Skip to content

Bump the python group with 5 updates#229

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/python-8aa414d75c
Closed

Bump the python group with 5 updates#229
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/python-8aa414d75c

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jul 28, 2025

Bumps the python group with 5 updates:

Package From To
django-anymail[sendgrid] 13.0 13.0.1
newrelic 10.14.0 10.15.0
coverage 7.10.0 7.10.1
django-debug-toolbar 5.2.0 6.0.0
rust-just 1.42.3 1.42.4

Updates django-anymail[sendgrid] from 13.0 to 13.0.1

Release notes

Sourced from django-anymail[sendgrid]'s releases.

v13.0.1

Changelog

Changelog

Sourced from django-anymail[sendgrid]'s changelog.

v13.0.1

2025-07-25

Breaking changes (external)


* **SendGrid:** Anymail no longer officially supports SendGrid, because we are
  unable to test it. Although it will *probably* keep working, you'll get
  warnings about this change in status. See
  `Dropping support for SendGrid <https://github.com/anymail/django-anymail/issues/432>`__
  for details and actions SendGrid customers can take. (Since this breaking
  change is due to external causes and impacts SendGrid users on all versions
  of Anymail, it is being handled as a minor patch release rather than a semver
  major version change.)

Fixes


* **Amazon SES:** Require boto3 1.24.6 or later to ensure support for the SESv2
  close method. (Thanks to `@mgibeau`_ for identifying the issue.)
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/anymail/django-anymail/commit/30c613003f4a8bac0b78d50cabcfd474bf9ea8aa&quot;&gt;&lt;code&gt;30c6130&lt;/code&gt;&lt;/a> Release 13.0.1</li>
<li><a href="https://github.com/anymail/django-anymail/commit/6b27bd9d699d41d209cb9ae6103b0e5f6f324d90&quot;&gt;&lt;code&gt;6b27bd9&lt;/code&gt;&lt;/a> CI: fix outdated Django 5.2 alpha reference</li>
<li><a href="https://github.com/anymail/django-anymail/commit/dfa4ce0c6a62e9002f68331e0137ee128031b900&quot;&gt;&lt;code&gt;dfa4ce0&lt;/code&gt;&lt;/a> SendGrid: change to &quot;unsupported&quot; status</li>
<li><a href="https://github.com/anymail/django-anymail/commit/c29c993d85ba5f971375d6a2ca565458a31f1c4a&quot;&gt;&lt;code&gt;c29c993&lt;/code&gt;&lt;/a> Fix lint</li>
<li><a href="https://github.com/anymail/django-anymail/commit/29c446ff645169ce832a0263aa9baca938a46809&quot;&gt;&lt;code&gt;29c446f&lt;/code&gt;&lt;/a> Amazon SES: Update minimum boto3 version</li>
<li><a href="https://github.com/anymail/django-anymail/commit/e82ab3e056a26509cbf6a590b381f609b92177b6&quot;&gt;&lt;code&gt;e82ab3e&lt;/code&gt;&lt;/a> CI: fix GitHub release step</li>
<li>See full diff in <a href="https://github.com/anymail/django-anymail/compare/v13.0...v13.0.1&quot;&gt;compare view</a></li>
</ul>
</details>

<br />

Updates newrelic from 10.14.0 to 10.15.0

Release notes

Sourced from newrelic's releases.

v10.15.0

Notes

This release of the Python agent adds support for oracledb, fixes a bug in Kombu and Kafka where MessageTransaction object has no attribute destination_name, and fixes the disappearance of utilization metadata with AWS.

Install the agent using easy_install/pip/distribute via the Python Package Index or download it directly from the New Relic download site.

New features

  • Adds support for oracledb

Bug fixes

  • Fix "MessageTransaction object has no attribute destination_name" bug

    • Fix a bug in MessageBroker instrumentations where the serialize methods were looking for the destination_name attribute on the MessageTransaction and it did not exist.
  • Fix AWS utilization metadata issue when running AWS and K8s together

    • Due to permissions settings in K8s pods running on AWS EC2 instances, the utilization metadata is able to be retrieved the first time. However, if the application is left running continuously, the agent will reconnect and the utilization metadata fails to load. In cases like these, the utilization metadata is cached per agent instance and is able to be retrieved.

Support statement

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Python agent EOL policy for information about agent releases and support dates.

Commits

Updates coverage from 7.10.0 to 7.10.1

Changelog

Sourced from coverage's changelog.

Version 7.10.1 — 2025-07-27

  • Fix: the exclusion for if TYPE_CHECKING: was wrong: it marked the branch as partial, but it should have been a line exclusion so the entire clause would be excluded. Improves issue 831_.

  • Fix: changed where .pth files are written for patch = subprocess, closing issue 2006_.

.. _issue 2006: nedbat/coveragepy#2006

.. _changes_7-10-0:

Commits
  • 7fdcbeb docs: sample HTML for 7.10.1
  • c9e9625 docs: prep for 7.10.1
  • e8193ff chore: make upgrade
  • 9aad22a test: improve the if TYPE_CHECKING: exclusion test
  • 1e2f41a fix: excluding TYPE_CHECKING should have been the line not the branch
  • 2134e57 fix: use getsitepackages for writing .pth files. #2006
  • a4300a7 test: signal statuses are mysterious. #2008
  • 2fd4961 docs: update the man page, for once
  • a13607f build: comment_on_fixes should show html urls
  • 0f00d49 build: bump version to 7.10.1
  • See full diff in compare view

Updates django-debug-toolbar from 5.2.0 to 6.0.0

Release notes

Sourced from django-debug-toolbar's releases.

6.0.0

Description

The v6.0.0 release of Django Debug Toolbar significantly revamps how panels for the toolbar work. Each panel will now persist its data in a store. A store can either be backed by various backends. The toolbar will support a memory and database backend to start.

The toolbar is now using Django's SafeExceptionReporterFilter.cleanse_setting() function to filter out sensitive information. Some data will be replaced with "********************". This is because the toolbar could be configured to write the request information to a persistent store such as a cache or database.

Django applications with basic installations are backwards compatible with this change. If there are hooks into the internals of the toolbar, such as DebugToolbar.store_id then it will be backwards incompatible.

Third-party panels will need updating. Any data that is stored in record_stats will need to be fetched back out from self.get_stats() before being able to be rendered. This is to support loading an instance of the toolbar from persisted data. A simple example of this transition can be found in debug_toolbar/panels/cache.py in PR 2138

How to upgrade

  • Changes required if the toolbar isn't installed entirely programmatically
    • If you experience RuntimeError: Model class debug_toolbar.models.HistoryEntry doesn't declare an explicit app_label and isn't in an application in INSTALLED_APPS, you need to remove the reference to the toolbar's urls in your urls.py file and MIDDLEWARE setting when the toolbar isn't in INSTALLED_APPS
  • If you have a custom panel, you'll need to adjust record_stats and use self.get_stats() to fetch data for rendering
  • If you'd like to use the database store, see TOOLBAR_STORE_CLASS for more info

Why did the internals change?

The Django Debug Toolbar is a popular package we did not want to block the community from pursuing the async path for Django applications. Writing the request data to a store better positions the toolbar for async projects. It also opens the door for it being usable in production as well with API integrations.

What's Changed

Full Changelog: https://github.com/django-commons/django-debug-toolbar/compare/5.2.0...6.0.0

Acknowlegements

Thank you to all the contributors who made this release possible. Thank you to @​robhudson, @​matthiask, @​tim-schilling, @​salty-ivy and @​dr-rompecabezas for their support, development and reviews of the serializable toolbar changes. A special shout-out to @​matthiask for leading the Djangonaut Space Session 4 team of @​dr-rompecabezas, @​andoriyaprashant and @​blingblin-g.

Changelog

Sourced from django-debug-toolbar's changelog.

6.0.0 (2025-07-22)

  • Added support for checking if pytest as the test runner when determining if tests are running.
  • Added show_toolbar_with_docker function to check Docker host IP address when running inside Docker containers.
  • Defines the BaseStore interface for request storage mechanisms.
  • Added the setting TOOLBAR_STORE_CLASS to configure the request storage mechanism. Defaults to debug_toolbar.store.MemoryStore.
  • Rename store_id properties to request_id and Toolbar.store to Toolbar.init_store.
  • Support Panel instances with stored stats via Panel.load_stats_from_store.
  • Swapped Toolbar._store for the get_store() class.
  • Created a StoredDebugToolbar that support creating an instance of the toolbar representing an old request. It should only be used for fetching panels' contents.
  • Drop raw_params from query data.
  • Queries now have a unique djdt_query_id. The SQL forms now reference this id and avoid passing SQL to be executed.
  • Move the formatting logic of SQL queries to just before rendering in SQLPanel.content.
  • Make Panel.panel_id a class member.
  • Update all panels to utilize data from Panel.get_stats() to load content to render. Specifically for Panel.title and Panel.nav_title.
  • Extend example app to contain an async version.
  • Added debug_toolbar.store.DatabaseStore for persistent debug data storage.
  • Deduplicated static files in the staticfiles panel.
Commits

Updates rust-just from 1.42.3 to 1.42.4

Release notes

Sourced from rust-just's releases.

1.42.4

Fixed

Changelog

Sourced from rust-just's changelog.

1.42.4 - 2025-07-24

Fixed

Commits
  • 51f4ded Merge pull request #220 from gnpaone/sync-action
  • c09b370 chore: sync files from source repo
  • 9952d95 Merge pull request #219 from gnpaone/sync-action
  • 3151393 chore: sync files from source repo
  • e46c210 Merge pull request #218 from gnpaone/dependabot/npm_and_yarn/npm/rust-just/ty...
  • 86a78a5 Merge pull request #217 from gnpaone/dependabot/npm_and_yarn/npm/rust-just/ty...
  • 83eca50 npm(deps-dev): bump @​typescript-eslint/eslint-plugin in /npm/rust-just
  • f35645b npm(deps-dev): bump @​types/node from 24.0.15 to 24.1.0 in /npm/rust-just
  • 28c49fe Merge pull request #216 from gnpaone/dependabot/npm_and_yarn/npm/rust-just/ty...
  • f6e9960 npm(deps-dev): bump @​typescript-eslint/parser in /npm/rust-just
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [django-anymail[sendgrid]](https://github.com/anymail/django-anymail) | `13.0` | `13.0.1` |
| [newrelic](https://github.com/newrelic/newrelic-python-agent) | `10.14.0` | `10.15.0` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.10.0` | `7.10.1` |
| [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar) | `5.2.0` | `6.0.0` |
| [rust-just](https://github.com/gnpaone/rust-just) | `1.42.3` | `1.42.4` |


Updates `django-anymail[sendgrid]` from 13.0 to 13.0.1
- [Release notes](https://github.com/anymail/django-anymail/releases)
- [Changelog](https://github.com/anymail/django-anymail/blob/main/CHANGELOG.rst)
- [Commits](anymail/django-anymail@v13.0...v13.0.1)

Updates `newrelic` from 10.14.0 to 10.15.0
- [Release notes](https://github.com/newrelic/newrelic-python-agent/releases)
- [Commits](newrelic/newrelic-python-agent@v10.14.0...v10.15.0)

Updates `coverage` from 7.10.0 to 7.10.1
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.10.0...7.10.1)

Updates `django-debug-toolbar` from 5.2.0 to 6.0.0
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@5.2.0...6.0.0)

Updates `rust-just` from 1.42.3 to 1.42.4
- [Release notes](https://github.com/gnpaone/rust-just/releases)
- [Changelog](https://github.com/gnpaone/rust-just/blob/master/CHANGELOG.md)
- [Commits](gnpaone/rust-just@1.42.3...1.42.4)

---
updated-dependencies:
- dependency-name: django-anymail[sendgrid]
  dependency-version: 13.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: newrelic
  dependency-version: 10.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python
- dependency-name: coverage
  dependency-version: 7.10.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
- dependency-name: django-debug-toolbar
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python
- dependency-name: rust-just
  dependency-version: 1.42.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 28, 2025
@codecov
Copy link
Copy Markdown

codecov Bot commented Jul 28, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (3d88f0e) to head (06fdd7b).

Additional details and impacted files
@@            Coverage Diff            @@
##            master      #229   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           50        50           
  Lines         1891      1887    -4     
=========================================
- Hits          1891      1887    -4     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Aug 4, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 4, 2025
@dependabot dependabot Bot deleted the dependabot/pip/python-8aa414d75c branch August 4, 2025 00:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants