pypi · miketheman · Jul 15, 2025 · Jul 10, 2025 · Jul 15, 2025 · Jul 15, 2025
@@ -32,7 +32,7 @@ jobs:
             persist-credentials: false
       - uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4.4.0
         with:
-          node-version: 24.2.0
+          node-version: 24.4.0
           cache: 'npm'
       - name: Install Node dependencies
         run: npm ci

@@ -3,7 +3,7 @@ ARG PYTHON_IMAGE_VERSION=3.13.5-slim-bookworm
 
 # First things first, we build an image which is where we're going to compile
 # our static assets with. We use this stage in development.
-FROM node:24.3.0-bookworm AS static-deps
+FROM node:24.4.0-bookworm AS static-deps
 
 WORKDIR /opt/warehouse/src/
 

@@ -1,2 +1,2 @@
 gunicorn==23.0.0
-ddtrace==3.9.4
+ddtrace==3.10.2
@@ -8,68 +8,68 @@ bytecode==0.16.2 \
     --hash=sha256:0a7dea0387ec5cae5ec77578690c5ca7470c8a202c50ce64a426d86380cddd7f \
     --hash=sha256:f05020b6dc1f48cdadd946f7c3a03131ba0f312bd103767c5d75559de5c308f8
     # via ddtrace
-ddtrace==3.9.4 \
-    --hash=sha256:01abb4066b2ffd8125fe024571f20037653e472bbefafef3809d7a7e898ad8ee \
-    --hash=sha256:0689955ddab33f8d9adb87114b97d64eed05b8017a288e1c6651b06f72406226 \
-    --hash=sha256:09805165f5680b7257ccb5f3f7da6407c14327250f9a318c8029d03a21271c93 \
-    --hash=sha256:15127303354075dc8bffe1118243041522032416b5c0f71ed5dac8f934f955d5 \
-    --hash=sha256:16671001252cf7bb7f95d0526dc53a28b3ec878ff2b8e41ddce94e6c39acf557 \
-    --hash=sha256:1d07be09e53fdcd71f2c30ac3cc3ace9f6bbad5c8185728dee7292857935531c \
-    --hash=sha256:1d1bbeda4c7a7f77fc5f3cf7d95e11edd5c441db47bfd3554f128c8482a1d7ab \
-    --hash=sha256:1ee655550a4442e58028527b47677c45bbddf7ed70a31b1991a0574d85446c17 \
-    --hash=sha256:20f255dd34dcf32939b7f54200014832b8875329ec9216b41ab9ecd481301dae \
-    --hash=sha256:2567cf92ee176b94c36812a0468a168c28bcb13f2ad737b39313e1ca4902db12 \
-    --hash=sha256:28fd5c7aaf30d7b88a5ef43f4a80f7a54dceee137a76bda1d9c058f23296ab02 \
-    --hash=sha256:2c8f9a9d542ce5566505dd84d212e636607bcd7ab40aa5bf512ac7b29d25230c \
-    --hash=sha256:2d5c9e2e1cd12312776809adf0a8d04b8c52de3a84e74dcacc882d8875519469 \
-    --hash=sha256:325cd3a240845e45d6288f6af252028a418419a11e64af4d716450aee6746830 \
-    --hash=sha256:370ab3c5b1590402802ac344b1d192fad815006e7c379d5effc4aec3289ad502 \
-    --hash=sha256:397c9c85932e5d9a7d5792faa4311d2db54ef33ed65cfa7019a14567c8708105 \
-    --hash=sha256:39e937b9b91a502fc9cf7c124ee5dcb914566a2421b521561b71d3790045a101 \
-    --hash=sha256:3df90869f0912778a24e785778b09dbd8a01d51f86ebe49632766f38567f3adf \
-    --hash=sha256:5251d3c3c60ef834b53c838714ac38b41dec30e0dbe042eddd2f06c8f5b356d2 \
-    --hash=sha256:62f6b2e0b7ad230a3336b328e9efb5eeb7fbb4838b1aa1374a33d82f5a6cec5e \
-    --hash=sha256:6343a214231bc4413304e4eaf5cdb23c20eab5945d2ca2789c1e37b9dd814f13 \
-    --hash=sha256:6576d121cdf07d24e067f79511e3890595811a635d2ac643eefd0cbdcf3ec5f1 \
-    --hash=sha256:68c15a73567e699c8c1441fa2cc964ceddc9379ee0efe5d2d2342d7456f6cf66 \
-    --hash=sha256:6d72f980e14f46474bef30f9526b17a733acc1f1dd6fa97a869ed1ec9a0bce42 \
-    --hash=sha256:720c3802ddd80d2a4b441d1ed7b0a7c40ab7facd8f92dd7675e83533b2aa7759 \
-    --hash=sha256:728f0110341353bb1cb425ab93877c2ca2ddab2f096f0ec1e50c8e26c41c7364 \
-    --hash=sha256:73c1614cbc3b77b72e049729e22cec752c8ac80142ad13cd80755d565763f747 \
-    --hash=sha256:73d517e8852b947e4fba727e620cc6d549dd19b4f2bc3fefb37fc1773c31b37c \
-    --hash=sha256:787d5c6354e01e2374df8c1c0d41cad8abdb3b265ee27f640396e9a932d0adb2 \
-    --hash=sha256:7fa77642065489bc619f5af750e483076955accbb8d230f477e5f647fe203d81 \
-    --hash=sha256:82773444cd8d268026a64905b3db7a32bfed03b534051d8244d111ad301f0345 \
-    --hash=sha256:8601eb960fab75b7cafc1f976097e244c132868de116b31de50209d2818ae796 \
-    --hash=sha256:8db657d82ed2a18de07914f27a4bacd90256fb613436506be980359de1c60ceb \
-    --hash=sha256:8e70de00f2e4d4d5fc5c25430c58f5c2e7a2169dc5995a61338e07d540dcea9e \
-    --hash=sha256:918e9f538d6ff715fe63e65889aa9d4b7cfdf7c091492ba0ff7e8b2734751975 \
-    --hash=sha256:944c057f572e2c7a36e71b31a8d1d87306e200001b1fae36319699552a9546bc \
-    --hash=sha256:9923b0e488b5d7990618ea10034d81148b53aaec10dc567c962927d08ee877c5 \
-    --hash=sha256:9bb80ba47552d52f82da947d9dcbbfeb6c3ef24c4932f045d9c1bc58c15fe49e \
-    --hash=sha256:a8733a4e1a500a740792441fb288e39fa5a4aede7362d0d5dad6e1051d20da84 \
-    --hash=sha256:afa927dba6e214c7ddf52205ca5f476712ea05a69408a3a68adb11a174aedd1c \
-    --hash=sha256:b1a9ee8ecee85a1e695641aa0267f98c6e9e0a9cb45d86a4b0cd15ae73eca342 \
-    --hash=sha256:b2b872f7bfb0a17ecef8fa207478055f1b27d2f5c2b9455e9ee20316ed944e32 \
-    --hash=sha256:b7c9b012cd6f13cfc62eda62cf2af2e14696cd33212434f8a2cb6c0e09bc9a4c \
-    --hash=sha256:bb2472167e47826145be93606335dbf8c49138dba50ea4cc881ad52c834fc0d3 \
-    --hash=sha256:bb80929280c6a847e4282259fec9f0357e446844eec9ef3ae4db88aebb284837 \
-    --hash=sha256:bb986454b7a066d1d25095b473a08e44dc2d37d37648a13784ad8e0a56f6b301 \
-    --hash=sha256:c2c4891fb42a8bb23ef2a787dc14c00047d0f46536eb0eb116a14a4fce12c919 \
-    --hash=sha256:c778db5e067c72e186e693739a0bf3ce30258d44393959695e65d25fe442a586 \
-    --hash=sha256:cc81653a37755a2034d55c0b88847b8533a1cfdc2e8ac0e5b779ec15acd43f7f \
-    --hash=sha256:cdd1fcf023d12cb3bccb738428434a56d73e8bdc536de131ff3f361bd0843a5c \
-    --hash=sha256:d635f13e143d338befd6655490ca634dc7df1f647cec6f6240e7ffc045afb4ca \
-    --hash=sha256:d9268c5728847383c1ef060848ae8bd6caf570d67fee071ebc21b1d1daa18f36 \
-    --hash=sha256:de6db7d26ff7327a44df39ddc79f5caacdee882dea5f2dce2821af85afdbf245 \
-    --hash=sha256:e1a0bc433c52e396452dbf251710d812713649c135d856c98e2e23955237e68b \
-    --hash=sha256:e4c29497889588a68b508469f1c307b9506665481ac16c782b4510e47cb611d3 \
-    --hash=sha256:ef24eb6750b7004492e0ce4aacbbd4969aad11a3a6eb164d2e3c2ce9a6bf3829 \
-    --hash=sha256:f50321e6dcbea49cfd5e1b6c857cc0dc16408044f02e1e48f88c73a3ea1a6933 \
