Bump the dependencies group across 1 directory with 13 updates

[dependabot]

Bumps the dependencies group with 13 updates in the / directory:

Package	From	To
boto3	1.43.59	1.43.72
cachetools	7.1.6	7.1.7
flower	2.0.1	2.1.0
orjson	3.11.9	3.12.0
packaging	26.2	26.3
google-auth	2.56.2	2.56.3
coverage	7.15.2	7.15.4
ipython	9.15.0	9.16.1
mypy	2.3.0	2.3.1
pre-commit	4.6.1	4.6.2
pytest-django	4.12.0	4.14.0
pytest-rerunfailures	16.4	16.5
ruff	0.16.0	0.16.3

Updates boto3 from 1.43.59 to 1.43.72

Commits

• a3fc41f Merge branch 'release-1.43.72'
• 27a2636 Bumping version to 1.43.72
• 33a1671 Add changelog entries from botocore
• a0b0f50 Merge branch 'release-1.43.71'
• f1ea765 Merge branch 'release-1.43.71' into develop
• 3a07077 Bumping version to 1.43.71
• 9886147 Add changelog entries from botocore
• 8c2ae68 Merge branch 'release-1.43.70'
• 116daa7 Merge branch 'release-1.43.70' into develop
• 4901fc8 Bumping version to 1.43.70
• Additional commits viewable in compare view

Updates cachetools from 7.1.6 to 7.1.7

Changelog

Sourced from cachetools's changelog.

v7.1.7 (2026-08-01)

• Improve Cache.__setitem__ behavior when replacing an existing cache item with a larger value.

• Update CI environment.

Commits

• 01af8e5 Release v7.1.7.
• ccaa8c8 Minor stylistic improvements.
• c65b625 Prepare v7.1.7.
• 89a5928 Bump actions/setup-python from 6.3.0 to 7.0.0 (#411)
• 39b31bc Fix #405: Fix Cache.setitem over-evicting when growing an existing key
• 16e8889 Bump actions/checkout from 7.0.0 to 7.0.1 (#410)
• See full diff in compare view

Updates flower from 2.0.1 to 2.1.0

Release notes

Sourced from flower's releases.

v2.1.0

Features

• Added read-only mode for the UI and API by @​MrEarle #1468
• Updated the UI with a responsive design
• Added persistent dark mode with light and system theme options
• Added a browser favicon by @​rolfws #1502
• Improved task search with boolean operators and field filters
• Preserved task-table preferences across visits by @​fretman92 #1333
• Added TLS support for Redis Sentinel by @​cyberjunk #1327
• Added AMQPS support for RabbitMQ connections by @​borland667
• Updated and auto-provisioned the Grafana dashboard

Performance and reliability

• Moved blocking broker and control operations off the I/O loop
• Made Redis queue inspection asynchronous and pipelined
• Prevented duplicate worker inspections
• Fixed broker connection leaks #1490
• Purged stale offline-worker Prometheus metrics #1128
• Persisted dashboard counters across restarts #787
• Improved handling of missing custom configuration files

Bug fixes

• Fixed Redis SSL configurations #1177
• Fixed percent-encoded IPv6 broker addresses #1220
• Stopped exposing broker alternate URLs in worker statistics #1512
• Fixed broker page rendering when queue inspection fails by @​alexei #1501
• Fixed autoscaling response interpolation by @​funkyrailroad #1427
• Improved GitHub OAuth errors when email access is unavailable by @​bysiber #1486
• Prevented authentication failures while rendering error pages #1268, #1499
• Fixed task search for non-string values #1401
• Fixed task state filters to require the state prefix by @​AleksaMCode #1516
• Fixed worker names in timeout and rate-limit error responses by @​phanky1 #1506
• Fixed startup banner output when using a dynamic port #1449
• Fixed worker active-task totals when counts are null by @​M4RC0Sx #1511
• Fixed undefined worker pool grow and shrink values by @​daydaychen #1324

Documentation

• Documented custom authentication providers #1344
• Fixed the GitLab authentication handler name by @​Saluev #1325
• Fixed the persistent database CLI example by @​hatamiarash7 #1326
• Fixed the Grafana example URL by @​NiclasvanEyk #1345
• Fixed the nginx reverse-proxy example by @​titovanton
• Added the GitHub repository link to the documentation by @​PamelaM
• Fixed the documented database filename by @​WilliamDEdwards #1494
• Fixed the documented max tasks default by @​masahiro331 #1415

... (truncated)

Changelog

Sourced from flower's changelog.

Flower 2.1.0

Features

• Added read-only mode for the UI and API #1468 by @​MrEarle.
• Updated the UI with a responsive design.
• Added persistent dark mode with light and system theme options.
• Added a browser favicon #1502 by @​rolfws.
• Improved task search with boolean operators and field filters.
• Preserved task-table preferences across visits #1333 by @​fretman92.
• Added TLS support for Redis Sentinel #1327 by @​cyberjunk.
• Added AMQPS support for RabbitMQ connections by @​borland667.
• Updated and auto-provisioned the Grafana dashboard.
• Enabled API access in the Docker Compose demo.

Performance and reliability

• Moved blocking broker and control operations off the I/O loop.
• Made Redis queue inspection asynchronous and pipelined.
• Prevented duplicate worker inspections.
• Fixed broker connection leaks #1490.
• Purged stale offline-worker Prometheus metrics #1128.
• Persisted dashboard counters across restarts #787.
• Improved handling of missing custom configuration files.
• Fixed startup banner output when using a dynamic port #1449.
• Fixed worker active-task totals when counts are null #1511 by @​M4RC0Sx.
• Fixed undefined worker pool grow and shrink values #1324 by @​daydaychen.

Bug fixes

• Fixed Redis SSL configurations #1177.
• Fixed percent-encoded IPv6 broker addresses #1220.
• Stopped exposing broker alternate URLs in worker statistics #1512.
• Fixed broker page rendering when queue inspection fails #1501 by @​alexei.
• Fixed autoscaling response interpolation #1427 by @​funkyrailroad.
• Improved GitHub OAuth errors when email access is unavailable #1486 by @​bysiber.
• Prevented authentication failures while rendering error pages #1268, #1499.
• Fixed task search for non-string values #1401.
• Fixed task state filters to require the state prefix #1516 by @​AleksaMCode.
• Fixed worker names in timeout and rate-limit error responses #1506 by @​phanky1.

Documentation

• Documented custom authentication providers #1344.
• Corrected the GitLab authentication handler name #1325 by @​Saluev.
• Fixed the persistent database CLI example #1326 by @​hatamiarash7.
• Fixed the Grafana example URL #1345 by @​NiclasvanEyk.
• Corrected the nginx reverse-proxy example by @​titovanton.
• Added the GitHub repository link to the documentation by @​PamelaM.
• Corrected the documented database filename #1494 by @​WilliamDEdwards.

... (truncated)

Commits

• 3597bd1 Set release version
• d083f73 Update documentation for 2.1.0
• b58869b Merge remote-tracking branch 'origin/master' into 2.0
• e6cf8ef Add Python 3.13 and 3.14 support
• 8ecede9 Document custom authentication providers
• 00d310b Persist dashboard counters across restarts
• 0a51160 Purge offline workers from metrics
• 72a09c8 Prevent duplicate worker inspections
• 17ead90 Make Redis queue inspection non-blocking
• b11ddcb Update blocking operation handling
• Additional commits viewable in compare view

Updates orjson from 3.11.9 to 3.12.0

Release notes

Sourced from orjson's releases.

3.12.0

Changed

• Serialization implementation substantially rewritten.
• Publish PyPI wheels for Python 3.15. For Python 3.15 and later, manylinux_2_39 (2024) is targeted instead of manylinux_2_17 (2012).
• No longer publish PyPI wheels for ppc64le and s390x.

Changelog

Sourced from orjson's changelog.

3.12.0 - 2026-08-14

Changed

• Serialization implementation substantially rewritten.
• Publish PyPI wheels for Python 3.15. For Python 3.15 and later, manylinux_2_39 (2024) is targeted instead of manylinux_2_17 (2012).
• No longer publish PyPI wheels for ppc64le and s390x.

Commits

• 6737895 3.12.0
• c2a6e8f JsonWriter, iterators
• 6a2d7a7 yyjson 1ea2fb0
• 97bf170 build update
• See full diff in compare view

Updates packaging from 26.2 to 26.3

Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

• Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)
• PEP 808: accept Metadata-Version: 2.6. (#1194)
• Add a limit argument to parse_tag() for compressed tag sets. (#1220)
• Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)
• Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)
• Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

• Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)
• Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

• Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)
• Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)
• Fix an AttributeError when hashing internally trimmed versions. (#1242)
• Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

• Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)
• Normalize requested extra names before comparing or hashing requirements. (#644)
• Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)
• Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)
• Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)
• Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)
• Keep the parentheses of a nested group when serializing markers. (#1316)
• Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)
• Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)
• Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)
• Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)
• Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

• Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)
• Accept the UTF-8 charset case-insensitively in email payloads. (#1330)
• Reject malformed Description-Content-Type values. (#1329)
• Don't rewrite user values that contain {field} placeholders in error messages. (#1327)
• Route multipart email payloads to unparsed instead of asserting. (#1247)
• Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)
• Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03

Features:

Add a public :class:~packaging.ranges.VersionRange API and

:meth:SpecifierSet.to_range() <packaging.specifiers.SpecifierSet.to_range>,

representing the versions a specifier set accepts as an interval set that

supports intersection, union, difference, complement, set relations,

membership tests, and filtering.

:meth:~packaging.ranges.VersionRange.to_specifier_set converts a range back

to a :class:~packaging.specifiers.SpecifierSet where a PEP 440 form exists.

(:pull:1267, :pull:1270, :pull:1298)
PEP 808: accept Metadata-Version: 2.6. (:pull:1194)
Add a limit argument to parse_tag() for compressed tag sets.

(:issue:1220)
Add a prefer_sdist_predicate argument to Pylock.select() to prefer

source distributions over wheels for selected packages. (:pull:1334)
Add :func:~packaging.tags.pure_python_tags to generate the pure-Python

tags for a Python version without touching the running platform.

(:pull:1346)
Add :meth:SpecifierSet.is_subset() <packaging.specifiers.SpecifierSet.is_subset>, :meth:~packaging.specifiers.SpecifierSet.is_superset,

and :meth:~packaging.specifiers.SpecifierSet.is_disjoint, which compare the

versions two specifier sets accept. (:pull:1313)

Behavior adaptations:

Drop support for Python 3.8; packaging now requires Python 3.9 or later.

(:pull:1157)
Prefer native linux_* platform tags over manylinux and musllinux

tags on Linux. (:issue:160)

Fixes for versions and specifiers:

Raise InvalidVersion instead of TypeError when Version is given a

non-string. (:pull:1319)
Raise InvalidVersion for non-string pre-release letters passed to

Version.from_parts. (:pull:1241)
Fix an AttributeError when hashing internally trimmed versions.

(:pull:1242)
Fix SpecifierSet.is_unsatisfiable for post-release boundary

intersections. (:pull:1257)

Fixes for requirements and markers:

Make Requirement.__hash__ consistent with __eq__ for

trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and

foo==1.0.0.0), so equal requirements hash equal and deduplicate in

sets and dicts. (:pull:1232)

</tr></table>

... (truncated)

Commits

• 929fd4b Bump for release
• f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
• f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
• b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
• 2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
• 413d006 docs: changelog for 26.3 (#1343)
• 4eb0753 docs(metadata): explain selective field validation (#1342)
• 77e9ed4 feat(tags): add pure Python tag generator (#1346)
• 7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
• 45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
• Additional commits viewable in compare view

Updates google-auth from 2.56.2 to 2.56.3

Release notes

Sourced from google-auth's releases.

google-auth: v2.56.3

2.56.3 (2026-08-06)

Bug Fixes

• auth: avoid creating mTLS SSL context for custom async transports (#17825) (fbe33f9), refs #17622
• auth: only trigger mTLS certificate rotation on mTLS endpoints (#17928) (f7b49ea)
• auth: properly extract stdout from gnubby webauthn plugin failures (#17885) (744e826)
• deduplicate x-goog-api-client headers (#17616) (6167e41)
• oauth2: avoid redundant JWKS network fetches (#17891) (de53298)

Performance Improvements

• auth: use generator expression in any() to allow short-circuiting (735e565)
• auth: use generator expression in any() to allow short-circuiting (#17937) (735e565)

Commits

• 905bfe3 chore: release main (#17832)
• ad8f93c fix(api-core): use truthiness check in setup_request_id to support proto-plus...
• 06dd2c0 chore: bump google-api-core to 2.28.0 (#18003)
• 08f21a6 fix(proto-plus): add context to TypeErrors during message manipulation (#17682)
• 32fd479 tests(spanner): avoid table name collisions in tests (#18001)
• 2207ca6 feat: add pandas-gbq capability helper (#17957)
• 6167e41 fix: deduplicate x-goog-api-client headers (#17616)
• 71bc622 docs: add connector libraries overview table to package README (#17939)
• 1b5c48b fix(bigframes): fix field name typos for ai.generate* functions (#17983)
• f64ada2 fix: avoid retaining routing parameter instances in cache (#17961)
• Additional commits viewable in compare view

Updates coverage from 7.15.2 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
• Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

7.15.3

Version 7.15.3 — 2026-08-02

• Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
• A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
• Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

• Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Version 7.15.3 — 2026-08-02

• Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han <pull 2234_>. Closes issue 2200.

• A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios <pull 2239_>_.

• Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios <pull 2240_>_.

.. _issue 2200: coveragepy/coveragepy#2200 .. _pull 2234: coveragepy/coveragepy#2234 .. _pull 2239: coveragepy/coveragepy#2239 .. _pull 2240: coveragepy/coveragepy#2240

.. _changes_7-15-2:

Commits

• 4c0e7ff docs: sample HTML for 7.15.4
• db4cc32 docs: prep for 7.15.4
• c33085c style: start gradual move to ruff 0.16
• 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
• b64d53d build: make 3.15 wheels
• 53792ab build: show the python version for kits
• f6b03c7 chore: make upgrade_one package=cibuildwheel
• d9b660a chore: make upgrade
• b128a31 docs: oops, move this entry to the correct place
• a7a2c15 fix: escape filename urls in html report href attributes (#2227)
• Additional commits viewable in compare view

Updates ipython from 9.15.0 to 9.16.1

Commits

• 3b83e1b release 9.16.1
• cc8334e Convert IFrame sources to strings before HTML escaping (#15348)
• 82a902e back to dev
• 2ae7863 release 9.16.0
• 6334b8f Update whats new for version 9.16 (#15342)
• dbbfa7b escape urls and file names interpolated into display html attributes (#15334)
• 59986e7 fix: correct typos
• 0e9d34d Fix missing space
• 1a753ba Resolve attribute annotations under the policy in eval_node (#15337)
• 876b5aa resolve attribute annotations under the policy in eval_node
• Additional commits viewable in compare view

Updates mypy from 2.3.0 to 2.3.1

Changelog

Sourced from mypy's changelog.

Mypy 2.3.1

• Fix mypyc crash on double yielding Iterators (Daniël van Noord, PR 21826)
• Fix mypyc default_factory for inherited dataclass (Daniël van Noord, PR 21785)
• Clear mypyc coroutine env on coroutine completion (Piotr Sawicki, PR 21734)
• Fix crash when unpacking return value from overload (Shantanu, PR 21830)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• Agriya Khetarpal
• Ethan Sarp
• Ivan Levkivskyi
• Jingchen Ye
• Jukka Lehtosalo
• Piotr Sawicki
• Shantanu
• Tom Bannink
• Viktor Szépe
• ygale

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.2

We've just uploaded mypy 2.2.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Support for Closed TypedDicts (PEP 728)

Mypy now supports closed TypedDicts as specified in PEP 728. A closed TypedDict cannot have extra keys beyond those explicitly defined. This allows the type checker to determine that certain operations are safe when they otherwise wouldn't be due to the potential presence of unknown keys.

You can use the closed keyword argument with TypedDict:

HasName = TypedDict("HasName", {"name": str})
HasOnlyName = TypedDict("HasOnlyName", {"name": str}, closed=True)
Movie = TypedDict("Movie", {"name": str, "year": int})
movie: Movie = {"name": "Nimona", "year": 2023}
has_name: HasName = movie  # OK: HasName is open (default)
has_only_name: HasOnlyName = movie  # Error: HasOnlyName is closed and Movie has extra "year" key
</tr></table>

... (truncated)

Commits

• d642c44 Bump version to 2.3.1
• a392429 [mypyc] Fix crash on double yielding Iterators (#21826)
• 4843e77 [mypyc] Fix default_factory for inherited dataclass (#21785)
• 14f5df9 [mypyc] Clear coroutine env on coroutine completion (#21734)
• 6dfa06d Fix crash when unpacking return value from overload (#21830)
• a385746 Bump version to 2.3.1+dev
• See full diff in compare view

Updates pre-commit from 4.6.1 to 4.6.2

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.2

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Changelog

Sourced from pre-commit's changelog.

4.6.2 - 2026-08-10

Fixes

• Fix language: node hooks that contain "scripts": {"build": ...} with npm 11.x.
  • Regressed in 4.6.1.
  • #3737 issue by @​mheiges.
  • #3743 PR by @​asottile.

Commits

• 9767b6c v4.6.2
• 42ee3ff Merge pull request #3743 from pre-commit/npm-build-scripts-11-x
• 3056619 fix language: node for hooks with build scripts and npm 11.x
• See full diff in compare view

Updates pytest-django from 4.12.0 to 4.14.0

Release notes

Sourced from pytest-django's releases.

v4.14.0

https://pytest-django.readthedocs.io/en/stable/changelog.html#v4-14-0-2026-08-10

v4.13.0

https://pytest-django.readthedocs.io/en/latest/changelog.html#v4-13-0-2026-08-06

Changelog

Sourced from pytest-django's changelog.

v4.14.0 (2026-08-10)

Compatibility ^^^^^^^^^^^^^

• Restored (unofficial) support for Django 5.0 and Django 5.1.

Improvements ^^^^^^^^^^^^

• Added a django extra to the package. By depending on this extra (e.g. pip install pytest-django[django]), the dependency resolver will ensure you get a version of pytest-django that is compatible with your version of Django (lower bound only). At least from now on...

v4.13.0 (2026-08-06)

Compatibility ^^^^^^^^^^^^^

• Dropped support for Django 4.2 and 5.1.

Improvements ^^^^^^^^^^^^

• Export pytest_django.Settings from the top-level pytest_django module so the :fixture:settings fixture can be type-annotated ([#1257](https://github.com/pytest-dev/pytest-django/issues/1257) <https://github.com/pytest-dev/pytest-django/issues/1257>__).

Bugfixes ^^^^^^^^

• Fixed type hints of assert methods to match actual signature (PR [#1271](https://github.com/pytest-dev/pytest-django/issues/1271) <https://github.com/pytest-dev/pytest-django/pull/1271>__)
• Handled Django 6.2's ImproperlyConfigured (in addition to ImportError) when the configured DJANGO_SETTINGS_MODULE cannot be imported, so pytest-django still shows its guidance message.
• Fixed django_db(transaction=True) tests being set up twice, which repeated the serialized_rollback restore and the fixtures load, and sent setting_changed and post_migrate twice when available_apps is set.
• Fixed --help/--version failing with AppRegistryNotReady (surfaced as a could not load initial conftests warning) when a conftest.py imports Django models at the top level. Django is now set up even when --help/--version are passed, before the initial conftests are loaded for these options ([#1152](https://github.com/pytest-dev/pytest-django/issues/1152) <https://github.com/pytest-dev/pytest-django/issues/1152>__).

Commits

• 1a6b612 Release 4.14.0
• fffb11d docs: remove $ for consistency
• e8c0606 docs: move the django extra explanation
• b66deb6 tests: strict import to make pyright happy
• 823db39 tests: fix wrong type (typing only)
• a1eaf5d Drop django<5 message asserts compat
• 2ea1423 Fix _pre_setup_ran_eagerly on Django 5.0 and 5.1
• 903429c Add django extra to ensure Django dependency compatible lower bound
• 9661589 docs: prefer newer pytest config TOML format
• 7646196 docs: remove needless comment
• Additional commits viewable in compare view

Updates pytest-rerunfailures from 16.4 to 16.5

Changelog

Sourced from pytest-rerunfailures's changelog.

16.5 (2026-08-13)

Features ++++++++

• Add --max-suite-reruns option to cap the total number of reruns across the entire test suite. Once the limit is reached, no further reruns occur regardless of per-test --reruns or @pytest.mark.flaky settings. ([#298](https://github.com/pytest-dev/pytest-rerunfailures/issues/298) <https://github.com/pytest-dev/pytest-rerunfailures/issues/298>_)

Bug Fixes +++++++++

• Create a new test class instance for each rerun. Previously the instance of the failed attempt was reused, so state stored on self leaked into the rerun and broke test isolation. Fixtures cached at class scope or higher are still not re-executed. ([#268](https://github.com/pytest-dev/pytest-rerunfailures/issues/268) <https://github.com/pytest-dev/pytest-rerunfailures/issues/268>_)
• Prevent a rerun when a fixture teardown raises an error matching --rerun-except. Previously only the error from the current test stage was considered, so a --rerun-except-matching error raised during teardown was ignored and the test was rerun anyway. ([#270](https://github.com/pytest-dev/pytest-rerunfailures/issues/270) <https://github.com/pytest-dev/pytest-rerunfailures/issues/270>_)

Commits

• 88291f7 Preparing release 16.5
• 81141e0 Switch change log management to towncrier (#341)
• 6df6fb5 Create a fresh test class instance for each rerun (#340)
• 0440e21 fix: prevent rerun when teardown error matches --rerun-except (#338)
• 5fc2d79 feat: add --max-suite-reruns option to cap total reruns across suite (#332)
• 5fc495a Bump actions/setup-python from 6 to 7 in the actions group (#339)
• 1087cc2 Back to development: 16.5
• See full diff in compare view

Updates ruff from 0.16.0 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)
Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.