Bump the dependencies group with 8 updates by dependabot[bot] · Pull Request #759 · gemini-hlsw/goats

dependabot · 2026-09-18T16:09:29Z

Updates the requirements on apscheduler, channels[daphne], click, copier, djangorestframework, dramatiq[redis,watch], typer and tomtoolkit to permit the latest version.
Updates apscheduler from 3.11.2 to 3.11.3

Release notes

Sourced from apscheduler's releases.

3.11.3

Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)

Fixed imported jobs missing their scheduler and job store links (#1119)

Commits

4308ec9 Added the release version
ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
36936e9 Updated actions
c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
1b782c9 Fixed fixture coreapp not found
dc3dde4 Test against PySide6 on all Python versions
18a6f6b Fixed imported jobs missing their scheduler and job store links
1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
0636bf4 Added Python 3.14 to the test matrix
3eb3de8 Fixed bad use of pytest.raises()
Additional commits viewable in compare view

Updates channels[daphne] to 4.3.2

Changelog

Sourced from channels[daphne]'s changelog.

4.3.2 (2025-11-20)

Confirmed support for Django 6.0.

Confirmed support for Python 3.14.

Added types extra for types-channels stubs. See installation docs.

4.3.1 (2025-08-01)

Fixed testing live server setup when test DB name was not set.

4.3.0 (2025-07-28)

Updated asgiref dependency to v3.9+.

Dropped support for EOL Python and Django versions. Python 3.9 is now the minimum supported version.

Fixed compatibility of ChannelsLiveServerTestCase with Django 5.2.

Fixed DB setup for spawned testing subprocess, typically on Windows and macOS.

See the Version 4.3.0 release notes <https://channels.readthedocs.io/en/latest/releases/4.3.0.html>_ for more details.

4.2.2 (2025-03-30)

Added fallbacks for old valid channel/group name checks.

These were renamed in 4.2.1 but (as internal methods) without deprecation. They are restored (and deprecated) here to allow updating channel layers using them.

4.2.1 (2025-03-29)

Channels 4.2.1 primarily updates the metadata for supported Python and Django versions.

Added official support for Django 5.2 LTS.

Added official support for Python 3.13.

Added a warning for the length of the channel layer group names.

... (truncated)

Commits

15333cd Version 4.3.2
10be531 Add explicit dj60 to test matrix.
f726845 Update .github/workflows/tests.yml
0c1e533 tox.ini: envlist py{310,311,312,313,314}-dj52
b2ad89f GitHub Actions: Test on Python 3.14 release candidate 2
a135228 Bump actions/checkout from 4 to 5 (#2180)
7dfcc7b Add types extra and installation docs for type checking support.
95589a7 Version 4.3.1.
5038d69 Fix live server setup when test DB name not set.
f17a8fe Bump browser-actions/setup-chrome from 1 to 2 (#2175)
Additional commits viewable in compare view

Updates click from 8.4.1 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](https://github.com/pallets/click/discussions/3527). #3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653

Fix test failures when using pytest >= 9.1. {pr}3656

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](https://github.com/pallets/click/discussions/3527). {pr}3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641

{func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695

The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits

8b19813 Release version 8.5.0
2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
131c86a Add FAQ entry about UnicodeEncodeError on Windows
e1fd594 Add support of pathlib.Path to edit (#3781)
a1d8785 Add support of pathlib.Path to edit
2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
a6256bf Forwards all user's parameters set in PAGER
61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
9835b0f Resolve the pager command once, in _pager_contextmanager
f36d58b Refactor pager stream handling (#3767)
Additional commits viewable in compare view

Updates copier from 9.15.2 to 9.18.2

Release notes

Sourced from copier's releases.

v9.18.2 (2026-09-07)

Fix

allow overwriting destination symlinks when preserve_symlinks: false

cache: resolve submodules from the current checkout's .gitmodules (#2767)

Security

prevent trust bypass via ambiguous URL characters

To prevent URL confusion attacks, trusted prefix matching is now restricted to repository URL paths containing only RFC 3986 §2.3 "unreserved" characters (letters, digits, -, ., _, ~) and /. URL paths containing other characters now require an exact, verbatim match.

v9.18.1 (2026-09-01)

Fix

disambiguate Windows paths from SCP URLs in trust check

v9.18.0 (2026-09-01)

Feat

exclude: add support for multiple exclude patterns in a single entry (#2804)

Fix

preserve the original error when cleanup fails (#2824)

Security

prevent trust bypass via encoded URL traversal for alias and SCP-style URLs

v9.17.2 (2026-08-19)

Security

disallow Jinja {% include %} of symlinks resolving outside template root

disallow config !include paths outside the template root

Refactor

updating: delete user-removed files after rendering instead of excluding them

v9.17.1 (2026-08-04)

Security

prevent code execution via Jinja finalizer by disallowing YAML tags

prevent code execution via Jinja sandbox escape through path and settings objects

v9.17.0 (2026-07-13)

Feat

... (truncated)

Changelog

Sourced from copier's changelog.

v9.18.2 (2026-09-07)

Fix

allow overwriting destination symlinks when preserve_symlinks: false

cache: resolve submodules from the current checkout's .gitmodules (#2767)

Security

prevent trust bypass via ambiguous URL characters

To prevent URL confusion attacks, trusted prefix matching is now restricted to repository URL paths containing only RFC 3986 §2.3 "unreserved" characters (letters, digits, -, ., _, ~) and /. URL paths containing other characters now require an exact, verbatim match.

v9.18.1 (2026-09-01)

Fix

disambiguate Windows paths from SCP URLs in trust check

v9.18.0 (2026-09-01)

Feat

exclude: add support for multiple exclude patterns in a single entry (#2804)

Fix

preserve the original error when cleanup fails (#2824)

Security

prevent trust bypass via encoded URL traversal for alias and SCP-style URLs

v9.17.2 (2026-08-19)

Security

disallow Jinja {% include %} of symlinks resolving outside template root

disallow config !include paths outside the template root

Refactor

updating: delete user-removed files after rendering instead of excluding them

v9.17.1 (2026-08-04)

... (truncated)

Commits

217e4f8 bump: version 9.18.1 → 9.18.2
50b1927 fix: prevent trust bypass via ambiguous URL characters
bfa05c1 fix: allow overwriting destination symlinks when preserve_symlinks: false
68c8aa2 fix(cache): resolve submodules from the current checkout's .gitmodules (#2767)
03c95e2 bump: version 9.18.0 → 9.18.1
2a3e140 fix: disambiguate Windows paths from SCP URLs in trust check
b65cd70 bump: version 9.17.2 → 9.18.0
dcae663 fix: prevent trust bypass via encoded URL traversal for alias and SCP-style URLs
bb956bb build(deps): update dependency ruff to v0.16.5
27d3629 build(deps): lock file maintenance
Additional commits viewable in compare view

Updates djangorestframework from 3.17.2 to 3.18.1

Release notes

Sourced from djangorestframework's releases.

3.18.1

What's Changed

Bug fixes

Fix duplicate validation errors for GenericIPAddressField with protocol by @browniebroke in encode/django-rest-framework#10011

Fix int64 format detection for negative IntegerField minimums in OpenAPI schema definition by @zainnadeem786 in encode/django-rest-framework#9989

Fix list serializer on unique constraint validator by @MehrazRumman in encode/django-rest-framework#10033

Reject non-finite values (nan, inf) in FloatField by @winklemad in encode/django-rest-framework#9998

Other changes

Add a compatibility setting for ListSerializer error formats by @Kub-AT in encode/django-rest-framework#10027

Expand deprecation classes and review deprecation policy by @browniebroke in encode/django-rest-framework#10034

