chore(deps): bump the dependencies group across 1 directory with 9 updates#11671
Merged
SchrodingersGat merged 6 commits intomasterfrom Apr 8, 2026
Merged
Conversation
…dates Bumps the dependencies group with 9 updates in the /src/backend directory: | Package | From | To | | --- | --- | --- | | [gunicorn](https://github.com/benoitc/gunicorn) | `25.2.0` | `25.3.0` | | [bleach](https://github.com/mozilla/bleach) | `4.1.0` | `6.3.0` | | [boto3](https://github.com/boto/boto3) | `1.42.76` | `1.42.77` | | [botocore](https://github.com/boto/botocore) | `1.42.76` | `1.42.77` | | [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) | `1.73.0` | `1.73.1` | | [importlib-metadata](https://github.com/python/importlib_metadata) | `8.7.1` | `9.0.0` | | [protobuf](https://github.com/protocolbuffers/protobuf) | `6.33.6` | `7.34.1` | | [wrapt](https://github.com/GrahamDumpleton/wrapt) | `1.17.3` | `2.1.2` | | [python-discovery](https://github.com/tox-dev/python-discovery) | `1.2.0` | `1.2.1` | Updates `gunicorn` from 25.2.0 to 25.3.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@25.2.0...25.3.0) Updates `bleach` from 4.1.0 to 6.3.0 - [Changelog](https://github.com/mozilla/bleach/blob/main/CHANGES) - [Commits](mozilla/bleach@v4.1.0...v6.3.0) Updates `boto3` from 1.42.76 to 1.42.77 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.42.76...1.42.77) Updates `botocore` from 1.42.76 to 1.42.77 - [Commits](boto/botocore@1.42.76...1.42.77) Updates `googleapis-common-protos` from 1.73.0 to 1.73.1 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.73.0...googleapis-common-protos-v1.73.1) Updates `importlib-metadata` from 8.7.1 to 9.0.0 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v8.7.1...v9.0.0) Updates `protobuf` from 6.33.6 to 7.34.1 - [Release notes](https://github.com/protocolbuffers/protobuf/releases) - [Commits](https://github.com/protocolbuffers/protobuf/commits) Updates `wrapt` from 1.17.3 to 2.1.2 - [Release notes](https://github.com/GrahamDumpleton/wrapt/releases) - [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst) - [Commits](GrahamDumpleton/wrapt@1.17.3...2.1.2) Updates `python-discovery` from 1.2.0 to 1.2.1 - [Release notes](https://github.com/tox-dev/python-discovery/releases) - [Commits](tox-dev/python-discovery@1.2.0...1.2.1) --- updated-dependencies: - dependency-name: gunicorn dependency-version: 25.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: bleach dependency-version: 6.3.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: boto3 dependency-version: 1.42.77 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: botocore dependency-version: 1.42.77 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: googleapis-common-protos dependency-version: 1.73.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: importlib-metadata dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: protobuf dependency-version: 7.34.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: wrapt dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: python-discovery dependency-version: 1.2.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
✅ Deploy Preview for inventree-web-pui-preview canceled.
|
matmair
approved these changes
Apr 7, 2026
…dependabot/pip/src/backend/dependencies-1a4e795e78
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #11671 +/- ##
=======================================
Coverage 91.45% 91.45%
=======================================
Files 964 964
Lines 49985 49985
=======================================
Hits 45715 45715
Misses 4270 4270
Flags with carried forward coverage won't be shown. Click here to find out more.
🚀 New features to boost your workflow:
|
Member
|
@SchrodingersGat ready for review and merge |
SchrodingersGat
approved these changes
Apr 8, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 9 updates in the /src/backend directory:
25.2.025.3.04.1.06.3.01.42.761.42.771.42.761.42.771.73.01.73.18.7.19.0.06.33.67.34.11.17.32.1.21.2.01.2.1Updates
gunicornfrom 25.2.0 to 25.3.0Release notes
Sourced from gunicorn's releases.
