Bump the minor-patch group across 1 directory with 6 updates by dependabot[bot] · Pull Request #3663 · Kinto/kinto

dependabot · 2026-02-26T08:43:58Z

Bumps the minor-patch group with 6 updates in the / directory:

Package	From	To
redis	`7.2.0`	`7.2.1`
sqlalchemy	`2.0.46`	`2.0.47`
newrelic	`11.4.0`	`11.5.0`
ruff	`0.15.1`	`0.15.2`
granian	`2.7.1`	`2.7.2`
docutils	`0.20.1`	`0.21.2`

Updates redis from 7.2.0 to 7.2.1

Release notes

Sourced from redis's releases.

7.2.1

Changes

🐛 Bug Fixes

Handle connection attributes conditionally for metrics and set connection data on exceptions in cluster error handling (#3964)

⚠️ Deprecations

Removed batch_size and consumer_name attributes from OTel metrics (#3978)

🧰 Maintenance

Fixing error handling of connection buffer purging of closed connections. Enabling troubleshooting logging for maintenance notifications e2e tests. (#3971)

Fix protocol validation: replace finally with else and store parsed int (#3965)

Return copies from _get_free/in_use_connections and fix async _mock (#3967)

Add missing shard channel message types to async PubSub (#3966)

Fix issues with ClusterPipeline connection management (#3804)

fix(pubsub): avoid UnicodeDecodeError on reconnect with binary channel names (#3944)

Hold references to ClusterNode disconnect task (#3826)

remove remaining imports of typing_extensions (#3873)

We'd like to thank all the contributors who worked on this release! @dotlambda @rhoboro @skylarkoo7 @praboud @bysiber @vladvildanov @petyaslavova

Commits

56859cf Updating lib version to 7.2.1
c671fd9 remove remaining imports of typing_extensions (#3873)
e203796 Hold references to ClusterNode disconnect task (#3826)
a21f768 Removed batch_size and consumer_name attributes from OTel metrics (#3978)
2098114 fix(pubsub): avoid UnicodeDecodeError on reconnect with binary channel names ...
f02c66b Fix issues with ClusterPipeline connection management (#3804)
1958065 Add missing shard channel message types to async PubSub (#3966)
abc519d Return copies from _get_free/in_use_connections and fix async _mock (#3967)
bb2b6f3 Fix protocol validation: replace finally with else and store parsed int (#3965)
631c053 Fixing error handling of connection buffer purging of closed connecton. Enabl...
Additional commits viewable in compare view

Updates sqlalchemy from 2.0.46 to 2.0.47

Release notes

Sourced from sqlalchemy's releases.

2.0.47

Released: February 24, 2026

orm

[orm] [bug] Fixed issue when using ORM mappings with Python 3.14's PEP 649 feature that no longer requires "future annotations", where the ORM's introspection of the __init__ method of mapped classes would fail if non-present identifiers in annotations were present. The vendored getfullargspec() method has been amended to use Format.FORWARDREF under Python 3.14 to prevent resolution of names that aren't present.

References: #13104

engine

[engine] [usecase] The connection object returned by _engine.Engine.raw_connection() now supports the context manager protocol, automatically returning the connection to the pool when exiting the context.

References: #13116

postgresql

[postgresql] [bug] Fixed an issue in the PostgreSQL dialect where foreign key constraint reflection would incorrectly swap or fail to capture onupdate and ondelete values when these clauses appeared in a different order than expected in the constraint definition. This issue primarily affected PostgreSQL-compatible databases such as CockroachDB, which may return ON DELETE before ON UPDATE in the constraint definition string. The reflection logic now correctly parses both clauses regardless of their ordering.

References: #13105

[postgresql] [bug] Fixed issue in the engine_insertmanyvalues feature where using PostgreSQL's ON CONFLICT clause with _dml.Insert.returning.sort_by_parameter_order enabled would generate invalid SQL when the insert used an implicit sentinel (server-side autoincrement primary key). The generated SQL would incorrectly declare a sentinel counter column in the imp_sen table alias without providing corresponding values in the VALUES clause, leading to a ProgrammingError indicating column count mismatch. The fix allows batch execution mode when embed_values_counter is active, as the embedded counter provides the ordering capability needed even with upsert behaviors, rather than unnecessarily downgrading to row-at-a-time execution.

... (truncated)

Commits

See full diff in compare view

Updates newrelic from 11.4.0 to 11.5.0

Release notes

Sourced from newrelic's releases.

v11.5.0

Notes

This release of the Python agent adds trace/span support for Hybrid Agent, New Relic's integration with OpenTelemetry. It also adds entity GUIDs to Agent Control health check files, subcomponent attributes to agentic AI instrumentation, support for new Redis client methods, fixes a bug where there may be duplicate ImportHookFinder instances and a bug in OracleDB Cursor.callproc() instrumentation.