New Contributors

@abidaliamanat9 made their first contribution in encode/django-rest-framework#10028

@epuronta made their first contribution in encode/django-rest-framework#10030

@Kub-AT made their first contribution in encode/django-rest-framework#10027

@winklemad made their first contribution in encode/django-rest-framework#9998

Full Changelog: encode/django-rest-framework@3.18.0...3.18.1

3.18.0

What's Changed

Breaking changes

Drop support for Django 4.2, Django 5.0 and Django 5.1 by @p-r-a-v-i-n in encode/django-rest-framework#9899

Change errors for list serializers (many=True) to dict format by @p-r-a-v-i-n in encode/django-rest-framework#9837

Features

Add unaccent to SearchFilter by @mgaligniana in encode/django-rest-framework#9385

Add support for Django 6.1 by @browniebroke in encode/django-rest-framework#10003

Add @throttle_scope function based view decorator by @d-ryzhykau in encode/django-rest-framework#9963

Add nulls_distinct support to UniqueTogetherValidator by @mag123c in encode/django-rest-framework#9866

Bug fixes

Include choices param for non-editable fields by @ticosax in encode/django-rest-framework#9929

Improve cursor pagination template accessibility in browsable API by @kosbemrunal in encode/django-rest-framework#9905

Fix partial form data updates involving ListField by @Natgho in encode/django-rest-framework#9902

Fix crash due to browsable API extra action permissions by @dlfoerster in encode/django-rest-framework#9934

Handle unhashable BooleanField representation value by @emfpdlzj in encode/django-rest-framework#9973

Fix OpenAPI schema for zero numeric bounds on ListField children by @zainnadeem786 in encode/django-rest-framework#9977

Replace cc_delim_re usage with split_header_value for Django 6.1+ compatibility by @laymonage in encode/django-rest-framework#9978

Fix set_rollback to only rollback initialized connections by @jdetaeye in encode/django-rest-framework#9599

Fix DictField HTML input returning empty dict for missing fields by @veeceey in encode/django-rest-framework#9891

Raise clear error for unsupported unique-together list updates by @zainnadeem786 in encode/django-rest-framework#9981

Other changes

Prepare release 3.18.0 by @github-actions[bot] in encode/django-rest-framework#10015

New Contributors

@Im-Bilal made their first contribution in encode/django-rest-framework#9967

@dlfoerster made their first contribution in encode/django-rest-framework#9934

... (truncated)

Commits

dd23495 Prepare release 3.18.1 (#10036)
cb1fb66 Install gettext in prepare-release
858f1fc Reject non-finite values (nan, inf) in FloatField (#9998)
ea695cd Ensure translations are up to date when preparing release
0406c6e Update pygments requirement from >=2.17,<2.21 to ==2.21.* in the optional gro...
8c92e89 Expand deprecation classes and review deprecation policy (#10034)
3157a6a Update pytest config to native TOML format from v9 (#10035)
4f77428 Fixing issue #9484 (#10033)
f17d70f Fix int64 format detection for negative IntegerField minimums in Open API s...
5668281 Add a compatibility setting for ListSerializer error formats (#10027)
Additional commits viewable in compare view

Updates dramatiq[redis,watch] to 2.2.1

Release notes

Sourced from dramatiq[redis,watch]'s releases.

v2.2.1

See the documentation changelog for more information about the release.

Added

Run unit tests with free-threaded Python for Python 3.14+ by @LincolnPuzey in Bogdanp/dramatiq#813

Fixed

Asyncio: Prevent Exceptions raised from async actors from being caught in reference cycles by @LincolnPuzey in Bogdanp/dramatiq#878

Do not log expected Exception+Stack Trace when RabbitMQ server shuts down by @LincolnPuzey in Bogdanp/dramatiq#885

Project Maintenance

Bump the github-actions-updates group with 2 updates by @dependabot[bot] in Bogdanp/dramatiq#872

Small improvement to mypy type checking by @LincolnPuzey in Bogdanp/dramatiq#873

Fix flaky/warning in asyncio tests by @LincolnPuzey in Bogdanp/dramatiq#874

Bump the github-actions-updates group with 3 updates by @dependabot[bot] in Bogdanp/dramatiq#880

Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the github-actions-updates group by @dependabot[bot] in Bogdanp/dramatiq#884

Reduce flakiness of test by reducing worker/consumer timeouts in test by @LincolnPuzey in Bogdanp/dramatiq#886

Version v2.2.1 by @LincolnPuzey in Bogdanp/dramatiq#892

Full Changelog: Bogdanp/dramatiq@v2.2.0...v2.2.1

Commits

3ccb356 Version v2.2.1 (#892)
848b35f Reduce flakiness of test by reducing worker/consumer timeouts in test (#886)
c2b8154 Merge pull request #885 from LincolnPuzey/fix_187
6ede8fe Catch ConnectionWrongStateError when adding final connection callback fails
7d65704 Merge pull request #878 from LincolnPuzey/fix_asyncio_exc_ref_cycle
b0e96f9 Bump pypa/gh-action-pypi-publish in the github-actions-updates group (#884)
288dc26 Bump the github-actions-updates group with 3 updates (#880)
5ed4468 Asyncio middleware: Clear reference to future so that Exceptions are not caug...
2eabfaf Add test to check Exceptions raised from regular actors are not caught in ref...
294a88b Add test to check Exceptions raised from async actors are not caught in refer...
Additional commits viewable in compare view

Updates typer from 0.26.7 to 0.27.2

Release notes

Sourced from typer's releases.

0.27.2

Refactors

♻️ Create exceptions module and TyperException base class. PR #1942 by @svlandeg.

Docs

🐛 Fix showing fast button as external link in animated terminals in docs. PR #1912 by @phalberg.

Internal

⬆️ Bump setup-uv action to 10.0.1. PR #1940 by @YuriiMotov.

👷 Migrate automatic labels to Latest Changes. PR #1931 by @tiangolo.

👷 Remove legacy label check. PR #1930 by @tiangolo.

🔐 Use PR Submit for pull requests. PR #1928 by @tiangolo.

👷 Use GitHub CLI for Git authentication. PR #1927 by @tiangolo.

👷 Use PR Push commit identity. PR #1926 by @tiangolo.

🔒 Replace pre-commit PAT with PR Push. PR #1923 by @tiangolo.

👷 Remove Zensical docs cache. PR #1922 by @tiangolo.

🔥 Remove the old Latest Changes workflow. PR #1921 by @tiangolo.

⬆ Bump the python-packages group with 6 updates. PR #1917 by @dependabot[bot].

⬆ Bump pymdown-extensions from 10.21.3 to 11.0. PR #1910 by @dependabot[bot].

⬆ Bump the github-actions group with 5 updates. PR #1916 by @dependabot[bot].

0.27.1

Features

✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @svlandeg.

Docs

📝 Add Library Skills documentation. PR #1906 by @tiangolo.

🐛 Prevent scroll-to-top on restart/fast buttons in the documentation. PR #1904 by @phalberg.

📝 Recommend uv projects by default in docs. PR #1903 by @tiangolo.

📝 Update help docs. PR #1902 by @tiangolo.

Internal

⬆️ Upgrade latest-changes to 0.7.1. PR #1909 by @tiangolo.

0.27.0

Breaking Changes

💥 Update metavar printing. PR #1863 by @svlandeg.

Internal

⬆ Bump the python-packages group across 1 directory with 5 updates. PR #1896 by @dependabot[bot].

⬆️ Bump ty to 0.0.53. PR #1877 by @YuriiMotov.

⬆ Bump the github-actions group across 1 directory with 4 updates. PR #1897 by @dependabot[bot].

... (truncated)

Changelog

Sourced from typer's changelog.

0.27.2 (2026-08-28)

Refactors

♻️ Create exceptions module and TyperException base class. PR #1942 by @svlandeg.

Docs

🐛 Fix showing fast button as external link in animated terminals in docs. PR #1912 by @phalberg.

Internal

⬆️ Bump setup-uv action to 10.0.1. PR #1940 by @YuriiMotov.

👷 Migrate automatic labels to Latest Changes. PR #1931 by @tiangolo.

👷 Remove legacy label check. PR #1930 by @tiangolo.

🔐 Use PR Submit for pull requests. PR #1928 by @tiangolo.

👷 Use GitHub CLI for Git authentication. PR #1927 by @tiangolo.

👷 Use PR Push commit identity. PR #1926 by @tiangolo.

🔒 Replace pre-commit PAT with PR Push. PR #1923 by @tiangolo.

👷 Remove Zensical docs cache. PR #1922 by @tiangolo.

🔥 Remove the old Latest Changes workflow. PR #1921 by @tiangolo.

⬆ Bump the python-packages group with 6 updates. PR #1917 by @dependabot[bot].

⬆ Bump pymdown-extensions from 10.21.3 to 11.0. PR #1910 by @dependabot[bot].

⬆ Bump the github-actions group with 5 updates. PR #1916 by @dependabot[bot].

0.27.1 (2026-08-03)

Features

✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @svlandeg.

Docs

📝 Add Library Skills documentation. PR #1906 by @tiangolo.

🐛 Prevent scroll-to-top on restart/fast buttons in the documentation. PR #1904 by @phalberg.

📝 Recommend uv projects by default in docs. PR #1903 by @tiangolo.

📝 Update help docs. PR #1902 by @tiangolo.

Internal

⬆️ Upgrade latest-changes to 0.7.1. PR #1909 by @tiangolo.

0.27.0 (2026-07-15)

Breaking Changes

💥 Update metavar printing. PR #1863 by @svlandeg.

Internal

... (truncated)

Commits

99eb220 🔖 Release version 0.27.2 (#1943)
a2c9f1e 📝 Update release notes
41dea8f ♻️ Create exceptions module and TyperException base class (#1942)
407d924 📝 Update release notes
41c8224 ⬆️ Bump setup-uv action to 10.0.1 (#1940)
9a7b2e8 📝 Update release notes
31f30d7 👷 Migrate automatic labels to Latest Changes (#1931)
dacef1b 📝 Update release notes
42a9639 👷 Remove legacy label check (#1930)
361bdd8 📝 Update release notes
Additional commits viewable in compare view

Updates tomtoolkit from 2.32.2 to 3.0.1

Release notes

Sourced from tomtoolkit's releases.

tomtoolkit 3.0.1

What's Changed

1586 custom target sharing by @Fingel in TOMToolkit/tom_base#1588

Version 3 0 alpha by @jchate6 in TOMToolkit/tom_base#1620

Prevent Aladin chart from blocking page load by @Fingel in TOMToolkit/tom_base#1618

Makes sure sharing of reduceddatums/dataproducts doesn't fail if reci… by @Fingel in TOMToolkit/tom_base#1607

update docs on sharing custom Target Models by @jchate6 in TOMToolkit/tom_base#1621

fix typo in default setting ingestion by @jchate6 in TOMToolkit/tom_base#1634

fix submit button placement by @jchate6 in TOMToolkit/tom_base#1635

Added tom_across to the plugins page by @moira-andrews in TOMToolkit/tom_base#1639

1627 facilities in nav bar menu by @phycodurus in TOMToolkit/tom_base#1628

Remove special unique constraints ReducedDatums by @jchate6 in TOMToolkit/tom_base#1624

remove unused CSS breaking aladin by @jchate6 in TOMToolkit/tom_base#1650

Track user as target extra when sharing by @Fingel in TOMToolkit/tom_base#1603

Bump sqlparse from 0.5.5 to 0.6.0 by @dependabot[bot] in TOMToolkit/tom_base#1646

Bump alerce from 2.3.0 to 2.3.1 by @dependabot[bot] in TOMToolkit/tom_base#1644

Bump django-htmx from 1.28.0 to 1.29.0 by @dependabot[bot] in TOMToolkit/tom_base#1643

Bump djangorestframework from 3.17.1 to 3.18.0 by @dependabot[bot] in TOMToolkit/tom_base#1642

Bump coverage from 7.15.2 to 7.15.4 by @dependabot[bot] in TOMToolkit/tom_base#1641

Bump django from 5.2.16 to 5.2.17 by @dependabot[bot] in TOMToolkit/tom_base#1638

Bump cryptography from 48.0.1 to 50.0.0 by @dependabot[bot] in TOMToolkit/tom_base#1637

Bump markdown from 3.10.2 to 3.10.3 by @dependabot[bot] in TOMToolkit/tom_base#1636

Bump django-crispy-forms from 2.6 to 2.7 by @dependabot[bot] in TOMToolkit/tom_base#1632

New Contributors

@moira-andrews made their first contribution in TOMToolkit/tom_base#1639

Full Changelog: TOMToolkit/tom_base@3.0.0...3.0.1

tomtoolkit 3.0.0

Version 3.0 is here!

This is a substantial update that contains MANY substantial changes. This version requires special care with updating. Please follow the instructions in the docs to avoid any issues. Remember to backup your DB before performing major migrations. Please contact the TOMToolkit development team if you have any trouble with the upgrade.

Major Changes Overview

Add DataServices

Remove tom_alerts and Brokers

Remove tom_catalogs

Add calendar

Refactor ReducedDatums into sub models with defined fields.

New documentation format

Update to bootstrap5

Detailed Change Log

1396 update reduced datums for existing target via data service by @jchate6 in TOMToolkit/tom_base#1426

1471 update aliases when updating reduced datums from dataservice by @jchate6 in TOMToolkit/tom_base#1474

add error option to docs by @jchate6 in TOMToolkit/tom_base#1449

1435 convert ned harvester to dataservice by @jchate6 in TOMToolkit/tom_base#1470

... (truncated)

Commits

d8ccf93 Merge pull request #1632 from TOMToolkit/dependabot/pip/dev/django-crispy-for...
f7cf156 Bump django-crispy-forms from 2.6 to 2.7
8e05ec0 Merge pull request #1636 from TOMToolkit/dependabot/pip/dev/markdown-3.10.3
0a00aa1 Bump markdown from 3.10.2 to 3.10.3
9186010 Merge pull request #1637 from TOMToolkit/dependabot/pip/cryptography-50.0.0
72974d2 Bump cryptography from 48.0.1 to 50.0.0
3308756 Merge pull request #1638 from TOMToolkit/dependabot/pip/dev/django-5.2.17
a251dfe Bump django from 5.2.16 to 5.2.17
746dbdb Merge pull request #1641 from TOMToolkit/dependabot/pip/dev/coverage-7.15.4
f6c3f83 Bump coverage from 7.15.2 to 7.15.4
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any m...

Description has been truncated

Updates the requirements on [apscheduler](https://github.com/agronholm/apscheduler), [channels[daphne]](https://github.com/django/channels), [click](https://github.com/pallets/click), [copier](https://github.com/copier-org/copier), [djangorestframework](https://github.com/encode/django-rest-framework), [dramatiq[redis,watch]](https://github.com/Bogdanp/dramatiq), [typer](https://github.com/fastapi/typer) and [tomtoolkit](https://github.com/TOMToolkit/tom_base) to permit the latest version. Updates `apscheduler` from 3.11.2 to 3.11.3 - [Release notes](https://github.com/agronholm/apscheduler/releases) - [Commits](agronholm/apscheduler@3.11.2...3.11.3) Updates `channels[daphne]` to 4.3.2 - [Changelog](https://github.com/django/channels/blob/main/CHANGELOG.txt) - [Commits](django/channels@4.0.0...4.3.2) Updates `click` from 8.4.1 to 8.5.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.4.1...8.5.0) Updates `copier` from 9.15.2 to 9.18.2 - [Release notes](https://github.com/copier-org/copier/releases) - [Changelog](https://github.com/copier-org/copier/blob/master/CHANGELOG.md) - [Commits](copier-org/copier@v9.15.2...v9.18.2) Updates `djangorestframework` from 3.17.2 to 3.18.1 - [Release notes](https://github.com/encode/django-rest-framework/releases) - [Commits](encode/django-rest-framework@3.17.2...3.18.1) Updates `dramatiq[redis,watch]` to 2.2.1 - [Release notes](https://github.com/Bogdanp/dramatiq/releases) - [Commits](Bogdanp/dramatiq@v1.18.0...v2.2.1) Updates `typer` from 0.26.7 to 0.27.2 - [Release notes](https://github.com/fastapi/typer/releases) - [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md) - [Commits](fastapi/typer@0.26.7...0.27.2) Updates `tomtoolkit` from 2.32.2 to 3.0.1 - [Release notes](https://github.com/TOMToolkit/tom_base/releases) - [Commits](TOMToolkit/tom_base@2.32.2...3.0.1) --- updated-dependencies: - dependency-name: apscheduler dependency-version: 3.11.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: channels[daphne] dependency-version: 4.3.2 dependency-type: direct:production dependency-group: dependencies - dependency-name: click dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: copier dependency-version: 9.18.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: djangorestframework dependency-version: 3.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: dramatiq[redis,watch] dependency-version: 2.2.1 dependency-type: direct:production dependency-group: dependencies - dependency-name: typer dependency-version: 0.27.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: tomtoolkit dependency-version: 3.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-25T16:07:29Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 18, 2026

dependabot Bot closed this Sep 25, 2026

dependabot Bot deleted the dependabot/uv/dependencies-0b3502e31c branch September 25, 2026 16:07

Navigation Menu

Repository navigation

Bump the dependencies group with 8 updates - #759

Bump the dependencies group with 8 updates#759
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-0b3502e31c

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

Uh oh!

3.11.3

4.3.2 (2025-11-20)

4.3.1 (2025-08-01)

4.3.0 (2025-07-28)

4.2.2 (2025-03-30)

4.2.1 (2025-03-29)

8.5.0

Version 8.5.0

v9.18.2 (2026-09-07)

Fix

Security

v9.18.1 (2026-09-01)

Fix

v9.18.0 (2026-09-01)

Feat

Fix

Security

v9.17.2 (2026-08-19)

Security

Refactor

v9.17.1 (2026-08-04)

Security

v9.17.0 (2026-07-13)

Feat

v9.18.2 (2026-09-07)

Fix

Security

v9.18.1 (2026-09-01)

Fix

v9.18.0 (2026-09-01)

Feat

Fix

Security

v9.17.2 (2026-08-19)

Security

Refactor

v9.17.1 (2026-08-04)

3.18.1

What's Changed

Bug fixes

Other changes

New Contributors

3.18.0

What's Changed

Breaking changes

Features

Bug fixes

Other changes

New Contributors

v2.2.1

Added

Fixed

Project Maintenance

0.27.2

Refactors

Docs

Internal

0.27.1

Features

Docs

Internal

0.27.0

Breaking Changes

Internal

0.27.2 (2026-08-28)

Refactors

Docs

Internal

0.27.1 (2026-08-03)

Features

Docs

Internal

0.27.0 (2026-07-15)

Breaking Changes

Internal

tomtoolkit 3.0.1

What's Changed

New Contributors