chore(deps): bump the python-packages group across 1 directory with 11 updates by dependabot[bot] · Pull Request #19 · masterivanic/Bank-service

dependabot · 2026-06-22T13:37:20Z

Bumps the python-packages group with 11 updates in the / directory:

Package	From	To
attrs	`25.4.0`	`26.1.0`
django	`5.2.10`	`5.2.15`
djangorestframework	`3.16.1`	`3.17.1`
dependency-injector	`4.48.3`	`4.49.1`
gunicorn	`23.0.0`	`26.0.0`
psycopg2-binary	`2.9.11`	`2.9.12`
mypy	`1.19.1`	`2.1.0`
pytest	`9.0.2`	`9.1.1`
django-stubs	`6.0.1`	`6.0.5`
django-environ	`0.13.0`	`0.14.0`
packaging	`26.0`	`26.2`

Updates attrs from 25.4.0 to 26.1.0

Release notes

Sourced from attrs's releases.

26.1.0

Highlights

The main outward change here only affects people using field transformers, but it should be a nice quality of life improvement!

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Kraken Tech (@kraken-tech), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Ecosystems (@ecosyste-ms), TestMu AI Open Source Office (Formerly LambdaTest) (@LambdaTest-Inc), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Full Changelog

Backwards-incompatible Changes

Field aliases are now resolved before calling field_transformer, so transformers receive fully populated Attribute objects with usable alias values instead of None. The new Attribute.alias_is_default flag indicates whether the alias was auto-generated (True) or explicitly set by the user (False). #1509

Changes

Fix type annotations for attrs.validators.optional(), so it no longer rejects tuples with more than one validator. #1496

The attrs.validators.disabled() contextmanager can now be nested. #1513

Frozen classes can set on_setattr=attrs.setters.NO_OP in addition to None. #1515

It's now possible to pass attrs instances in addition to attrs classes to attrs.fields(). #1529

This release contains contributions from @bysiber, @DavidCEllis, @finite-state-machine, @hynek, @veeceey, and @vstinner.

Artifact Attestations

You can verify this release's artifact attestions using GitHub's CLI tool by downloading the sdist and wheel from PyPI and running:
$ gh attestation verify --owner python-attrs attrs-26.1.0.tar.gz

... (truncated)

Changelog

Sourced from attrs's changelog.

26.1.0 - 2026-03-19

Backwards-incompatible Changes

Field aliases are now resolved before calling field_transformer, so transformers receive fully populated Attribute objects with usable alias values instead of None. The new Attribute.alias_is_default flag indicates whether the alias was auto-generated (True) or explicitly set by the user (False). #1509

Changes

Fix type annotations for attrs.validators.optional(), so it no longer rejects tuples with more than one validator. #1496

The attrs.validators.disabled() contextmanager can now be nested. #1513

Frozen classes can set on_setattr=attrs.setters.NO_OP in addition to None. #1515

It's now possible to pass attrs instances in addition to attrs classes to attrs.fields(). #1529

Commits

7bfc49e Prepare 26.1.0
31e0286 Update test_validators.py for Python 3.15a7 (#1530)
48b8611 Add instance support to attrs.fields() (#1529)
3a68d49 dev: document missing git tags failure mode
a572c3a Allow field(on_setattr=NO_OP) on frozen classes
af9c510 Fix validators.disabled() to save/restore state on nesting (#1513)
ab7f8b2 update dev
ce89f5d Fix message passing in frozen errors
eccd966 Fix optional validator to accept tuples of len > 1 (#1496)
e92fe52 policies: tighten screws (#1528)
Additional commits viewable in compare view

Updates django from 5.2.10 to 5.2.15

Commits

21e9840 [5.2.x] Bumped version for 5.2.15 release.
9b62b0a [5.2.x] Fixed CVE-2026-48587 -- Ignored whitespace padding when checking Vary...
050a3dc [5.2.x] Fixed CVE-2026-35193 -- Varied on Authorization when caching non-publ...
366d9ae [5.2.x] Fixed CVE-2026-8404 -- Used Cache-Control directives case-insensitive...
4e47d2b [5.2.x] Fixed CVE-2026-7666 -- Delayed setting SMTP connection until fully co...
594360c [5.2.x] Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace collisi...
e074d83 [5.2.x] Included commit hash in checksum file when building artifacts for rel...
c502754 [5.2.x] Updated links to severity levels in release notes.
72f5b41 [5.2.x] Added stub release notes and release date for 5.2.15.
7084825 [5.2.x] Refs #35844 -- Ran further selenium tests with --parallel=1.
Additional commits viewable in compare view

Updates djangorestframework from 3.16.1 to 3.17.1

Release notes

Sourced from djangorestframework's releases.

3.17.1

What's Changed

Bug fixes

Fix HTMLFormRenderer with empty datetime values by @p-r-a-v-i-n in encode/django-rest-framework#9928

Full Changelog: encode/django-rest-framework@3.17.0...3.17.1

3.17.0

What's Changed

Breaking changes

Drop support for Python 3.9 by @auvipy in encode/django-rest-framework#9781

Drop deprecated coreapi support by @browniebroke in encode/django-rest-framework#9895

Features

Add ability to specify output format for DurationField by @sevdog in encode/django-rest-framework#8532

Add missing decorators: @versioning_class(), @content_negotiation_class(), @metadata_class() for function-based views by @qqii in encode/django-rest-framework#9719

Add support for Python 3.14 by @cclauss in encode/django-rest-framework#9780

Support violation_error_code and violation_error_message from UniqueConstraint in UniqueTogetherValidator by @s-aleshin in encode/django-rest-framework#9766

Add support for ipaddress objects in JSONEncoder by @corenting in encode/django-rest-framework#9087

Add optional support to serialize BigInteger to string by @HoodyH in encode/django-rest-framework#9775

Add Django 6.0 support by @MehrazRumman in encode/django-rest-framework#9819

Bug fixes

Prevent small risk of Token overwrite by @mahdirahimi1999 in encode/django-rest-framework#9754

Fix UniqueTogetherValidator validation when condition references a read-only field by @ticosax in encode/django-rest-framework#9764

Fix validation on many to many field when default=None by @Genarito in encode/django-rest-framework#9790

Fix invalid SPDX license expression in __init__.py by @TheFunctionalGuy in encode/django-rest-framework#9799

Fix HTMLFormRenderer to ensure a valid datetime-local format by @mgaligniana in encode/django-rest-framework#9365

Fix mutable default arguments in OrderingFilter methods by @killerdevildog in encode/django-rest-framework#9742

Update TokenAdmin to respect USERNAME_FIELD of the user model by @m000 in encode/django-rest-framework#9836

Preserve ordering in MultipleChoiceField by @fbozhang in encode/django-rest-framework#9735

Translations

Update French translation by @SebCorbin in encode/django-rest-framework#9770

Update Brazilian Portuguese translations by @JVPinheiroReis in encode/django-rest-framework#9828

Fix and improve French translations by @deronnax in encode/django-rest-framework#9896

Add missing Russian translation by @minorytanaka in encode/django-rest-framework#9903

Packaging

Migrate packaging to pyproject.toml by @deronnax in encode/django-rest-framework#9056

Move package data rules from MANIFEST.in to pyproject.toml by @p-r-a-v-i-n in encode/django-rest-framework#9825

Set up release workflow with trusted publisher by @browniebroke in encode/django-rest-framework#9852

Other changes

Refactor token generation to use the secrets module by @mahdirahimi1999 in encode/django-rest-framework#9760

Add validation for decorator out-of-order with @api_view by @kernelshard in encode/django-rest-framework#9821

Switch to mkdocs material theme for documentation by @browniebroke in encode/django-rest-framework#9849

New Contributors

@khaledsukkar2 made their first contribution in encode/django-rest-framework#9717

... (truncated)

Commits

22e231c Prepare bug fix release 3.17.1 (#9931)
8e99b53 Add condition to skip pushed tags from forks (#9924)
c0407de Fix HTMLFormRenderer with empty datetime values (#9928)
30d58a7 Fix the book sizing in the documentation (#9926)
6f03b79 Tweak order of changes in release notes
021ab56 Bump version and update release notes for 3.17.0 (#9921)
19ebad7 Bump mkdocs-material[imaging] from 9.7.4 to 9.7.5 (#9923)
f222c55 Correct requires-python key in pyproject.toml
7e7de6f Remove code fences from release checklist
c599d30 Update release process
Additional commits viewable in compare view

Updates dependency-injector from 4.48.3 to 4.49.1

Release notes

Sourced from dependency-injector's releases.

4.49.1

What's Changed

Add FastStream example to docs by @birthdaysgift in ets-labs/python-dependency-injector#958

Allow Configuration provider to accept Pydantic settings classes by @warmagedon007 in ets-labs/python-dependency-injector#963

Add support for wiring of Cython-compiled modules by @keyz182 in ets-labs/python-dependency-injector#965

Fix sync resource shutdown with async deps (fixes #968) by @ZipFile in ets-labs/python-dependency-injector#969

New Contributors

@birthdaysgift made their first contribution in ets-labs/python-dependency-injector#958

@warmagedon007 made their first contribution in ets-labs/python-dependency-injector#963

@keyz182 made their first contribution in ets-labs/python-dependency-injector#965

Full Changelog: ets-labs/python-dependency-injector@4.49.0...4.49.1

4.49.0

What's Changed

Python 3.14 support

Fix Pydantic v2 deprecation warning triggering on settings class import (fixes #942)

Fix grammar in Declarative Container documentation by @okotdaniel in ets-labs/python-dependency-injector#916

Add missing warn_unresolved parameter to WiringConfiguration in containers.pyi by @jonathandannenberg in ets-labs/python-dependency-injector#951

Add keep_cache argument to Container.wire typings by @romantolkachyov in ets-labs/python-dependency-injector#952

Retrofit assert type for some type-stub checks by @leonarduschen in ets-labs/python-dependency-injector#943

Retrofit assert type for remaining type-stub checks by @leonarduschen in ets-labs/python-dependency-injector#953

Add provided().call *args, **kwargs arguments #945 by @pavalso in ets-labs/python-dependency-injector#946

Add context local resource by @elina-israyelyan in ets-labs/python-dependency-injector#931

Update CI/CD to actions/checkout@v6, actions/setup-python@v6, actions/download-artifact@v8, actions/upload-artifact@v7 and pypa/cibuildwheel@v3.4.0.

Add dependabot config for GitHub Actions

New Contributors

@okotdaniel made their first contribution in ets-labs/python-dependency-injector#916

@jonathandannenberg made their first contribution in ets-labs/python-dependency-injector#951

@romantolkachyov made their first contribution in ets-labs/python-dependency-injector#952

@pavalso made their first contribution in ets-labs/python-dependency-injector#946

@elina-israyelyan made their first contribution in ets-labs/python-dependency-injector#931

Full Changelog: ets-labs/python-dependency-injector@4.48.3...4.49.0

Commits

d6749b8 Bump version
c9494ab Set target-branch for dependabot
d4297ef Fix sync resource shutdown with async deps (#969)
399e1ed Add setuptools to test deps
79984b4 Improve provider constructor docs
4fe9339 Support wiring of Cython-compiled modules (#965)
dc3bd65 Allow Configuration provider to accept pydantic settings classes (#963)
fcb3ea3 Bump pypa/cibuildwheel from 3.4.0 to 3.4.1 (#960)
7e5c01a Add FastStream example to docs (#958)
5f7aa1c Bump version
Additional commits viewable in compare view

Updates gunicorn from 23.0.0 to 26.0.0

Release notes

Sourced from gunicorn's releases.

26.0.0

Breaking Changes

Eventlet worker removed: The eventlet worker class has been dropped. Migrate to gevent, gthread, or tornado.

New Features

ASGI Framework Compatibility Suite: New end-to-end compatibility test harness covering Starlette, FastAPI, Litestar, Quart, Sanic, and BlackSheep. Current grid passes 438/444 tests (98%).

ASGI Test Suite Expansion: 134 additional ASGI unit tests covering protocol semantics, lifespan, websockets, and chunked framing.

Security

HTTP/1.1 Request-Target Validation (RFC 9112 sections 3.2.3, 3.2.4):

Reject authority-form request-target outside CONNECT

Reject asterisk-form request-target outside OPTIONS

Reject relative-reference request-targets

Header Field Hardening (RFC 9110):

Reject control characters in header field-value (section 5.5)

Reject forbidden trailer field-names (section 6.5.1)

Reject Content-Length list form (RFC 9112 section 6.3)

Request Smuggling Hardening:

Tighten keepalive gate and scope finish_body byte cap

Keep _body_receiver alive across the keepalive smuggling gate so pipelined requests cannot re-enter a closed body

Address parser/protocol findings from a six-point WSGI/ASGI audit

PROXY Protocol (ASGI): Enforce proxy_allow_ips and tighten v1/v2 parsing in the ASGI callback parser.

Connection Draining: Drain the connection on close per RFC 9112 section 9.6 to prevent reset-on-close truncation.

Bug Fixes

Body Framing on HEAD/204/304:

Keep Content-Length on HEAD and 304 responses (#3621)

Drop body framing on HEAD/204/304 even when the framework set it

Warn once when an ASGI app emits a body for a no-body response

HTTP/2 ASGI:

Fix _handle_stream_ended to set _body_complete in the async HTTP/2 handler so request bodies finalize correctly on stream end

Add InvalidChunkExtension mapping and fast-parser support in ASGI tests (#3565)

HTTP/1.1 100-Continue: Stop adding Transfer-Encoding: chunked to 100-Continue interim responses.

WebSocket Close Handshake (RFC 6455):

Comply with the close handshake state machine

Close the transport after the close handshake completes

Fix binary send when the text key is None

Early Hints: Validate headers in the early_hints callback to match process_headers; pass only the header name to InvalidHeader (#3588).

ASGI Framework Fixes:

Fix ASGI disconnect handling for Django-style apps

Fix Litestar request handling (use raw ASGI receive for body/headers)

Fix Litestar HTTP endpoints for compatibility tests

Fix Quart headers endpoint to normalize keys to lowercase

Fix Quart WebSocket close test app (missing accept())

Fix duplicate Transfer-Encoding header for BlackSheep streaming

... (truncated)

Commits

5d819cf release: 26.0.0
b45c70d Merge pull request #3611 from zc-mattcen/docs-typo
99c8d48 Merge pull request #3623 from benoitc/chore/drop-eventlet-add-h2-uvloop-test-...
5a655af Merge pull request #3622 from benoitc/test/docker-port-and-ipv4-fixes
201df19 chore: remove eventlet worker; add h2 and uvloop to test deps
f4ac8e1 test: pass action name to dirty client and stabilize after TTOU spam
54d38af test: unblock docker fixtures on macOS hosts
68843c8 Merge pull request #3621 from benoitc/fix/asgi-preserve-content-length-on-hea...
31f2618 Merge pull request #3620 from benoitc/fix/asgi-proxy-protocol-trust-and-parsing
41ec752 fix: keep Content-Length on HEAD and 304 responses
Additional commits viewable in compare view

Updates psycopg2-binary from 2.9.11 to 2.9.12

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix infinite loop with malformed interval (:ticket:1835).

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Wheel package bundled with PostgreSQL 16 libpq in order to add support for recent features, such as sslcertmode.

What's new in psycopg 2.9.7 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix propagation of exceptions raised during module initialization (:ticket:[#1598](https://github.com/psycopg/psycopg2/issues/1598)).

... (truncated)

Commits

3a6d9d6 ci: include almalinux in whieel building
ebca6bf chore: bump to version 3.9.12
0196f02 build(deps): bump pypa/cibuildwheel from 3.3.1 to 3.4.0
d157bdc build(deps): bump docker/setup-qemu-action from 3 to 4
7fccc0f build(deps): bump actions/upload-artifact from 6 to 7
d52a61e chore: bump dependency libraries
b231d72 chore: fix building binary images
6d76e84 Merge pull request #1836 from psycopg/fix-1835
f7e314c fix: overflow in malformed interval
eb905c1 docs: replace bare except clause with except Exception
Additional commits viewable in compare view

Updates mypy from 1.19.1 to 2.1.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.1

We’ve just uploaded mypy 2.1.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:
python3 -m pip install -U mypy
You can read the full documentation for this release on Read the Docs.

librt.vecs: Fast Growable Array Type for Mypyc

The new librt.vecs module provides an efficient growable array type vec that is optimized for mypyc use. It provides fast, packed arrays with integer and floating point value types, which can be several times faster than list, and tens of times faster than array.array in code compiled using mypyc. It also supports nested vec objects and non-value-type items, such as vec[vec[str]].

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo.

librt.random: Fast Pseudo-Random Number Generation

The new librt.random module provides fast pseudo-random number generation that is optimized for code compiled using mypyc. It can be 3x to 10x faster than the stdlib random module in compiled code.

Refer to the documentation for the details.

Contributed by Jukka Lehtosalo (PR 21433).

Mypyc Improvements

Enable incremental self-compilation (Vaggelis Danias, PR 21369)

Make compilation order with multiple files consistent (Piotr Sawicki, PR 21419)

Fix crash on accessing StopAsyncIteration (Piotr Sawicki, PR 21406)

Fix incremental compilation with separate flag (Vaggelis Danias, PR 21299)

Fixes to Crashes

Fix crash on partial type with --allow-redefinition and global declaration (Jukka Lehtosalo, PR 21428)

Fix broken awaitable generator patching (Ivan Levkivskyi, PR 21435)

... (truncated)

Commits

c1c336d Remove +dev from version
74df14b Add changelog for mypy 2.1 (#21464)
022d9bc Revert "TypeForm: Enable by default (#21262)"
8826288 [mypyc] Document librt.random (#21463)
3f4067b Bump librt version to 0.11.0 (#21458)
2b1eb58 [mypyc] Enable incremental self-compilation (#21369)
8152f4a Respect file config comments for stale modules (#21444)
116d60b Fix nondeterminism from nonassociativity of overload joins (#21455)
6c4af8e Fix function call message change for small number of args (#21432)
4b8fdca [mypyc] Add librt.random module (#21433)
Additional commits viewable in compare view

Updates pytest from 9.0.2 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

#14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

If this is undesirable, move the fixture definition to a conftest.py file if possible.

Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

#10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

See 10819 and 14011.

#12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

See dynamic-fixture-request-during-teardown for details.

#13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

See parametrize-iterators for details and suggestions.

#13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

See config-inicfg for more details.

#14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates django-stubs from 6.0.1 to 6.0.5

Commits

8f534d0 Version 6.0.5 release (#3402)
16679ef Fix AdminSite.register typing (#3387)
030484f Update dependency ty to v0.0.38 (#3400)
906abd5 Fix InlineModelAdmin parent-object method signatures (#3308)
ad05f89 Update ty to v0.0.37 (#3399)
c67f6b4 Update int128/hide-comment-action action to v1.59.0 (#3397)
5322457 [pre-commit.ci] pre-commit autoupdate (#3396)
e097380 Update dependency ty to v0.0.36 (#3395)
97b6e0e Update dependency pytest-mypy-plugins to v4.0.3 (#3394)
5680543 Enable unused-ignore code in pyrefly (#3393)
Additional commits viewable in compare view

Updates django-environ from 0.13.0 to 0.14.0

Release notes

Sourced from django-environ's releases.

v0.14.0

django-environ 0.14.0 improves type annotations across Env and updates Env.read_env() to support caller-owned file-like objects without closing them.

This is the final django-environ release supporting Python 3.9.

Added

Type annotations and matching docstring information for Env methods.

A conditional typing_extensions dependency providing TypeAlias on Python 3.9.

Changed

Env.read_env() now accepts path-like and file-like objects without closing file-like objects supplied by the caller.

Fixed

Env.read_env() now raises an explicit error when it cannot determine the caller frame used to resolve the default .env path.

Full changelog: joke2k/django-environ@v0.13.0...v0.14.0

PyPI: https://pypi.org/project/django-environ/0.14.0/

Changelog

Sourced from django-environ's changelog.

v0.14.0_ - 18-June-2026

Added +++++

Added type annotations and matching docstring information to Env methods [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Added a Python 3.9 compatibility dependency on typing_extensions for TypeAlias [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Changed +++++++

Updated Env.read_env() to accept path-like and file-like objects without closing file-like objects supplied by the caller [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Fixed +++++

Added an explicit error when Env.read_env() cannot determine its caller frame while resolving the default .env path [#633](https://github.com/joke2k/django-environ/issues/633) <https://github.com/joke2k/django-environ/pull/633>_.

Commits

6e1b461 Merge pull request #635 from joke2k/release/0.14.0
b65f66e chore(release): prepare 0.14.0
39f980a Merge pull request #633 from joke2k/hotfix/0.14-apply-pr-600
020825c ci: allow release and hotfix PRs to target main
6c1dd5b fix(typing): support TypeAlias on Python 3.9
c0d7b2b Ensure Env.read_env supports any file-like object
c41ee54 Guard against an inability to read stack frames
64bfe4b Add type information to docstrings
791df95 Add type annotations to str and bool parameters of methods in Env

…1 updates Bumps the python-packages group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [attrs](https://github.com/python-attrs/attrs) | `25.4.0` | `26.1.0` | | [django](https://github.com/django/django) | `5.2.10` | `5.2.15` | | [djangorestframework](https://github.com/encode/django-rest-framework) | `3.16.1` | `3.17.1` | | [dependency-injector](https://github.com/ets-labs/python-dependency-injector) | `4.48.3` | `4.49.1` | | [gunicorn](https://github.com/benoitc/gunicorn) | `23.0.0` | `26.0.0` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.11` | `2.9.12` | | [mypy](https://github.com/python/mypy) | `1.19.1` | `2.1.0` | | [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.1.1` | | [django-stubs](https://github.com/typeddjango/django-stubs) | `6.0.1` | `6.0.5` | | [django-environ](https://github.com/joke2k/django-environ) | `0.13.0` | `0.14.0` | | [packaging](https://github.com/pypa/packaging) | `26.0` | `26.2` | Updates `attrs` from 25.4.0 to 26.1.0 - [Release notes](https://github.com/python-attrs/attrs/releases) - [Changelog](https://github.com/python-attrs/attrs/blob/main/CHANGELOG.md) - [Commits](python-attrs/attrs@25.4.0...26.1.0) Updates `django` from 5.2.10 to 5.2.15 - [Commits](django/django@5.2.10...5.2.15) Updates `djangorestframework` from 3.16.1 to 3.17.1 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.16.1...3.17.1) Updates `dependency-injector` from 4.48.3 to 4.49.1 - [Release notes](https://github.com/ets-labs/python-dependency-injector/releases) - [Commits](ets-labs/python-dependency-injector@4.48.3...4.49.1) Updates `gunicorn` from 23.0.0 to 26.0.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@23.0.0...26.0.0) Updates `psycopg2-binary` from 2.9.11 to 2.9.12 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.11...2.9.12) Updates `mypy` from 1.19.1 to 2.1.0 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.19.1...v2.1.0) Updates `pytest` from 9.0.2 to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.2...9.1.1) Updates `django-stubs` from 6.0.1 to 6.0.5 - [Release notes](https://github.com/typeddjango/django-stubs/releases) - [Commits](typeddjango/django-stubs@6.0.1...6.0.5) Updates `django-environ` from 0.13.0 to 0.14.0 - [Release notes](https://github.com/joke2k/django-environ/releases) - [Changelog](https://github.com/joke2k/django-environ/blob/v0.14.0/CHANGELOG.rst) - [Commits](joke2k/django-environ@v0.13.0...v0.14.0) Updates `packaging` from 26.0 to 26.2 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.0...26.2) --- updated-dependencies: - dependency-name: attrs dependency-version: 26.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: django dependency-version: 5.2.15 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: djangorestframework dependency-version: 3.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: dependency-injector dependency-version: 4.49.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: gunicorn dependency-version: 26.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-packages - dependency-name: psycopg2-binary dependency-version: 2.9.12 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: mypy dependency-version: 2.1.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: python-packages - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: django-stubs dependency-version: 6.0.5 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python-packages - dependency-name: django-environ dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages - dependency-name: packaging dependency-version: '26.2' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-packages ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jun 22, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the python-packages group across 1 directory with 11 updates#19

chore(deps): bump the python-packages group across 1 directory with 11 updates#19
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-packages-78102625bf

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

26.1.0

Highlights

Special Thanks

Above and Beyond

Maintenance Sustainers

Full Changelog

Backwards-incompatible Changes

Changes

Artifact Attestations

26.1.0 - 2026-03-19

Backwards-incompatible Changes

Changes

3.17.1

What's Changed

Bug fixes

3.17.0

What's Changed

Breaking changes

Features

Bug fixes

Translations

Packaging

Other changes

New Contributors

4.49.1

What's Changed

New Contributors

4.49.0

What's Changed

New Contributors

26.0.0

Breaking Changes

New Features

Security

Bug Fixes

Current release

Mypy Release Notes

Next Release

Mypy 2.1

librt.vecs: Fast Growable Array Type for Mypyc

librt.random: Fast Pseudo-Random Number Generation

Mypyc Improvements

Fixes to Crashes

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

Deprecations (removal in next major release)

v0.14.0

Added

Changed

Fixed

v0.14.0_ - 18-June-2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 22, 2026 •

edited

Loading

`v0.14.0`_ - 18-June-2026