Bump the uv-dependencies group across 1 directory with 32 updates by dependabot[bot] · Pull Request #412 · tlambert03/FPbase

dependabot · 2026-03-01T16:45:40Z

Bumps the uv-dependencies group with 32 updates in the / directory:

Package	From	To
algoliasearch-django	`3.0.0`	`4.0.0`
celery[redis]	`5.5.3`	`5.6.2`
django-anymail	`10.0`	`14.0`
django-avatar	`8.0.1`	`9.0.0`
django-crispy-forms	`1.13.0`	`2.6`
django-environ	`0.12.0`	`0.13.0`
django-reversion-compare	`0.19.1`	`0.19.2`
django-reversion	`6.0.0`	`6.1.0`
django	`5.2.8`	`6.0.2`
google-analytics-data	`0.19.0`	`0.20.0`
google-auth	`2.43.0`	`2.48.0`
matplotlib	`3.10.7`	`3.10.8`
numpy	`2.3.4`	`2.4.2`
pillow	`12.0.0`	`12.1.1`
sentry-sdk	`2.44.0`	`2.53.0`
gunicorn	`23.0.0`	`25.1.0`
scout-apm	`3.5.0`	`3.5.3`
crispy-bootstrap5	`0.7`	`2026.3`
playwright	`1.56.0`	`1.58.0`
pytest-django	`4.11.1`	`4.12.0`
pytest-playwright	`0.7.1`	`0.7.2`
pytest	`8.4.2`	`9.0.2`
pixelmatch	`0.3.0`	`0.3.1`
basedpyright	`1.33.0`	`1.38.2`
celery-types	`0.23.0`	`0.24.0`
django-types	`0.22.0`	`0.23.0`
djangorestframework-stubs	`3.16.5`	`3.16.8`
ipython	`9.7.0`	`9.10.0`
pandas	`2.3.3`	`3.0.1`
pdbpp	`0.11.7`	`0.12.1`
prek	`0.2.14`	`0.3.4`
ruff	`0.14.5`	`0.15.4`

Updates algoliasearch-django from 3.0.0 to 4.0.0

Release notes

Sourced from algoliasearch-django's releases.

4.0.0

⚠ BREAKING CHANGES

drop support for python <3.8

drop support for python <4.0

remove method clear_index in favor of clear_objects

See upgrade guide

Changelog

Sourced from algoliasearch-django's changelog.

2024-12-26 4.0.0

[MAJOR] drop support for python <3.8 #336

[MAJOR] drop support for django <4.0 #336

[MAJOR] remove method clear_index in favor of clear_objects #336

Commits

cbf5df0 chore: release v4 (#338)
e869b15 fix: remove highlightResult from response (#337)
b71984f feat!: support new algoliasearch and django versions (#336)
7f23fc2 chore: add release process (#332)
2233054 chore: bump to 3.0.0
See full diff in compare view

Updates celery[redis] from 5.5.3 to 5.6.2

Release notes

Sourced from celery[redis]'s releases.

v5.6.2

What's Changed

Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeError when pool_cls is a string by @bruunotrindade in celery/celery#10045

Bugfix: Revoked tasks now immediately update backend status to REVOKED by @Nusnus in celery/celery#9869

Prepare for release: v5.6.2 by @Nusnus in celery/celery#10049

New Contributors

@bruunotrindade made their first contribution in celery/celery#10045

Full Changelog: celery/celery@v5.6.1...v5.6.2

v5.6.1

What's Changed

Fix Redis Sentinel ACL authentication support by @anthonykuzmich7 in celery/celery#10013

Fix: Broker heartbeats not sent during graceful shutdown by @weetster in celery/celery#9986

docs #5410 -- Document confirm_publish broker transport option by @JaeHyuckSa in celery/celery#10016

close DB pools only in prefork mode by @petrprikryl in celery/celery#10020

Fix: Avoid unnecessary Django database connection creation during cleanup by @snopoke in celery/celery#10015

reliable prefork detection by @petrprikryl in celery/celery#10023

better coverage by @petrprikryl in celery/celery#10029

Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example by @SpaceShaman in celery/celery#10030

Stop importing pytest_subtests by @cjwatson in celery/celery#10032

Only use exceptiongroup backport for Python < 3.11 by @cjwatson in celery/celery#10033

Prepare for release: v5.6.1 by @Nusnus in celery/celery#10037

New Contributors

@anthonykuzmich7 made their first contribution in celery/celery#10013

@weetster made their first contribution in celery/celery#9986

@JaeHyuckSa made their first contribution in celery/celery#10016

@snopoke made their first contribution in celery/celery#10015

@SpaceShaman made their first contribution in celery/celery#10030

Full Changelog: celery/celery@v5.6.0...v5.6.1

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

... (truncated)

Changelog

Sourced from celery[redis]'s changelog.

5.6.2

:release-date: 2026-01-04 :release-by: Tomer Nosrati

What's Changed
- Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeError when pool_cls is a string ([#10045](https://github.com/celery/celery/issues/10045))
- Bugfix: Revoked tasks now immediately update backend status to REVOKED ([#9869](https://github.com/celery/celery/issues/9869))
- Prepare for release: v5.6.2 ([#10049](https://github.com/celery/celery/issues/10049))
.. _version-5.6.1:
5.6.1
:release-date: 2025-12-29
:release-by: Tomer Nosrati
What's Changed
Fix Redis Sentinel ACL authentication support (#10013)

Fix: Broker heartbeats not sent during graceful shutdown (#9986)

docs #5410 -- Document confirm_publish broker transport option (#10016)

close DB pools only in prefork mode (#10020)

Fix: Avoid unnecessary Django database connection creation during cleanup (#10015)

reliable prefork detection (#10023)

better coverage (#10029)

Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example (#10030)

Stop importing pytest_subtests (#10032)

Only use exceptiongroup backport for Python < 3.11 (#10033)

Prepare for release: v5.6.1 (#10037)

.. _version-5.6.0:

5.6.0

:release-date: 2025-11-30 :release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights
See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below.
</tr></table> 

... (truncated)

Commits

6a43c84 Prepare for release: v5.6.2 (#10049)
333a82f Bugfix: Revoked tasks now immediately update backend status to REVOKED (#9869)
9d6ab11 Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeEr...
21dbc73 Prepare for release: v5.6.1 (#10037)
ba20bed Only use exceptiongroup backport for Python < 3.11 (#10033)
2167529 Stop importing pytest_subtests
0527296 Bump google-cloud-firestore from 2.21.0 to 2.22.0
5f8659b Clarify 'result_extended' setting usage in tasks
f19db70 Bump mypy from 1.19.0 to 1.19.1 (#10028)
6da72bd better coverage (#10029)
Additional commits viewable in compare view

Updates django-anymail from 10.0 to 14.0

Release notes

Sourced from django-anymail's releases.

v14.0

This release improves handling of Unicode characters everywhere email messages allow them, based on extensive testing on all supported ESPs. See International email in the docs for more information. There are several new workarounds for ESP bugs with non-ASCII characters, plus a handful of new errors to help you avoid Unicode bugs Anymail can't work around.

This release also includes support for Django 6.0 and adds the much-requested ESP Mailtrap.

See the Changelog for breaking changes and a full list of other features and fixes.

v13.1

Changelog

v13.0.1

Changelog

v13.0

Changelog

v12.0

Changelog

v11.1

Changelog

v11.0.1

Changelog

(This release is solely to update documentation and metadata. Code is identical to v11.0.)

v11.0

Breaking changes for Amazon SES; SparkPost (with template_id)

New merge_headers feature

And more…

Please check the changelog

v10.3

Changelog

v10.2

Changelog

v10.1

Changelog

Changelog

Sourced from django-anymail's changelog.

v14.0

2025-12-17

This release improves handling of Unicode characters everywhere email messages allow them, based on extensive testing on all supported ESPs. See International email <https://anymail.dev/en/stable/tips/international_email/#idna>_ in the docs for more information. There are several new workarounds for ESP bugs with non-ASCII characters, plus a handful of new errors to help you avoid Unicode bugs Anymail can't work around.

This release also includes support for Django 6.0 (earlier versions worked, but provoked deprecation warnings) and adds the much-requested ESP Mailtrap.

Breaking changes


(These changes don't affect the vast majority of Anymail users.)


International domain names: When sending email to a non-ASCII domain name,

use IDNA 2008 with UTS-46 pre-processing rather than obsolete IDNA 2003

encoding. This ensures email can be sent to newer domains enabled by IDNA 2008.
This change should make no difference for virtually all real-world email

addresses that worked with earlier Anymail releases. But trying to send to

emoji domains or others no longer allowed by IDNA 2008 will now raise an

AnymailInvalidAddress error.
To restore the old behavior or select a different encoding, use the new

IDNA_ENCODER setting. See

Domains (IDNA) &lt;https://anymail.dev/en/stable/tips/international_email/#idna&gt;_

in the docs.
As part of this change, Anymail now has a direct dependency on the idna

package. (It was already being installed as a sub-dependency of requests.)


Brevo: Raise an error if metadata or custom header values include Unicode

characters. This avoids a Brevo API bug that sends unencoded 8-bit headers,

which can cause bounces or dropped messages.


Mailgun: Raise an error if the from_email uses EAI (has a Unicode

local part). This avoids a Mailgun API bug that generates undeliverable

messages.


Resend: Raise an error if an attachment's filename has an extension that

doesn't match its content type. This tries to help you avoid a Resend API bug

that can silently drop sent messages.


Scaleway TEM: Raise an error if any address field uses EAI (has a Unicode

</tr></table>

... (truncated)

Commits

e0f50c2 Release 14.0
a575bfc Docs: update some outdated examples
d6e8374 CI/CD: reduce permissions to GitHub workflows
5ee1e0d Thank contributors and sponsors in readme
793617c Mailtrap: new ESP
ee96317 Postmark: Avoid KeyError in tracking webhook for bounce/unsubscribe payload
ab2e85f Amazon SES (docs): show TenantName and EndpointId examples
f57bdc7 Exempt webhooks from Django's LoginRequiredMiddleware
643f46f Support Django 6.0
131b1c1 Improve handling of non-ASCII characters in attachments
Additional commits viewable in compare view

Updates django-avatar from 8.0.1 to 9.0.0

Release notes

Sourced from django-avatar's releases.

Close all open files

Fix files not closed in create_thumbnail

Add Django 5.2 and 6.0 support

Add Python 3.13, 3.14 support

Drop Python 3.8, 3.9 support

Changelog

Sourced from django-avatar's changelog.

9.0.0

Fix files not closed in create_thumbnail

Add Django 5.2 and 6.0 support

Add Python 3.13, 3.14 support

Drop Python 3.8, 3.9 support

Commits

12e4745 9.0.0
0f72578 Update CHANGELOG for version 9.0.0
80a7c95 Close files in create thumbnail (#252)
7cb5533 [pre-commit.ci] pre-commit autoupdate (#250)
d1801ed Fix url in cofirm_delete (#254)
4955d2d Update versions of Python, Django, GitHub Actions, and pre-commit hooks (#253)
14495e8 Enable parameters for LibRavatar (#255)
45e741a Update Python and Django versions in CI workflow
a6cafaa [pre-commit.ci] pre-commit autoupdate (#249)
See full diff in compare view

Updates django-crispy-forms from 1.13.0 to 2.6

Release notes

Sourced from django-crispy-forms's releases.

2.6 (2026-03-01)

Dropped support for Django 4.2, 5.0 and 5.1.

2.5

Confirmed support for Python 3.14.

Confirmed support for Django 6.0.

Dropped support for Python 3.8.

2.4

Added support for Python 3.13.

Confirmed support for Django 5.2.

2.3

What's Changed

Fixed unexpected addition the 'active' css_class to AccordionGroup

2.2

Added support for Django 5.1.

Allowed pass through of context when rendering a Fieldset layout object.

Full Changelog: django-crispy-forms/django-crispy-forms@2.1...2.2

2.1

What's Changed

Added support for Django 5.0.

Dropped support for Django 3.2, 4.0 and 4.1.

Added support for Python 3.12.

Dropped support for Python 3.7.

New Contributors

@DanielSwain made their first contribution in django-crispy-forms/django-crispy-forms#1340

@sankarebarri made their first contribution in django-crispy-forms/django-crispy-forms#1342

@foarsitter made their first contribution in django-crispy-forms/django-crispy-forms#1353

Full Changelog: django-crispy-forms/django-crispy-forms@2.0...2.1

2.0 (2023-02-13)

Major Changes and Migration Guide

Removed all Bootstrap template packs. These template packs are now available as standalone packages. To upgrade, install the required template pack and add it to your INSTALLED_APPS setting.

Boostrap 2: PyPI -- GitHub

Boostrap 3: PyPI -- GitHub

Boostrap 4: PyPI -- GitHub

... (truncated)

Changelog

Sourced from django-crispy-forms's changelog.

2.6 (2026-03-01)

Dropped support for Django 4.2, 5.0 and 5.1.

2.5 (2025-11-06)

Confirmed support for Python 3.14.

Confirmed support for Django 6.0.

Dropped support for Python 3.8.

2.4 (2025-04-13)

Added support for Python 3.13.

Confirmed support for Django 5.2.

2.3 (2024-07-19)

Fixed a bug in AccordionGroup rendering then it gets an unexpected css class active.

2.2 (2024-06-15)

Added support for Django 5.1.

Allowed pass through of context when rendering a Fieldset layout object.

2.1 (2023-10-15)

Added support for Django 5.0.

Dropped support for Django 3.2, 4.0 and 4.1.

Added support for Python 3.12.

Dropped support for Python 3.7.

See the 2.1 Milestone for the full change list.

2.0 (2023-02-13)

Release of django-crispy-forms 2.0. No changes introduced since 2.0a1.

2.0a1 (2023-01-18)

Major Changes and Migration Guide
Removed all Bootstrap template packs. These template packs are now available as standalone packages. To upgrade, install the required template pack and add it to your INSTALLED_APPS setting.

Boostrap 2: PyPI -- GitHub

Boostrap 3: PyPI -- GitHub

Boostrap 4: PyPI -- GitHub

Also, support for Bootstrap 5 is provided by a 3rd party package under the django-crispy-forms organisation at crispy-bootstrap5.
Removed uni-form template pack. Uni-Form specific classes previously added to every template pack e.g. textInput are now removed. If you require these classes, the previous behaviour can be restored by adding the following to CRISPY_CLASS_CONVERTERS in your settings file.
  converters = {

... (truncated)

Commits

dc8007e Release 2.6. (#1432)
792c671 Updated versions in pyproject.toml. (#1431)
af31d24 Fix incorrect reverse in crispy tag docs (#1410)
fb7acdc Don't crash when using the crispy template tag and missing variables (#1418)
d30a0ab Dropped unsupported Django versions. (#1430)
3f5b88d Improved |as_crispy_field error message. (#1427)
6a97c68 Fix typos in some files (#1425)
65fa8ae 2.5 Release. (#1424)
ca4ca14 PEP 639 licenses (#1413)
aaabe68 Updated pre-commit hook versions.
Additional commits viewable in compare view

Updates django-environ from 0.12.0 to 0.13.0

Release notes

Sourced from django-environ's releases.

v0.13.0

v0.13.0_ - 18-February-2026

Added +++++

Added optional warnings when defaults are used [#582](https://github.com/joke2k/django-environ/issues/582) <https://github.com/joke2k/django-environ/pull/582>_.

Added choices argument support for value validation in Env.str(...) [#555](https://github.com/joke2k/django-environ/issues/555) <https://github.com/joke2k/django-environ/pull/555>_.

Added Valkey support via valkey:// and valkeys:// cache URL schemes [#554](https://github.com/joke2k/django-environ/issues/554) <https://github.com/joke2k/django-environ/pull/554>_.

Added support for rediss:// scheme in channels URL parsing [#573](https://github.com/joke2k/django-environ/issues/573) <https://github.com/joke2k/django-environ/pull/573>_.

Added django-prometheus database backend aliases to DB URL parsing schemes [#559](https://github.com/joke2k/django-environ/issues/559) <https://github.com/joke2k/django-environ/pull/559>_.

Changed +++++++

Declared support for Python 3.14 [#580](https://github.com/joke2k/django-environ/issues/580) <https://github.com/joke2k/django-environ/pull/580>_.

Declared support for Django 5.2 and Django 6.0 [#578](https://github.com/joke2k/django-environ/issues/578) <https://github.com/joke2k/django-environ/pull/578>_.

Fixed +++++

Improved type hint coverage and related lint issues [#546](https://github.com/joke2k/django-environ/issues/546) <https://github.com/joke2k/django-environ/pull/546>_.

Fixed typos in the FAQ page [#445](https://github.com/joke2k/django-environ/issues/445) <https://github.com/joke2k/django-environ/pull/445>_.

v0.12.1

Changelog

Fixed

Fixed PostgreSQL cluster URL parsing with bracketed IPv6 hosts in recent Python versions, preventing failures in runtime URL parsing and related regression tests [#574](https://github.com/joke2k/django-environ/issues/574) <https://github.com/joke2k/django-environ/issues/574>_.

Fixed debug logging in Env.get_value() to avoid evaluating lazy default objects when DEBUG logging is enabled [#571](https://github.com/joke2k/django-environ/issues/571) <https://github.com/joke2k/django-environ/issues/571>_.

Changelog

Sourced from django-environ's changelog.

v0.13.0_ - 18-February-2026

Added +++++

Added optional warnings when defaults are used [#582](https://github.com/joke2k/django-environ/issues/582) <https://github.com/joke2k/django-environ/pull/582>_.

Added choices argument support for value validation in Env.str(...) [#555](https://github.com/joke2k/django-environ/issues/555) <https://github.com/joke2k/django-environ/pull/555>_.

Added Valkey support via valkey:// and valkeys:// cache URL schemes [#554](https://github.com/joke2k/django-environ/issues/554) <https://github.com/joke2k/django-environ/pull/554>_.

Added support for rediss:// scheme in channels URL parsing [#573](https://github.com/joke2k/django-environ/issues/573) <https://github.com/joke2k/django-environ/pull/573>_.

Added django-prometheus database backend aliases to DB URL parsing schemes [#559](https://github.com/joke2k/django-environ/issues/559) <https://github.com/joke2k/django-environ/pull/559>_.

Changed +++++++

Declared support for Python 3.14 [#580](https://github.com/joke2k/django-environ/issues/580) <https://github.com/joke2k/django-environ/pull/581>_.

Declared support for Django 5.2 and Django 6.0 [#578](https://github.com/joke2k/django-environ/issues/578) <https://github.com/joke2k/django-environ/pull/578>_.

Fixed +++++

Improved type hint coverage and related lint issues [#546](https://github.com/joke2k/django-environ/issues/546) <https://github.com/joke2k/django-environ/pull/546>_.

Fixed typos in the FAQ page [#445](https://github.com/joke2k/django-environ/issues/445) <https://github.com/joke2k/django-environ/pull/445>_.

v0.12.1_ - 13-February-2026

Fixed +++++

Fixed PostgreSQL cluster URL parsing with bracketed IPv6 hosts in recent Python versions, preventing failures in runtime URL parsing and related regression tests [#574](https://github.com/joke2k/django-environ/issues/574) <https://github.com/joke2k/django-environ/issues/574>_.

Fixed debug logging in Env.get_value() to avoid evaluating lazy default objects when DEBUG logging is enabled [#571](https://github.com/joke2k/django-environ/issues/571) <https://github.com/joke2k/django-environ/issues/571>_.

Commits

00746d0 docs: add Django 5.2 and 6.0 support to README
d1f1159 Release 0.13.0
d82e361 Add optional warnings when defaults are used (#582)
a78f7c8 Fixed some typos in the FAQ page (#445)
24b299e Feature/add choice parameter and raise an exception if fetched value is not w...
c441413 Add django-prometheus database backends to DB_SCHEMES (#559)
98a0aad Fix lint issues in environ type hints
f4e77e4 feat(cache): add valkey and valkeys as allowed schemes (#554)
dd4d308 Add type hints (#546)
3137c4f Support lower case options for Django Redis cache backend (#550)
Additional commits viewable in compare view

Updates django-reversion-compare from 0.19.1 to 0.19.2

Commits

bef4c38 Merge pull request #267 from jedie/dev
e1cbaa5 Release as v0.19.2
055b055 Merge pull request #266 from jedie/dev
9655d8c Support django-countries v8
8855007 Update requirements
2f2c233 Apply manageprojects updates
See full diff in compare view

Updates django-reversion from 6.0.0 to 6.1.0

Release notes

Sourced from django-reversion's releases.

v6.1.0

What's Changed

Implement date-based ordering and custom version sort by @micmarc in etianen/django-reversion#992

New Contributors

@micmarc made their first contribution in etianen/django-reversion#992

Full Changelog: etianen/django-reversion@v6.0.0...v6.1.0

Changelog

Sourced from django-reversion's changelog.

6.1.0 - 2025-12-12

Added history_order_by_date and get_version_ordering to VersionAdmin (@micmarc).

Commits

98483a3 v6.1.0
d2e425f Merge pull request #992 from micmarc/custom-version-sort
2ae8d84 Implement history_order_by_date and get_version_ordering() hook with defa...
abe3535 Update CHANGELOG.rst
ed6ef82 Update CHANGELOG.rst
See full diff in compare view

Updates django from 5.2.8 to 6.0.2

Commits

ba00558 [6.0.x] Bumped version for 6.0.2 release.
259dff0 [6.0.x] Refs CVE-2026-1312 -- Raised ValueError when FilteredRelation aliases...
15e70cb [6.0.x] Fixed CVE-2026-1312 -- Protected order_by() from SQL injection via al...
0c0f5c2 [6.0.x] Fixed CVE-2026-1287 -- Protected against SQL injection in column alia...
4b86ba5 [6.0.x] Fixed CVE-2026-1285 -- Mitigated potential DoS in django.utils.text.T...
8f77e73 [6.0.x] Fixed CVE-2026-1207 -- Prevented SQL injections in RasterField lookup...
972dbdd [6.0.x] Fixed CVE-2025-14550 -- Optimized repeated header parsing in ASGI req...
d72cc3b [6.0.x] Fixed CVE-2025-13473 -- Standardized timing of check_password() in mo...
d64ef24 [6.0.x] Refs #36788 -- Added missing CSS selector for fieldsets in the admin.
f9bfb52 [6.0.x] Fixed #36788 -- Fixed horizontal form field alignment under <fieldset...
Additional commits viewable in compare view

Updates google-analytics-data from 0.19.0 to 0.20.0

Release notes

Sourced from google-analytics-data's releases.

google-cloud-compute-v1beta: v0.7.0

v0.7.0 (2026-02-26)

Features

Update Compute Engine v1beta API to revision 20260206 (googleapis/googleapis#1159) (09006260)

Update Compute Engine v1beta API to revision 20260106 (#1147) (09006260)

google-cloud-compute-v1beta 0.6.0

0.6.0 (2026-01-29)

Features

Update Compute Engine v1beta API to revision 20251230 (#1143) (7260dd49)

Commits

c60ded4 chore: librarian release pull request: 20260108T181058Z (#15005)
c0e3e9d chore: disable treat warnings as errors (#15008)
45d4cee docs(samples): Update BigQuery Storage Arrow samples batching logic (#14961)
45149ba chore: librarian release pull request: 20260108T162506Z (#15001)
d58a9ba test: Add 'cryptography' 'cachetools' to test deps for bigquery-storage (#14999)
1028946 feat: add v1 api for google-cloud-maintenance-api (#14998)
b3cb4de chore: librarian generate pull request: 20260107T084051Z (#14995)
17cc128 chore: librarian generate pull request: 20251231T091651Z (#14991)
c353aa5 chore: librarian update image pull request: 20251219T024955Z (#14985)
f384538 chore: librarian release pull request: 20251217T215552Z (#14980)
Additional commits viewable in compare view

Updates google-auth from 2.43.0 to 2.48.0

Release notes

Sourced from google-auth's releases.

google-auth 2.48.0

2.48.0 (2026-01-21)

Features

honor NO_GCE_CHECK environment variable (#1610) (383c9827)

add configurable GCE Metadata Server retries (#1488) (454b441b)

add cryptography as required dependency (#1929) (52558ae2)

Support the mTLS IAM domain for Certificate based Access (#1938) (8dcf91a1)

Bug Fixes

resolve circular imports (#1942) (25c1b064)

Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a240)

removes content-header from AWS IMDS get request (#1934) (97bfea9e)

detect correct auth when ADC env var is set but empty (#1374) (bfc07e10)

replace deprecated utcfromtimestamp (#1799) (e431f20c)

v2.48.0rc0

2.48.0rc0 (2026-01-20)

Features

honor NO_GCE_CHECK environment variable (#1610) (383c98)

add configurable GCE Metadata Server retries (#1488) (454b44)

support mTLS IAM domain for Certificate based Access (#1938) (8dcf91)

add cryptography as required dependency (#1929) (52558a)

Bug Fixes

Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a2)

replace deprecated utcfromtimestamp (#1799) (e431f2)

detect correct auth when ADC env var is set by empty (#1374) (bfc07e)

removed content-header from AWS IMDS (#1934) (97bfea)

resolve circular imports (#1942) (25c1b0)

google-auth 2.47.0

2.47.0 (2026-01-06)

Features

... (truncated)

Changelog

Sourced from google-auth's changelog.

2.48.0 (2026-01-22)

Features

add cryptography as required dependency (#1929) (52558ae2881b1e6555f6f5c0d76365c15807ead9)

Support the mTLS IAM domain for Certificate based Access (#1938) (8dcf91a1b05c85fbbd0bcee78d66e498099102ab)

add configurable GCE Metadata Server retries (#1488) (454b441b478ec62bbf1a6ad5bceb6c7cbbfd0c37)

honor NO_GCE_CHECK environment variable (#1610) (383c9827536d9376e8248370ce4c2b83e468d027)

Bug Fixes

resolve circular imports (#1942) (25c1b064545702cbef087cfcd15fbbb6ef1af74f)

removes content-header from AWS IMDS get request (#1934) (97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc)

detect correct auth when ADC env var is set but empty (#1374) (bfc07e1050bd0aa86fa3b08cdf70c9b68b5fe6a2)

replace deprecated utcfromtimestamp (#1799) (e431f20cf73ccac71926a23ec454468cea92e053)

Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a24089c4ee6822d510de0db210b54260d873)

2.47.0 (2026-01-06)

Features

drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)

Bug Fixes

Python 3.8 support (#1918) (60dc20014a35ec4ba71e8065b9a33ecbdbeca97a)

2.46.0 (2026-01-05)

Documentation

update urllib...
Description has been truncated

Bumps the uv-dependencies group with 32 updates in the / directory: | Package | From | To | | --- | --- | --- | | [algoliasearch-django](https://github.com/algolia/algoliasearch-django) | `3.0.0` | `4.0.0` | | [celery[redis]](https://github.com/celery/celery) | `5.5.3` | `5.6.2` | | [django-anymail](https://github.com/anymail/django-anymail) | `10.0` | `14.0` | | [django-avatar](https://github.com/jazzband/django-avatar) | `8.0.1` | `9.0.0` | | [django-crispy-forms](https://github.com/django-crispy-forms/django-crispy-forms) | `1.13.0` | `2.6` | | [django-environ](https://github.com/joke2k/django-environ) | `0.12.0` | `0.13.0` | | [django-reversion-compare](https://github.com/jedie/django-reversion-compare) | `0.19.1` | `0.19.2` | | [django-reversion](https://github.com/etianen/django-reversion) | `6.0.0` | `6.1.0` | | [django](https://github.com/django/django) | `5.2.8` | `6.0.2` | | [google-analytics-data](https://github.com/googleapis/google-cloud-python) | `0.19.0` | `0.20.0` | | [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.43.0` | `2.48.0` | | [matplotlib](https://github.com/matplotlib/matplotlib) | `3.10.7` | `3.10.8` | | [numpy](https://github.com/numpy/numpy) | `2.3.4` | `2.4.2` | | [pillow](https://github.com/python-pillow/Pillow) | `12.0.0` | `12.1.1` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.44.0` | `2.53.0` | | [gunicorn](https://github.com/benoitc/gunicorn) | `23.0.0` | `25.1.0` | | [scout-apm](https://github.com/scoutapp/scout_apm_python) | `3.5.0` | `3.5.3` | | [crispy-bootstrap5](https://github.com/django-crispy-forms/crispy-bootstrap5) | `0.7` | `2026.3` | | [playwright](https://github.com/microsoft/playwright-python) | `1.56.0` | `1.58.0` | | [pytest-django](https://github.com/pytest-dev/pytest-django) | `4.11.1` | `4.12.0` | | [pytest-playwright](https://github.com/microsoft/playwright-pytest) | `0.7.1` | `0.7.2` | | [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.2` | | [pixelmatch](https://github.com/whtsky/pixelmatch-py) | `0.3.0` | `0.3.1` | | [basedpyright](https://github.com/detachhead/basedpyright) | `1.33.0` | `1.38.2` | | [celery-types](https://github.com/sbdchd/celery-types) | `0.23.0` | `0.24.0` | | [django-types](https://github.com/sbdchd/django-types) | `0.22.0` | `0.23.0` | | [djangorestframework-stubs](https://github.com/sponsors/typeddjango) | `3.16.5` | `3.16.8` | | [ipython](https://github.com/ipython/ipython) | `9.7.0` | `9.10.0` | | [pandas](https://github.com/pandas-dev/pandas) | `2.3.3` | `3.0.1` | | [pdbpp](https://github.com/bretello/pdbpp) | `0.11.7` | `0.12.1` | | [prek](https://github.com/j178/prek) | `0.2.14` | `0.3.4` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.5` | `0.15.4` | Updates `algoliasearch-django` from 3.0.0 to 4.0.0 - [Release notes](https://github.com/algolia/algoliasearch-django/releases) - [Changelog](https://github.com/algolia/algoliasearch-django/blob/master/ChangeLog) - [Commits](algolia/algoliasearch-django@3.0.0...4.0.0) Updates `celery[redis]` from 5.5.3 to 5.6.2 - [Release notes](https://github.com/celery/celery/releases) - [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst) - [Commits](celery/celery@v5.5.3...v5.6.2) Updates `django-anymail` from 10.0 to 14.0 - [Release notes](https://github.com/anymail/django-anymail/releases) - [Changelog](https://github.com/anymail/django-anymail/blob/main/CHANGELOG.rst) - [Commits](anymail/django-anymail@v10.0...v14.0) Updates `django-avatar` from 8.0.1 to 9.0.0 - [Release notes](https://github.com/jazzband/django-avatar/releases) - [Changelog](https://github.com/jazzband/django-avatar/blob/main/CHANGELOG.rst) - [Commits](jazzband/django-avatar@v8.0.1...v9.0.0) Updates `django-crispy-forms` from 1.13.0 to 2.6 - [Release notes](https://github.com/django-crispy-forms/django-crispy-forms/releases) - [Changelog](https://github.com/django-crispy-forms/django-crispy-forms/blob/main/CHANGELOG.md) - [Commits](django-crispy-forms/django-crispy-forms@1.13.0...2.6) Updates `django-environ` from 0.12.0 to 0.13.0 - [Release notes](https://github.com/joke2k/django-environ/releases) - [Changelog](https://github.com/joke2k/django-environ/blob/develop/CHANGELOG.rst) - [Commits](joke2k/django-environ@v0.12.0...v0.13.0) Updates `django-reversion-compare` from 0.19.1 to 0.19.2 - [Commits](jedie/django-reversion-compare@v0.19.1...v0.19.2) Updates `django-reversion` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/etianen/django-reversion/releases) - [Changelog](https://github.com/etianen/django-reversion/blob/master/CHANGELOG.rst) - [Commits](etianen/django-reversion@v6.0.0...v6.1.0) Updates `django` from 5.2.8 to 6.0.2 - [Commits](django/django@5.2.8...6.0.2) Updates `google-analytics-data` from 0.19.0 to 0.20.0 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-analytics-data-v0.19.0...google-analytics-data-v0.20.0) Updates `google-auth` from 2.43.0 to 2.48.0 - [Release notes](https://github.com/googleapis/google-auth-library-python/releases) - [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md) - [Commits](googleapis/google-auth-library-python@v2.43.0...v2.48.0) Updates `matplotlib` from 3.10.7 to 3.10.8 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.10.7...v3.10.8) Updates `numpy` from 2.3.4 to 2.4.2 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.3.4...v2.4.2) Updates `pillow` from 12.0.0 to 12.1.1 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.0.0...12.1.1) Updates `sentry-sdk` from 2.44.0 to 2.53.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.44.0...2.53.0) Updates `gunicorn` from 23.0.0 to 25.1.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@23.0.0...25.1.0) Updates `scout-apm` from 3.5.0 to 3.5.3 - [Release notes](https://github.com/scoutapp/scout_apm_python/releases) - [Changelog](https://github.com/scoutapp/scout_apm_python/blob/master/CHANGELOG.md) - [Commits](scoutapp/scout_apm_python@v3.5.0...v3.5.3) Updates `crispy-bootstrap5` from 0.7 to 2026.3 - [Release notes](https://github.com/django-crispy-forms/crispy-bootstrap5/releases) - [Changelog](https://github.com/django-crispy-forms/crispy-bootstrap5/blob/main/CHANGELOG.md) - [Commits](django-crispy-forms/crispy-bootstrap5@0.7...2026.3) Updates `playwright` from 1.56.0 to 1.58.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](microsoft/playwright-python@v1.56.0...v1.58.0) Updates `pytest-django` from 4.11.1 to 4.12.0 - [Release notes](https://github.com/pytest-dev/pytest-django/releases) - [Changelog](https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst) - [Commits](pytest-dev/pytest-django@v4.11.1...v4.12.0) Updates `pytest-playwright` from 0.7.1 to 0.7.2 - [Release notes](https://github.com/microsoft/playwright-pytest/releases) - [Commits](microsoft/playwright-pytest@v0.7.1...v0.7.2) Updates `pytest` from 8.4.2 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.0.2) Updates `pixelmatch` from 0.3.0 to 0.3.1 - [Commits](whtsky/pixelmatch-py@v0.3.0...v0.3.1) Updates `basedpyright` from 1.33.0 to 1.38.2 - [Release notes](https://github.com/detachhead/basedpyright/releases) - [Commits](DetachHead/basedpyright@v1.33.0...v1.38.2) Updates `celery-types` from 0.23.0 to 0.24.0 - [Commits](https://github.com/sbdchd/celery-types/commits) Updates `django-types` from 0.22.0 to 0.23.0 - [Changelog](https://github.com/sbdchd/django-types/blob/main/CHANGELOG.md) - [Commits](https://github.com/sbdchd/django-types/commits) Updates `djangorestframework-stubs` from 3.16.5 to 3.16.8 - [Commits](https://github.com/sponsors/typeddjango/commits) Updates `ipython` from 9.7.0 to 9.10.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@9.7.0...9.10.0) Updates `pandas` from 2.3.3 to 3.0.1 - [Release notes](https://github.com/pandas-dev/pandas/releases) - [Commits](pandas-dev/pandas@v2.3.3...v3.0.1) Updates `pdbpp` from 0.11.7 to 0.12.1 - [Release notes](https://github.com/bretello/pdbpp/releases) - [Changelog](https://github.com/bretello/pdbpp/blob/master/CHANGELOG) - [Commits](bretello/pdbpp@0.11.7...0.12.1) Updates `prek` from 0.2.14 to 0.3.4 - [Release notes](https://github.com/j178/prek/releases) - [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md) - [Commits](j178/prek@v0.2.14...v0.3.4) Updates `ruff` from 0.14.5 to 0.15.4 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.5...0.15.4) --- updated-dependencies: - dependency-name: algoliasearch-django dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: celery[redis] dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: django-anymail dependency-version: '14.0' dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: django-avatar dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: django-crispy-forms dependency-version: '2.6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: django-environ dependency-version: 0.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: django-reversion-compare dependency-version: 0.19.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: django-reversion dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: django dependency-version: 6.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: google-analytics-data dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: google-auth dependency-version: 2.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: matplotlib dependency-version: 3.10.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: numpy dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: pillow dependency-version: 12.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: sentry-sdk dependency-version: 2.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: gunicorn dependency-version: 25.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: scout-apm dependency-version: 3.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: crispy-bootstrap5 dependency-version: '2026.3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: playwright dependency-version: 1.58.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: pytest-django dependency-version: 4.12.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: pytest-playwright dependency-version: 0.7.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: pixelmatch dependency-version: 0.3.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: basedpyright dependency-version: 1.38.2 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: celery-types dependency-version: 0.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: django-types dependency-version: 0.23.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: djangorestframework-stubs dependency-version: 3.16.8 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: ipython dependency-version: 9.10.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: pandas dependency-version: 3.0.1 dependency-type: direct:development update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: pdbpp dependency-version: 0.12.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: prek dependency-version: 0.3.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: ruff dependency-version: 0.15.4 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2026-03-01T16:50:05Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.59%. Comparing base (ea8e10a) to head (d43d20e).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #412      +/-   ##
==========================================
- Coverage   62.71%   54.59%   -8.12%     
==========================================
  Files         115      115              
  Lines        9200     9200              
==========================================
- Hits         5770     5023     -747     
- Misses       3430     4177     +747

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Mar 1, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the uv-dependencies group across 1 directory with 32 updates#412

Bump the uv-dependencies group across 1 directory with 32 updates#412
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/uv/uv-dependencies-efd0d8b1e8

dependabot bot commented on behalf of github Mar 1, 2026

5.6.1

Uh oh!

codecov bot commented Mar 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Mar 1, 2026

4.0.0

⚠ BREAKING CHANGES

v5.6.2

What's Changed

New Contributors

v5.6.1

What's Changed

New Contributors

v5.6.0

Key Highlights

Python 3.9 Minimum Version

SQS: Reverted to pycurl from urllib3

5.6.2

5.6.1

5.6.0

v14.0

v13.1

v13.0.1

v13.0

v12.0

v11.1

v11.0.1

v11.0

v10.3

v10.2

v10.1

v14.0

Close all open files

2.6 (2026-03-01)

2.5

2.4

2.3

What's Changed

2.2

2.1

What's Changed

New Contributors

2.0 (2023-02-13)

Major Changes and Migration Guide

2.6 (2026-03-01)

2.5 (2025-11-06)

2.4 (2025-04-13)

2.3 (2024-07-19)

2.2 (2024-06-15)

2.1 (2023-10-15)

2.0 (2023-02-13)

2.0a1 (2023-01-18)

Major Changes and Migration Guide

v0.13.0

v0.13.0_ - 18-February-2026

v0.12.1

Changelog

v0.13.0_ - 18-February-2026

v0.12.1_ - 13-February-2026

v6.1.0

What's Changed

New Contributors

6.1.0 - 2025-12-12

google-cloud-compute-v1beta: v0.7.0

v0.7.0 (2026-02-26)

Features

google-cloud-compute-v1beta 0.6.0

0.6.0 (2026-01-29)

Features

google-auth 2.48.0

2.48.0 (2026-01-21)

Features

Bug Fixes

v2.48.0rc0

2.48.0rc0 (2026-01-20)

Features

Bug Fixes

google-auth 2.47.0

2.47.0 (2026-01-06)

Features

2.48.0 (2026-01-22)

Features

SQS: Reverted to `pycurl` from `urllib3`

`v0.13.0`_ - 18-February-2026

`v0.13.0`_ - 18-February-2026

`v0.12.1`_ - 13-February-2026

codecov bot commented Mar 1, 2026 •

edited

Loading