-    --hash=sha256:f59b3623fc792f4b820db740ba77e51c2169d9bbcc9d04894a1b698aa5ce0147 \
-    --hash=sha256:f63e7a4ca88251304e8a6a757daa944a86b1104602176196eb73bd0da3ac5701 \
-    --hash=sha256:f7258bd2e9532daf55059ec077395db1ab284493a8a2d6001fad247c5f8a57f2 \
-    --hash=sha256:fda91bc31cc0184d651c04637620903d4d4cad224ff189686034495bf052e96d
+ddtrace==3.10.2 \
+    --hash=sha256:01a27b7306709acd5e9c9b6be5ed17b63529f6a588c5e96794f72d0d3ace9bb5 \
+    --hash=sha256:099a3d96dc8644accf740ed38cdd428598c706a18c68cb5a93b72dd694c843a7 \
+    --hash=sha256:0b79aed288a92fe2c08746678f754946cacb030db458424f16965cf9c10f553b \
+    --hash=sha256:0c8d31398cbfc50e742b4e5cb808d841636b0afc6c2e792894d262274acb172a \
+    --hash=sha256:0e4eb2da24364245a7621cad6585cc85038cd035ad600cc226772c5d216fa1a7 \
+    --hash=sha256:0f507e9fae08dfb4daefbe3e7d006700217e1ee09ebade2a68def7eb12c7ea4f \
+    --hash=sha256:116378e9273df04f6417d198288f23b652eb2ce6b0ae8d3873ba3f54e631a3cd \
+    --hash=sha256:177aeced4d72d5c2f3ff666c08c93381cf5b91823726e6c36d69eab911c8591a \
+    --hash=sha256:187daf47937c41855cb763584bd2c93867670fe5f79bd363fd50f29a134993fc \
+    --hash=sha256:1963cd9341310841945de29dd7112c9eddb1d1c955477a45910de15647211f10 \
+    --hash=sha256:1f7e0bbe40d8ce96da40e0a33b0f2937df8166187907f028837a9a5b91b93248 \
+    --hash=sha256:25153050982d7471e17a387701eb47408e328750649feb4b0f59f7ef84a716d0 \
+    --hash=sha256:25c1eeea0e70b1a8571b96a32f1304fddc29dd61bc1e2afeca5ebb9b0377a5c9 \
+    --hash=sha256:2c4d52cab57d240ac063d01cbe2ced6c49e3f5bc54604b5892c02d2a94faec4e \
+    --hash=sha256:2eb35c7f0df53fb7df1eea320ef22e9f81412e597a682957787272c6c5e1a475 \
+    --hash=sha256:2f54170194291bd093f1c8719be9803038d19fbb2a272386bc8cc1e7990a9117 \
+    --hash=sha256:30c38af11eeadd760b4ed73126348687497b9d9f81bda174550d9ca055c37ec1 \
+    --hash=sha256:321b2e1f8d448a28b5825b29867929efa30ce74f41e6271746962e069fe133bc \
+    --hash=sha256:3667827078f6c30e5c842b074f83341a86c9b29d22a8c52328c481d3a19af452 \
+    --hash=sha256:37cc3be6575d6172a8bd179cafc37592c13f0cce0102b221b6581e4864b0ad1a \
+    --hash=sha256:3b1397badcd7d441b11dc37dff2bdc7b96bd641ab49656a3f45a9ed59a7cd8a7 \
+    --hash=sha256:3fcec5affb7e14e18c501433fc36928452a93e262383ffaf10b61890aded9557 \
+    --hash=sha256:46afc63a056cdbcf0fc2ebed8804180a8e1029cf5a8beb3c11596b92dab2f21c \
+    --hash=sha256:552f1e968588915f6e8b5940a37bd8b0423f7e2de38dc448af111875a1ea1608 \
+    --hash=sha256:58c5b122016f9ca31e2e6792d2adb3bb3c47b09f87a5fd2190bbf767188af9f1 \
+    --hash=sha256:5d3512ba065eb2b23e59582b0e4a53e54a738e047ee92a844b0d995786f95b2c \
+    --hash=sha256:6d6a66043c26ec2e941e1b6a195a6b93aab220fed0ac00ea58d467449f75a319 \
+    --hash=sha256:6e84247f37bd0765ddf201fecb340461bbadfb1faa5ccaecfb64cb78ce14cd66 \
+    --hash=sha256:6ff0904e20077e0821b6a5f0747b9623ac820cc9ddaa1df8110eb6454c9e2dc5 \
+    --hash=sha256:7287fa48491c3f3effa9f299101091d9138ffbc8e29667af4d100186bf54793b \
+    --hash=sha256:7626b5791b27412f8bdb25e9bc6a6a4b12526e670c0ad8c6a7a65a42e73cdd9e \
+    --hash=sha256:79fc49153db5f237b7bf55a3e406dfffc5f5e6ebb932b27547ddcf251240d1c9 \
+    --hash=sha256:7d08d197fadc82c15de034c1a1575c3cf9de6d399acd456e99b858fbec23b37f \
+    --hash=sha256:7e06880a7384e163e2ec1de8a6db76a43f6e81519a9e9925b3fbda5d13ac0cbb \
+    --hash=sha256:7e5a71056c316e3e332acab01077b824a877484867d339bdbcf5aee316a0fb76 \
+    --hash=sha256:887de4156874c3da8924cd2e07eb5816f73ca6e95fa9e30fa201927464c49c19 \
+    --hash=sha256:8945f8a11bb3f3b9140c5c18ff13a388729488ccaac1ae8a6c11097c9cc2b9e0 \
+    --hash=sha256:94636505c762880dbe4f43bd85d351a2efd747121722c859110e454c31defbd3 \
+    --hash=sha256:9a1c17e361ed03bade97ef968e1e77705b25cbb0f64ce73bd8c413d4f89b47f8 \
+    --hash=sha256:b09bad2ef8b28e18d0cef1469c2e9568ea362a8eb5170e13bfdb397afab34bfd \
+    --hash=sha256:b3ab8ab9c41fc4718356b8581acc372b9d0245586749768a44ba4a426c897311 \
+    --hash=sha256:b9a3daf8294a51ccbdc63f13d8819a151e8c9a0ad314e416fe8f2c1f6ae7c0f6 \
+    --hash=sha256:c09c648f02d67069658e6fdfaea151ff1656153a11772c788807e1c97e280b23 \
+    --hash=sha256:c233784d4dc38dfba61ea4c0628e9704ffe5d4807bf3f6975f810d108ee51690 \
+    --hash=sha256:c8c0e813dae5e5efb865a7469d4829d2fef54759770c28727a3f5ac4a605ea53 \
+    --hash=sha256:cac39b508e664bac09413ce3b8de3973bf56265ffa6e32157f846889f68e92ff \
+    --hash=sha256:cb9b6309162265a4bbcb2fcd05e2114609e6c7df2a59e258a81924cae353cc93 \
+    --hash=sha256:d1ddf83df85991293dc2c4ba3d2fcdc08b34638e6beb93f7fec8c9a91b2cd56d \
+    --hash=sha256:d32cddde88b15c1df4955726120ab097f8ab69de36dcafb0aeeee316a7a75a31 \
+    --hash=sha256:d57315b42159d14ba493145048af2edb42b2bc542035edd135fd7605698bf2d0 \
+    --hash=sha256:da87062acd79ddba5686fa348bbb890aec96d5adbcaba6094ca26babfbcc1c15 \
+    --hash=sha256:dac945fcb92ffef337aac2b7de39fcae34c06ab18d47a212fcbddf9e7f94e241 \
+    --hash=sha256:dee9c5639e71f4186d39da16b2b875cbfd608cae499c2aabde4a1f9ae62364ba \
+    --hash=sha256:e10efd12085f799a4080755a426e4e2260e56b994a9783d93a06f3108aa34c7e \
+    --hash=sha256:e723d16d6905127b911a62b46998de8766ec2a2d0ff426e087b2c7ab2141ad31 \
+    --hash=sha256:eb6f6bc048fc4e1a65440afe45830e5b5a568fa0e03e23243c528ae570074713 \
+    --hash=sha256:ed4a3cb73f8839544f382d17b9de930e33e11e3341c22093dd92fdafcb637bb1 \
+    --hash=sha256:f06e83a005efba4e6817f4d894b2d4a5387d1e50b774eb0e43b8610f27779adf \
+    --hash=sha256:f6d3cb9d1afffa194f047506dc43d5740575c704176b14752b8887f45fb9fadd \
+    --hash=sha256:f8ad7e8ee8b77348f8b71b0c18def25b9446daa1693a07fdf5eeb64c4702e6cb \
+    --hash=sha256:ff0d8bc52a99ad04d1e75196d4b3ad3884d4d33600733acc414f9c09766fe5a3
     # via -r requirements/deploy.in
 envier==0.6.1 \
     --hash=sha256:3309a01bb3d8850c9e7a31a5166d5a836846db2faecb79b9cb32654dd50ca9f9 \
@@ -87,30 +87,28 @@ legacy-cgi==2.6.3 \
     --hash=sha256:4c119d6cb8e9d8b6ad7cc0ddad880552c62df4029622835d06dfd18f438a8154 \
     --hash=sha256:6df2ea5ae14c71ef6f097f8b6372b44f6685283dc018535a75c924564183cdab
     # via ddtrace
-opentelemetry-api==1.34.1 \
-    --hash=sha256:64f0bd06d42824843731d05beea88d4d4b6ae59f9fe347ff7dfa2cc14233bbb3 \
-    --hash=sha256:b7df4cb0830d5a6c29ad0c0691dbae874d8daefa934b8b1d642de48323d32a8c
+opentelemetry-api==1.35.0 \
+    --hash=sha256:a111b959bcfa5b4d7dffc2fbd6a241aa72dd78dd8e79b5b1662bda896c5d2ffe \
+    --hash=sha256:c4ea7e258a244858daf18474625e9cc0149b8ee354f37843415771a40c25ee06
     # via ddtrace
 packaging==25.0 \
     --hash=sha256:29572ef2b1f17581046b3a2227d5c611fb25ec70ca1ba8554b24b0e69331a484 \
     --hash=sha256:d443872c98d677bf60f6a1f2f8c1cb748e8fe762d2bf9d3148b5599295b0fc4f
     # via gunicorn
-protobuf==5.29.5 \
-    --hash=sha256:3f1c6468a2cfd102ff4703976138844f78ebd1fb45f49011afc5139e9e283079 \
-    --hash=sha256:3f76e3a3675b4a4d867b52e4a5f5b78a2ef9565549d4037e06cf7b0942b1d3fc \
-    --hash=sha256:470f3af547ef17847a28e1f47200a1cbf0ba3ff57b7de50d22776607cd2ea353 \
-    --hash=sha256:63848923da3325e1bf7e9003d680ce6e14b07e55d0473253a690c3a8b8fd6e61 \
-    --hash=sha256:6cf42630262c59b2d8de33954443d94b746c952b01434fc58a417fdbd2e84bd5 \
-    --hash=sha256:6f642dc9a61782fa72b90878af134c5afe1917c89a568cd3476d758d3c3a0736 \
-    --hash=sha256:7318608d56b6402d2ea7704ff1e1e4597bee46d760e7e4dd42a3d45e24b87f2e \
-    --hash=sha256:bc1463bafd4b0929216c35f437a8e28731a2b7fe3d98bb77a600efced5a15c84 \
-    --hash=sha256:e38c5add5a311f2a6eb0340716ef9b039c1dfa428b28f25a7838ac329204a671 \
-    --hash=sha256:ef91363ad4faba7b25d844ef1ada59ff1604184c0bcd8b39b8a6bef15e1af238 \
-    --hash=sha256:fa18533a299d7ab6c55a238bf8629311439995f2e7eca5caaff08663606e9015
+protobuf==6.31.1 \
+    --hash=sha256:0414e3aa5a5f3ff423828e1e6a6e907d6c65c1d5b7e6e975793d5590bdeecc16 \
+    --hash=sha256:426f59d2964864a1a366254fa703b8632dcec0790d8862d30034d8245e1cd447 \
+    --hash=sha256:4ee898bf66f7a8b0bd21bce523814e6fbd8c6add948045ce958b73af7e8878c6 \
+    --hash=sha256:6f1227473dc43d44ed644425268eb7c2e488ae245d51c6866d19fe158e207402 \
+    --hash=sha256:720a6c7e6b77288b85063569baae8536671b39f15cc22037ec7045658d80489e \
+    --hash=sha256:7fa17d5a29c2e04b7d90e5e32388b8bfd0e7107cd8e616feef7ed3fa6bdab5c9 \
+    --hash=sha256:8764cf4587791e7564051b35524b72844f845ad0bb011704c3736cce762d8fe9 \
+    --hash=sha256:a40fc12b84c154884d7d4c4ebd675d5b3b5283e155f324049ae396b95ddebc39 \
+    --hash=sha256:d8cac4c982f0b957a4dc73a80e2ea24fab08e679c0de9deb835f4a12d69aca9a
     # via ddtrace
-typing-extensions==4.14.0 \
-    --hash=sha256:8676b788e32f02ab42d9e7c61324048ae4c6d844a399eebace3d4979d75ceef4 \
-    --hash=sha256:a1514509136dd0b477638fc68d6a91497af5076466ad0fa6c338e44e359944af
+typing-extensions==4.14.1 \
+    --hash=sha256:38b39f4aeeab64884ce9f74c94263ef78f3c22467c8724005483154c26648d36 \
+    --hash=sha256:d1e1e3b58374dc93031d6eda2420a48ea44a36c2b4766a4fdeb3710755731d76
     # via
     #   ddtrace
     #   opentelemetry-api