2026.07.28

What's Changed

• fix: remove redundant direct cryptography pin by @paulschreiber in #2510
• fix: remove unused python-json-logger dependency by @paulschreiber in #2507
• fix: remove unused google-auth-oauthlib dependency by @paulschreiber in #2509
• fix: remove unused typing dependency by @paulschreiber in #2511
• build(deps): bump jsonschema from 4.20.0 to 4.26.0 by @dependabot[bot] in #2534
• build(deps): bump beautifulsoup4 from 4.14.3 to 4.15.0 by @dependabot[bot] in #2535
• build(deps): bump docutils from 0.20.1 to 0.23 by @dependabot[bot] in #2536
• build(deps): bump google-api-python-client from 2.196.0 to 2.198.0 by @dependabot[bot] in #2537
• build(deps): bump django-stubs-ext from 6.0.6 to 6.0.7 by @dependabot[bot] in #2539
• build(deps): bump pycparser from 2.21 to 3.0 by @dependabot[bot] in #2540
• build(deps): bump sniffio from 1.3.0 to 1.3.1 by @dependabot[bot] in #2541
• build(deps): bump wagtail-factories from 4.4.0 to 4.5.0 by @dependabot[bot] in #2542
• build(deps): bump structlog from 23.2.0 to 26.1.0 by @dependabot[bot] in #2251
• build(deps): bump wsproto from 1.2.0 to 1.3.2 by @dependabot[bot] in #2544
• build(deps): bump anyascii from 0.3.2 to 0.3.3 by @dependabot[bot] in #2545
• build(deps): bump markdown-it-py from 3.0.0 to 4.2.0 by @dependabot[bot] in #2543
• build(deps): bump ipython from 8.19.0 to 9.15.0 by @dependabot[bot] in #2549
• build(deps): bump referencing from 0.32.0 to 0.37.0 by @dependabot[bot] in #2548
• build(deps): bump iniconfig from 1.1.1 to 2.3.0 by @dependabot[bot] in #2547
• build(deps): bump django-recaptcha from 3.0.0 to 4.1.0 by @dependabot[bot] in #2293
• fix: replace bleach with nh3 for HTML sanitization by @paulschreiber in #2532
• Add notify jobs to update k8s manifests on image rebuild by @enpaul in #2554
• build(deps): bump charset-normalizer from 3.3.2 to 3.4.9 by @dependabot[bot] in #2556
• build(deps): bump typing-extensions from 4.15.0 to 4.16.0 by @dependabot[bot] in #2559
• build(deps): bump wagtail-honeypot from 1.3.0 to 1.3.1 by @dependabot[bot] in #2557
• build(deps-dev): bump postcss from 8.5.16 to 8.5.23 by @dependabot[bot] in #2560
• build(deps-dev): bump ruff from 0.15.20 to 0.15.22 by @dependabot[bot] in #2555
• build(deps-dev): bump babel-plugin-polyfill-corejs3 from 0.10.4 to 0.10.6 by @dependabot[bot] in #2572
• build(deps): bump proto-plus from 1.28.0 to 1.28.1 by @dependabot[bot] in #2573
• build(deps): bump tqdm from 4.68.4 to 4.69.0 by @dependabot[bot] in #2574
• build(deps): bump pyyaml from 6.0.1 to 6.0.3 by @dependabot[bot] in #2575
• build(deps): bump actions/setup-python from 6.3.0 to 7.0.0 by @dependabot[bot] in #2561
• build(deps): bump trio-websocket from 0.11.1 to 0.12.2 by @dependabot[bot] in #2571
• build(deps-dev): bump chokidar from 3.5.3 to 3.6.0 by @dependabot[bot] in #2570
• build(deps-dev): bump @types/estree from 1.0.8 to 1.0.9 by @dependabot[bot] in #2568
• build(deps-dev): bump @babel/plugin-transform-unicode-property-regex from 7.24.1 to 7.29.7 by @dependabot[bot] in #2569
• build(deps): bump react-fast-compare from 3.2.0 to 3.2.2 by @dependabot[bot] in #2567
• build(deps-dev): bump @humanwhocodes/config-array from 0.11.8 to 0.11.14 by @dependabot[bot] in #2566
• build(deps-dev): bump tsconfig-paths from 3.14.2 to 3.15.0 by @dependabot[bot] in #2565
• build(deps-dev): bump espree from 9.4.1 to 9.6.1 by @dependabot[bot] in #2564
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #2563
• build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.15.21 to 0.15.22 by @dependabot[bot] in #2562
• build(deps-dev): bump chokidar from 3.5.3 to 3.6.0 in /chart_pregenerator by @dependabot[bot] in #2576
• build(deps-dev): bump @babel/plugin-transform-unicode-property-regex from 7.22.5 to 7.29.7 in /chart_pregenerator by @dependabot[bot] in #2577
• build(deps-dev): bump babel-plugin-polyfill-corejs3 from 0.8.3 to 0.8.7 in /chart_pregenerator by @dependabot[bot] in #2578
• build(deps-dev): bump django-debug-toolbar from 4.2.0 to 7.0.0 by @dependabot[bot] in #2579
• build(deps-dev): bump coverage from 7.3.4 to 7.15.2 by @dependabot[bot] in #2582
• build(deps): bump smartypants from 2.0.1 to 2.0.2 by @dependabot[bot] in #2580
• build(deps): bump marshmallow from 3.26.2 to 4.3.0 by @dependabot[bot] in #2243
• build(deps): bump six from 1.16.0 to 1.17.0 by @dependabot[bot] in #2583
• build(deps): bump asttokens from 2.4.1 to 3.0.2 by @dependabot[bot] in #2585
• build(deps): bump attrs from 23.1.0 to 26.1.0 by @dependabot[bot] in #2587
• build(deps): bump pillow-heif from 1.3.0 to 1.4.0 by @dependabot[bot] in #2588
• build(deps): bump drf-spectacular from 0.27.0 to 0.30.0 by @dependabot[bot] in #2589
• build(deps): bump drf-spectacular-sidecar from 2023.12.1 to 2026.7.1 by @dependabot[bot] in #2546
• build(deps): bump trio from 0.24.0 to 0.33.0 by @dependabot[bot] in #2590
• build(deps-dev): bump selenium from 4.16.0 to 4.46.0 by @dependabot[bot] in #2591
• build(deps): bump mrml from 0.2.3 to 0.2.4 by @dependabot[bot] in #2592
• build(deps): bump packaging from 23.2 to 26.2 by @dependabot[bot] in #2593
• build(deps): bump et-xmlfile from 1.1.0 to 2.0.0 by @dependabot[bot] in #2558
• build(deps): bump protobuf from 6.33.6 to 7.35.1 by @dependabot[bot] in #2586
• build(deps): bump draftjs-exporter from 2.1.7 to 5.2.0 by @dependabot[bot] in #2314
• build(deps): bump soupsieve from 2.8.4 to 2.9 by @dependabot[bot] in #2596
• build(deps): bump google-api-core from 2.31.0 to 2.32.0 by @dependabot[bot] in #2594

Full Changelog: 2026.07.22...2026.07.28