Commits
9bce72cUpdate changelog with missing 25.3.0 changes2a15fdbFix pylint isinstance-second-argument-not-valid-type warning8d08aaaFix --limit-request-line 0 to mean unlimitedd40a374Fix pytest-asyncio configuration and treq_asgi hex escapesda8bd48Remove unused AsyncRequest classb00f125Integrate gunicorn_h1c 0.6.3 with InvalidChunkExtension supportbdb2ebdReject chunk extensions with bare CR bytes (RFC 9112)7057fc9Fix http_protocols documentation to use string syntaxd43acb8Update to gunicorn_h1c >= 0.6.2 for asgi_headers supportcbd27e8Merge pull request #3559 from benleembruggen/fix/http2-asgi-body-duplicationUpdates
bleachfrom 4.1.0 to 6.3.0Changelog
Sourced from bleach's changelog.
... (truncated)
Commits
5546d5dchore: prep for 6.3.0 release88df3ffchore: fix readthedocsd8b2fb4fix: fix wbr handling (#488)55e48cechore: add support for Python 3.14 (#758)a4d6cddchore: drop support for Python 3.9 (#756)172d92fBump actions/setup-python from 5.6.0 to 6.0.0df88612Bump actions/checkout from 4.2.2 to 5.0.0cbcf6b1Bump actions/cache from 4.2.3 to 4.3.0d9aa7efSwitch from dependabot reviewers to CODEOWNERS06f0f76Update setuptools, wheel, and twine for devsUpdates
boto3from 1.42.76 to 1.42.77Commits
48369eaMerge branch 'release-1.42.77'4398c8eBumping version to 1.42.777c449e2Add changelog entries from botocorea5ad9c3Merge branch 'release-1.42.76' into developUpdates
botocorefrom 1.42.76 to 1.42.77Commits
a42e6cfMerge branch 'release-1.42.77'7906a34Bumping version to 1.42.777f9c3cdUpdate endpoints model1db4cefUpdate to latest models85f623cMerge branch 'release-1.42.76' into developUpdates
googleapis-common-protosfrom 1.73.0 to 1.73.1Commits
7a05a34chore: create a release (#16191)0f19d85chore: fix missing heading in changelog (#16189)a16755dchore: librarian onboard pull request: 20260323T111101Z (#16141)9694ce9chore: librarian onboard pull request: 20260323T114549Z (#16143)c4a35cfchore: librarian onboard pull request: 20260323T132735Z (#16146)640a86bchore: librarian update image pull request: 20260325T221325Z (#16175)341284cchore(deps): bump pyasn1 from 0.6.1 to 0.6.3 in /packages/sqlalchemy-spanner ...ec9262cfix: Allow Protobuf 7.x, require Python 3.9 (#16102)cf50ceafeat(firestore): literals pipeline stage (#16028)4b400fachore: librarian generate pull request: 20260325T142358Z (#16166)Updates
importlib-metadatafrom 8.7.1 to 9.0.0Changelog
Sourced from importlib-metadata's changelog.
Commits
a9f883fFinalize9b0dfdfRaise an exception when no metadata file is found (#532)0f2229cMerge branch 'main' into feature/no-metadata-exception2f4088eRemove news fragments about internal details.0ac2720Add news fragment.a5c2154Finalizee66e226Drop support for EOL Python 3.9 (#530)6027933Add news fragment.b89388aImport os_helper directly.2dcb761Add uniform exclusions for test.support.Updates
protobuffrom 6.33.6 to 7.34.1Release notes
Sourced from protobuf's releases.
... (truncated)
Commits
Updates
wraptfrom 1.17.3 to 2.1.2Release notes
Sourced from wrapt's releases.
Changelog
Sourced from wrapt's changelog.
... (truncated)
Commits
1381ae8Merge branch 'release/2.1.2'26ab4fdUpdate ready for 2.1.2 release.fbdbef4Handle pypy which raises different exception type.87baf75Add tests for deletion of qualname and annotations.b48debfDecided only needed a patch level update,06c698fUpdate release notes for annotation deletion bug.6e6ed87Merge pull request #313 from bysiber/fix/delattr-annotations4fc2c23Add test to call proxy after weakref cleared.9e53a71Add change notes for ReferenceError fix.2cda4e6Merge pull request #312 from bysiber/fix/weakfunctionproxy-expired-instanceUpdates
python-discoveryfrom 1.2.0 to 1.2.1Release notes
Sourced from python-discovery's releases.
Commits
38eac12expose KNOWN_ARCHITECTURES as public API (#56)eabb812🔒 ci(workflows): add zizmor security auditing (#55)b4cbd35[pre-commit.ci] pre-commit autoupdate (#54)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions