pypi · miketheman · Sep 12, 2025 · Sep 11, 2025 · Sep 11, 2025 · Sep 12, 2025
@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+      uses: github/codeql-action/init@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+      uses: github/codeql-action/autobuild@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+      uses: github/codeql-action/analyze@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
       with:
         category: "/language:${{matrix.language}}"
@@ -28,7 +28,7 @@ jobs:
       - name: Run zizmor
         run: pipx run zizmor --format sarif . > results.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@df559355d593797519d70b90fc8edd5db049e7a2 # v3.29.5
+        uses: github/codeql-action/upload-sarif@192325c86100d080feab897ff886c34abd4c83a3 # v3.29.5
         with:
           # Path to SARIF file relative to the root of the repository
           sarif_file: results.sarif

@@ -1,2 +1,2 @@
 gunicorn==23.0.0
-ddtrace==3.12.4
+ddtrace==3.14.0
@@ -8,68 +8,68 @@ bytecode==0.17.0 \
     --hash=sha256:0c37efa5bd158b1b873f530cceea2c645611d55bd2dc2a4758b09f185749b6fd \
     --hash=sha256:64fb10cde1db7ef5cc39bd414ecebd54ba3b40e1c4cf8121ca5e72f170916ff8
     # via ddtrace
-ddtrace==3.12.4 \
-    --hash=sha256:018d19e2a1e7585df65d938ae51c385d673e8001b66827a47e499ade3b227ad2 \
-    --hash=sha256:0c1d3f7f93146653f8ed06d8cd54030b2c902ceca6de55f6df7f40d23037181e \
-    --hash=sha256:0de9563bad27007fd64059e3b5bb3a791184e39619fdb096044e68a454b4427b \
-    --hash=sha256:0f5ab24c82fc7532386b02530f90fed2964718cea296adf6d35fc31bd30d301d \
-    --hash=sha256:18dfe9a1a02bfa4ef4f614122135509f454abeff625039b764bc461462ba0923 \
-    --hash=sha256:196f114a70b75320876f6861c10435c6d4ea50e0f406328b0862a021c344d002 \
-    --hash=sha256:1b3be9452bc76f730203b86272f8312c7e195b3125f964900df3f41c39ec0c94 \
-    --hash=sha256:1e8cc90fdcd7f021d06383b88c0e40726706c06088dddd528e31cf3c65a9fea9 \
-    --hash=sha256:222dc483f22a065795f473cad6fc6e798ecf9da9f4fc99ca87f1ba70f34d21b1 \
-    --hash=sha256:2ebae69206957837341cd94bbe78e5242395f7571455dfe911b56ea2f7404ada \
-    --hash=sha256:2edf755f4bfd823ce8b560c233cb17137ef79d097bc1ade7914f684b39011bcb \
-    --hash=sha256:30bd9e57923a99d5b4e6562976e9f7307d685caff1544b3d2f7438e6ef8e87e8 \
-    --hash=sha256:3936243dc989b8e8e3bb004262abe68a1cc3e0b9356671c01233b84d2c837903 \
-    --hash=sha256:3bf18fd5898940fb7f236b4c9796f0ee517eb755fd0c17965d3a0342f865ee5a \
-    --hash=sha256:4200e8b057b29ce3ba0889a9d423e4d105b0ba35d4bd58ba2670763018909623 \
-    --hash=sha256:42d46f17baaa5040e4f438544603033af8eeec32067c3712a9e620392d75f484 \
-    --hash=sha256:46de7dd48256d8e347f2ab436644bd8946d3605caedb150eb46327a9f5b005b6 \
-    --hash=sha256:4d5c9ddacecb0072292360813b453129998ca293e13c542fa51771c7734ef03a \
-    --hash=sha256:5845d7c2ed46b44e02bd5d36ca7f8e80a4e942683473c867393b9fd4553f9d64 \
-    --hash=sha256:585b7b26f03c64390c800e180304639b4226c34c533f16bc6cd9c328ee4f727a \
-    --hash=sha256:62a48fc36308919afb1fae22a268a96cff3448f1feb860db97d130498ddfa428 \
-    --hash=sha256:66c007170698e3d12638d03e80f02e93c3bb3e55e96a7f5517e638056562ec1a \
-    --hash=sha256:6b5b150e9d362f7242159dd5a5a7107f1be091282c0ee69301fb7ede60f28d3c \
-    --hash=sha256:6dad7ca193810beb931e81b7430dd074a53bf8f8bd5bdc19acd198d460b2438a \
-    --hash=sha256:734d782d9f64de378f632516554b9da0dfbf54cf1bb7be4bb1085165e7c052ad \
-    --hash=sha256:751ce0410405113286bd558fd402f8a58f5b455cee4deb467ae9ae87e5713547 \
-    --hash=sha256:77de49365f55033d7e14b544f92d0cae71969b78c4ab8642c3340124e0200739 \
-    --hash=sha256:7d6117fabcd98d3a696d1f80314c9b9e4325b362b31714551efd729a02152ff1 \
-    --hash=sha256:7fc1449d511e04e8b2596eee6d1ad2d3420dff23f6dfd8a899c5e3e03dfe8ba5 \
-    --hash=sha256:80e0acbbe85365f113bf6e57f77a82f0e0612a7a4cb57f16e9e184748a2bc478 \
-    --hash=sha256:87fbd5126f8339bcb508a52455f58b0c92870a1c3748849a4d6543198b5f8752 \
-    --hash=sha256:8ff1c70da37c05a29f0be091b0fdc6bb1d91d448f56861c51df614649441070c \
-    --hash=sha256:9de7aa6b6ea3d41f8f20c5e00dd85b2f2b3bb1591f3b7deab5d4c527620c3cb3 \
-    --hash=sha256:9f639f70f1689ec1a1049cd64132491ee09bcfe7609d73f8c220e38261611045 \
-    --hash=sha256:9fd79c44ecffb36ac5b3168f0f196778ed0dd538beb07961ce10e06b8045af35 \
-    --hash=sha256:a08cd25234358a2427494d4059ee12afc83e083bad65f2bd62417fd935caa737 \
-    --hash=sha256:a4f2dabbc95e5c6bf4c43eb141e94021789c81a929588f4000f876f89882c124 \
-    --hash=sha256:aa0606a07e7d05881f2ef1172f4175733ae3006bfc3c7cfd58b82ea3ed75c914 \
-    --hash=sha256:b331bc0c3000cea1fd70febcf004b5a617c63b9050094f08100891a23638986d \
-    --hash=sha256:b8f99761f946b2b7cc2ea4cba821a7a94d05a9eb8cd8a3feabdb49eeacc18bb9 \
-    --hash=sha256:c422977fc4f6e9ba7d4eef9b7e6ce00f8b81c68b034682c6a63eb5c9670e37d8 \
-    --hash=sha256:c4f66c48eca7d6759766fcaf24ac3a65e712e62ae7b1f521a7da2b8d7f101849 \
-    --hash=sha256:d0b3ec8228950e7ff68c39537630cd12880656d96461ef021d6484b2df8dba84 \
-    --hash=sha256:d0b694838e6c7ea2da6de7ccd7b866ec439c49fa40b68ac46f657163cb571d93 \
-    --hash=sha256:d0c5b84d066ca3d60da9636df526382416dae4288f66fcdaca7a2e765ca2f0bd \
-    --hash=sha256:dd0ac6ba50d36689bf0eeadc88ce91b60bc863036f3dea90dd5656f39bce3ac4 \
-    --hash=sha256:e55b911d5b9f1bd73731870962809f9089677f4d3736d52587b4ba76eee56962 \
-    --hash=sha256:e78957120c64bd56ce5592bc10587d7c0d1ca68f21f5b46f6a18dafbc43ad234 \
-    --hash=sha256:e89a17cdb4b5442b97a219e8522b9c665cf7a5116f7e97049dd145f837bad5b1 \
-    --hash=sha256:ebde5af8c5d98f435d7dec960c97151142a4b302e94c20da79ed58fe8a08052e \
-    --hash=sha256:ed76d10787fc288ea94808ce601df243fc3953c7142baefac446015bed799790 \
-    --hash=sha256:eda3b6ebd275f7f7272f45f4e8ee0e0720c1e217c80140270f8c5e415e11133e \
-    --hash=sha256:efde4b33502f3897993a564ee56d0ea30a65d658d616d16c5ef23c850d0e3417 \