Install the agent using easy_install/pip/distribute via the Python Package Index, using conda via the Conda-Forge Package Index, or download it directly from the New Relic download site.

Features

Add Hybrid Agent tracing support

Hybrid Agent is designed to bridge the gap for teams looking to adopt OpenTelemetry standards while maintaining backwards compatibility with their existing New Relic dashboards. Hybrid Agent offers a "best-of-both-worlds" experience by combining New Relic’s deep visibility with OpenTelemetry API compatibility. It provides an observability solution with integrated support for the following OpenTelemetry APIs:

Tracing

Standalone library and native framework instrumentation

Key enhancements like Span Links and Events on Spans are now available, ensuring seamless interoperability in mixed-mode environments.

Introduces a new Trace ID Ratio based sampler

A new Trace ID Ratio based sampler. This sampling algorithm is based off the sampler of the same name from OpenTelemetry, and can be configured to sample a set percentage of transactions.

Add subcomponent attributes to agentic AI instrumentation

Instrumentation for LangChain, MCP, and Strands now includes a subcomponent attribute on spans that represent tool or agent calls. This is used to provide more enhanced entity mapping in the New Relic UI.

Add entity GUID to Agent Control health check files

When the agent is started within an Agent Control environment, a health check file is created at the configured file location for every agent process. This file now includes the GUID of the entity related to the agent when available.

Add instrumentation for new Redis methods

Add instrumentation for the following methods new methods on Redis clients:

hotkeys_get

hotkeys_reset

hotkeys_start

hotkeys_stop

vrange

xcfgset

Bugs

Fix duplicate ImportHookFinder instances

Previously it was possible for duplicates of the import hook finder to be added to sys.meta_path.

Fix incorrect signature on OracleDB Cursor.callproc()

Previously attempting to use keyword arguments with Cursor.callproc() would cause crashes as the argument names were incorrect in our instrumentation. This has been fixed, and the additional argument keyword_parameters is now also supported.

Support statement

... (truncated)

Commits

7cb9b89 Hybrid core tracing rebased (#1646)
1efa4a5 Add subcomponent attributes to agentic AI framework instrumentations (#1666)
3f0d83b Fix OracleDB Mismatched Signature (#1648)
0d90dc8 Update CI Image (#1649)
fa1ccf8 Bump the github_actions group with 3 updates (#1662)
14789b2 Add entity guid to Agent Control health file (#1640)
dad7197 Merge pull request #1663 from newrelic/fix-redis
93257cb Fix redis uninstrumented commands
0474217 Revert "Merge main into develop-v12.0.0" (#1660)
0c58455 Revert "Merge main into develop-v12.0.0"
Additional commits viewable in compare view

Updates ruff from 0.15.1 to 0.15.2

Release notes

Sourced from ruff's releases.

0.15.2

Release Notes

Released on 2026-02-19.

Preview features
Expand the default rule set (#23385)

In preview, Ruff now enables a significantly expanded default rule set of 412 rules, up from the stable default set of 59 rules. The new rules are mostly a superset of the stable defaults, with the exception of these rules, which are removed from the preview defaults:

multiple-imports-on-one-line (E401)

module-import-not-at-top-of-file (E402)

module-import-not-at-top-of-file (E701)

multiple-statements-on-one-line-semicolon (E702)

useless-semicolon (E703)

none-comparison (E711)

true-false-comparison (E712)

not-in-test (E713)

not-is-test (E714)

type-comparison (E721)

lambda-assignment (E731)

ambiguous-variable-name (E741)

ambiguous-class-name (E742)

ambiguous-function-name (E743)

undefined-local-with-import-star (F403)

undefined-local-with-import-star-usage (F405)

undefined-local-with-nested-import-star-usage (F406)

forward-annotation-syntax-error (F722)

If you use preview and prefer the old defaults, you can restore them with configuration like:
# ruff.toml
[lint]
select = ["E4", "E7", "E9", "F"]
pyproject.toml
[tool.ruff.lint]
select = ["E4", "E7", "E9", "F"]
If you do give them a try, feel free to share your feedback in the GitHub discussion!
[flake8-pyi] Also check string annotations (PYI041) (#19023)
Bug fixes

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.2

Released on 2026-02-19.

Preview features
Expand the default rule set (#23385)

In preview, Ruff now enables a significantly expanded default rule set of 412 rules, up from the stable default set of 59 rules. The new rules are mostly a superset of the stable defaults, with the exception of these rules, which are removed from the preview defaults:

multiple-imports-on-one-line (E401)

module-import-not-at-top-of-file (E402)

module-import-not-at-top-of-file (E701)

multiple-statements-on-one-line-semicolon (E702)

useless-semicolon (E703)

none-comparison (E711)

true-false-comparison (E712)

not-in-test (E713)

not-is-test (E714)

type-comparison (E721)

lambda-assignment (E731)

ambiguous-variable-name (E741)

ambiguous-class-name (E742)

ambiguous-function-name (E743)

undefined-local-with-import-star (F403)

undefined-local-with-import-star-usage (F405)

undefined-local-with-nested-import-star-usage (F406)

forward-annotation-syntax-error (F722)

If you use preview and prefer the old defaults, you can restore them with configuration like:
# ruff.toml
[lint]
select = ["E4", "E7", "E9", "F"]
pyproject.toml
[tool.ruff.lint]
select = ["E4", "E7", "E9", "F"]
If you do give them a try, feel free to share your feedback in the GitHub discussion!

... (truncated)

Commits

9d18ee9 Hard code workflow name and cancel-in-progress only for PRs (#23431)
7cc15f0 Bump 0.15.2 (#23430)
d1b5443 Add extension mapping to configuration file options (#23384)
222574a Expand the default rule set (#23385)
1465b5d [flake8-async] Fix in_async_context logic (#23426)
410902f [pyupgrade] Fix handling of typing.{io,re} (UP035) (#23131)
729610a [ty] Fall back to ambiguous for large control flow graphs (#23399)
1425c18 [ty] Add code folding support
97acaae [ty] Fix stack overflow for self-referential TypeOf in annotations (#23407)
1f380c8 [ty] Update tests reveal_type and Never (#23418)
Additional commits viewable in compare view

Updates granian from 2.7.1 to 2.7.2

Release notes

Sourced from granian's releases.

Granian 2.7.2

Patch release

Changes since 2.7.1:

Review ASGI websockets' rejection flow

This should fix an hang issue with Django channels

Fix ASGI websocket scope suprotocols split (#817 by @JaeHyuckSa)

Fix Content-Type header in metrics endpoint (#808 by @IngmarStein)

Bump dependencies

Commits

45d9c75 Bump dependencies
056fd1b fix: Set Content-Type header for metrics endpoint (#808)
5fe8547 fix: split comma-separated WebSocket subprotocols in ASGI scope (#817)
65c9664 Unblock ASGI ws receive on close without accept (#819)
a288cc3 Bump version to 2.7.2
See full diff in compare view

Updates docutils from 0.20.1 to 0.21.2

Commits

See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
docutils	[>= 0.22.dev0, < 0.23]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-patch group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [redis](https://github.com/redis/redis-py) | `7.2.0` | `7.2.1` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.46` | `2.0.47` | | [newrelic](https://github.com/newrelic/newrelic-python-agent) | `11.4.0` | `11.5.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.1` | `0.15.2` | | [granian](https://github.com/emmett-framework/granian) | `2.7.1` | `2.7.2` | | [docutils](https://github.com/rtfd/recommonmark) | `0.20.1` | `0.21.2` | Updates `redis` from 7.2.0 to 7.2.1 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v7.2.0...v7.2.1) Updates `sqlalchemy` from 2.0.46 to 2.0.47 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `newrelic` from 11.4.0 to 11.5.0 - [Release notes](https://github.com/newrelic/newrelic-python-agent/releases) - [Commits](newrelic/newrelic-python-agent@v11.4.0...v11.5.0) Updates `ruff` from 0.15.1 to 0.15.2 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.1...0.15.2) Updates `granian` from 2.7.1 to 2.7.2 - [Release notes](https://github.com/emmett-framework/granian/releases) - [Commits](emmett-framework/granian@v2.7.1...v2.7.2) Updates `docutils` from 0.20.1 to 0.21.2 - [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md) - [Commits](https://github.com/rtfd/recommonmark/commits) --- updated-dependencies: - dependency-name: redis dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: sqlalchemy dependency-version: 2.0.47 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: newrelic dependency-version: 11.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: ruff dependency-version: 0.15.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: granian dependency-version: 2.7.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: docutils dependency-version: 0.21.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Feb 26, 2026

leplatrem approved these changes Feb 26, 2026

View reviewed changes

leplatrem merged commit f3c7dd3 into main Feb 26, 2026
15 checks passed

leplatrem deleted the dependabot/uv/minor-patch-04a999dec9 branch February 26, 2026 08:50

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the minor-patch group across 1 directory with 6 updates#3663

Bump the minor-patch group across 1 directory with 6 updates#3663
leplatrem merged 1 commit intomainfrom
dependabot/uv/minor-patch-04a999dec9

dependabot bot commented on behalf of github Feb 26, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Feb 26, 2026

7.2.1

Changes

🐛 Bug Fixes

⚠️ Deprecations

🧰 Maintenance

2.0.47

orm

engine

postgresql

v11.5.0

Notes

Features

Bugs

Support statement

0.15.2

Release Notes

Preview features

Bug fixes

0.15.2

Preview features

Granian 2.7.2

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant