Skip to content

chore(deps): bump the dependencies group across 2 directories with 18 updates - #440

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/docs/dependencies-05df1c7315
Open

chore(deps): bump the dependencies group across 2 directories with 18 updates#440
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/docs/dependencies-05df1c7315

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 23, 2026

Copy link
Copy Markdown

Bumps the dependencies group with 1 update in the /docs directory: mkdocstrings.
Bumps the dependencies group with 17 updates in the /src/backend directory:

Package From To
django 5.2.17 6.1.2
boto3 1.43.110 1.43.114
botocore 1.43.110 1.43.114
django-allauth 65.19.6 65.19.7
django-money 3.6.1 3.6.2
django-otp 1.3.0 1.7.4
fonttools 4.66.1 4.67.0
markdown 3.11 3.11.1
platformdirs 4.12.4 4.13.3
pydantic 2.14.0 2.14.1
pydantic-core 2.50.0 2.50.1
pydyf 0.12.1 0.13.0
pypdf 6.20.0 6.20.1
sentry-sdk 2.71.0 2.72.0
wrapt 2.5.0 2.5.1
pluggy 1.6.0 1.7.0
ty 0.0.76 0.0.88

Updates mkdocstrings from 1.0.6 to 1.0.7

Release notes

Sourced from mkdocstrings's releases.

1.0.7

1.0.7 - 2026-10-10

Compare with 1.0.6

Build

  • Drop support for Python 3.10 (2c2cbb1 by Timothée Mazzucotelli).

Bug Fixes

Changelog

Sourced from mkdocstrings's changelog.

1.0.7 - 2026-10-10

Compare with 1.0.6

Build

  • Drop support for Python 3.10 (2c2cbb1 by Timothée Mazzucotelli).

Bug Fixes

Commits

Updates django from 5.2.17 to 6.1.2

Commits

Updates boto3 from 1.43.110 to 1.43.114

Commits
  • 432fa17 Merge branch 'release-1.43.114'
  • bf4aed7 Bumping version to 1.43.114
  • fa3e3f2 Add changelog entries from botocore
  • 69ed308 Merge branch 'release-1.43.113'
  • 3abaa49 Merge branch 'release-1.43.113' into develop
  • 741f8d9 Bumping version to 1.43.113
  • ad1c6b5 Add changelog entries from botocore
  • 9ca5e36 Merge branch 'release-1.43.112'
  • f5581ba Merge branch 'release-1.43.112' into develop
  • 6f065c3 Bumping version to 1.43.112
  • Additional commits viewable in compare view

Updates botocore from 1.43.110 to 1.43.114

Commits
  • fca45a8 Merge branch 'release-1.43.114'
  • d178cb7 Bumping version to 1.43.114
  • b7ed9a9 Update endpoints model
  • cd68b6e Update to latest models
  • 44a636c Raise the Request/Response Syntax doc section limit to 2,000 lines (#3823)
  • 5f4e0c0 Merge branch 'release-1.43.113'
  • 42f5cfb Merge branch 'release-1.43.113' into develop
  • 0bc9a33 Bumping version to 1.43.113
  • d7ce073 Update endpoints model
  • 6b11f3e Update to latest models
  • Additional commits viewable in compare view

Updates django-allauth from 65.19.6 to 65.19.7

Commits

Updates django-money from 3.6.1 to 3.6.2

Changelog

Sourced from django-money's changelog.

Changelog

Unreleased_

...

Commits

Updates django-otp from 1.3.0 to 1.7.4

Changelog

Sourced from django-otp's changelog.

v1.7.4 - October 08, 2026 - Form improvement

  • [#194](https://github.com/django-otp/django-otp/issues/194)_: Fix otp_device select silently defaulting to a device instead of requiring an explicit choice (Varun Juneja)

.. _#194: django-otp/django-otp#194

v1.7.3 - September 06, 2026 - Admin asset fixes

  • [#191](https://github.com/django-otp/django-otp/issues/191)_: Improve admin page compatibility with CSP (Varun Juneja)

.. _#191: django-otp/django-otp#191

v1.7.2 - September 03, 2026 - Fix throttling overflow

  • [#190](https://github.com/django-otp/django-otp/issues/190)_: OverflowError on the admin login page when a device's throttling failure count is high (Varun Juneja)

.. _#190: django-otp/django-otp#190

v1.7.1 - September 02, 2026 - Form improvement

  • Routine test matrix update
  • [#188](https://github.com/django-otp/django-otp/issues/188)_: Fix authentication form inappropriately triggering rate-limiting

Thanks to Varun Juneja.

.. _#188: django-otp/django-otp#188

v1.7.0 - January 07, 2026 - Async support

  • [#185](https://github.com/django-otp/django-otp/issues/185)_: Make OTPMiddleware async capable

Thanks to Aljosha Papsch.

.. _#185: django-otp/django-otp#185

v1.6.3 - October 25, 2025 - Spanish update

... (truncated)

Commits
  • fe33c51 Version 1.7.4
  • 8cd4500 Fix #193: give the otp_device select a blank default so it can't silently pic...
  • 88cf497 Version 1.7.3
  • 4f8a5d2 Add a justfile
  • 9b64aaf Move admin template inline styles/scripts into static files for CSP compatibi...
  • a3be9e8 Version 1.7.2
  • 2db531b Cap the exponential throttle delay so a high failure count doesn't overflow
  • 3bc09de Version 1.7.1
  • 8e32455 Test matrix update
  • 82dafe2 Fix #186: Remove use of match_token from authentication forms (#188)
  • Additional commits viewable in compare view

Updates fonttools from 4.66.1 to 4.67.0

Release notes

Sourced from fonttools's releases.

4.67.0

  • [varLib] Support decreasing design-space axis mappings, via a new keyword-only allow_decreasing argument to models.normalizeValue (#3970, #4217, #4243).
  • [designspaceLib] Allow partial DesignSpace v5 axis subsets: omitted range attributes on an <axis-subset> are taken from the parent axis, as the spec says (#4205).
  • [designspaceLib] Fix DesignSpaceDocument.normalize() for mapped axes: axis bounds and rule conditions are now normalized from their original values (#4218).
  • [designspaceLib] splitInterpolable and splitVariableFonts now warn when a source or instance is dropped because it lies outside the document's own axes, instead of silently discarding it (#4244).
  • [varLib.instancer] Add support for instancing variable COLRv1 fonts (#2699, #4279).
  • [varLib.instancer] Apply VVAR vertical-origin deltas to VORG, and use OpenType rounding for instanced advances and vertical origins (#4221).
  • [varLib.instancer] Keep a universal FeatureVariations record when pinning removes its last condition but other axes remain (#4247).
  • [varLib.instancer] Preserve ppem Device corrections in GDEF, BASE, GPOS and JSTF instead of asserting on them (#4290).
  • [varLib.instancer] Allow requesting an axis's original range on VARC fonts (#4280).
  • [varLib.instancer, subset] Fold, remove or remap MATH VariationIndex devices when instancing, subsetting the GDEF store or optimizing it (#4288).
  • [varLib] Raise ValueError: Missing required table fvar from varLib.mutator and the instancer CLI on a static font, instead of a bare KeyError (#3751, #4300).
  • [featureVars] When adding rvrn, also shift lookup indices inside existing FeatureVariations (#4233). Handle null ConditionSet and FeatureTableSubstitution offsets when building, subsetting and instancing (#4234, #4235). Keep FeatureTableSubstitution records sorted after merging new ones into an existing record (#4248).
  • [ttLib] Fix FeatureParams (size, ssXX, cvXX) in FeatureVariations alternate feature tables, which failed to compile and round-trip (#3623, #4278).
  • [ttLib] Fully decode lazily loaded ligatures, SinglePos and PairPos arrays during recursive decompilation, so reorderGlyphs() on a lazy font no longer corrupts or asserts on them (#4231, #4232).
  • [VARC] Update the variation-store binary format to follow harfbuzz/boring-expansion-spec#175: SparseVarRegionList.RegionCount is uint32, sparse axes use Offset32 and MultiVarData items are stored in an INDEX. VARC fonts built with earlier fontTools versions must be rebuilt (#4219).
  • [VARC] Several fixes: derive component conditions from conditionIndex (#4237), set the implicit scaleY when importing XML (#4238), report the font's current coordinates for components that reset unspecified axes (#4239), and keep inherited coordinates when drawing CFF2 VARC components (#4236).
  • [varLib] buildMultiVarData accepts flattened per-region vector tuples (#4245).
  • [otConverters] Bounds-check CFF2 INDEX count and offSize on read, raising TTLibError instead of allocating huge lazy lists (#4220).
  • [ttLib] Handle empty packed deltas when OPTIMIZE_FONT_SPEED is set (#4241).
  • [scaleUpem] Scale per-glyph VORG origins (#4222); fix VARC scaling for static fonts and condition variations (#4223); don't mutate the shared default CFF FontMatrix (#4251, #4252).
  • [cmap] Fix format 2 compilation when all codes are single-byte (#1524, #4211) or all single-byte codes map to .notdef (#4215). Formats 2 and 4 now reject glyph IDs above 65535 instead of wrapping them (#4226). Split format 14 default UVS ranges longer than 256 codepoints (#4229). Empty format 12 and 13 subtables round-trip (#4246).
  • [glyf] Use unsigned instruction lengths, so programs of 32768-65535 bytes compile and decompile correctly (#4227). Keep instructions in zero-contour glyphs (#4228).
  • [pens] Fix cubic off-curve detection in TTGlyphPointPen across contour starts (#4224). Glyph.drawPoints() now raises NotImplementedError for an all-off-curve cubic contour, which the point pen protocol cannot express (#3191, #4225). RoundingPen passes the all-off-curve None sentinel through (#4311, #4312).
  • [CFF2] Preserve operands when a blend has zero regions (#4240).
  • [cffLib] Read CFF font names as Latin-1, matching how they are written (#4253). Deleting a CFF dict attribute now actually removes it (#2725, #4264).
  • [CFF2ToCFF] Fix conversion of fonts with local subroutines (#4258). A CFF2 table with a single FontDict is now converted to a name-keyed CFF font that keeps its glyph names (#3890, #4265).
  • [subset] Handle a null GDEF variation store (#4230).
  • [merge] Support merging fonts that both have a MATH table (#3823, #4257).
  • [feaLib] Reject the same mark class used twice in one anchor list (#3628, #4255). Don't crash on value records whose devices are all NULL (#2396, #4261). Pad a short OS/2 Vendor with spaces (#4259).
  • [feaLib] Raise FeatureLibError with a location, instead of a bare Python error, for: a BASE script list without a matching tag list (#4263), a UnicodeRange bit outside 0-127 (#4266), a name string that cannot be decoded (#4267), a STAT axis location with no or too many values (#4268), and a non-ASCII OS/2 Vendor (#4269).
  • [name] Fix the BCP 47 tags of some Mac and Windows language IDs, e.g. es was mapped to Mac Estonian (#3733, #4256). getDebugName prefers the Windows English name over the Mac one (#3969, #4273).
  • [post] Don't crash on a format 2.0 table with numGlyphs set to 0 (#3060, #4274).
  • [VDMX] Recompute numRecs and numRatios when compiling (#4293).
  • [Silf] Fix compiling a Silf table that was decompiled from binary (#4294).
  • [woff2] Preserve minorVersion when copying flavor data (#4249, #4250).
  • [ttGlyphSet] Compute glyph width lazily for glyf variable fonts without HVAR, so .width is correct before drawing (#3964, #4260).
  • [varLib.interpolatable] Respect designspace source layers (#3951, #4275); fix --json output with SciPy (#3870, #4276).
  • [misc.psLib] Fix tokenizing of escaped parentheses in PostScript strings (#4207).
  • [svgLib] Raise ValueError instead of IndexError on a truncated path command (#4254).
  • [misc.transform] Preserve the direction of the remaining axis when decomposing a transform whose first column is zero (#4242).
  • [misc.textTools] Tag.__ne__ returns NotImplemented for unsupported types (#4305, #4306).
  • [misc.dictTools] hashdict rejects in-place union (|=) (#4313, #4314).
  • [misc.xmlReader] Close owned input streams when parsing fails (#4298).
  • [misc.filesystem] WriteZipFS.close() can be called more than once (#4309, #4310).
  • [EBDT] Keep EBDT/CBDT glyph metrics after probing a missing attribute (#3806, #4216).
Changelog

Sourced from fonttools's changelog.

4.67.0 (released 2026-10-14)

  • [varLib] Support decreasing design-space axis mappings, via a new keyword-only allow_decreasing argument to models.normalizeValue (#3970, #4217, #4243).
  • [designspaceLib] Allow partial DesignSpace v5 axis subsets: omitted range attributes on an <axis-subset> are taken from the parent axis, as the spec says (#4205).
  • [designspaceLib] Fix DesignSpaceDocument.normalize() for mapped axes: axis bounds and rule conditions are now normalized from their original values (#4218).
  • [designspaceLib] splitInterpolable and splitVariableFonts now warn when a source or instance is dropped because it lies outside the document's own axes, instead of silently discarding it (#4244).
  • [varLib.instancer] Add support for instancing variable COLRv1 fonts (#2699, #4279).
  • [varLib.instancer] Apply VVAR vertical-origin deltas to VORG, and use OpenType rounding for instanced advances and vertical origins (#4221).
  • [varLib.instancer] Keep a universal FeatureVariations record when pinning removes its last condition but other axes remain (#4247).
  • [varLib.instancer] Preserve ppem Device corrections in GDEF, BASE, GPOS and JSTF instead of asserting on them (#4290).
  • [varLib.instancer] Allow requesting an axis's original range on VARC fonts (#4280).
  • [varLib.instancer, subset] Fold, remove or remap MATH VariationIndex devices when instancing, subsetting the GDEF store or optimizing it (#4288).
  • [varLib] Raise ValueError: Missing required table fvar from varLib.mutator and the instancer CLI on a static font, instead of a bare KeyError (#3751, #4300).
  • [featureVars] When adding rvrn, also shift lookup indices inside existing FeatureVariations (#4233). Handle null ConditionSet and FeatureTableSubstitution offsets when building, subsetting and instancing (#4234, #4235). Keep FeatureTableSubstitution records sorted after merging new ones into an existing record (#4248).
  • [ttLib] Fix FeatureParams (size, ssXX, cvXX) in FeatureVariations alternate feature tables, which failed to compile and round-trip (#3623, #4278).
  • [ttLib] Fully decode lazily loaded ligatures, SinglePos and PairPos arrays during recursive decompilation, so reorderGlyphs() on a lazy font no longer corrupts or asserts on them (#4231, #4232).
  • [VARC] Update the variation-store binary format to follow harfbuzz/boring-expansion-spec#175: SparseVarRegionList.RegionCount is uint32, sparse axes use Offset32 and MultiVarData items are stored in an INDEX. VARC fonts built with earlier fontTools versions must be rebuilt (#4219).
  • [VARC] Several fixes: derive component conditions from conditionIndex (#4237), set the implicit scaleY when importing XML (#4238), report the font's current coordinates for components that reset unspecified axes (#4239), and keep inherited coordinates when drawing CFF2 VARC components (#4236).
  • [varLib] buildMultiVarData accepts flattened per-region vector tuples (#4245).
  • [otConverters] Bounds-check CFF2 INDEX count and offSize on read, raising TTLibError instead of allocating huge lazy lists (#4220).
  • [ttLib] Handle empty packed deltas when OPTIMIZE_FONT_SPEED is set (#4241).
  • [scaleUpem] Scale per-glyph VORG origins (#4222); fix VARC scaling for static fonts and condition variations (#4223); don't mutate the shared default CFF FontMatrix (#4251, #4252).
  • [cmap] Fix format 2 compilation when all codes are single-byte (#1524, #4211) or

... (truncated)

Commits
  • 16f88cb Release 4.67.0
  • 5049c83 Update NEWS.rst [skip ci]
  • fdfd15f Merge pull request #4314 from xiehuanyi/fix/hashdict-inplace-union-20261014
  • 87ee7d3 Merge pull request #4312 from xiehuanyi/fix/roundingpen-offcurve-none-20261014
  • e6e65d3 [dictTools] Reject in-place union on hashdict
  • 10cfefe Merge pull request #4310 from xiehuanyi/fix/writezipfs-idempotent-close-20261014
  • 06157e4 Merge pull request #4300 from CAOShurong/codex/3751-missing-fvar
  • 2940a2e Merge pull request #4298 from xiehuanyi/fix-xml-reader-failure-cleanup
  • 821805d Merge pull request #4306 from xiehuanyi/fix/tag-notimplemented-comparison-202...
  • 85538d6 [roundingPen] Preserve all-off-curve quadratic sentinel
  • Additional commits viewable in compare view

Updates markdown from 3.11 to 3.11.1

Release notes

Sourced from markdown's releases.

Release 3.11.1

Fixed

  • Update serializer to be non-recursive (#1644).
  • Improve ancestor handling in the inline Treeprocessor (#1646).
  • Keep a raw HTML comment inside an inline HTML element that closes in the same paragraph, instead of splitting the paragraph around it (#1643).
  • Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#1647).
  • Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#1651).
  • Complete rework of emphasis handling to improve nested emphasis handling better (#1632).
Changelog

Sourced from markdown's changelog.

[3.11.1] - 2026-10-13

Fixed

  • Update serializer to be non-recursive (#1644).
  • Improve ancestor handling in the inline Treeprocessor (#1646).
  • Keep a raw HTML comment inside an inline HTML element that closes in the same paragraph, instead of splitting the paragraph around it (#1643).
  • Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#1647).
  • Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#1651).
  • Complete rework of emphasis handling to improve nested emphasis handling better (#1632).

[3.11.0] - 2026-09-25

Changed

  • Inline processors now resume searching after the previous match, improving performance for repeated inline patterns (#1619).
  • Officially support Python 3.15 and drop support for Python 3.10
  • Walk backtick runs in BacktickInlineProcessor without a regex (#1620).
  • Switch static site generator for documentation from MkDocs to Zensical (#1627, #1635, #1637, and #1638).

Fixed

  • Ensure removing Abbreviations does not raise an error (#1634).
  • Fix an issue with excessive backtracking when matching inline code blocks (#1617).
  • md_in_html now honors tags added to Markdown.block_level_elements after the extension is loaded (#1246).
  • Fix quadratic-time regex backtracking in ReferenceProcessor when a link reference definition has no URL, e.g. a line consisting only of [id]: followed by many trailing spaces (#798).
  • Document attr_list usage for def_list (#1123).

[3.10.3] - 2026-07-30

Fixed

  • Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
  • Add AI Policy to Contributing Guide.
  • Officially document all included extensions as being in maintenance mode.
  • Link the Extension API documentation to the API Reference (#1612).

[3.10.2] - 2026-02-09

Fixed

  • Fix a regression related to comment handling (#1590).
  • More reliable fix for </ (#1593).

... (truncated)

Commits
  • 2258b48 Bump version to 3.11.1
  • 6f825aa Rewrite emphasis handling
  • 0bf535b Keep a comment inside raw inline HTML in the same paragraph
  • 3ade80d Add playground to docs
  • ee57673 docs/extensions/tables.md: Fix header formatting
  • 7c265bc Ensure that unterminated HTML tags do not cause text to be dropped
  • 7a29324 Fix inline HTML case
  • 3002575 Fix ancestor handling
  • b2125da Serialize HTML non-recursively
  • See full diff in compare view

Updates platformdirs from 4.12.4 to 4.13.3

Release notes

Sourced from platformdirs's releases.

4.13.3

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.2...4.13.3

4.13.2

  • Normalize user_fonts_dir when XDG_DATA_HOME ends with a separator. #619

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.1...4.13.2

4.13.1

  • Free the path buffer from SHGetKnownFolderPath when the known-folder lookup fails. #618
  • Preserve literal backslashes before ordinary characters in double-quoted user-dirs.dirs paths instead of removing them.

PyPI release

Full Changelog: tox-dev/platformdirs@4.13.0...4.13.1

4.13.0

  • Detect Homebrew Python for the MacOS site directories under python:-S, which leaves base_prefix on the Cellar keg, and for the python-freethreading formula - by sricharanreddycheruku. #612
  • Use Python 3.15 for development and automation. #613

PyPI release

Full Changelog: tox-dev/platformdirs@4.12.4...4.13.0

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.13.5 (2026-10-19)

  • Publish a GitHub Release with changelog notes, a PyPI link, and a version comparison after each PyPI release. :pr:631

4.13.4 (2026-10-17)

  • Require a complete files path segment when locating Android app directories from sys.path. :pr:621
  • Keep root directory tests independent of inherited XDG environment variables. :pr:622
  • Raise RuntimeError when iOS cannot resolve the home directory, rather than returning paths rooted at a literal ~. :pr:624
  • Keep user directory strings, paths and iterators consistent inside isolated_dirs when Unix root enables use_site_for_root. Restore root redirection when the context exits. :pr:625
  • Raise RuntimeError when the Windows Projects directory cannot resolve the home directory, rather than returning a path rooted at a literal ~. :pr:627
  • Correct the contributor guide to name ty as the type checker used by the type environment. :pr:623

4.13.3 (2026-10-16)

4.13.2 (2026-10-16)

  • Normalize user_fonts_dir when XDG_DATA_HOME ends with a separator. :pr:619

4.13.1 (2026-10-15)

  • Free the path buffer from SHGetKnownFolderPath when the known-folder lookup fails. :pr:618
  • Preserve literal backslashes before ordinary characters in double-quoted user-dirs.dirs paths instead of removing them.

4.13.0 (2026-10-10)

... (truncated)

Commits
  • 97a8dbc Release 4.13.3
  • ca20f65 Release 4.13.2
  • 9a8eb24 fix: normalize XDG user fonts path at filesystem root (#619)
  • a477a0a 🔧 build(yaml): check out YAML with LF so yamlfmt passes on Windows (#620)
  • c6f77b5 Release 4.13.1
  • bafc70e 🐛 fix(windows): free known-folder buffer on lookup errors (#618)
  • 2d177b1 build(deps): bump the all group with 2 updates (#616)
  • 7ee4e4a [pre-commit.ci] pre-commit autoupdate (#615)
  • dba53cd fix: preserve literal backslashes in quoted user directories (#614)
  • f05fb4e Release 4.13.0
  • Additional commits viewable in compare view

Updates pydantic from 2.14.0 to 2.14.1

Release notes

Sourced from pydantic's releases.

v2.14.1 2026-10-11

What's Changed

Performance

  • Avoid Python tuple allocation during model fields validation by @​Viicos in #13955
  • Avoid unnecessary extra dict allocation in model validation by @​Viicos in #13956

Fixes

Full Changelog: pydantic/pydantic@v2.14.0...v2.14.1

Changelog

Sourced from pydantic's changelog.

Commits
  • b2212c7 Prepare release v2.14.1
  • 968fb2b Fix docs conversion table
  • 6adc8b3 Support named tuples in Sequence validation
  • 7637fbc Reject out-of-range int inputs for timedelta
  • dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
  • e2456d3 Support closed and extra_items via inheritance in TypedDict
  • 317655d Harden CI security
  • 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
  • 43681ab Bump samuelcolvin/check-python-version action to v5.1
  • d6bc53a Avoid unnecessary extra dict allocation in model validation
  • See full diff in compare view

Updates pydantic-core from 2.50.0 to 2.50.1

Commits
  • b2212c7 Prepare release v2.14.1
  • 968fb2b Fix docs conversion table
  • 6adc8b3 Support named tuples in Sequence validation
  • 7637fbc Reject out-of-range int inputs for timedelta
  • dfdbfcb Enforce the max_digits whole-digits limit in the Python Decimal validator
  • e2456d3 Support closed and extra_items via inheritance in TypedDict
  • 317655d Harden CI security
  • 3ba1dd4 Fix TypeError on ForwardRef on Python 3.10.0
  • 43681ab Bump samuelcolvin/check-python-version action to v5.1
  • d6bc53a Avoid unnecessary extra dict allocation in model validation
  • See full diff in compare view

Updates pydyf from 0.12.1 to 0.13.0

Release notes

Sourced from pydyf's releases.

v0.13.0

Dependencies

  • Python 3.15 is supported and tested
  • Python 3.11+ is now needed, Python 3.10 is not supported anymore

New features

  • Add a new "name" function to safely create name objects

Bug fixes

  • Test both compressed and uncompressed PDF generation

Contributors

  • Guillaume Ayoub
  • Jeremy Lainé

Backers and sponsors

  • Spacinov
  • Syslifters
  • Kobalt
  • Grip Angebotssoftware
  • Simonsoft
  • Menutech
  • KontextWork
  • Hammerbacher
  • TrainingSparkle
  • Healthchecks.io
  • Method B
  • Prothesis Dental Solutions
  • Yanal-Yves Fargialla
  • PDFBolt
  • FieldHub
  • Morntag
  • Xavid
  • Charlie S.
  • Prospex
  • Kai DeLorenzo
  • Unforgettable Nordic
  • Dylan Moonfire
Changelog

Sourced from pydyf's changelog.

Version 0.13.0

Released on 2026-10-14.

Dependencies:

  • Python 3.15 is supported and tested
  • Python 3.11+ is now needed, Python 3.10 is not supported anymore

New features:

  • Add a new "name" function to safely create name objects

Bug fixes:

  • Test both compressed and uncompressed PDF generation

Contributors:

  • Guillaume Ayoub
  • Jeremy Lainé

Backers and sponsors:

  • Spacinov
  • Syslifters
  • Kobalt
  • Grip Angebotssoftware
  • Simonsoft
  • Menutech
  • KontextWork
  • Hammerbacher
  • TrainingSparkle
  • Healthchecks.io
  • Method B
  • Prothesis Dental Solutions
  • Yanal-Yves Fargialla
  • PDFBolt
  • FieldHub
  • Morntag
  • Xavid
  • Charlie S.
  • Prospex
  • Kai DeLorenzo
  • Unforgettable Nordic
  • Dylan Moonfire
Commits
  • 58e2a6d Version...

    Description has been truncated

@dependabot
chore(deps): bump the dependencies group across 2 directories with 18…
d25b701 
… updates

Bumps the dependencies group with 1 update in the /docs directory: [mkdocstrings](https://github.com/mkdocstrings/mkdocstrings).
Bumps the dependencies group with 17 updates in the /src/backend directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.2.17` | `6.1.2` |
| [boto3](https://github.com/boto/boto3) | `1.43.110` | `1.43.114` |
| [botocore](https://github.com/boto/botocore) | `1.43.110` | `1.43.114` |
| [django-allauth](https://github.com/sponsors/pennersr) | `65.19.6` | `65.19.7` |
| [django-money](https://github.com/django-money/django-money) | `3.6.1` | `3.6.2` |
| [django-otp](https://github.com/django-otp/django-otp) | `1.3.0` | `1.7.4` |
| [fonttools](https://github.com/fonttools/fonttools) | `4.66.1` | `4.67.0` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.11` | `3.11.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.12.4` | `4.13.3` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.14.0` | `2.14.1` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.50.0` | `2.50.1` |
| [pydyf](https://github.com/CourtBouillon/pydyf) | `0.12.1` | `0.13.0` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.20.0` | `6.20.1` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.71.0` | `2.72.0` |
| [wrapt](https://github.com/GrahamDumpleton/wrapt) | `2.5.0` | `2.5.1` |
| [pluggy](https://github.com/pytest-dev/pluggy) | `1.6.0` | `1.7.0` |
| [ty](https://github.com/astral-sh/ty) | `0.0.76` | `0.0.88` |



Updates `mkdocstrings` from 1.0.6 to 1.0.7
- [Release notes](https://github.com/mkdocstrings/mkdocstrings/releases)
- [Changelog](https://github.com/mkdocstrings/mkdocstrings/blob/main/CHANGELOG.md)
- [Commits](mkdocstrings/mkdocstrings@1.0.6...1.0.7)

Updates `django` from 5.2.17 to 6.1.2
- [Commits](django/django@5.2.17...6.1.2)

Updates `boto3` from 1.43.110 to 1.43.114
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.110...1.43.114)

Updates `botocore` from 1.43.110 to 1.43.114
- [Commits](boto/botocore@1.43.110...1.43.114)

Updates `django-allauth` from 65.19.6 to 65.19.7
- [Commits](https://github.com/sponsors/pennersr/commits)

Updates `django-money` from 3.6.1 to 3.6.2
- [Release notes](https://github.com/django-money/django-money/releases)
- [Changelog](https://github.com/django-money/django-money/blob/main/docs/changes.rst)
- [Commits](https://github.com/django-money/django-money/commits)

Updates `django-otp` from 1.3.0 to 1.7.4
- [Changelog](https://github.com/django-otp/django-otp/blob/master/CHANGES.rst)
- [Commits](django-otp/django-otp@v1.3.0...v1.7.4)

Updates `fonttools` from 4.66.1 to 4.67.0
- [Release notes](https://github.com/fonttools/fonttools/releases)
- [Changelog](https://github.com/fonttools/fonttools/blob/main/NEWS.rst)
- [Commits](fonttools/fonttools@4.66.1...4.67.0)

Updates `markdown` from 3.11 to 3.11.1
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.11.0...3.11.1)

Updates `platformdirs` from 4.12.4 to 4.13.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.12.4...4.13.3)

Updates `pydantic` from 2.14.0 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.14.0...v2.14.1)

Updates `pydantic-core` from 2.50.0 to 2.50.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.50.0...core-v2.50.1)

Updates `pydyf` from 0.12.1 to 0.13.0
- [Release notes](https://github.com/CourtBouillon/pydyf/releases)
- [Changelog](https://github.com/CourtBouillon/pydyf/blob/main/docs/changelog.rst)
- [Commits](CourtBouillon/pydyf@v0.12.1...v0.13.0)

Updates `pypdf` from 6.20.0 to 6.20.1
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.20.0...6.20.1)

Updates `sentry-sdk` from 2.71.0 to 2.72.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.71.0...2.72.0)

Updates `wrapt` from 2.5.0 to 2.5.1
- [Release notes](https://github.com/GrahamDumpleton/wrapt/releases)
- [Changelog](https://github.com/GrahamDumpleton/wrapt/blob/develop/docs/changes.rst)
- [Commits](GrahamDumpleton/wrapt@2.5.0...2.5.1)

Updates `pluggy` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.6.0...1.7.0)

Updates `ty` from 0.0.76 to 0.0.88
- [Release notes](https://github.com/astral-sh/ty/releases)
- [Changelog](https://github.com/astral-sh/ty/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ty@0.0.76...0.0.88)

---
updated-dependencies:
- dependency-name: mkdocstrings
  dependency-version: 1.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django
  dependency-version: 6.1.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: dependencies
- dependency-name: boto3
  dependency-version: 1.43.114
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: botocore
  dependency-version: 1.43.114
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django-allauth
  dependency-version: 65.19.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django-money
  dependency-version: 3.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: django-otp
  dependency-version: 1.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: fonttools
  dependency-version: 4.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: markdown
  dependency-version: 3.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: platformdirs
  dependency-version: 4.13.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pydantic-core
  dependency-version: 2.50.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pydyf
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: pypdf
  dependency-version: 6.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: wrapt
  dependency-version: 2.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: pluggy
  dependency-version: 1.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: ty
  dependency-version: 0.0.88
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 23, 2026
@sonarqubecloud

sonarqubecloud Bot commented Oct 23, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

@matmair matmair

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@matmair