8000 Bump the dependencies group across 1 directory with 11 updates by dependabot[bot] · Pull Request #827 · gemini-hlsw/goats · GitHub
[go: up one dir, main page]
Skip to content

Bump the dependencies group across 1 directory with 11 updates - #827

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-bf4fc02c73
Open

Bump the dependencies group across 1 directory with 11 updates#827
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/dependencies-bf4fc02c73

Conversation

@dependabot
@dependabot dependabot Bot commented on behalf of github Nov 6, 2026
Copy link
Copy Markdown
Contributor

Updates the requirements on apscheduler, channels[daphne], click, copier, django, djangorestframework, dramatiq[redis,watch], gpp-client, numpydoc, typer and tomtoolkit to permit the latest version.
Updates apscheduler from 3.11.2 to 3.11.3

Release notes

Sourced from apscheduler's releases.

3.11.3

  • Fixed sub-minute interval jobs stalling for the duration of a DST spring-forward gap when the scheduler was configured with a ZoneInfo time zone, caused by the wakeup delay being computed from the naive wall-clock difference instead of the actual UTC difference (#1103)
  • Fixed imported jobs missing their scheduler and job store links (#1119)
Commits
  • 4308ec9 Added the release version
  • ff68780 Added a note about weekday numbers in CronTrigger.from_crontab()
  • 36936e9 Updated actions
  • c0ff7e4 Fixed Pyside6 tests failing on Python 3.9 and 3.8
  • 1b782c9 Fixed fixture coreapp not found
  • dc3dde4 Test against PySide6 on all Python versions
  • 18a6f6b Fixed imported jobs missing their scheduler and job store links
  • 1693db4 Fix interval jobs stalling across DST spring-forward with ZoneInfo (#1114)
  • 0636bf4 Added Python 3.14 to the test matrix
  • 3eb3de8 Fixed bad use of pytest.raises()
  • Additional commits viewable in compare view

Updates channels[daphne] to 4.3.2

Changelog

Sourced from channels[daphne]'s changelog.

4.3.2 (2025-11-20)

  • Confirmed support for Django 6.0.

  • Confirmed support for Python 3.14.

  • Added types extra for types-channels stubs. See installation docs.

4.3.1 (2025-08-01)

  • Fixed testing live server setup when test DB name was not set.

4.3.0 (2025-07-28)

  • Updated asgiref dependency to v3.9+.

  • Dropped support for EOL Python and Django versions. Python 3.9 is now the minimum supported version.

  • Fixed compatibility of ChannelsLiveServerTestCase with Django 5.2.

  • Fixed DB setup for spawned testing subprocess, typically on Windows and macOS.

See the Version 4.3.0 release notes <https://channels.readthedocs.io/en/latest/releases/4.3.0.html>_ for more details.

4.2.2 (2025-03-30)

  • Added fallbacks for old valid channel/group name checks.

    These were renamed in 4.2.1 but (as internal methods) without deprecation. They are restored (and deprecated) here to allow updating channel layers using them.

4.2.1 (2025-03-29)

Channels 4.2.1 primarily updates the metadata for supported Python and Django versions.

  • Added official support for Django 5.2 LTS.

  • Added official support for Python 3.13.

  • Added a warning for the length of the channel layer group names.

... (truncated)

Commits
  • 15333cd Version 4.3.2
  • 10be531 Add explicit dj60 to test matrix.
  • f726845 Update .github/workflows/tests.yml
  • 0c1e533 tox.ini: envlist py{310,311,312,313,314}-dj52
  • b2ad89f GitHub Actions: Test on Python 3.14 release candidate 2
  • a135228 Bump actions/checkout from 4 to 5 (#2180)
  • 7dfcc7b Add types extra and installation docs for type checking support.
  • 95589a7 Version 4.3.1.
  • 5038d69 Fix live server setup when test DB name not set.
  • f17a8fe Bump browser-actions/setup-chrome from 1 to 2 (#2175)
  • Additional commits viewable in compare view

Updates click from 8.4.1 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](https://github.com/pallets/click/discussions/3527). #3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677
  • The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678
  • unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681
  • Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653
  • Fix test failures when using pytest >= 9.1. {pr}3656
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](https://github.com/pallets/click/discussions/3527). {pr}3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677
  • The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678
  • unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681
  • Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641
  • {func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695
  • The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits
  • 8b19813 Release version 8.5.0
  • 2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
  • 131c86a Add FAQ entry about UnicodeEncodeError on Windows
  • e1fd594 Add support of pathlib.Path to edit (#3781)
  • a1d8785 Add support of pathlib.Path to edit
  • 2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
  • a6256bf Forwards all user's parameters set in PAGER
  • 61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
  • 9835b0f Resolve the pager command once, in _pager_contextmanager
  • f36d58b Refactor pager stream handling (#3767)
  • Additional commits viewable in compare view

Updates copier from 9.15.2 to 9.19.1

Release notes

Sourced from copier's releases.

v9.19.1 (2026-10-13)

Fix

  • vcs: restore support for Git older than 2.43.1

v9.19.0 (2026-10-12)

Feat

  • add support for opt-in questions via the ask setting (#2849)

Fix

  • updating: keep symlink targets when a directory containing a symlink is renamed

Security

  • vcs: prevent argument injection via git subprocess calls

v9.18.2 (2026-09-07)

Fix

  • allow overwriting destination symlinks when preserve_symlinks: false
  • cache: resolve submodules from the current checkout's .gitmodules (#2767)

Security

  • prevent trust bypass via ambiguous URL characters

    To prevent URL confusion attacks, trusted prefix matching is now restricted to repository URL paths containing only RFC 3986 §2.3 "unreserved" characters (letters, digits, -, ., _, ~) and /. URL paths containing other characters now require an exact, verbatim match.

v9.18.1 (2026- 8000 09-01)

Fix

  • disambiguate Windows paths from SCP URLs in trust check

v9.18.0 (2026-09-01)

Feat

  • exclude: add support for multiple exclude patterns in a single entry (#2804)

Fix

  • preserve the original error when cleanup fails (#2824)

Security

  • prevent trust bypass via encoded URL traversal for alias and SCP-style URLs

... (truncated)

Changelog

Sourced from copier's changelog.

v9.19.1 (2026-10-13)

Fix

  • vcs: restore support for Git older than 2.43.1

v9.19.0 (2026-10-12)

Feat

  • add support for opt-in questions via the ask setting (#2849)

Fix

  • updating: keep symlink targets when a directory containing a symlink is renamed

Security

  • vcs: prevent argument injection via git subprocess calls

v9.18.2 (2026-09-07)

Fix

  • allow overwriting destination symlinks when preserve_symlinks: false
  • cache: resolve submodules from the current checkout's .gitmodules (#2767)

Security

  • prevent trust bypass via ambiguous URL characters

    To prevent URL confusion attacks, trusted prefix matching is now restricted to repository URL paths containing only RFC 3986 §2.3 "unreserved" characters (letters, digits, -, ., _, ~) and /. URL paths containing other characters now require an exact, verbatim match.

v9.18.1 (2026-09-01)

Fix

  • disambiguate Windows paths from SCP URLs in trust check

v9.18.0 (2026-09-01)

Feat

  • exclude: add support for multiple exclude patterns in a single entry (#2804)

... (truncated)

Commits
  • 5d95bfa bump: version 9.19.0 → 9.19.1
  • 920813a fix(vcs): restore support for Git older than 2.43.1
  • 10d5140 bump: version 9.18.2 → 9.19.0
  • 6ca1e9d fix(vcs): prevent argument injection via git subprocess calls
  • 04a8619 build(deps): update dependency platformdirs to v4.12.4
  • 8109685 build(deps): update dependency commitizen to v4.19.2
  • ba6ef49 build(deps): update dependency inline-snapshot to v0.36.0
  • 0dd8d68 chore(docs): fix admonition title syntax
  • 2920219 build(deps): lock file maintenance
  • b6acf96 build(deps): update dependency platformdirs to v4.12.3
  • Additional commits viewable in compare view

Updates django from 5.2.18 to 5.2.19

Commits

Updates djangorestframework from 3.18.2 to 3.18.3

Release notes

Sourced from djangorestframework's releases.

3.18.3

What's Changed

Bug fixes

Full Changelog: encode/django-rest-framework@3.18.2...3.18.3

Commits

Updates dramatiq[redis,watch] to 2.2.1

Release notes

Sourced from dramatiq[redis,watch]'s releases.

v2.2.1

See the documentation changelog for more information about the release.

Added

Fixed

Project Maintenance

Full Changelog: Bogdanp/dramatiq@v2.2.0...v2.2.1

Commits
  • 3ccb356 Version v2.2.1 (#892)
  • 848b35f Reduce flakiness of test by reducing worker/consumer timeouts in test (#886)
  • c2b8154 Merge pull request #885 from LincolnPuzey/fix_187
  • 6ede8fe Catch ConnectionWrongStateError when adding final connection callback fails
  • 7d65704 Merge pull request #878 from LincolnPuzey/fix_asyncio_exc_ref_cycle
  • b0e96f9 Bump pypa/gh-action-pypi-publish in the github-actions-updates group (#884)
  • 288dc26 Bump the github-actions-updates group with 3 updates (#880)
  • 5ed4468 Asyncio middleware: Clear reference to future so that Exceptions are not caug...
  • 2eabfaf Add test to check Exceptions raised from regular actors are not caught in ref...
  • 294a88b Add test to check Exceptions raised from async actors are not caught in refer...
  • Additional commits viewable in compare view

Updates gpp-client from 26.10.6 to 26.10.8

Release notes

Sourced from gpp-client's releases.

v26.10.8

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.10.7...v26.10.8

v26.10.8.dev2

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.10.8.dev1...v26.10.8.dev2

v26.10.8.dev1

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.10.7...v26.10.8.dev1

v26.10.7

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.10.6...v26.10.7

v26.10.7.dev1

What's Changed

Full Changelog: gemini-hlsw/gpp-client@v26.10.6...v26.10.7.dev1

Commits

Updates numpydoc from 1.10.0 to 1.11.0

Commits
  • 9c52969 Prep for release (#707)
  • d33e5fe FIX: resolve attribute cross-links in the class scope first (#706)
  • c127da1 Bump the actions group with 2 updates (#703)
  • c3b2a68 Avoid deprecated Sphinx autodoc options mapping (#701)
  • cc88d1e fix: correct typo in test (#702)
  • 9905ea9 FIX: don't evaluate annotations when collecting signature parameters (Python ...
  • d60e24d Bump actions/checkout from 6 to 7 in the actions group (#698)
  • 47b18be [pre-commit.ci] pre-commit autoupdate (#699)
  • 8d85154 Bump version
  • 37219ab Designate 1.11.0rc0 release
  • Additional commits viewable in compare view

Updates typer from 0.26.7 to 0.27.3

Release notes

Sourced from typer's releases.

0.27.3

Fixes

  • 🐛 Escape terminal control characters in error messages. PR #1972 by @​tiangolo.

Internal

0.27.2

Refactors

  • ♻️ Create exceptions module and TyperException base class. PR #1942 by @​svlandeg.

Docs

  • 🐛 Fix showing fast button as external link in animated terminals in docs. PR #1912 by @​phalberg.

Internal

0.27.1

Features

  • ✨ Make epilog formatting consistent with other parts of the help string. PR #1405 by @​svlandeg.

... (truncated)

Changelog

Sourced from typer's changelog.

0.27.3 (2026-10-06)

Fixes

  • 🐛 Escape terminal control characters in error messages. PR #1972 by @​tiangolo.

Internal

0.27.2 (2026-08-28)

Refactors

  • ♻️ Create exceptions module and TyperException base class. PR #1942 by @​svlandeg.

Docs

  • 🐛 Fix showing fast button as external link in animated terminals in docs. PR #1912 by @​phalberg.

Internal

0.27.1 (2026-08-03)

Features

... (truncated)

Commits

Updates tomtoolkit from 2.32.2 to 3.1.1

Release notes

Sourced from tomtoolkit's releases.

tomtoolkit 3.1.1

What's Changed

Full Changelog: TOMToolkit/tom_base@3.1.0...3.1.1

tomtoolkit 3.1.0

NOTE:

This release adds authentication and registration deprecating the tom_registration app. For instructions on how to update your tom_registration configuration to the new method, see the Upgrade Docs. To learn more about Authentication and how to set up MFA see the Authentication Docs.

What's Changed

Full Changelog: TOMToolkit/tom_base@3.0.1...3.1.0

tomtoolkit 3.0.1

What's Changed

@dependabot
Bump the dependencies group across 1 directory with 11 updates
62c903c 
Updates the requirements on [apscheduler](https://github.com/agronholm/apscheduler), [channels[daphne]](https://github.com/django/channels), [click](https://github.com/pallets/click), [copier](https://github.com/copier-org/copier), [django](https://github.com/django/django), [djangorestframework](https://github.com/encode/django-rest-framework), [dramatiq[redis,watch]](https://github.com/Bogdanp/dramatiq), [gpp-client](https://github.com/gemini-hlsw/gpp-client), [numpydoc](https://github.com/numpy/numpydoc), [typer](https://github.com/fastapi/typer) and [tomtoolkit](https://github.com/TOMToolkit/tom_base) to permit the latest version.

Updates `apscheduler` from 3.11.2 to 3.11.3
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.2...3.11.3)

Updates `channels[daphne]` to 4.3.2
- [Changelog](https://github.com/django/channels/blob/main/CHANGELOG.txt)
- [Commits](django/channels@4.0.0...4.3.2)

Updates `click` from 8.4.1 to 8.5.0
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.1...8.5.0)

Updates `copier` from 9.15.2 to 9.19.1
- [Release notes](https://github.com/copier-org/copier/releases)
- [Changelog](https://github.com/copier-org/copier/blob/master/CHANGELOG.md)
- [Commits](copier-org/copier@v9.15.2...v9.19.1)

Updates `django` from 5.2.18 to 5.2.19
- [Commits](django/django@5.2.18...5.2.19)

Updates `djangorestframework` from 3.18.2 to 3.18.3
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.18.2...3.18.3)

Updates `dramatiq[redis,watch]` to 2.2.1
- [Release notes](https://github.com/Bogdanp/dramatiq/releases)
- [Commits](Bogdanp/dramatiq@v1.18.0...v2.2.1)

Updates `gpp-client` from 26.10.6 to 26.10.8
- [Release notes](https://github.com/gemini-hlsw/gpp-client/releases)
- [Commits](gemini-hlsw/gpp-client@v26.10.6...v26.10.8)

Updates `numpydoc` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/numpy/numpydoc/releases)
- [Changelog](https://github.com/numpy/numpydoc/blob/main/RELEASE.rst)
- [Commits](numpy/numpydoc@v1.10.0...v1.11.0)

Updates `typer` from 0.26.7 to 0.27.3
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.26.7...0.27.3)

Updates `tomtoolkit` from 2.32.2 to 3.1.1
- [Release notes](https://github.com/TOMToolkit/tom_base/releases)
- [Commits](TOMToolkit/tom_base@2.32.2...3.1.1)

---
updated-dependencies:
- dependency-name: apscheduler
  dependency-version: 3.11.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: channels[daphne]
  dependency-version: 4.3.2
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: click
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: copier
  dependency-version: 9.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: django
  dependency-version: 5.2.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: djangorestframework
  dependency-version: 3.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: dramatiq[redis,watch]
  dependency-version: 2.2.1
  dependency-type: direct:production
  dependency-group: dependencies
- dependency-name: gpp-client
  dependency-version: 26.10.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: numpydoc
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: typer
  dependency-version: 0.27.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: tomtoolkit
  dependency-version: 3.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 6, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants

0