b Add types extra and installation docs for type checking support.
  • 95589a7 Version 4.3.1.
  • 5038d69 Fix live server setup when test DB name not set.
  • f17a8fe Bump browser-actions/setup-chrome from 1 to 2 (#2175)
  • Additional commits viewable in compare view

Updates channels-redis to 4.3.0

Changelog

Sourced from channels-redis's changelog.

4.3.0 (2025-07-22)

  • Added support for Python 3.13.

  • Dropped support for EOL Python 3.8.

  • Updated Channels dependency to at least v4.2.2.

  • Updated asgiref dependency to at least v3.9.1.

  • Fixed compatibility with latest versions of pytest-asyncio.

  • Renamed internal methods in core channel layer for compatibility with Channels v4.2.1+

  • Dropped testing against legacy Channels v3 branch.

  • Updated testing against latest redis-py versions.

4.2.1 (2024-11-15)

  • Added a way to register and use custom serializer formats. See README.rst.

4.2.0 (2024-01-12)

  • Dropped support for end-of-life Python 3.7.

  • Added support for Python 3.11 and 3.12.

  • Upped the minimum version of redis-py to 4.6.

  • Added CI testing against redis-py versions 4.6, 5, and the development branch.

  • Added CI testing against Channels versions 3, 4, and the development branch.

4.1.0 (2023-03-28)

  • Adjusted the way Redis connections are handled:

    • Connection handling is now shared between the two, core and pub-sub, layers.

    • Both layers now ensure that connections are closed when an event loop shuts down.

      In particular, redis-py 4.x requires that connections are manually closed. In 4.0 that wasn't done by the core layer, which led to warnings for people

... (truncated)

Commits
  • 8498605 Updated version and changelog for v4.3.0.
  • 3e03c45 Update Channels and asgiref dependencies to latest versions.
  • 3f42840 Update redis-py testing matrix
  • 4f35ef5 Adjust Channels testing matrix.
  • 26f3f8f Renamed internal methods in core channel layer.
  • b359bf7 Stop using old event_loop fixture.
  • f439527 Dropped Python 3.8 from test matrix.
  • 662b90d Added support for Python 3.13 (#404)
  • ab8fd13 Fixed README syntax errors.
  • 20fe75d Set date for 4.2.1 release.
  • Additional commits viewable in compare view

Updates celery to 5.6.3

Release notes

Sourced from celery's releases.

v5.6.3

What's Changed

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.3

:release-date: 2026-03-26 :release-by: Tomer Nosrati

What's Changed


- Fix Django worker recursion bug + defensive checks for pool_cls.__module__ ([#10048](https://github.com/celery/celery/issues/10048))
- Docs: Update user_preload_options example to use click. ([#10056](https://github.com/celery/celery/issues/10056))
- Fix invalid configuration key "bootstrap_servers" in Kafka demo ([#10060](https://github.com/celery/celery/issues/10060))
- Fix broken images on PyPI page ([#10066](https://github.com/celery/celery/issues/10066))
- Remove broken reference. ([#10071](https://github.com/celery/celery/issues/10071))
- Removed --dist=loadscope from smoke tests ([#10073](https://github.com/celery/celery/issues/10073))
- Docs: Clarify task_retry signal args may be None ([#10076](https://github.com/celery/celery/issues/10076))
- Update example for Django ([#10081](https://github.com/celery/celery/issues/10081))
- Make tests compatible with pymongo >= 4.16 ([#10074](https://github.com/celery/celery/issues/10074))
- fix: source install of cassandra-driver ([#10105](https://github.com/celery/celery/issues/10105))
- fix: register task cross-reference role in Sphinx extension ([#10100](https://github.com/celery/celery/issues/10100))
- fix: avoid cycle detection in native delayed delivery ([#10095](https://github.com/celery/celery/issues/10095))
- fix(asynpool): avoid AttributeError when proc lacks _sentinel_poll ([#10086](https://github.com/celery/celery/issues/10086))
- fix dusk_astronomical horizon sign (+18 -> -18) ([#10121](https://github.com/celery/celery/issues/10121))
- Fix/10106 onupdate col use lambda func ([#10108](https://github.com/celery/celery/issues/10108))
- Fix warm shutdown RuntimeError with eventlet>=0.37.0 ([#10083](https://github.com/celery/celery/issues/10083)) ([#10123](https://github.com/celery/celery/issues/10123))
- Fix 10109 db backend connection health ([#10124](https://github.com/celery/celery/issues/10124))
- Database Backend filter unsupport sql engine arguments with nullpool [#7355](https://github.com/celery/celery/issues/7355) ([#10134](https://github.com/celery/celery/issues/10134))
- fix(beat): correct argument order in Service.__reduce__ ([#10137](https://github.com/celery/celery/issues/10137))
- ci: declare explicit read-only token permissions in workflow jobs ([#10139](https://github.com/celery/celery/issues/10139))
- chore: 'boto3to' to 'boto3 to' ([#10133](https://github.com/celery/celery/issues/10133))
- Database Backend: Add missing index on date_done (Fixes [#10097](https://github.com/celery/celery/issues/10097)) ([#10098](https://github.com/celery/celery/issues/10098))
- docs: fix typo in CONTRIBUTING.rst ([#10141](https://github.com/celery/celery/issues/10141))
- Refer to Flower / Prometheus for monitoring ([#10140](https://github.com/celery/celery/issues/10140))
- docs: remove duplicated words in broker and routing docs ([#10146](https://github.com/celery/celery/issues/10146))
- docs: fix stale version reference and grammar in README ([#10145](https://github.com/celery/celery/issues/10145))
- docs: fix wording in Celery 5.3 worker pool notes ([#10149](https://github.com/celery/celery/issues/10149))
- docs: fix duplicated wording in 3.1 changelog entry ([#10152](https://github.com/celery/celery/issues/10152))
- docs: fix changelog typo in context manager wording ([#10144](https://github.com/celery/celery/issues/10144))
- Fix/10096 worker fails to reconnect after redis failover ([#10151](https://github.com/celery/celery/issues/10151))
- Improve on_after_finalize signal documentation ([#10155](https://github.com/celery/celery/issues/10155))
- Add non-commutative example to clarify partial arg ordering in canvas docs ([#10157](https://github.com/celery/celery/issues/10157))
- Remove redundant test_isa_mapping test (fixes [#10077](https://github.com/celery/celery/issues/10077)) ([#10103](https://github.com/celery/celery/issues/10103))
- Upgrade pytest-celery to >=1.3.0 and adopt PYTEST_CELERY_PKG build arg ([#10162](https://github.com/celery/celery/issues/10162))
- Remove deprecated args from redis get_connection call ([#10036](https://github.com/celery/celery/issues/10036))
- Fix [#6912](https://github.com/celery/celery/issues/6912) rpc backend reconnection error ([#10179](https://github.com/celery/celery/issues/10179))
- Fix NameError with TYPE_CHECKING annotations on Python 3.14+ (PEP 649) ([#10165](https://github.com/celery/celery/issues/10165))
- docs: Add elaboration on prefetch multiplier settings (worker_prefetch_multiplier) and worker_eta_task_limit ([#10181](https://github.com/celery/celery/issues/10181))
- Fix O(K²) message bloat in a chain of chords ([#10171](https://github.com/celery/celery/issues/10171))
- Fix mock connection interfaces to prevent `TypeError` during exception handling ([#10178](https://github.com/celery/celery/issues/10178))
- fix(trace): dispatch chain/callbacks on dedup fast-path for redelivered tasks ([#10159](https://github.com/celery/celery/issues/10159))
</tr></table>

... (truncated)

Commits
  • 3f4d8d7 Prepare for release: v5.6.3 (#10221)
  • a989e8c fix: clear the timer while catch the exception (#10218)
  • d06de5f Chore(deps): Bump nick-fields/retry from 3 to 4 (#10213)
  • c3c19c3 Fix: prioritize request ignore_result over task definition (#10184)
  • d23be53 Remove outdated autoreloader section from extending docs (#10154)
  • ada2da7 docs: fix duplicated word in bootsteps comment\n\nSigned-off-by: Rohan Santho...
  • f45f62b Add compression header to message protocol docs (#10156)
  • 9a27092 docs: clarify after_return behavior for retried tasks (#10192)
  • 6ee6230 Fix#9722 friendly status errors for CLI (#10190)
  • a9a2d4c [pre-commit.ci] pre-commit autoupdate (#10186)
  • Additional commits viewable in compare view

