Bump the uv group across 8 directories with 5 updates

dependabot[bot] · web-flow · commit dab6d8111de0 · 2026-01-23T19:08:26.000Z
Bumps the uv group with 3 updates in the /mpcontribs-lux directory: [filelock](https://github.com/tox-dev/py-filelock), [urllib3](https://github.com/urllib3/urllib3) and [virtualenv](https://github.com/pypa/virtualenv). Bumps the uv group with 2 updates in the /mpcontribs-portal directory: [urllib3](https://github.com/urllib3/urllib3) and [django](https://github.com/django/django). Bumps the uv group with 3 updates in the /mpcontribs-lux/requirements directory: [filelock](https://github.com/tox-dev/py-filelock), [urllib3](https://github.com/urllib3/urllib3) and [virtualenv](https://github.com/pypa/virtualenv). Bumps the uv group with 2 updates in the /mpcontribs-api/requirements directory: [urllib3](https://github.com/urllib3/urllib3) and [marshmallow](https://github.com/marshmallow-code/marshmallow). Bumps the uv group with 2 updates in the /mpcontribs-portal/requirements directory: [urllib3](https://github.com/urllib3/urllib3) and [django](https://github.com/django/django). Bumps the uv group with 1 update in the /mpcontribs-kernel-gateway/requirements directory: [urllib3](https://github.com/urllib3/urllib3). Bumps the uv group with 1 update in the /mpcontribs-client/requirements directory: [urllib3](https://github.com/urllib3/urllib3). Bumps the uv group with 1 update in the /mpcontribs-serverless/dependencies directory: [urllib3](https://github.com/urllib3/urllib3). Updates `filelock` from 3.20.0 to 3.20.3 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.20.0...3.20.3) Updates `urllib3` from 2.6.1 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) Updates `virtualenv` from 20.35.4 to 20.36.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@20.35.4...20.36.1) Updates `urllib3` from 2.5.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) Updates `django` from 3.2.25 to 4.2.27 - [Commits](django/django@3.2.25...4.2.27) Updates `filelock` from 3.20.0 to 3.20.3 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.20.0...3.20.3) Updates `urllib3` from 2.6.1 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) Updates `virtualenv` from 20.35.4 to 20.36.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@20.35.4...20.36.1) Updates `urllib3` from 2.5.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) Updates `marshmallow` from 3.26.1 to 3.26.2 - [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/marshmallow@3.26.1...3.26.2) Updates `urllib3` from 2.5.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) Updates `django` from 3.2.25 to 4.2.27 - [Commits](django/django@3.2.25...4.2.27) Updates `urllib3` from 2.5.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) Updates `urllib3` from 2.5.0 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) Updates `urllib3` from 1.26.19 to 2.6.3 - [Release notes](https://github.com/urllib3/urllib3/releases) - [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst) - [Commits](urllib3/urllib3@2.6.1...2.6.3) --- updated-dependencies: - dependency-name: filelock dependency-version: 3.20.3 dependency-type: direct:production dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: uv - dependency-name: virtualenv dependency-version: 20.36.1 dependency-type: direct:production dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: uv - dependency-name: django dependency-version: 4.2.27 dependency-type: direct:production dependency-group: uv - dependency-name: filelock dependency-version: 3.20.3 dependency-type: direct:production dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: uv - dependency-name: virtualenv dependency-version: 20.36.1 dependency-type: direct:production dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: uv - dependency-name: marshmallow dependency-version: 3.26.2 dependency-type: direct:production dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: uv - dependency-name: django dependency-version: 4.2.27 dependency-type: direct:production dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: direct:production dependency-group: uv - dependency-name: urllib3 dependency-version: 2.6.3 dependency-type: indirect dependency-group: uv ... Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/mpcontribs-api/requirements/deployment.txt b/mpcontribs-api/requirements/deployment.txt
@@ -221,7 +221,7 @@ markupsafe==3.0.3
     #   jinja2
     #   nbconvert
     #   werkzeug
-marshmallow==3.26.1
+marshmallow==3.26.2
     # via
     #   flask-marshmallow
     #   marshmallow-mongoengine
@@ -528,7 +528,7 @@ uncertainties==3.2.3
     #   pymatgen
 uri-template==1.3.0
     # via jsonschema
-urllib3==2.6.1
+urllib3==2.6.3
     # via
     #   botocore
     #   requests
diff --git a/mpcontribs-client/requirements/deployment.txt b/mpcontribs-client/requirements/deployment.txt
@@ -261,7 +261,7 @@ uncertainties==3.2.3
     # via pymatgen
 uri-template==1.3.0
     # via jsonschema
-urllib3==2.6.1
+urllib3==2.6.3
     # via requests
 wcwidth==0.2.14
     # via prompt-toolkit
diff --git a/mpcontribs-kernel-gateway/requirements/deployment.txt b/mpcontribs-kernel-gateway/requirements/deployment.txt
@@ -446,7 +446,7 @@ uncertainties==3.2.3
     # via pymatgen
 uri-template==1.3.0
     # via jsonschema
-urllib3==2.6.1
+urllib3==2.6.3
     # via requests
 wcwidth==0.2.14
     # via prompt-toolkit
diff --git a/mpcontribs-lux/requirements/requirements-ubuntu-latest_py3.11.txt b/mpcontribs-lux/requirements/requirements-ubuntu-latest_py3.11.txt
@@ -140,5 +140,5 @@ tzdata==2025.2
     # via pandas
 uncertainties==3.2.3
     # via pymatgen
-urllib3==2.6.1
+urllib3==2.6.3
     # via requests
diff --git a/mpcontribs-lux/requirements/requirements-ubuntu-latest_py3.11_extras.txt b/mpcontribs-lux/requirements/requirements-ubuntu-latest_py3.11_extras.txt
@@ -28,7 +28,7 @@ emmet-core==0.86.2
     # via mpcontribs-lux (pyproject.toml)
 execnet==2.1.2
     # via pytest-xdist
-filelock==3.20.0
+filelock==3.20.3
     # via virtualenv
 flake8==7.3.0
     # via mpcontribs-lux (pyproject.toml)
@@ -203,7 +203,7 @@ tzdata==2025.2
     # via pandas
 uncertainties==3.2.3
     # via pymatgen
-urllib3==2.6.1
+urllib3==2.6.3
     # via requests
-virtualenv==20.35.4
+virtualenv==20.36.1
     # via pre-commit
diff --git a/mpcontribs-lux/requirements/requirements-ubuntu-latest_py3.12.txt b/mpcontribs-lux/requirements/requirements-ubuntu-latest_py3.12.txt
@@ -140,5 +140,5 @@ tzdata==2025.2
     # via pandas
 uncertainties==3.2.3
     # via pymatgen
-urllib3==2.6.1
+urllib3==2.6.3
     # via requests
diff --git a/mpcontribs-lux/requirements/requirements-ubuntu-latest_py3.12_extras.txt b/mpcontribs-lux/requirements/requirements-ubuntu-latest_py3.12_extras.txt
@@ -28,7 +28,7 @@ emmet-core==0.86.2
     # via mpcontribs-lux (pyproject.toml)
 execnet==2.1.2
     # via pytest-xdist
-filelock==3.20.0
+filelock==3.20.3
     # via virtualenv
 flake8==7.3.0
     # via mpcontribs-lux (pyproject.toml)
@@ -203,7 +203,7 @@ tzdata==2025.2
     # via pandas
 uncertainties==3.2.3
     # via pymatgen
-urllib3==2.6.1
+urllib3==2.6.3
     # via requests
-virtualenv==20.35.4
+virtualenv==20.36.1
     # via pre-commit
diff --git a/mpcontribs-portal/pyproject.toml b/mpcontribs-portal/pyproject.toml
@@ -29,7 +29,7 @@ dependencies = [
     "boto3",
     "ddtrace",
     "Django>=3.2,<4.0",
-    "django-extensions",
+    "django>=3.2,<5.0",
     "django-settings-file",
     "django-webpack4-loader",
     "fastnumbers",
diff --git a/mpcontribs-portal/requirements/deployment.txt b/mpcontribs-portal/requirements/deployment.txt
@@ -56,7 +56,7 @@ decorator==5.2.1
     # via ipython
 defusedxml==0.7.1
     # via nbconvert
-django==3.2.25
+django==4.2.27
     # via
     #   django-extensions
     #   django-settings-file
@@ -407,7 +407,7 @@ uncertainties==3.2.3
     # via pymatgen
 uri-template==1.3.0
     # via jsonschema
-urllib3==2.6.1
+urllib3==2.6.3
     # via
     #   botocore
     #   requests
diff --git a/mpcontribs-portal/requirements/ubuntu-latest_py3.11.txt b/mpcontribs-portal/requirements/ubuntu-latest_py3.11.txt
@@ -56,7 +56,7 @@ decorator==5.2.1
     # via ipython
 defusedxml==0.7.1
     # via nbconvert
-django==3.2.25
+django==4.2.27
     # via
     #   django-extensions
     #   django-settings-file
diff --git a/mpcontribs-portal/requirements/ubuntu-latest_py3.11_extras.txt b/mpcontribs-portal/requirements/ubuntu-latest_py3.11_extras.txt
@@ -61,7 +61,7 @@ decorator==5.2.1
     # via ipython
 defusedxml==0.7.1
     # via nbconvert
-django==3.2.25
+django==4.2.27
     # via
     #   django-extensions
     #   django-settings-file
diff --git a/mpcontribs-portal/requirements/ubuntu-latest_py3.12.txt b/mpcontribs-portal/requirements/ubuntu-latest_py3.12.txt
@@ -56,7 +56,7 @@ decorator==5.2.1
     # via ipython
 defusedxml==0.7.1
     # via nbconvert
-django==3.2.25
+django==4.2.27
     # via
     #   django-extensions
     #   django-settings-file
diff --git a/mpcontribs-portal/requirements/ubuntu-latest_py3.12_extras.txt b/mpcontribs-portal/requirements/ubuntu-latest_py3.12_extras.txt
@@ -61,7 +61,7 @@ decorator==5.2.1
     # via ipython
 defusedxml==0.7.1
     # via nbconvert
-django==3.2.25
+django==4.2.27
     # via
     #   django-extensions
     #   django-settings-file
diff --git a/mpcontribs-serverless/dependencies/requirements.txt b/mpcontribs-serverless/dependencies/requirements.txt
@@ -73,7 +73,7 @@ jsonpointer==2.3
     # via jsonschema
 jsonref==1.0.0.post1
     # via bravado-core
-jsonschema[format]==3.2.0
+jsonschema==3.2.0
     # via
     #   bravado-core
     #   ddtrace
@@ -195,6 +195,8 @@ scipy==1.14.0
     # via pymatgen
 semantic-version==2.10.0
     # via mpcontribs-client
+setuptools==80.10.1
+    # via jsonschema
 simplejson==3.17.6
     # via
     #   bravado
@@ -248,14 +250,11 @@ ujson==5.5.0
     # via mpcontribs-client
 uncertainties==3.1.7
     # via pymatgen
-urllib3==1.26.19
+urllib3==2.6.3
     # via requests
 wcwidth==0.2.5
     # via prompt-toolkit
 webcolors==1.12
     # via jsonschema
 xmltodict==0.13.0
     # via ddtrace
-
-# The following packages are considered to be unsafe in a requirements file:
-# setuptools