-    --hash=sha256:fad78414731b242e86016a124299f2f41575ccf58444edca777b425dbd9faf0c \
-    --hash=sha256:fbe90ff2c914c753116807ddffde9065ecbf9944bdc4932862c3f5835485004d \
-    --hash=sha256:fbf2543856b4ed5a1d6ac59c82f8c76cef5f4ef65361d59f60ce01db92a4c8d1 \
-    --hash=sha256:fd804c06d62926cc18a354987f7d5c1fecd1da30983041d3f98bc402d9d23713 \
-    --hash=sha256:fe03b8f513513e28c35bc792cd7ef0602b21cbcfe71d17a2dd962aee23e980d9 \
-    --hash=sha256:fe644904b44d39a93eb40fb033aef26a03e4096d135ee844b71ed49d1bd647ad \
-    --hash=sha256:fe967af58f2e0033caa977c512a4bfb7af3c6f5ad57e9bdef9241609a4d8a99b \
-    --hash=sha256:ff1812b1d7e8344088a978f1d4f621257fe1ad5d8efc07317a3c90c280e5bdc4
+ddtrace==3.14.0 \
+    --hash=sha256:036b5686a098f9469aba1dd3855c9da8593956f1ca87c0047bcd69812b7f90ff \
+    --hash=sha256:063285fea44b7611d154356f6b857f36654c05ede6160b76399a76b3517c8d7a \
+    --hash=sha256:0c792b2257671e87e1abb69114ad7714c814871b74fc31b908570bb54f7784e3 \
+    --hash=sha256:1419c8e2575010b9f936ed4004396a71f9d5f0234b51cee2852672e1d05cd243 \
+    --hash=sha256:17f1a7327eab36b64144655a584572fe284e3b776c1260791a9e1a20bc408876 \
+    --hash=sha256:18958455d609bfad0daa72758f9b78e3a5737ee8bb9295a28cf96caa10cf4526 \
+    --hash=sha256:18d1c28a1a3e8d58774d7f38ee37ed90a93aad18401b5e5f33f7f5650d40df5c \
+    --hash=sha256:20b027db28d0c721da4ef030b84d1a0dc124827ff8482d1922bf7f0a5bac1cab \
+    --hash=sha256:2534725de2168bfd10762b7125b08cfaf9135e786a64d565ed055120802298c8 \
+    --hash=sha256:25a87364178c0b60103961d43c6c21959d71f59e1e7a154b75c09e8dbeab7934 \
+    --hash=sha256:2b3a848ca3277ce8ed0a458be561d97bd5d60d0c94351e849b48bc56325e8039 \
+    --hash=sha256:2c7ec46bc794c4db7f36c6551f76a159936c564aee8b439fa8925ed0f93f2560 \
+    --hash=sha256:2cd74d375893c7280248809f8deff5b70894859d22c5e83ce96eccc0bd45409f \
+    --hash=sha256:33c79f10da79e28b6280efba6de6d63cc3924779202f210941ab8e25ef7d3ebe \
+    --hash=sha256:3570417c2844495e7b778b79d320f77bddccd49a07b157b08a1eeac7220f452b \
+    --hash=sha256:3699c75fd1cc3ce305355712008618a9c4c714f859cfcdb44bd9ff8324968b47 \
+    --hash=sha256:37203d26690eef66ec85666bbeaa088f08ff71696a8b96efaf81b8589f5e9d75 \
+    --hash=sha256:39aee9c716ae1a24ae165943ec85435409aa8ece7804bb4d54e7442e5db839a1 \
+    --hash=sha256:3be97f46ebd52ee1bd781c103835d78817bfd696574a8b35942b56b45bfdfbe1 \
+    --hash=sha256:3c5a315f92f70fc8aff7b9b29c9a50160c945285e4357cc45506bac86736d6c0 \
+    --hash=sha256:4419b6605cbcc114e92afb25ad147e0b25b42adc45d18fd62e3c5b68de57e368 \
+    --hash=sha256:44af4ef4e617f57c1650b9c0468f5fa19f367d88ee8d1d6a5fc89c30960a000f \
+    --hash=sha256:4ad846bcff7a5358f8be4acaeed55969a80897729035c6628ddedf1b63ccb012 \
+    --hash=sha256:4d59becf7a85d8436233c20b7dda972beed7ad6fe46069e72816838ca9e7eaca \
+    --hash=sha256:4e4d0967d6bbf7e3a719916b34473e262875fca8cb8a4453ff01154dfe4b369d \
+    --hash=sha256:52f274588f0378d82e29b70ac7e5a22ff0115272b8244219b32847ec626a7a8d \
+    --hash=sha256:58a86d71628071fc18df00e05baff43994c82781c0d144b4398327439c4cdcfd \
+    --hash=sha256:58a8e431c73794f3be4618878e2b3ebbd690b2141ebb01c1a49d6cfbd7248ca2 \
+    --hash=sha256:5f095b410802d8e2fbffbb7e325ab6f5f2402035f4d19b29883559b79dd23509 \
+    --hash=sha256:61ee470f654fb77c8c35346fa7503f5011a9a72b0a9f640d4348808eaeb74f49 \
+    --hash=sha256:6f2dbb83cd5e06fde562e1f43b61033131dcdd29e3ee57a36a873f4129d33d7b \
+    --hash=sha256:70bdc45312948ddeb1b7510724adb6b5de8d52532d787a287a4813789a5e6b33 \
+    --hash=sha256:70d0a9592263d21d4df4c36e86eda679469cb3211585deb722453f8ae07f4ae5 \
+    --hash=sha256:725e93dfd679fe8f6a685164dd197d4ec6407503d9ea0681cfff6827c638f5a8 \
+    --hash=sha256:726c26a0ce5f21203b1fcf4fad3271b24370ff028459b9f5c8060e5de0dbd712 \
+    --hash=sha256:747410d3fb59affea11918667c88f476de8c0c2c7d847d97f7c47653f62bdc2c \
+    --hash=sha256:79849f3936e29bb086706bbd344674141346206213098e5bcaaa97a00aab2aee \
+    --hash=sha256:7c37a7c20ec3545a7f94da0f2ca214e3a14a7ca82ef53da177025d35129c0244 \
+    --hash=sha256:93bf0c8c97772dc49e021c2f954bc9e61429ed9fdb5fc0d4ac5b1d20f4bad6c2 \
+    --hash=sha256:997cf0ffc1a83aff7ab4cb9c2e8e3b1178d1b103be4b86d269b1f71aa67a9fef \
+    --hash=sha256:9da0ee5dae4abc147c475c2aca9269d3458d55bc82df7e7d8bd9fcf027f12d3a \
+    --hash=sha256:a636622cb3a3b46a0cb6255087445deca9de2aead24c1d3701ad0703699e9004 \
+    --hash=sha256:a95681de4469052ba12d13ed0c48d78447a9018ea58ace39658a8548042d8035 \
+    --hash=sha256:abd081d45e2d44419b547a9592c45219a211c46e0eec21332294049c22d20f0f \
+    --hash=sha256:ba2fe3d48b0dcbeb617720a6ff467495a5a9209fb19aed28a64ff99a8a5b6c84 \
+    --hash=sha256:bcb84eff7b243d1fce0cffa02666be0de67080c1f83dab47793ceb9dff3aa341 \
+    --hash=sha256:be23067417dd8e8323565440c1e38af61dbd98d5fbd5ca2fc07781542ec4046a \
+    --hash=sha256:bffeb364e4505465d5d1900e6621cf1d43bd7e089f755bcb2f8b53116feb9e57 \
+    --hash=sha256:c11f31cb4e53c1014c6a9331a3b5674e1af611cda6a97ff0b396ed431d178744 \
+    --hash=sha256:c5ccb2bef05c13ee2ead2bd2c28bd287de8d75f626bf1585054c1bf802f661e8 \
+    --hash=sha256:cbd48921729e2e6ed8a723e0f6a152d8bed1177f73fd0379e436cc7ea189daab \
+    --hash=sha256:ce2f7e7372da739eca412e96c9e5e23ac090171f95f004d44acd56ccc312810f \
+    --hash=sha256:ce502c142c7a018b0c41e086fe6f9a13771999966fed630e55b561118a5a5bb3 \
+    --hash=sha256:d2d982663aa9913e301552f28e2dde58b86399871d38887d064c5ff7283be790 \
+    --hash=sha256:d51debecc8a52341143a1ee7cdaec73157064e3fd9098c015fe95331e77cc308 \
+    --hash=sha256:d5c305f1d4d223e33f329bbede1ec574759aee69367f3087f66a4bf7f0db5f17 \
+    --hash=sha256:e0c59e0de346124035142dd875bd1512386fde934ea6d7c65dfab669ac77ff32 \
+    --hash=sha256:e9f443b7d5f26a9a280690001313c133fd28627c246b0e0d1d0896d8de4e6fa9 \
+    --hash=sha256:ece475740de06061d850dd13ee5753628bac0fe35f5dff8542a5f822b46dee63 \
+    --hash=sha256:f0b010a323d1c8c3743bb8dd852ee9fb14d2d25af7548ca2a4456989d8d71546 \
+    --hash=sha256:fc1aa285227588ea1cc80e221f33550814c238e932a4307c4f587770b6d7a197
     # via -r requirements/deploy.in
 envier==0.6.1 \
     --hash=sha256:3309a01bb3d8850c9e7a31a5166d5a836846db2faecb79b9cb32654dd50ca9f9 \
@@ -87,24 +87,24 @@ legacy-cgi==2.6.3 \
     --hash=sha256:4c119d6cb8e9d8b6ad7cc0ddad880552c62df4029622835d06dfd18f438a8154 \
     --hash=sha256:6df2ea5ae14c71ef6f097f8b6372b44f6685283dc018535a75c924564183cdab
     # via ddtrace
-opentelemetry-api==1.36.0 \
-    --hash=sha256:02f20bcacf666e1333b6b1f04e647dc1d5111f86b8e510238fcc56d7762cda8c \
-    --hash=sha256:9a72572b9c416d004d492cbc6e61962c0501eaf945ece9b5a0f56597d8348aa0
+opentelemetry-api==1.37.0 \
+    --hash=sha256:540735b120355bd5112738ea53621f8d5edb35ebcd6fe21ada3ab1c61d1cd9a7 \
+    --hash=sha256:accf2024d3e89faec14302213bc39550ec0f4095d1cf5ca688e1bfb1c8612f47
     # via ddtrace
 packaging==25.0 \
     --hash=sha256:29572ef2b1f17581046b3a2227d5c611fb25ec70ca1ba8554b24b0e69331a484 \
     --hash=sha256:d443872c98d677bf60f6a1f2f8c1cb748e8fe762d2bf9d3148b5599295b0fc4f
     # via gunicorn
-protobuf==6.32.0 \
-    --hash=sha256:15eba1b86f193a407607112ceb9ea0ba9569aed24f93333fe9a497cf2fda37d3 \
-    --hash=sha256:501fe6372fd1c8ea2a30b4d9be8f87955a64d6be9c88a973996cef5ef6f0abf1 \
-    --hash=sha256:75a2aab2bd1aeb1f5dc7c5f33bcb11d82ea8c055c9becbb41c26a8c43fd7092c \
-    --hash=sha256:7db8ed09024f115ac877a1427557b838705359f047b2ff2f2b2364892d19dacb \
-    --hash=sha256:84f9e3c1ff6fb0308dbacb0950d8aa90694b0d0ee68e75719cb044b7078fe741 \
-    --hash=sha256:a81439049127067fc49ec1d36e25c6ee1d1a2b7be930675f919258d03c04e7d2 \
-    --hash=sha256:a8bdbb2f009cfc22a36d031f22a625a38b615b5e19e558a7b756b3279723e68e \
-    --hash=sha256:ba377e5b67b908c8f3072a57b63e2c6a4cbd18aea4ed98d2584350dbf46f2783 \
-    --hash=sha256:d52691e5bee6c860fff9a1c86ad26a13afbeb4b168cd4445c922b7e2cf85aaf0
+protobuf==6.32.1 \
+    --hash=sha256:2601b779fc7d32a866c6b4404f9d42a3f67c5b9f3f15b4db3cccabe06b95c346 \
+    --hash=sha256:2f5b80a49e1eb7b86d85fcd23fe92df154b9730a725c3b38c4e43b9d77018bf4 \
+    --hash=sha256:68ff170bac18c8178f130d1ccb94700cf72852298e016a2443bdb9502279e5f1 \
+    --hash=sha256:a8a32a84bc9f2aad712041b8b366190f71dde248926da517bde9e832e4412085 \
+    --hash=sha256:b00a7d8c25fa471f16bc8153d0e53d6c9e827f0953f3c09aaa4331c718cae5e1 \
+    --hash=sha256:b1864818300c297265c83a4982fd3169f97122c299f56a56e2445c3698d34710 \
+    --hash=sha256:d0975d0b2f3e6957111aa3935d08a0eb7e006b1505d825f862a1fffc8348e122 \
+    --hash=sha256:d8c7e6eb619ffdf105ee4ab76af5a68b60a9d0f66da3ea12d1640e6d8dab7281 \
+    --hash=sha256:ee2469e4a021474ab9baafea6cd070e5bf27c7d29433504ddea1a4ee5850f68d
     # via ddtrace
 typing-extensions==4.15.0 \
     --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \