Skip to content

Bump the all-pip-dependencies group in /infra with 23 updates - #649

Merged
artoonie merged 6 commits into
mainfrom
dependabot/pip/infra/all-pip-dependencies-d3aefbf62d
Sep 14, 2026
Merged

Bump the all-pip-dependencies group in /infra with 23 updates#649
artoonie merged 6 commits into
mainfrom
dependabot/pip/infra/all-pip-dependencies-d3aefbf62d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on pycurl, boto3, django-admin-cursor-paginator, django-compressor, django-node-assets, django, selenium, requests, whitenoise, requests-mock, coverage, pylint, pylint-django, pycodestyle, djangorestframework, markdown, celery, pillow, gunicorn, sphinx, sphinx-mdinclude, sphinx-rtd-theme and mistune to permit the latest version.
Updates pycurl from 7.45.4 to 7.47.0

Release notes

Sourced from pycurl's releases.

PycURL 7.47.0

What's Changed

Other changes

  • Use dynamic SSL ports in certificate tests (patch by Jorge Rocamora)
  • Harden test_clear_assignment_inside_socket_callback_resets_socketp test (patch by Jorge Rocamora)
  • Rename index field to idx in HstsIndex to avoid shadowing (patch by Jorge Rocamora)
  • Fix test_callbacks_non_minus_one_return_continues_transfer on macOS (patch by Jorge Rocamora)
  • Use PYCURL_REQUIRE_HANDLE and PYCURL_REQUIRE_NOT_RUNNING instead of magic numbers (patch by Jorge Rocamora)
  • Convert pycurl to a Python package with the C extension renamed to pycurl._pycurl (patch by Jorge Rocamora)
  • Fix flaky CONNECT_ONLY send/recv tests by waiting on active socket readiness instead of sleeping after EAGAIN (#997) (patch by Jorge Rocamora)
  • Add PyMutex support on Python 3.13+ (patch by Jorge Rocamora)
  • Modernize ssh_key_cb_test and use a local SFTP server (patch by Scott Talbert)
  • Use set instead of dict for saving refs to easy objects in multi (patch by Jorge Rocamora)
  • Make closed as property instead a method (patch by Jorge Rocamora)
  • Add free-threaded CPython support (patch by Jorge Rocamora)
  • Add AsyncCurlMulti (patch by Jorge Rocamora)
  • Fix flaky memory_mgmt callback (patch by Jorge Rocamora)
  • Add libcurl strerror wrappers (easy/multi/share/url) (patch by Jorge Rocamora)
  • Modernize write/header tests (patch by Jorge Rocamora)
  • Implement Curl multi notify API (patch by Jorge Rocamora)
  • Pin socket callback tests to IPv4 to handle dual-stack localhost resolution (patch by Jorge Rocamora)
  • Integrate notify in AsyncCurlMulti (patch by Jorge Rocamora)
  • Review GIL management (patch by Jorge Rocamora)
  • Capture more expected warnings during tests (patch by Scott Talbert)
  • Fix/update/remove some examples (patch by Scott Talbert)
  • Fix truncated timeout value in multi timer callback (patch by Jorge Rocamora)
  • Fix incorrect argument type in debug callback (patch by Jorge Rocamora)
  • Fix some reference leaks (patch by Jorge Rocamora)
  • Ensure errors are logged in progress/xferinfo callbacks (patch by Scott Talbert)
  • Support zero-copy write/header callbacks (patch by Jorge Rocamora)
  • Evolve CurlShare with share()/unshare(), Python-level thread safety, and CURLSHcode error propagation (patch by Jorge Rocamora)
  • Fix test_default_mode_autopongs_server_ping with libcurl 8.21.0 (patches by Jorge Rocamora)

Full Changelog: pycurl/pycurl@REL_7_46_0...v7.47.0

Changelog

Sourced from pycurl's changelog.

Version 7.47.0 [requires libcurl-7.19.0 or better] - 2026-06-29

    * Use dynamic SSL ports in certificate tests (patch by Jorge Rocamora)
    * Harden test_clear_assignment_inside_socket_callback_resets_socketp test (patch by Jorge Rocamora)
    * Rename index field to idx in HstsIndex to avoid shadowing (patch by Jorge Rocamora)
    * Fix test_callbacks_non_minus_one_return_continues_transfer on macOS (patch by Jorge Rocamora)
    * Use PYCURL_REQUIRE_HANDLE and PYCURL_REQUIRE_NOT_RUNNING instead of magic numbers (patch by Jorge Rocamora)
    * Convert pycurl to a Python package with the C extension renamed to pycurl._pycurl (patch by Jorge Rocamora)
    * Fix flaky CONNECT_ONLY send/recv tests by waiting on active socket readiness instead of sleeping after EAGAIN ([#997](https://github.com/pycurl/pycurl/issues/997)) (patch by Jorge Rocamora)
    * Add PyMutex support on Python 3.13+ (patch by Jorge Rocamora)
    * Modernize ssh_key_cb_test and use a local SFTP server (patch by Scott Talbert)
    * Use set instead of dict for saving refs to easy objects in multi (patch by Jorge Rocamora)
    * Make closed as property instead a method (patch by Jorge Rocamora)
    * Add free-threaded CPython support (patch by Jorge Rocamora)
    * Add AsyncCurlMulti (patch by Jorge Rocamora)
    * Fix flaky memory_mgmt callback (patch by Jorge Rocamora)
    * Add libcurl strerror wrappers (easy/multi/share/url) (patch by Jorge Rocamora)
    * Modernize write/header tests (patch by Jorge Rocamora)
    * Implement Curl multi notify API (patch by Jorge Rocamora)
    * Pin socket callback tests to IPv4 to handle dual-stack localhost resolution (patch by Jorge Rocamora)
    * Integrate notify in AsyncCurlMulti (patch by Jorge Rocamora)
    * Review GIL management (patch by Jorge Rocamora)
    * Capture more expected warnings during tests (patch by Scott Talbert)
    * Fix/update/remove some examples (patch by Scott Talbert)
    * Fix truncated timeout value in multi timer callback (patch by Jorge Rocamora)
    * Fix incorrect argument type in debug callback (patch by Jorge Rocamora)
    * Fix some reference leaks (patch by Jorge Rocamora)
    * Ensure errors are logged in progress/xferinfo callbacks (patch by Scott Talbert)
    * Support zero-copy write/header callbacks (patch by Jorge Rocamora)
    * Evolve CurlShare with share()/unshare(), Python-level thread safety, and CURLSHcode error propagation (patch by Jorge Rocamora)
    * Fix test_default_mode_autopongs_server_ping with libcurl 8.21.0 (patches by Jorge Rocamora)

Version 7.46.0 [requires libcurl-7.19.0 or better] - 2026-04-28

    * Skip Kerberos tests on libcurl >= 8.17.0 (patch by Jacek Migacz)
    * Add arm64 wheels for Windows (patch by Finn Womack)
    * Add context manager support to pycurl.Curl objects (patch by Scott Talbert)
    * Add headerpad_max_install_names to LDFLAGS on macOS (patch by Scott Talbert)
    * Modernize pycurl multi calls in tests (patch by Jorge Rocamora)
    * Free global variables on module deletion (patch by Jorge Rocamora)
    * Implement context manager in multicurl (patch by Jorge Rocamora)
    * Add CURLINFO_ACTIVESOCKET option (patch by Jorge Rocamora)
    * Avoid circular strong references between Curl and CurlMulti (patch by Jorge Rocamora)
    * Review share API to avoid closing share handle if active easy handles (patch by Jorge Rocamora)
    * Refactor multi callback tests to use pytest fixtures (patch by Jorge Rocamora)
    * Avoid dict mutation during multi handle and handle PyDict_SetItem failure before calling into libcurl in add_handle (patch by Jorge Rocamora)
    * Update Python version requirement to 3.10-3.14 (patch by Jorge Rocamora)
    * Avoid GC ID reuse false positives in close-matrix tracker (patch by Jorge Rocamora)

... (truncated)

Commits

Updates boto3 from 1.38.38 to 1.43.90

Commits

Updates django-admin-cursor-paginator from 0.1.6 to 0.1.7

Release notes

Sourced from django-admin-cursor-paginator's releases.

v0.1.7

Confirm support for django 5.1/5.2/6.0 and python 3.12/3.13/3.14

Commits
  • 7d2e168 Confirm support for django 5.1, 5.2 and 6.0 and python 3.12/13/14 and bump ve...
  • See full diff in compare view

Updates django-compressor from 4.5.1 to 4.6.0

Changelog

Sourced from django-compressor's changelog.

Changelog

Unreleased

  • Add support for Django 6.1.
  • Drop support for Django versions before 5.2.

v4.6 (2025-11-10)

Full list of changes from v4.5.1 <https://github.com/django-compressor/django-compressor/compare/4.5.1...4.6>_

  • Fixed compatibility with latest BS4.
  • Removed top pin for rcssmin and rjsmin dependencies.
  • Avoid compressing the same node concurrently in offline compression.
  • Avoid use of deprecated ast.Constant.s
  • Officially support Django 6.0
  • Officially support Django 5.2
  • Drop support for EOL Django 5.0
  • Add support for Python 3.14.
  • Add support for Python 3.13.
  • Drop support for EOL Python 3.9.
  • Drop support for EOL Python 3.8.
Commits
  • 3ada994 Prepare 4.6.0.
  • 1baa82a Remove CI testing for EOL Django 5.0.
  • 8706a52 Add CI testing for Python 3.14 and Django 6.0.
  • 7be9ce2 Bump brotli, lxml, and coverage test dependencies.
  • d6fd813 Remove test version pinning for rcssmin and rjsmin.
  • 2b46e7d Bump actions/setup-python from 5 to 6 (#1307)
  • b97bb05 Disable bs4's multi valued attributes (#1296)
  • 4e54330 Migrate packaging to pyproject.toml (#1313)
  • 872f8d5 Remove version pinning for rcssmin and rjsmin (#1312)
  • cc38666 Drop support for Python 3.9 (#1311)
  • Additional commits viewable in compare view

Updates django-node-assets from 0.9.15 to 0.9.16

Changelog

Sourced from django-node-assets's changelog.

Release 0.9.16

  • Refactored NodeModulesFinder and ManifestNodeModulesFinder classes
  • Declared compatibility with Python 3.14 and Django 6.0
  • Dropped support for Python 3.9 and Django 5.0/5.1
Commits
  • 0f7af47 Bumped version to 0.9.16
  • 54b4065 Added release 0.9.16 notes to CHANGELOG.rst
  • 3ade363 Add support for Python 3.13, 3.14 and Django 6.0; drop Python 3.9, Django 5.0...
  • 23959e0 Refactor NodeModulesFinder and ManifestNodeModulesFinder classes
  • 9a9b82f Fix incorrect signature of handle method in npminstall management command
  • 8672016 Update copyright year to 2026 in LICENSE.txt
  • e94df8d Fix grammar in README.rst
  • 14f7344 Bumped version to 0.9.15
  • See full diff in compare view

Updates django from 5.2.16 to 6.1.1

Commits
  • 249b13d [6.1.x] Bumped version for 6.1.1 release.
  • 5f26fa8 [6.1.x] Added release date for 6.1.1.
  • fdcf78a [6.1.x] Added remaining community package mentions to the documentation.
  • 7241568 [6.1.x] Fixed #37222 -- Fixed QuerySet.distinct() crash on duplicated selecti...
  • ef3fc80 [6.1.x] Fixed #37312, Refs #36605 -- Fixed annotation preservation and key se...
  • b09cb6b [6.1.x] Clarified scope of object-level admin view permissions.
  • a6d3aa2 [6.1.x] Corrected heading hierarchy in the admin actions documentation.
  • 9031d41 [6.1.x] Clarified object-level permission checks in admin actions.
  • fc805c6 [6.1.x] Fixed #37311 -- Prevented consumption of rhs iterators in annotation ...
  • 4b0185a [6.1.x] Fixed #37300 -- Preserved parent instance hints on custom Prefetch qu...
  • Additional commits viewable in compare view

Updates selenium from 4.31.0 to 4.48.0

Release notes

Sourced from selenium's releases.

Selenium 4.48.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

New Contributors

Full Changelog: SeleniumHQ/selenium@selenium-4.47.0...selenium-4.48.0

... (truncated)

Commits
  • 27f5213 [build] Prepare for release of selenium-4.48.0 (#17956)
  • 857ff4f [build] remove cddl updates from release preparation
  • 2183264 [dotnet] [bidi] SetMediaFeaturesOverride command in Emulation module (#17953)
  • 5fd1f41 [build] unlock trunk when release preparation PR is closed without merging
  • 5b053b5 [js][bidi] Add BiDi connection-level event subscription (#17946)
  • 498c0e7 [build] alert Slack when a CDP update lands on trunk (#17950)
  • 7bfaedb [rb] reject an inbound BiDi scalar outside its union's declared arms (#17947)
  • 083869c [dotnet] [bidi] Throw in case of unknown discriminator (#17948)
  • 5b3666d [py] update new BiDi layer generation to conform to latest proposed ADR (#17942)
  • a4b3c3d [build] stop updating browsers and CDP during release preparation (#17940)
  • Additional commits viewable in compare view

Updates requests from 2.33.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates whitenoise from 6.4.0 to 6.12.0

Changelog

Sourced from whitenoise's changelog.

6.12.0 (2026-02-27)

  • Drop Python 3.9 support.
  • Fix potential unauthorised file access vulnerability in "autorefesh" mode. See PR [#684](https://github.com/evansd/whitenoise/issues/684) <https://github.com/evansd/whitenoise/pull/684>__ for details, and a reminder that autorefresh mode has always been documented as unsuitable for production use. Thanks Seth Larson for reporting.

6.11.0 (2025-09-18)

  • Support Django 6.0.

6.10.0 (2025-09-09)

  • Support Python 3.14.

6.9.0 (2025-02-06)

  • Support Django 5.2.

6.8.2 (2024-10-29)

  • Fix compression speed gains for the thread pool when running Django’s collectstatic. The thread pool had no effect due to use of a generator for the results, a refactoring introduced when reviewing the initial PR.

    Thanks to Petr Přikryl for the investigation and fix in PR [#616](https://github.com/evansd/whitenoise/issues/616) <https://github.com/evansd/whitenoise/pull/616>__.

6.8.1 (2024-10-28)

  • Raise any errors from threads in the whitenoise.compress command.

    Regression in 6.8.0. Thanks to Tom Grainger for the spotting this with a comment on PR [#484](https://github.com/evansd/whitenoise/issues/484) <https://github.com/evansd/whitenoise/pull/484#discussion_r1818989096>__.

6.8.0 (2024-10-28)

  • Drop Django 3.2 to 4.1 support.

  • Drop Python 3.8 support.

  • Support Python 3.13.

  • Fix a bug introduced in version 6.0.0 where Range requests could lead to database connection errors in other requests.

    Thanks to Per Myren for the detailed investigation and fix in PR [#612](https://github.com/evansd/whitenoise/issues/612) <https://github.com/evansd/whitenoise/pull/612>__.

... (truncated)

Commits

Updates requests-mock from 1.12.0 to 1.12.1

Release notes

Sourced from requests-mock's releases.

1.12.1

Set python_requires to >3 to prevent installation in python2 deployments.

Full Changelog: jamielennox/requests-mock@1.12.0...1.12.1

Commits

Updates coverage from 7.9.1 to 7.16.0

Release notes

Sourced from coverage's releases.

7.16.0

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266.
  • The Coverage.switch_context() method now returns the previous context.
  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268.
  • Fixes to validation of options and configuration settings:
    • Negative precision settings now always cause useful error messages (pull 2261).
    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing “Couldn’t use data file …: user-defined function raised exception” error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262).
    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren’t strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263).
    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can’t reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with “Can’t combine statement coverage data with branch data”. Each named concurrency library is now properly considered (pull 2270).
  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265).

➡️  PyPI page: coverage 7.16.0. :arrow_right:  To install: python3 -m pip install coverage==7.16.0

7.15.4

Version 7.15.4 — 2026-08-06

  • Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
  • Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
  • Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

7.15.3

Version 7.15.3 — 2026-08-02

  • Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
  • A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
  • Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

7.15.2

Version 7.15.2 — 2026-07-15

  • Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.

➡️  PyPI page: coverage 7.15.2. :arrow_right:  To install: python3 -m pip install coverage==7.15.2

7.15.1

Version 7.15.1 — 2026-07-12

  • Fix: in the HTML report with show_contexts enabled, a context label containing </script> (for example a parametrized pytest node id) could close the inline <script> element in a file page early, injecting markup. Context labels are now fully escaped. Thanks, Rajath Mohare.
  • A number of performance improvements thanks to Paul Kehrer, in pull requests 2213, 2214, 2215, 2216, 2218, 2220, and 2221.

... (truncated)

Changelog

Sourced from coverage's changelog.

Version 7.16.0 — 2026-08-28

  • When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266_.

  • The :meth:.Coverage.switch_context method now returns the previous context.

  • Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268_.

  • Fixes to validation of options and configuration settings:

    • Negative precision settings now always cause useful error messages (pull 2261_).

    • An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing "Couldn't use data file ...: user-defined function raised exception" error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262_).

    • Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren't strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263_).

    • coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can't reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with "Can't combine statement coverage data with branch data". Each named concurrency library is now properly considered (pull 2270_).

  • Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265_).

.. _pull 2261: coveragepy/coveragepy#2261 .. _pull 2262: coveragepy/coveragepy#2262 .. _pull 2263: coveragepy/coveragepy#2263 .. _pull 2265: coveragepy/coveragepy#2265 .. _issue 2266: coveragepy/coveragepy#2266 .. _pull 2268: coveragepy/coveragepy#2268

... (truncated)

Commits
  • 3e9fc16 docs: prep for 7.16.0
  • 38be8d1 build: control check-manifest explicitly
  • 8eb1266 docs(build): no longer commit sample_html
  • 1a8b3fa docs: remove sample_html
  • aeaa79b docs: linklint is now sphinx-linklint
  • d5eaf3f test: a branchless way to re-add extensions
  • 57e52fd docs: adjust CHANGES for #2270
  • b9d304d fix: check for multiprocessing in a --concurrency list (#2270)
  • a6ef928 chore: make upgrade
  • 070461f chore: bump the action-dependencies group with 4 updates (#2271)
  • Additional commits viewable in compare view

Updates pylint from 3.3.7 to 4.0.8

Release notes

Sourced from pylint's releases.

v4.0.8

What's new in Pylint 4.0.8?

Release date: 2026-08-29

False Positives Fixed

  • Fix a false positive for :ref:unspecified-encoding when an open call uses a mode argument that cannot be inferred.

    Closes #10201

  • Fix a false positive for invalid-name (C0103) on names assigned in an if __name__ == "__main__": block. Such a block reads like a script body, so a name there is now accepted if it matches either the constant or the variable naming style.

    Closes #10766

  • Fix false positives for :ref:invalid-str-returned, :ref:invalid-repr-returned, :ref:invalid-format-returned, :ref:invalid-bytes-returned, :ref:invalid-hash-returned, :ref:invalid-index-returned, :ref:invalid-length-returned, :ref:invalid-length-hint-returned, :ref:invalid-getnewargs-returned and :ref:invalid-getnewargs-ex-returned when the returned value is an instance of a subclass of the expected builtin type, such as self in a str subclass or a namedtuple.

    Closes #11306

  • Fix false positives for :ref:bad-string-format-type when the argument is an instance of a subclass of int, float or str, such as bool or an IntEnum member formatted with %d.

    Closes #11315

False Negatives Fixed

  • redundant-unittest-assert now also flags assertEqual and assertNotEqual when both compared values are constants, e.g. self.assertEqual(5, 5).

    Closes #11321

Other Bug Fixes

... (truncated)

Commits
  • ecb84ba Bump pylint to 4.0.8, update changelog (#11355)
  • 989e9c5 [Backport maintenance/4.0.x] Support isort 9 (#11354)
  • 8c1ee95 Flag assertEqual and assertNotEqual between two constants in W1503
  • eadefe3 Fix false positive bad-string-format-type for subclasses of builtin types
  • db00e3b [Backport maintenance/4.0.x] fix(docparams): guard decorated_with_property ag...
  • 7909c17 Accept subclass instances in the invalid-*-returned checks

@dependabot
Bump the all-pip-dependencies group in /infra with 23 updates
9b263de 
Updates the requirements on [pycurl](https://github.com/pycurl/pycurl), [boto3](https://github.com/boto/boto3), [django-admin-cursor-paginator](https://github.com/a1tus/django-admin-cursor-paginator), [django-compressor](https://github.com/django-compressor/django-compressor), [django-node-assets](https://github.com/whitespy/django-node-assets), [django](https://github.com/django/django), [selenium](https://github.com/SeleniumHQ/Selenium), [requests](https://github.com/psf/requests), [whitenoise](https://github.com/evansd/whitenoise), [requests-mock](https://github.com/jamielennox/requests-mock), [coverage](https://github.com/coveragepy/coveragepy), [pylint](https://github.com/pylint-dev/pylint), [pylint-django](https://github.com/pylint-dev/pylint-django), [pycodestyle](https://github.com/PyCQA/pycodestyle), [djangorestframework](https://github.com/encode/django-rest-framework), [markdown](https://github.com/Python-Markdown/markdown), [celery](https://github.com/celery/celery), [pillow](https://github.com/python-pillow/Pillow), [gunicorn](https://github.com/benoitc/gunicorn), [sphinx](https://github.com/sphinx-doc/sphinx), [sphinx-mdinclude](https://github.com/omnilib/sphinx-mdinclude), [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) and [mistune](https://github.com/lepture/mistune) to permit the latest version.

Updates `pycurl` from 7.45.4 to 7.47.0
- [Release notes](https://github.com/pycurl/pycurl/releases)
- [Changelog](https://github.com/pycurl/pycurl/blob/master/ChangeLog)
- [Commits](https://github.com/pycurl/pycurl/commits/v7.47.0)

Updates `boto3` from 1.38.38 to 1.43.90
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.38.38...1.43.90)

Updates `django-admin-cursor-paginator` from 0.1.6 to 0.1.7
- [Release notes](https://github.com/a1tus/django-admin-cursor-paginator/releases)
- [Commits](a1tus/django-admin-cursor-paginator@v0.1.6...v0.1.7)

Updates `django-compressor` from 4.5.1 to 4.6.0
- [Changelog](https://github.com/django-compressor/django-compressor/blob/develop/docs/changelog.txt)
- [Commits](django-compressor/django-compressor@4.5.1...4.6)

Updates `django-node-assets` from 0.9.15 to 0.9.16
- [Changelog](https://github.com/whitespy/django-node-assets/blob/master/CHANGELOG.rst)
- [Commits](whitespy/django-node-assets@0.9.15...0.9.16)

Updates `django` from 5.2.16 to 6.1.1
- [Commits](django/django@5.2.16...6.1.1)

Updates `selenium` from 4.31.0 to 4.48.0
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.31.0...selenium-4.48.0)

Updates `requests` from 2.33.0 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.33.0...v2.34.2)

Updates `whitenoise` from 6.4.0 to 6.12.0
- [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst)
- [Commits](evansd/whitenoise@6.4.0...6.12.0)

Updates `requests-mock` from 1.12.0 to 1.12.1
- [Release notes](https://github.com/jamielennox/requests-mock/releases)
- [Commits](jamielennox/requests-mock@1.12.0...1.12.1)

Updates `coverage` from 7.9.1 to 7.16.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.9.1...7.16.0)

Updates `pylint` from 3.3.7 to 4.0.8
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.3.7...v4.0.8)

Updates `pylint-django` from 2.6.1 to 2.8.0
- [Release notes](https://github.com/pylint-dev/pylint-django/releases)
- [Changelog](https://github.com/pylint-dev/pylint-django/blob/master/CHANGELOG.rst)
- [Commits](pylint-dev/pylint-django@v2.6.1...v2.8.0)

Updates `pycodestyle` from 2.13.0 to 2.14.0
- [Release notes](https://github.com/PyCQA/pycodestyle/releases)
- [Changelog](https://github.com/PyCQA/pycodestyle/blob/main/CHANGES.txt)
- [Commits](PyCQA/pycodestyle@2.13.0...2.14.0)

Updates `djangorestframework` from 3.17.2 to 3.18.1
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.17.2...3.18.1)

Updates `markdown` from 3.8.1 to 3.10.3
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.8.1...3.10.3)

Updates `celery` from 5.5.3 to 5.6.3
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/v5.6.3/Changelog.rst)
- [Commits](celery/celery@v5.5.3...v5.6.3)

Updates `pillow` to 12.3.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@1.0...12.3.0)

Updates `gunicorn` from 23.0.0 to 26.2.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@23.0.0...26.2.0)

Updates `sphinx` to 9.1.0
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinx@v0.1.61611...v9.1.0)

Updates `sphinx-mdinclude` from 0.5.3 to 0.6.2
- [Changelog](https://github.com/omnilib/sphinx-mdinclude/blob/main/CHANGELOG.md)
- [Commits](omnilib/sphinx-mdinclude@v0.5.3...v0.6.2)

Updates `sphinx-rtd-theme` from 1.2.2 to 3.1.0
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](readthedocs/sphinx_rtd_theme@1.2.2...3.1.0)

Updates `mistune` to 3.3.4
- [Release notes](https://github.com/lepture/mistune/releases)
- [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst)
- [Commits](lepture/mistune@v0.1.0...v3.3.4)

---
updated-dependencies:
- dependency-name: pycurl
  dependency-version: 7.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: boto3
  dependency-version: 1.43.90
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: django-admin-cursor-paginator
  dependency-version: 0.1.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
- dependency-name: django-compressor
  dependency-version: 4.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: django-node-assets
  dependency-version: 0.9.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
- dependency-name: django
  dependency-version: 6.1.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-pip-dependencies
- dependency-name: selenium
  dependency-version: 4.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: whitenoise
  dependency-version: 6.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: requests-mock
  dependency-version: 1.12.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-dependencies
- dependency-name: coverage
  dependency-version: 7.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: pylint
  dependency-version: 4.0.8
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-pip-dependencies
- dependency-name: pylint-django
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: pycodestyle
  dependency-version: 2.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: djangorestframework
  dependency-version: 3.18.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: markdown
  dependency-version: 3.10.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: celery
  dependency-version: 5.6.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: pillow
  dependency-version: 12.3.0
  dependency-type: direct:production
  dependency-group: all-pip-dependencies
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-pip-dependencies
- dependency-name: sphinx
  dependency-version: 9.1.0
  dependency-type: direct:production
  dependency-group: all-pip-dependencies
- dependency-name: sphinx-mdinclude
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-dependencies
- dependency-name: sphinx-rtd-theme
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-pip-dependencies
- dependency-name: mistune
  dependency-version: 3.3.4
  dependency-type: direct:production
  dependency-group: all-pip-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 12, 2026
artoonie and others added 5 commits September 14, 2026 11:25
@artoonie @claude
Fix test and lint breakage from the selenium and pylint bumps
9534e66 
Selenium 4.32+ removed get_log() from webdriver.Remote, which the SauceLabs
tests use. The underlying getLog command is still registered on every driver,
so call it directly through execute().

Pylint 4 rejects the removed suggestion-mode option, applies constant naming
to every module-level assignment, and can't infer selenium's lazily-loaded
webdriver.Chrome/Remote (false not-callable errors). Drop the option, mark
the celery/test names that must stay lowercase, and import the concrete
WebDriver classes directly.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0144rNCqqKzcJbNHVpCTWqUX
@artoonie @claude
Update sidecar test for Django 6's https URL default
0b33557 
URLField now assumes https:// for scheme-less input, so the rendered
Ballotpedia source link changed from http://test.com to https://test.com.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0144rNCqqKzcJbNHVpCTWqUX
@artoonie @claude
Build docs on Python 3.13 so Read the Docs can install Django 6
c7a2f0f 
Django 6 requires Python 3.12+, and the repo already pins 3.13.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0144rNCqqKzcJbNHVpCTWqUX
@artoonie @claude
Give the docs build an in-memory database
fdad6df 
Sphinx 9's autodoc calls repr() on class attributes like the REST views'
`queryset = Model.objects.all()`, which runs a query. Read the Docs has no
database, so the build crashed with "no such table". Point the docs build
at a migrated in-memory SQLite database instead.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0144rNCqqKzcJbNHVpCTWqUX
@artoonie @claude
Retrigger CI
d576f8a 
The previous run failed after a docs-only change; the run before it passed.

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0144rNCqqKzcJbNHVpCTWqUX
@codecov

codecov Bot commented Sep 14, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 68.75000% with 5 lines in your changes missing coverage. Please review.
✅ Project coverage is 96.08%. Comparing base (afa1e3e) to head (d576f8a).
⚠️ Report is 5 commits behind head on main.

Files with missing lines Patch % Lines
visualizer/tasks.py 0.00% 3 Missing ⚠️
common/testUtils.py 66.66% 1 Missing ⚠️
movie/tasks.py 66.66% 1 Missing ⚠️
Additional details and impacted files

Impacted file tree graph

@@            Coverage Diff             @@
##             main     #649      +/-   ##
==========================================
- Coverage   96.13%   96.08%   -0.05%     
==========================================
  Files         132      132              
  Lines        6358     6363       +5     
==========================================
+ Hits         6112     6114       +2     
- Misses        246      249       +3
Files with missing lines Coverage Δ
rcvis/celeryconfig.py 90.00% <100.00%> (ø)
visualizer/tests/__init__.py 100.00% <100.00%> (ø)
visualizer/tests/liveServerTestBaseClass.py 88.43% <100.00%> (+0.13%) ⬆️
visualizer/tests/testSidecar.py 100.00% <ø> (ø)
common/testUtils.py 95.00% <66.66%> (+0.03%) ⬆️
movie/tasks.py 75.43% <66.66%> (+0.43%) ⬆️
visualizer/tasks.py 17.14% <0.00%> (-0.51%) ⬇️

... and 1 file with indirect coverage changes

Continue to review full report in Codecov by Harness.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update afa1e3e...d576f8a. Read the comment docs.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@artoonie
artoonie merged commit 40d9d70 into main Sep 14, 2026
7 checks passed
@artoonie
artoonie deleted the dependabot/pip/infra/all-pip-dependencies-d3aefbf62d branch September 14, 2026 16:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@artoonie artoonie artoonie approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@artoonie