Skip to content

Bump the pip-dependencies group across 1 directory with 30 updates#3760

Open
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/pip/pip-dependencies-73138893c7
Open

Bump the pip-dependencies group across 1 directory with 30 updates#3760
dependabot[bot] wants to merge 1 commit intodevfrom
dependabot/pip/pip-dependencies-73138893c7

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026 •
edited
Loading

Updates the requirements on beautifulsoup4, lxml, pytest, requests, selenium, waitress, multiprocess, psutil, fire, pyyaml, redis, kombu, celery, flask, plotly, typing-extensions, diskcache, black, flake8, flask-talisman, mimesis, mock, numpy, orjson, pandas, pylint, pyzmq, xlrd, jupyterlab and pyright to permit the latest version.
Updates beautifulsoup4 to 4.14.3

Updates lxml to 6.1.0

Changelog

Sourced from lxml's changelog.

6.1.0 (2026-04-17)

This release fixes a possible external entity injection (XXE) vulnerability in iterparse() and the ETCompatXMLParser.

Features added

  • GH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes in lxml.html.defs. This allows lxml_html_clean to pass them through. Patch by oomsveta.

  • The default chunk size for reading from file-likes in iterparse() is now configurable with a new chunk_size argument.

Bugs fixed

  • LP#2146291: The resolve_entities option was still set to True for iterparse and ETCompatXMLParser, allowing for external entity injection (XXE) when using these parsers without setting this option explicitly. The default was now changed to 'internal' only (as for the normal XML and HTML parsers since lxml 5.0). Issue found by Sihao Qiu as CVE-2026-41066.

6.0.4 (2026-04-12)

Bugs fixed

  • LP#2148019: Spurious MemoryError during namespace cleanup.

6.0.3 (2026-04-09)

Bugs fixed

  • Several out of memory error cases now raise MemoryError that were not handled before.

  • Slicing with large step values (outside of +/- sys.maxsize) could trigger undefined C behaviour.

  • LP#2125399: Some failing tests were fixed or disabled in PyPy.

  • LP#2138421: Memory leak in error cases when setting the public_id or system_url of a document.

... (truncated)

Commits
  • 43722f4 Update changelog.
  • 8747040 Name version of option change in docstring.
  • 6c36e6c Fix pypistats URL in download statistics script.
  • c7d76d6 Change security policy to point to Github security advisories.
  • 378ccf8 Update project income report.
  • 315270b Docs: Reduce TOC depth of package pages and move module contents first.
  • 6dbba7f Docs: Show current year in copyright line.
  • e4385bf Update project income report.
  • 5bed1e1 Validate file hashes in release download script.
  • c13ee10 Prepare release of 6.1.0.
  • Additional commits viewable in compare view

Updates pytest to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Updates requests to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.

2.32.3 (2024-05-29)

Bugfixes

  • Fixed bug breaking the ability to specify custom SSLContexts in sub-classes of HTTPAdapter. (#6716)
  • Fixed issue where Requests started failing to run on Python versions compiled without the ssl module. (#6724)

2.32.2 (2024-05-21)

Deprecations

  • To provide a more stable migration for custom HTTPAdapters impacted by the CVE changes in 2.32.0, we've renamed _get_connection to a new public API, get_connection_with_tls_context. Existing custom HTTPAdapters will need to migrate their code to use this new API. get_connection is considered deprecated in all versions of Requests>=2.32.0.

    A minimal (2-line) example has been provided in the linked PR to ease

... (truncated)

Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates selenium to 4.36.0

Release notes

Sourced from selenium's releases.

Selenium 4.36.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

... (truncated)

Commits
  • 6d115cf [build] Prepare for release of Selenium 4.36.0 (#16332)
  • 2eeadab [rust] Log browser path also in offline mode (#16215)
  • 8e84f0d [rust] Set Rust version to 1.89.0 in WORKSPACE (#16368)
  • 6061c87 [grid] UI Light/Dark Mode Toggle (#16364)
  • a578a47 [rust] Bump Rust edition to 2024, rulest_rust to 0.65.0, and crates to latest...
  • 93fdf57 [dotnet] [bidi] Give only one chance to receive from remote end (#16360)
  • b3b66a0 [dotnet] [bidi] Introduce BaseNavigationInfo type as interface (#16348)
  • 9a4bbcc [py] Add --enable-chrome-logs to chrome service args to inherit browser i/o s...
  • 4c603ec [rb] fix unit tests (#16357)
  • 8a72168 [dotnet] Begin reading of driver service output to fix Firefox disposing
  • Additional commits viewable in compare view

Updates waitress to 3.0.2

Release notes

Sourced from waitress's releases.

v3.0.2

3.0.2 (2024-11-16)

Security

  • When using Waitress to process trusted proxy headers, Waitress will now update the headers to drop any untrusted values, thereby making sure that WSGI apps only get trusted and validated values that Waitress itself used to update the environ. See Pylons/waitress#452 and Pylons/waitress#451
Changelog

Sourced from waitress's changelog.

3.0.2 (2024-11-16)

Security


- When using Waitress to process trusted proxy headers, Waitress will now
  update the headers to drop any untrusted values, thereby making sure that
  WSGI apps only get trusted and validated values that Waitress itself used to
  update the environ. See https://github.com/Pylons/waitress/pull/452 and
  https://github.com/Pylons/waitress/issues/451

3.0.1 (2024-10-28)


Backward Incompatibilities

Features


- Added support for Python 3.13.
  See https://github.com/Pylons/waitress/pull/445.

Security

  • Fix a bug that would lead to Waitress busy looping on select() on a half-open socket due to a race condition that existed when creating a new HTTPChannel. See Pylons/waitress#435, Pylons/waitress#418 and GHSA-3f84-rpwh-47g6

    With thanks to Dylan Jay and Dieter Maurer for their extensive debugging and helping track this down.

  • No longer strip the header values before passing them to the WSGI environ. See Pylons/waitress#434 and Pylons/waitress#432

  • Fix a race condition in Waitress when channel_request_lookahead is enabled that could lead to HTTP request smuggling.

    See GHSA-9298-4cf8-g4wj

3.0.0 (2024-02-04)

... (truncated)

Commits
  • b11ae72 Prep for 3.0.2
  • 38ffad0 Merge pull request #450 from Pylons/445-amend-drop-py38
  • 0e7bf65 Remove hack to register atexit handler
  • 0e82766 Add concurrency grouping to cancel in progress runs upon push
  • 135c4bf Split Python versions note into two under separate headings
  • 23ac524 Merge pull request #446 from kgaughan/resolve-name
  • a20fe86 Merge pull request #447 from kgaughan/modern-assertions
  • d005ec2 Merge pull request #448 from kgaughan/trivial-cleanup
  • 291d9cb Merge pull request #452 from simonk52/drop-untrusted-proxy-values
  • da38a20 Sign CONTRIBUTORS.txt
  • Additional commits viewable in compare view

Updates multiprocess to 0.70.19

Commits

Updates psutil to 7.2.2

Changelog

Sourced from psutil's changelog.

7.2.2 — 2026-01-28 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:2705: [Linux]: :meth:Process.wait now uses pidfd_open() + poll() (no busy loop). Requires Linux >= 5.3 and Python >= 3.9.
  • :gh:2705: [macOS], [BSD]: :meth:Process.wait now uses kqueue() (no busy loop).

Bug fixes

  • :gh:2701, [macOS]: fix compilation error on macOS < 10.7. (patch by Sergey Fedorov)
  • :gh:2707, [macOS]: fix potential memory leaks in error paths of :meth:Process.memory_full_info and :meth:Process.threads.
  • :gh:2708, [macOS]: :meth:Process.cmdline and :meth:Process.environ may fail with OSError: [Errno 0] Undefined error (from sysctl(KERN_PROCARGS2)). They now raise :exc:AccessDenied instead.

7.2.1 — 2025-12-29 ^^^^^^^^^^^^^^^^^^

Bug fixes

  • :gh:2699, [FreeBSD], [NetBSD]: :func:heap_info does not detect small allocations (<= 1K). In order to fix that, we now flush internal jemalloc cache before fetching the metrics.

7.2.0 — 2025-12-23 ^^^^^^^^^^^^^^^^^^

Enhancements

  • :gh:1275: new :func:heap_info and :func:heap_trim functions, providing direct access to the platform's native C heap allocator (glibc, mimalloc, libmalloc). Useful to create tools to detect memory leaks.
  • :gh:2403, [Linux]: publish wheels for Linux musl.
  • :gh:2680: unit tests are no longer installed / part of the distribution. They now live under tests/ instead of psutil/tests.

Bug fixes

  • :gh:2684, [FreeBSD], [critical]: compilation fails on FreeBSD 14 due to missing include.
  • :gh:2691, [Windows]: fix memory leak in :func:net_if_stats due to missing Py_CLEAR.

Compatibility notes

... (truncated)

Commits
  • 9eea97d Pre-release
  • 938ac64 Rm sphinxcontrib.googleanalytics; override layout.html
  • 9dcbb7e Add sphinxcontrib-googleanalytics to requirements.txt
  • 76eaf9a Try to add google analytics to doc
  • de1cafa Update doc mentioning Process.wait() internal details
  • bb30943 Refact can_use_pidfd_open() and can_use_kqueue()
  • a571717 #2708, macos / cmdline / environ; raise AD instead of OSError(0) (#2709)
  • 8b98c3e Pre-release
  • 700b7e6 [macOS] fix potential leaks in error paths (#2707)
  • 7cc7923 Windows / cmdline(): be more defensive in free()ing in case of error
  • Additional commits viewable in compare view

Updates fire to 0.7.1

Release notes

Sourced from fire's releases.

Python Fire v0.7.1

What's Changed

  • Use Neutral theme for IPython Inspector, supporting newer IPython versions in google/python-fire#588
  • Call inspectutils.GetClassAttrsDict on component, not None in google/python-fire#606
  • Move to pyproject.toml, adding wheel support in pypi
  • Use ty in place of pytype
  • Update requirements @​dependabot[bot]

Full Changelog: google/python-fire@v0.7.0...v0.7.1

Commits

Updates pyyaml to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

6.0.2 (2024-08-06)

6.0.1 (2023-07-18)

6.0 (2021-10-13)

5.4.1 (2021-01-20)

  • yaml/pyyaml#480 -- Fix stub compat with older pyyaml versions that may unwittingly load it

5.4 (2021-01-19)

5.3.1 (2020-03-18)

  • yaml/pyyaml#386 -- Prevents arbitrary code execution during python/object/new constructor

5.3 (2020-01-06)

... (truncated)

Commits

Updates redis to 7.0.1

Release notes

Sourced from redis's releases.

7.0.1

Changes

This release adds small fixes related to documentation.

🧰 Maintenance

  • Add 'multi_database' section to documentation index (313d93f)
  • Revised multi-database client documentation(78df745)
  • Adding info about Multi-database client in README.md (3f7a55e)

We'd like to thank all the contributors who worked on this release! @​dmaier @​petyaslavova

Commits
  • 613a06f Updating redis-py package version to 7.0.1
  • 3f7a55e Adding info about Multi-database client in README.md
  • 313d93f Add 'multi_database' section to documentation index
  • 78df745 Revised multi-database client documentation
  • 7a4e8bc Updating package version to 7.0.0 and supported redis versions in readme.md
  • 64a2721 Refactor healthcheck to use PING instead of ECHO (#3811)
  • 24a7a10 Fixing SORTABLE, INDEXEMPTY and INDEXMISSING order when using RediSearch fiel...
  • 32ba6d8 DOC-5821 update index/query example for runnable notebook (#3807)
  • c1e566f Add handling of empty spaces during CLIENT LIST response parsing (#3797)
  • 295bec6 Adding new ExternalAuthProviderError that will be raised when we receive 'pro...
  • Additional commits viewable in compare view

Updates kombu to 5.6.2

Release notes

Sourced from kombu's releases.

v5.6.2

What's Changed

New Contributors

Full Changelog: celery/kombu@v5.6.1...v5.6.2

Changelog

Sourced from kombu's changelog.

5.6.2

:release-date: 29 December, 2025 :release-by: Tomer Nosrati

What's Changed


- Improve error handling in GCP Pub/Sub ack deadline extension ([#2430](https://github.com/celery/kombu/issues/2430))
- Fix SentinelChannel to pass ACL credentials to master_for() ([#2426](https://github.com/celery/kombu/issues/2426))
- Fix credential_provider compatibility with redis-py < 5.3.0 ([#2423](https://github.com/celery/kombu/issues/2423))
- Simplify requirements given Py3.9+ baseline ([#2414](https://github.com/celery/kombu/issues/2414))
- Prepare for release: v5.6.2 ([#2434](https://github.com/celery/kombu/issues/2434))

.. _version-5.6.1:


5.6.1


:release-date: 25 November, 2025
:release-by: Tomer Nosrati


What's Changed

  • fix: ensure hub close does also remove global event loop reference (#2404)
  • fix: default value for SQS's receive message (#2405)
  • Feat: add support for credential_provider to redis broker (#2408)
  • Prepare for release: v5.6.1 (#2416)

.. _version-5.6.0:

5.6.0

:release-date: 1 November, 2025 :release-by: Tomer Nosrati

Key Highlights


QoS Max Prefetch Limit
----------------------

PR [#2348](https://github.com/celery/kombu/issues/2348) &lt;https://github.com/celery/kombu/pull/2348&gt;_


Prevent Out Of Memory crashes when queues flood with ETA/countdown tasks. The new optional max_prefetch parameter caps how many messages workers hold in memory. Defaults to unlimited (None) to preserve existing behavior.


.. code-block:: python


from kombu.common import QoS



</tr></table>

... (truncated)

Commits

Updates celery to 5.6.3

Release notes

Sourced from celery's releases.

v5.6.3

What's Changed

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 27, 2026
@dependabot dependabot Bot requested a review from T4rk1n as a code owner April 27, 2026 20:53
@dependabot dependabot Bot added the python Pull requests that update python code label Apr 27, 2026
@dependabot
Bump the pip-dependencies group across 1 directory with 30 updates
bf7068c 
Updates the requirements on [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/), [lxml](https://github.com/lxml/lxml), [pytest](https://github.com/pytest-dev/pytest), [requests](https://github.com/psf/requests), [selenium](https://github.com/SeleniumHQ/Selenium), [waitress](https://github.com/Pylons/waitress), [multiprocess](https://github.com/uqfoundation/multiprocess), [psutil](https://github.com/giampaolo/psutil), [fire](https://github.com/google/python-fire), [pyyaml](https://github.com/yaml/pyyaml), [redis](https://github.com/redis/redis-py), [kombu](https://github.com/celery/kombu), [celery](https://github.com/celery/celery), [flask](https://github.com/pallets/flask), [plotly](https://github.com/plotly/plotly.py), [typing-extensions](https://github.com/python/typing_extensions), [diskcache](https://github.com/grantjenks/python-diskcache), [black](https://github.com/psf/black), [flake8](https://github.com/pycqa/flake8), [flask-talisman](https://github.com/wntrblm/flask-talisman), [mimesis](https://github.com/lk-geimfari/mimesis), [mock](https://github.com/testing-cabal/mock), [numpy](https://github.com/numpy/numpy), [orjson](https://github.com/ijl/orjson), [pandas](https://github.com/pandas-dev/pandas), [pylint](https://github.com/pylint-dev/pylint), [pyzmq](https://github.com/zeromq/pyzmq), [xlrd](https://github.com/python-excel/xlrd), [jupyterlab](https://github.com/jupyterlab/jupyterlab) and [pyright](https://github.com/RobertCraigie/pyright-python) to permit the latest version.

Updates `beautifulsoup4` to 4.14.3

Updates `lxml` to 6.1.0
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-4.6.2...lxml-6.1.0)

Updates `pytest` to 8.4.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@6.0.2...8.4.2)

Updates `requests` to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.21.0...v2.32.5)

Updates `selenium` to 4.36.0
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-3.141.0...selenium-4.36.0)

Updates `waitress` to 3.0.2
- [Release notes](https://github.com/Pylons/waitress/releases)
- [Changelog](https://github.com/Pylons/waitress/blob/main/CHANGES.txt)
- [Commits](Pylons/waitress@v1.4.4...v3.0.2)

Updates `multiprocess` to 0.70.19
- [Release notes](https://github.com/uqfoundation/multiprocess/releases)
- [Commits](uqfoundation/multiprocess@multiprocess-0.70.12...0.70.19)

Updates `psutil` to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@v5.8.0...v7.2.2)

Updates `fire` to 0.7.1
- [Release notes](https://github.com/google/python-fire/releases)
- [Commits](google/python-fire@v0.4.0...v0.7.1)

Updates `pyyaml` to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@5.4.1...6.0.3)

Updates `redis` to 7.0.1
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@3.5.3...v7.0.1)

Updates `kombu` to 5.6.2
- [Release notes](https://github.com/celery/kombu/releases)
- [Changelog](https://github.com/celery/kombu/blob/main/Changelog.rst)
- [Commits](celery/kombu@v0.1.0...v5.6.2)

Updates `celery` to 5.6.3
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst)
- [Commits](celery/celery@v5.1.2...v5.6.3)

Updates `flask` to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@1.0.4...3.1.3)

Updates `plotly` to 6.7.0
- [Release notes](https://github.com/plotly/plotly.py/releases)
- [Changelog](https://github.com/plotly/plotly.py/blob/main/CHANGELOG.md)
- [Commits](plotly/plotly.py@v5.0.0...v6.7.0)

Updates `typing-extensions` to 4.15.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.1.1...4.15.0)

Updates `diskcache` to 5.6.3
- [Commits](grantjenks/python-diskcache@v5.2.1...v5.6.3)

Updates `black` from 22.3.0 to 25.11.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@22.3.0...25.11.0)

Updates `flake8` from 7.0.0 to 7.3.0
- [Commits](PyCQA/flake8@7.0.0...7.3.0)

Updates `flask-talisman` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/wntrblm/flask-talisman/releases)
- [Commits](wntrblm/flask-talisman@v1.0.0...v1.1.0)

Updates `mimesis` to 12.1.0
- [Release notes](https://github.com/lk-geimfari/mimesis/releases)
- [Changelog](https://github.com/lk-geimfari/mimesis/blob/master/CHANGELOG.rst)
- [Commits](lk-geimfari/mimesis@0.0.4b...v12.1.0)

Updates `mock` from 4.0.3 to 5.2.0
- [Changelog](https://github.com/testing-cabal/mock/blob/master/CHANGELOG.rst)
- [Commits](testing-cabal/mock@4.0.3...5.2.0)

Updates `numpy` to 2.0.2
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v0.2.0...v2.0.2)

Updates `orjson` to 3.11.5
- [Release notes](https://github.com/ijl/orjson/releases)
- [Changelog](https://github.com/ijl/orjson/blob/master/CHANGELOG.md)
- [Commits](ijl/orjson@3.10.11...3.11.5)

Updates `pandas` to 2.3.3
- [Release notes](https://github.com/pandas-dev/pandas/releases)
- [Commits](pandas-dev/pandas@v1.4.0...v2.3.3)

Updates `pylint` from 3.0.3 to 3.3.9
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.0.3...v3.3.9)

Updates `pyzmq` to 27.1.0
- [Release notes](https://github.com/zeromq/pyzmq/releases)
- [Commits](zeromq/pyzmq@v26.0.0...v27.1.0)

Updates `xlrd` to 2.0.2
- [Changelog](https://github.com/python-excel/xlrd/blob/master/CHANGELOG.rst)
- [Commits](python-excel/xlrd@2.0.1...2.0.2)

Updates `jupyterlab` to 4.5.6
- [Release notes](https://github.com/jupyterlab/jupyterlab/releases)
- [Changelog](https://github.com/jupyterlab/jupyterlab/blob/main/RELEASE.md)
- [Commits](https://github.com/jupyterlab/jupyterlab/compare/jupyterlab-example-app@0.1.0...@jupyterlab/lsp@4.5.6)

Updates `pyright` from 1.1.398 to 1.1.408
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.398...v1.1.408)

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-version: 4.14.3
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: black
  dependency-version: 25.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-dependencies
- dependency-name: celery
  dependency-version: 5.6.3
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: diskcache
  dependency-version: 5.6.3
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: fire
  dependency-version: 0.7.1
  dependency-type: direct:development
  dependency-group: pip-dependencies
- dependency-name: flake8
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: flask-talisman
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
- dependency-name: jupyterlab
  dependency-version: 4.5.6
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: kombu
  dependency-version: 5.6.2
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: lxml
  dependency-version: 6.0.4
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: mimesis
  dependency-version: 12.1.0
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: mock
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-dependencies
- dependency-name: multiprocess
  dependency-version: 0.70.19
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: numpy
  dependency-version: 2.0.2
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: orjson
  dependency-version: 3.11.5
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: pandas
  dependency-version: 2.3.3
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: plotly
  dependency-version: 6.7.0
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: pylint
  dependency-version: 3.3.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-dependencies
- dependency-name: pyright
  dependency-version: 1.1.408
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-dependencies
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:development
  dependency-group: pip-dependencies
- dependency-name: pyzmq
  dependency-version: 27.1.0
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: redis
  dependency-version: 7.0.1
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: selenium
  dependency-version: 4.36.0
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: typing-extensions
  dependency-version: 4.15.0
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: waitress
  dependency-version: 3.0.2
  dependency-type: direct:production
  dependency-group: pip-dependencies
- dependency-name: xlrd
  dependency-version: 2.0.2
  dependency-type: direct:production
  dependency-group: pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/pip-dependencies-73138893c7 branch from 6768a04 to bf7068c Compare May 4, 2026 21:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@T4rk1n T4rk1n Awaiting requested review from T4rk1n T4rk1n is a code owner

@ndrezn ndrezn Awaiting requested review from ndrezn ndrezn is a code owner

@camdecoster camdecoster Awaiting requested review from camdecoster camdecoster is a code owner

@KoolADE85 KoolADE85 Awaiting requested review from KoolADE85 KoolADE85 is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants