Skip to content

chore(deps): bump the package-updates group with 8 updates - #3845

Merged
derkweijers merged 1 commit into
mainfrom
dependabot/uv/package-updates-f4a3e81054
Oct 20, 2026
Merged

chore(deps): bump the package-updates group with 8 updates#3845
derkweijers merged 1 commit into
mainfrom
dependabot/uv/package-updates-f4a3e81054

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the package-updates group with 8 updates:

Package From To
django-filter 26.1 26.2
django-health-check 4.6.1 4.8.0
django 5.2.17 5.2.18
djangorestframework 3.18.1 3.18.3
granian 2.8.3 2.8.4
commitizen 4.19.0 4.19.2
peek-python 26.1.6 26.1.7
ruff 0.16.9 0.16.10

Updates django-filter from 26.1 to 26.2

Changelog

Sourced from django-filter's changelog.

Version 26.2 (2026-10-03)

  • Added testing against Python 3.15.

  • Dropped support for Python 3.10.

  • LinkWidget will now conditionally escape provided label text.

    Filter choices are under developer control, and applications populating them from user-supplied values, including via AllValuesFilter, must filter those appropriately, as always. Nonetheless, escaping labels by default serves as defense-in-depth hardening. Apply mark_safe() to labels intended to contain HTML.

    Thanks to Sanjeev Kumar for the report.

Commits
  • daddf7b Set date and bump version for 26.2 release.
  • a3593ea Escape LinkWidget values.
  • 29be896 Update testing to add Python 3.15 and drop 3.10.
  • 5128b8f Increase the version upper limit for flit_core to 5
  • See full diff in compare view

Updates django-health-check from 4.6.1 to 4.8.0

Release notes

Sourced from django-health-check's releases.

4.8.0

What's Changed

Full Changelog: codingjoe/django-health-check@4.7.2...4.8.0

4.7.2

What's Changed

Full Changelog: codingjoe/django-health-check@4.7.1...4.7.2

4.7.1

What's Changed

Full Changelog: codingjoe/django-health-check@4.7.0...4.7.1

4.7.0

What's Changed

Full Changelog: codingjoe/django-health-check@4.6.1...4.7.0

Commits
  • 0d17159 Fix #747 -- Log failed health checks at warning level (#796)
  • 0fa2a29 Add PyPI status check (#793)
  • 0984937 Add npm status page check (#794)
  • 0b93c39 Bound every check probe by its own timeout (#789)
  • aec2712 Choose static defaults and update docs w/ more specific instructions (#787)
  • 9576ac7 Fix #779 -- Redact RabbitMQ broker credentials from repr, labels and logs (#786)
  • 7aaa4d4 Fix #780 -- Cover the Redis unknown-client fallback in tests (#785)
  • deac77d Fix #781 -- Remove unrelated AWS sentence above the contrib extras install (#...
  • b345ac3 Add a threadmill task queue health check (#783)
  • e3c18ed Add a django-crontask scheduler health check (#782)
  • Additional commits viewable in compare view

Updates django from 5.2.17 to 5.2.18

Commits

Updates djangorestframework from 3.18.1 to 3.18.3

Release notes

Sourced from djangorestframework's releases.

3.18.3

What's Changed

Bug fixes

Full Changelog: encode/django-rest-framework@3.18.2...3.18.3

3.18.2

What's Changed

Security

Features

Bug fixes

New Contributors

Full Changelog: encode/django-rest-framework@3.18.1...3.18.2

Commits

Updates granian from 2.8.3 to 2.8.4

Release notes

Sourced from granian's releases.

Granian 2.8.4

Patch release

Changes since 2.8.3:

  • Fix ASGI query-string encoding in access log
  • Fix IPv6 formatting in server log
  • Notify ASGI/RSGI apps of client disconnection on HTTP/2 stream reset
  • Avoid to raise errors in ASGI websockets' send calls
  • Bump dependencies
Commits

Updates commitizen from 4.19.0 to 4.19.2

Release notes

Sourced from commitizen's releases.

v4.19.2 (2026-10-07)

Fix

  • tags: give ignored tag formats precedence over version formats

v4.19.1 (2026-10-03)

Refactor

  • bump: use VersionIncrement ordering for bump detection (#2097)
Changelog

Sourced from commitizen's changelog.

v4.19.2 (2026-10-07)

Fix

  • tags: give ignored tag formats precedence over version formats

v4.19.1 (2026-10-03)

Refactor

  • bump: use VersionIncrement ordering for bump detection (#2097)
Commits
  • 57217c3 bump: version 4.19.1 → 4.19.2
  • 6ef4a34 fix(tags): give ignored tag formats precedence over version formats
  • 2bcb46f ci(deps): bump gitpython from 3.1.59 to 3.1.62 (#2103)
  • d7aabd4 ci(deps): bump virtualenv from 21.2.0 to 21.7.13 (#2102)
  • b90e2d3 ci(deps): bump urllib3 from 2.7.0 to 2.8.0 (#2101)
  • f565e81 docs(cli/screenshots): update CLI screenshots
  • b2eb0cb bump: version 4.19.0 → 4.19.1
  • 667de74 refactor(bump): use VersionIncrement ordering for bump detection (#2097)
  • 642b8be docs: add galaxy provider plugin docs (#2096)
  • cc2f522 docs: document additional_dependencies for pre-commit plugin hooks
  • Additional commits viewable in compare view

Updates peek-python from 26.1.6 to 26.1.7

Commits

Updates ruff from 0.16.9 to 0.16.10

Release notes

Sourced from ruff's releases.

0.16.10

Release Notes

Released on 2026-10-01.

Preview features

  • Add a migration guide for categories (#28087)
  • [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

  • Reduce memory used by diagnostics (#28951)

Server

  • Avoid running uv format in untrusted workspaces (#28873)

Documentation

  • Fix links to moved changelog sections and renamed mdtests (#28941)
  • Add Python 3.15 as a supported version (#28907)
  • Add ty as a type checker example (#28906)

Other changes

  • Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

Install ruff 0.16.10

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.10/ruff-installer.ps1 | iex"

Download ruff 0.16.10

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.10

Released on 2026-10-01.

Preview features

  • Add a migration guide for categories (#28087)
  • [pyupgrade] Add rule for context manager iterator annotations (UP052) (#29000)

Performance

  • Reduce memory used by diagnostics (#28951)

Server

  • Avoid running uv format in untrusted workspaces (#28873)

Documentation

  • Fix links to moved changelog sections and renamed mdtests (#28941)
  • Add Python 3.15 as a supported version (#28907)
  • Add ty as a type checker example (#28906)

Other changes

  • Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)

Contributors

Commits
  • 3265ed1 Bump version to 0.16.10 (#29055)
  • e786964 Authorize shared PR security-review workflow to publish findings (#29052)
  • a81291e [ty] Defer uv workspace discovery until after project configuration (#28525)
  • b6a74d2 [ty] Refresh uv project metadata when uv files change (#28529)
  • 41d30df Update Rust toolchain to 1.99 and MSRV to 1.97 (#29047)
  • 317e0a3 [ty] Bound nested callable signature display (#29049)
  • 8546752 [ty] Fix member lookup on union-bounded type variables (#29018)
  • 56180bc [ty] Specialize instance members once (#29043)
  • aa9a1ff [ty] Avoid stale I/O diagnostics when closing deleted files (#28988)
  • 2d25346 [ty] Improve unresolved-import documentation (#29039)
  • Additional commits viewable in compare view

Most Recent Ignore Conditions Applied to This Pull Request
Dependency Name Ignore Conditions
django [>= 6.dev0, < 7]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the package-updates group with 8 updates
c49afa8 
Bumps the package-updates group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [django-filter](https://github.com/carltongibson/django-filter) | `26.1` | `26.2` |
| [django-health-check](https://github.com/codingjoe/django-health-check) | `4.6.1` | `4.8.0` |
| [django](https://github.com/django/django) | `5.2.17` | `5.2.18` |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.18.1` | `3.18.3` |
| [granian](https://github.com/emmett-framework/granian) | `2.8.3` | `2.8.4` |
| [commitizen](https://github.com/commitizen-tools/commitizen) | `4.19.0` | `4.19.2` |
| [peek-python](https://github.com/salabim/peek) | `26.1.6` | `26.1.7` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.9` | `0.16.10` |


Updates `django-filter` from 26.1 to 26.2
- [Release notes](https://github.com/carltongibson/django-filter/releases)
- [Changelog](https://github.com/carltongibson/django-filter/blob/main/CHANGES.rst)
- [Commits](carltongibson/django-filter@26.1...26.2)

Updates `django-health-check` from 4.6.1 to 4.8.0
- [Release notes](https://github.com/codingjoe/django-health-check/releases)
- [Commits](codingjoe/django-health-check@4.6.1...4.8.0)

Updates `django` from 5.2.17 to 5.2.18
- [Commits](django/django@5.2.17...5.2.18)

Updates `djangorestframework` from 3.18.1 to 3.18.3
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.18.1...3.18.3)

Updates `granian` from 2.8.3 to 2.8.4
- [Release notes](https://github.com/emmett-framework/granian/releases)
- [Commits](emmett-framework/granian@v2.8.3...v2.8.4)

Updates `commitizen` from 4.19.0 to 4.19.2
- [Release notes](https://github.com/commitizen-tools/commitizen/releases)
- [Changelog](https://github.com/commitizen-tools/commitizen/blob/master/CHANGELOG.md)
- [Commits](commitizen-tools/commitizen@v4.19.0...v4.19.2)

Updates `peek-python` from 26.1.6 to 26.1.7
- [Changelog](https://github.com/salabim/peek/blob/main/changelog.md)
- [Commits](https://github.com/salabim/peek/commits)

Updates `ruff` from 0.16.9 to 0.16.10
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/0.16.10/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.9...0.16.10)

---
updated-dependencies:
- dependency-name: django-filter
  dependency-version: '26.2'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: package-updates
- dependency-name: django-health-check
  dependency-version: 4.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: package-updates
- dependency-name: django
  dependency-version: 5.2.18
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: package-updates
- dependency-name: djangorestframework
  dependency-version: 3.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: package-updates
- dependency-name: granian
  dependency-version: 2.8.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: package-updates
- dependency-name: commitizen
  dependency-version: 4.19.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: package-updates
- dependency-name: peek-python
  dependency-version: 26.1.7
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: package-updates
- dependency-name: ruff
  dependency-version: 0.16.10
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: package-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update Python:uv code labels Oct 14, 2026
@derkweijers
derkweijers merged commit e71f3fb into main Oct 20, 2026
3 checks passed
@derkweijers
derkweijers deleted the dependabot/uv/package-updates-f4a3e81054 branch October 20, 2026 06:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@derkweijers derkweijers

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update Python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@derkweijers