Updates django-celery-beat to 2.9.0

Release notes

Sourced from django-celery-beat's releases.

v2.9.0

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 24, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/backend/backend-dependencies-33f175fb27 branch from 75cc8e6 to 5ef8632 Compare May 24, 2026 09:25
@dependabot
Bump the backend-dependencies group across 1 directory with 31 updates
c118bb4 
Updates the requirements on [django](https://github.com/django/django), [djangorestframework](https://github.com/encode/django-rest-framework), [drf-spectacular](https://github.com/tfranzel/drf-spectacular), [django-cors-headers](https://github.com/adamchainz/django-cors-headers), [psycopg](https://github.com/psycopg/psycopg), [channels](https://github.com/django/channels), [channels-redis](https://github.com/django/channels_redis), [celery](https://github.com/celery/celery), [django-celery-beat](https://github.com/celery/django-celery-beat), [redis](https://github.com/redis/redis-py), [scikit-learn](https://github.com/scikit-learn/scikit-learn), [joblib](https://github.com/joblib/joblib), [numpy](https://github.com/numpy/numpy), [scipy](https://github.com/scipy/scipy), [requests](https://github.com/psf/requests), [sgp4](https://github.com/brandon-rhodes/python-sgp4), [python-dotenv](https://github.com/theskumar/python-dotenv), [daphne](https://github.com/django/daphne), [websockets](https://github.com/python-websockets/websockets), [eventlet](https://github.com/eventlet/eventlet), [sentry-sdk](https://github.com/getsentry/sentry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-instrumentation-django](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-celery](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-redis](https://github.com/open-telemetry/opentelemetry-python-contrib), [opentelemetry-instrumentation-psycopg](https://github.com/open-telemetry/opentelemetry-python-contrib), [django-prometheus](https://github.com/korfuri/django-prometheus), [structlog](https://github.com/hynek/structlog), [prometheus-client](https://github.com/prometheus/client_python) and [pip-audit](https://github.com/pypa/pip-audit) to permit the latest version.

Updates `django` to 6.0.5
- [Commits](django/django@5.0...6.0.5)

Updates `djangorestframework` to 3.17.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.15.0...3.17.1)

Updates `drf-spectacular` to 0.29.0
- [Release notes](https://github.com/tfranzel/drf-spectacular/releases)
- [Changelog](https://github.com/tfranzel/drf-spectacular/blob/master/CHANGELOG.rst)
- [Commits](tfranzel/drf-spectacular@0.28.0...0.29.0)

Updates `django-cors-headers` to 4.9.0
- [Changelog](https://github.com/adamchainz/django-cors-headers/blob/main/CHANGELOG.rst)
- [Commits](adamchainz/django-cors-headers@4.4.0...4.9.0)

Updates `psycopg` to 3.3.4
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.2.0...3.3.4)

Updates `channels` to 4.3.2
- [Changelog](https://github.com/django/channels/blob/main/CHANGELOG.txt)
- [Commits](django/channels@4.1.0...4.3.2)

Updates `channels-redis` to 4.3.0
- [Changelog](https://github.com/django/channels_redis/blob/main/CHANGELOG.txt)
- [Commits](django/channels_redis@4.2.0...4.3.0)

Updates `celery` to 5.6.3
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst)
- [Commits](celery/celery@v5.4.0...v5.6.3)

Updates `django-celery-beat` to 2.9.0
- [Release notes](https://github.com/celery/django-celery-beat/releases)
- [Changelog](https://github.com/celery/django-celery-beat/blob/main/Changelog)
- [Commits](celery/django-celery-beat@v2.6.0...v2.9.0)

Updates `redis` to 8.0.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.0.0...v8.0.0)

Updates `scikit-learn` to 1.8.0
- [Release notes](https://github.com/scikit-learn/scikit-learn/releases)
- [Commits](scikit-learn/scikit-learn@1.5.0...1.8.0)

Updates `joblib` to 1.5.3
- [Release notes](https://github.com/joblib/joblib/releases)
- [Changelog](https://github.com/joblib/joblib/blob/main/CHANGES.rst)
- [Commits](joblib/joblib@1.4.0...1.5.3)

Updates `numpy` to 2.4.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v1.26.0...v2.4.6)

Updates `scipy` to 1.17.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.13.0...v1.17.1)

Updates `requests` to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.0...v2.34.2)

Updates `sgp4` to 2.25
- [Commits](brandon-rhodes/python-sgp4@2.23...2.25)

Updates `python-dotenv` to 1.2.2
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.0.0...v1.2.2)

Updates `daphne` to 4.2.1
- [Changelog](https://github.com/django/daphne/blob/main/CHANGELOG.txt)
- [Commits](django/daphne@4.1.0...4.2.1)

Updates `websockets` to 16.0
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@12.0...16.0)

Updates `eventlet` to 0.41.0
- [Changelog](https://github.com/eventlet/eventlet/blob/master/NEWS)
- [Commits](eventlet/eventlet@v0.35.2...0.41.0)

Updates `sentry-sdk` to 2.61.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.20.0...2.61.0)

Updates `opentelemetry-sdk` to 1.42.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.29.0...v1.42.1)

Updates `opentelemetry-exporter-otlp` to 1.42.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-python@v1.29.0...v1.42.1)

Updates `opentelemetry-instrumentation-django` to 0.63b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-celery` to 0.63b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-redis` to 0.63b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `opentelemetry-instrumentation-psycopg` to 0.63b1
- [Release notes](https://github.com/open-telemetry/opentelemetry-python-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-python-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-python-contrib/commits)

Updates `django-prometheus` to 2.5.0
- [Release notes](https://github.com/korfuri/django-prometheus/releases)
- [Changelog](https://github.com/django-commons/django-prometheus/blob/master/CHANGELOG.md)
- [Commits](django-commons/django-prometheus@v2.3.0...v2.5.0)

Updates `structlog` to 25.5.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@24.4.0...25.5.0)

Updates `prometheus-client` to 0.25.0
- [Release notes](https://github.com/prometheus/client_python/releases)
- [Commits](prometheus/client_python@v0.21.0...v0.25.0)

Updates `pip-audit` to 2.10.0
- [Release notes](https://github.com/pypa/pip-audit/releases)
- [Changelog](https://github.com/pypa/pip-audit/blob/main/CHANGELOG.md)
- [Commits](pypa/pip-audit@v2.7.0...v2.10.0)

---
updated-dependencies:
- dependency-name: celery
  dependency-version: 5.6.3
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: channels
  dependency-version: 4.3.2
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: channels-redis
  dependency-version: 4.3.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: daphne
  dependency-version: 4.2.1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: django
  dependency-version: 6.0.5
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: django-celery-beat
  dependency-version: 2.9.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: django-cors-headers
  dependency-version: 4.9.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: django-prometheus
  dependency-version: 2.4.1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: djangorestframework
  dependency-version: 3.17.1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: drf-spectacular
  dependency-version: 0.29.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: eventlet
  dependency-version: 0.41.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: joblib
  dependency-version: 1.5.3
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: numpy
  dependency-version: 2.4.6
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: opentelemetry-exporter-otlp
  dependency-version: 1.42.1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: opentelemetry-instrumentation-celery
  dependency-version: 0.63b1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: opentelemetry-instrumentation-django
  dependency-version: 0.63b1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: opentelemetry-instrumentation-psycopg
  dependency-version: 0.63b1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: opentelemetry-instrumentation-redis
  dependency-version: 0.63b1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: opentelemetry-sdk
  dependency-version: 1.42.1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: pip-audit
  dependency-version: 2.10.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: prometheus-client
  dependency-version: 0.25.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: psycopg
  dependency-version: 3.3.4
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: python-dotenv
  dependency-version: 1.2.2
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: redis
  dependency-version: 7.4.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: scikit-learn
  dependency-version: 1.8.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: scipy
  dependency-version: 1.17.1
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.60.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: sgp4
  dependency-version: '2.25'
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: structlog
  dependency-version: 25.5.0
  dependency-type: direct:production
  dependency-group: backend-dependencies
- dependency-name: websockets
  dependency-version: '16.0'
  dependency-type: direct:production
  dependency-group: backend-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/backend/backend-dependencies-33f175fb27 branch from 5ef8632 to c118bb4 Compare May 31, 2026 09:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants