⬆️(dependencies) update python dependencies #260

renovate · 2022-05-23T01:25:00Z

This PR contains the following updates:

Package	Change	Age	Confidence
Django (changelog)	`>=3.2.4,<4` -> `>=5.2.7,<6`
bandit (source, changelog)	`==1.7.4` -> `==1.8.6`
black (changelog)	`==22.3.0` -> `==25.9.0`
boto3	`==1.22.10` -> `==1.40.59`
cssselect	`==1.1.0` -> `==1.3.0`
django-configurations (source)	`==2.3.2` -> `==2.5.1`
django-haystack	`==3.2.1` -> `==3.3.0`
django-lti-toolbox	`==1.0.1` -> `==2.0.0`
django-machina	`==1.1.6` -> `==1.3.1`
django-storages (changelog)	`==1.12.3` -> `==1.14.6`
djangorestframework (source, changelog)	`==3.13.1` -> `==3.16.1`
dockerflow	`==2022.1.0` -> `==2024.4.2`
draftjs_exporter (changelog)	`==5.0.0` -> `==5.1.0`
factory_boy	`==3.2.1` -> `==3.3.3`
flake8 (changelog)	`==4.0.1` -> `==7.3.0`
gunicorn (changelog)	`==20.1.0` -> `==23.0.0`
ipdb	`==0.13.9` -> `==0.13.13`
ipython	`==8.3.0` -> `==9.6.0`
isort (changelog)	`==5.10.1` -> `==7.0.0`
logging-ldp	`==0.0.6` -> `==0.0.7`
lxml (source, changelog)	`==4.8.0` -> `==6.0.2`
mypy (changelog)	`==0.950` -> `==1.18.2`
psycopg2-binary (source, changelog)	`==2.9.3` -> `==2.9.11`
pyfakefs (changelog)	`==4.5.6` -> `==5.10.0`
pylint (changelog)	`==2.13.8` -> `==4.0.2`
pylint-django	`==2.5.3` -> `==2.6.1`
pytest (changelog)	`==7.1.2` -> `==8.4.2`
pytest-cov (changelog)	`==3.0.0` -> `==7.0.0`
pytest-django (changelog)	`==4.5.2` -> `==4.11.1`
sentry-sdk (changelog)	`==1.5.11` -> `==2.42.1`
twine	`==4.0.0` -> `==6.2.0`

Release Notes

django/django (Django)

PyCQA/bandit (bandit)

`v1.8.6`

Compare Source

What's Changed

Bump sigstore/cosign-installer from 3.8.2 to 3.9.0 by @dependabot in #1279
Bump docker/setup-buildx-action from 3.10.0 to 3.11.1 by @dependabot in #1278
added hint to FreeBSD package in doc/source/integrations.rst by @daniel-mohr in #1282
Bump sigstore/cosign-installer from 3.9.0 to 3.9.1 by @dependabot in #1284
Huggingface revision pinning by @lukehinds in #1281

New Contributors

@daniel-mohr made their first contribution in #1282

Full Changelog: PyCQA/bandit@1.8.5...1.8.6

`v1.8.5`

Compare Source

What's Changed

Fix the rendering of the CI/CD doc by @ericwb in #1274
Fix for publish to PyPI failure by @ericwb in #1273

Full Changelog: PyCQA/bandit@1.8.4...1.8.5

`v1.8.3`

Compare Source

What's Changed

Bump docker/build-push-action from 6.10.0 to 6.11.0 by @dependabot in #1220
Bump docker/build-push-action from 6.11.0 to 6.12.0 by @dependabot in #1221
Bump docker/build-push-action from 6.12.0 to 6.13.0 by @dependabot in #1222
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1229
Update bug template to include latest released versions by @ericwb in #1218
Add markupsafe.Markup XSS plugin by @Daverball in #1225
Warn not error on an nonexistant test given by @ericwb in #1230
Bump sigstore/cosign-installer from 3.7.0 to 3.8.0 by @dependabot in #1233
Bump docker/setup-buildx-action from 3.8.0 to 3.9.0 by @dependabot in #1234
B107: Skip None values in hardcoded password detection by @lukehinds in #1232
Pytorch fix by @lukehinds in #1231

New Contributors

@Daverball made their first contribution in #1225

Full Changelog: PyCQA/bandit@1.8.2...1.8.3

`v1.8.2`

Compare Source

What's Changed

Revert "Start testing with 3.14 alphas" by @ericwb in #1217

Full Changelog: PyCQA/bandit@1.8.1...1.8.2

`v1.8.1`

Compare Source

What's Changed

Bump docker/build-push-action from 6.9.0 to 6.10.0 by @dependabot in #1209
Update the bug template with latest bandit version by @ericwb in #1208
Add Mercedes-Benz to sponsor list by @ericwb in #1210
Bump docker/setup-buildx-action from 3.7.1 to 3.8.0 by @dependabot in #1211
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1213
Start testing with 3.14 alphas by @ericwb in #1189
Remove lxml (B320 & B410) from blacklist by @djbrown in #1212
Clarify "getting started" docs by @Flimm in #963

New Contributors

@djbrown made their first contribution in #1212
@Flimm made their first contribution in #963

Full Changelog: PyCQA/bandit@1.8.0...1.8.1

`v1.8.0`

Compare Source

What's Changed

Bump docker/build-push-action from 6.7.0 to 6.9.0 by @dependabot in #1178
Rename doc file to match proper bandit ID by @ericwb in #1183
Removal of Python 3.8 support by @ericwb in #1174
Add more insecure cryptography cipher algorithms by @ericwb in #1185
Bump docker/setup-buildx-action from 3.6.1 to 3.7.1 by @dependabot in #1186
Bump sigstore/cosign-installer from 3.6.0 to 3.7.0 by @dependabot in #1187
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1162
No need to check httpx client without timeout defined by @ericwb in #1177
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1191
Mark Python 3.13 as officially supported by @ericwb in #1192
Update project urls with added links by @ericwb in #1193
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1196
Add a JSON to seek funding from the FLOSS/fund by @ericwb in #1194
Remove Sentry as a sponsor by @ericwb in #1198
Remove more leftover OpenStack references by @ericwb in #1195

Full Changelog: PyCQA/bandit@1.7.10...1.8.0

`v1.7.10`

Compare Source

What's Changed

Bump docker/build-push-action from 5.4.0 to 6.0.0 by @dependabot in #1147
Suggested small refactors in assignments by @ericwb in #1150
Performance improvement in blacklist function by @ericwb in #1148
Add test for usage of FTP_TLS by @ericwb in #1149
New check: B113: TrojanSource - Bidirectional control characters by @Lucas-C in #757
Bump docker/build-push-action from 6.0.0 to 6.1.0 by @dependabot in #1152
feat(plugins): add support for httpx in B113 by @mkniewallner in #1060
Nit: remove unused variable by @ericwb in #1153
Add recent releases to version choice in bug report by @ericwb in #1151
Bump docker/build-push-action from 6.1.0 to 6.2.0 by @dependabot in #1155
Bump docker/build-push-action from 6.2.0 to 6.3.0 by @dependabot in #1157
Bump docker/setup-buildx-action from 3.3.0 to 3.4.0 by @dependabot in #1156
Bump docker/setup-buildx-action from 3.4.0 to 3.5.0 by @dependabot in #1158
Bump docker/login-action from 3.2.0 to 3.3.0 by @dependabot in #1159
Bump docker/build-push-action from 6.3.0 to 6.5.0 by @dependabot in #1160
Bump docker/setup-buildx-action from 3.5.0 to 3.6.1 by @dependabot in #1163
Bump docker/build-push-action from 6.5.0 to 6.6.1 by @dependabot in #1166
Bump sigstore/cosign-installer from 3.5.0 to 3.6.0 by @dependabot in #1165
Bump docker/build-push-action from 6.6.1 to 6.7.0 by @dependabot in #1168
Use consistent file naming of docs by @ericwb in #1170
Pytorch Load / Save Plugin by @lukehinds in #1114

New Contributors

@Lucas-C made their first contribution in #757

Full Changelog: PyCQA/bandit@1.7.9...1.7.10

`v1.7.9`

Compare Source

What's Changed

Bump docker/build-push-action from 5.1.0 to 5.2.0 by @dependabot in #1117
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1119
New logo for Bandit based on raccoon by @ericwb in #1121
Start testing on Python 3.13 by @ericwb in #1122
Bump docker/build-push-action from 5.2.0 to 5.3.0 by @dependabot in #1123
Bump docker/setup-buildx-action from 3.1.0 to 3.2.0 by @dependabot in #1124
Bump docker/login-action from 3.0.0 to 3.1.0 by @dependabot in #1125
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1126
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1127
Bump docker/setup-buildx-action from 3.2.0 to 3.3.0 by @dependabot in #1130
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1131
Bump sigstore/cosign-installer from 3.4.0 to 3.5.0 by @dependabot in #1132
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1133
Updates banner logo so it renders well in dark mode by @ericwb in #1134
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1135
Add a sponsor section to README by @ericwb in #1137
Ensure sarif extra is included as part of doc build by @ericwb in #1139
Bump docker/login-action from 3.1.0 to 3.2.0 by @dependabot in #1142
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1143
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci in #1145
Guard against empty call argument list by @ericwb in #1146
Bump docker/build-push-action from 5.3.0 to 5.4.0 by @dependabot in #1144
Support configfile in .bandit file by @bersbersbers in #1052

New Contributors

@pre-commit-ci made their first contribution in #1119
@bersbersbers made their first contribution in #1052

Full Changelog: PyCQA/bandit@1.7.8...1.7.9

`v1.7.8`

Compare Source

What's Changed

Incorrect tag naming in readme by @lukehinds in #1105
Utilize PyPI's trusted publishing by @ericwb in #1107
Bump sigstore/cosign-installer from 3.3.0 to 3.4.0 by @dependabot in #1109
Add 1.7.7 to versions of bug template by @ericwb in #1110
Use datetime to avoid updating copyright year by @ericwb in #1112
filter data is safe for tarfile extractall by @etienneschalk in #1111
Bump docker/setup-buildx-action from 3.0.0 to 3.1.0 by @dependabot in #1115
[B605] Add functions that are vulnerable to shell injection. by @shihai1991 in #1116
Add a SARIF output formatter by @ericwb in #1113

New Contributors

@etienneschalk made their first contribution in #1111
@shihai1991 made their first contribution in #1116

Full Changelog: PyCQA/bandit@1.7.7...1.7.8

`v1.7.7`

Compare Source

What's Changed

Add the new release to bandit versions of bug template by @ericwb in #1075
Bump actions/setup-python from 4 to 5 by @dependabot in #1076
Handle variant in how policy is passed in paramiko by @ericwb in #1078
Flag str.replace as possible sql injection by @costaparas in #1044
defusedxml: Show correct module name by @kajinamit in #1081
Add tidelift to the sponsor funding list by @ericwb in #1089
Create a security policy by @ericwb in #1091
Fix up issues found running Bandit on itself by @ericwb in #1093
Add random.randbytes to blacklist calls by @ericwb in #1096
Prepend ./ for files specified as CLI args by @ericwb in #1094
Rework GitPython dependency to be an extra for bandit-baseline by @ericwb in #1099
Bump actions/dependency-review-action from 3 to 4 by @dependabot in #1101
Introduce Official Bandit Images by @lukehinds in #1088
Remove markdown formatting in reStructuredText formatted README by @ericwb in #1103
Downsize the org:repo name by @lukehinds in #1104

New Contributors

@kajinamit made their first contribution in #1081

Full Changelog: PyCQA/bandit@1.7.6...1.7.7

`v1.7.6`

Compare Source

What's Changed

Update bug report to include version 1.7.5 by @ericwb in #993
Render Python 3.10 in drop down correctly by @ericwb in #997
Remove checks for Python2 urllib by @ericwb in #999
Improper detection of non-requests module by @ericwb in #1011
xmlrpclib replaced with xmlrpc in Python3 by @ericwb in #1012
language and linting updates by @marksmayo in #1015
Adds check for crypt module usage as weak hash by @ericwb in #1018
Switch to tox 4 by @mportesdev in #1020
Skip unnecessary pip install commands in the pythonpackage.yml workflow by @mportesdev in #1021
Update versions of used GitHub Actions by @mportesdev in #1024
Update pre-commit hooks by @mportesdev in #1026
Add random.Random to B311 checks by @shiftinv in #940
Add a copy button to all code snippets in docs by @ericwb in #1030
Replace pbr in favor of importlib by @ericwb in #1016
Switch from open collective to PSF by @ericwb in #1031
Make pre-commit run Bandit hook using a single process by @Klavionik in #1029
Remove support for Python 3.7 due to end-of-life by @ericwb in #1034
Update asserts.py documentation by @deronnax in #1036
Simplify wrap_file_object by @mportesdev in #1037
django_rawsql_used: support keyword arguments used in RawSQL by @kevinmarsh in #765
Avoid gitpyhon CVE-2022-24439 by @carlosduelo in #1048
Update blacklist call documentation by @costaparas in #1045
Support ignoring blacklists by name by @costaparas in #1046
Fix dependabot to update github actions by @ericwb in #1057
Bump actions/checkout from 3 to 4 by @dependabot in #1058
Fix for ReadtheDocs build by @ericwb in #1061
fix(plugins/B507): also detect class instances by @mkniewallner in #1064
Use mirror repository for black pre-commit hook by @mportesdev in #1070
Add official support of Python 3.12 by [@ericwb]

Configuration

📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate bot added the dependencies Pull requests that update a dependency file label May 23, 2022

renovate bot force-pushed the renovate/python-dependencies branch 7 times, most recently from 1e91954 to 81d08b3 Compare May 28, 2022 14:06

renovate bot force-pushed the renovate/python-dependencies branch 9 times, most recently from a5341f1 to b26a189 Compare June 7, 2022 19:49

renovate bot force-pushed the renovate/python-dependencies branch 10 times, most recently from ce67b48 to 4112236 Compare June 14, 2022 21:52

renovate bot force-pushed the renovate/python-dependencies branch 3 times, most recently from 0b4a088 to 4bdecd0 Compare June 17, 2022 00:36

renovate bot force-pushed the renovate/python-dependencies branch 5 times, most recently from 1a81252 to fc2e5af Compare July 6, 2025 05:52

renovate bot force-pushed the renovate/python-dependencies branch 7 times, most recently from ca8d00e to dcad8d6 Compare July 16, 2025 17:49

renovate bot force-pushed the renovate/python-dependencies branch 11 times, most recently from 80d6273 to a9090e4 Compare October 18, 2025 03:47

renovate bot force-pushed the renovate/python-dependencies branch 5 times, most recently from 0c407f1 to d020096 Compare October 24, 2025 01:49

⬆️(dependencies) update python dependencies

6c3c14d

renovate bot force-pushed the renovate/python-dependencies branch from d020096 to 6c3c14d Compare October 24, 2025 19:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

⬆️(dependencies) update python dependencies #260

⬆️(dependencies) update python dependencies #260

Uh oh!

renovate bot commented May 23, 2022 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

⬆️(dependencies) update python dependencies #260

Are you sure you want to change the base?

⬆️(dependencies) update python dependencies #260

Uh oh!

Conversation

renovate bot commented May 23, 2022 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate bot commented May 23, 2022 •

edited

Loading