Skip to content

deps(py)(deps): bump the python-non-major group across 1 directory with 4 updates#38

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/backend/develop/python-non-major-a546c1d062
Closed

deps(py)(deps): bump the python-non-major group across 1 directory with 4 updates#38
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/backend/develop/python-non-major-a546c1d062

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 7, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-non-major group with 4 updates in the /backend directory: django, sentry-sdk, django-timezone-field and wcwidth.

Updates django from 5.1.4 to 5.1.15

Commits
  • 6ef1f6f [5.1.x] Bumped version for 5.1.15 release.
  • 0db9ea4 [5.1.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation i...
  • 9c6a5bd [5.1.x] Fixed CVE-2025-13372 -- Protected FilteredRelation against SQL inject...
  • e419ad8 [5.1.x] Added script to archive EOL stable branches.
  • ca4251d [5.1.x] Refs #36743 -- Added missing release notes for 5.1.15 and 4.2.27.
  • f354296 [5.1.x] Fixed #36743 -- Increased URL max length enforced in HttpResponseRedi...
  • cae6f5c [5.1.x] Added timeout-minutes directive to all GitHub Actions workflows.
  • 6f35c2e [5.1.x] Added stub release notes and release date for 5.1.15 and 4.2.27.
  • a9311fc [5.1.x] Configured dangerous-triggers zizmor rule.
  • dc29fe1 [5.1.x] Addressed unpinned-uses zizmor finding.
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.60.0 to 2.62.0

Release notes

Sourced from sentry-sdk's releases.

2.62.0

New Features ✨

  • Add integration for aiomysql by @​tonal in #4703

    We're adding support for the aiomysql package. To enable the integration, add it to your integrations list:

    import sentry_sdk
    from sentry_sdk.integrations.aiomysql import AioMySQLIntegration
    sentry_sdk.init(
    traces_sample_rate=1.0,
    integrations=[AioMySQLIntegration()],
    )

  • Support HTTPX2 by @​sentrivana in #6463

    We're adding out-of-the-box support for HTTPX2. As long as use the package, the Sentry integration will be enabled automatically and you should see your requests instrumented in Sentry.

    import httpx2
    import sentry_sdk
    sentry_sdk.init(...)
    with sentry_sdk.start_transaction(name="testing_sentry"):
    httpx2.get("https://sentry.io/")

Bug Fixes 🐛

Internal Changes 🔧

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.62.0

New Features ✨

  • Add integration for aiomysql by @​tonal in #4703

    We're adding support for the aiomysql package. To enable the integration, add it to your integrations list:

    import sentry_sdk
    from sentry_sdk.integrations.aiomysql import AioMySQLIntegration
    sentry_sdk.init(
    traces_sample_rate=1.0,
    integrations=[AioMySQLIntegration()],
    )

  • Support HTTPX2 by @​sentrivana in #6463

    We're adding out-of-the-box support for HTTPX2. As long as use the package, the Sentry integration will be enabled automatically and you should see your requests instrumented in Sentry.

    import httpx2
    import sentry_sdk
    sentry_sdk.init(...)
    with sentry_sdk.start_transaction(name="testing_sentry"):
    httpx2.get("https://sentry.io/")

Bug Fixes 🐛

Internal Changes 🔧

... (truncated)

Commits
  • 0bac65a Update CHANGELOG.md
  • 4a53c10 release: 2.62.0
  • afff0e2 fix(rq): Restore functools.wraps() for patched functions (#6532)
  • 33ca589 build(deps-dev): bump openfeature-sdk from 0.9.0 to 0.10.0 (#6528)
  • 4fdd8e0 build(deps): bump pip from 26.1.1 to 26.1.2 (#6530)
  • b466c27 build(deps-dev): bump httpx2 from 2.2.0 to 2.3.0 (#6523)
  • 0be028f build(deps-dev): bump typer from 0.26.2 to 0.26.7 (#6526)
  • 344c013 build(deps-dev): bump ruff from 0.15.14 to 0.15.16 (#6529)
  • 7d38a49 ci: Use package-ecosystem: uv in dependabot (#6522)
  • 8c50017 build(deps): bump getsentry/craft/.github/workflows/changelog-preview.yml fro...
  • Additional commits viewable in compare view

Updates django-timezone-field from 7.2.1 to 7.2.2

Commits

Updates wcwidth from 0.7.0 to 0.8.1

Release notes

Sourced from wcwidth's releases.

0.8.1: Improved corrections tables

Full Changelog: jquast/wcwidth@0.8.0...0.8.1

0.8.0: new terminal-aware wcstwidth() function

  • New support for Variation Selector 15 Emojis as narrow, #211.
  • New argument, term_program for wcstwidth(), width(), clip(), wrap(), ljust(), rjust(), and center(). False disables corrections; True auto-detects by TERM_PROGRAM or TERM; string values accept canonical names matching list_term_programs(). wcstwidth()_ defaults to True; all other functions default to False.
  • Improved performance on Python 3.15 using standard library iter_graphemes() #206.
  • Improved memory usage and import time for Python 3.15 using lazy imports #221.
  • Bugfix Invisible_Stacker viramas now form conjuncts (Burmese, Khmer, etc.) and change some Virama width calculations to match jacobsandlund/uucode_ (ghostty) #223.
  • Updated graphemes width maximum now 2, matching Ghostty, foot, and Windows Terminal #224.

Full Changelog: jquast/wcwidth@0.7.0...0.8.0

Commits
  • d1c99fe hyperlink and wordfix
  • edb344a set to 0.8.1 not 2, not yet
  • 00d6fef Improve corrections tables (zeroer, narrow_wider, narrow_zeroer) (#226)
  • e8405a6 'of of' -> 'of', formatting
  • 1de17df set release date for 0.8.0 in readme
  • 9df7261 more docs
  • be0fdb2 document better
  • 2d9925b wcstwidth(term_program=True) default argument
  • 169c846 Terminal software identity-assisted wcswidth() (#220)
  • e4f76d5 bugfix virama with mc width is capped at 2, also (#225)
  • Additional commits viewable in compare view

@dependabot @github

dependabot Bot commented on behalf of github Jun 7, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

…th 4 updates

Bumps the python-non-major group with 4 updates in the /backend directory: [django](https://github.com/django/django), [sentry-sdk](https://github.com/getsentry/sentry-python), [django-timezone-field](https://github.com/mfogel/django-timezone-field) and [wcwidth](https://github.com/jquast/wcwidth).


Updates `django` from 5.1.4 to 5.1.15
- [Commits](django/django@5.1.4...5.1.15)

Updates `sentry-sdk` from 2.60.0 to 2.62.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.60.0...2.62.0)

Updates `django-timezone-field` from 7.2.1 to 7.2.2
- [Commits](mfogel/django-timezone-field@7.2.1...7.2.2)

Updates `wcwidth` from 0.7.0 to 0.8.1
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Commits](jquast/wcwidth@0.7.0...0.8.1)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.1.15
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-non-major
- dependency-name: django-timezone-field
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-non-major
- dependency-name: sentry-sdk
  dependency-version: 2.61.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-non-major
- dependency-name: wcwidth
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-non-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/backend/develop/python-non-major-a546c1d062 branch from 7b38f6b to 4183072 Compare June 15, 2026 09:33
@dependabot @github

dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 22, 2026
@dependabot dependabot Bot deleted the dependabot/pip/backend/develop/python-non-major-a546c1d062 branch June 22, 2026 09:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants