Skip to content

build(deps): bump the python-requirements group across 1 directory with 27 updates#2894

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-requirements-ffd327f3d0
Open

build(deps): bump the python-requirements group across 1 directory with 27 updates#2894
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-requirements-ffd327f3d0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 7, 2026

Bumps the python-requirements group with 26 updates in the / directory:

Package From To
werkzeug 3.1.6 3.1.8
wtforms 3.2.1 3.2.2
sqlalchemy 2.0.45 2.0.49
geoalchemy2 0.18.1 0.19.0
pymongo 4.15.5 4.17.0
mongoengine 0.29.1 0.29.3
peewee 3.18.3 4.0.5
wtf-peewee 3.0.6 3.1.0
boto3 1.42.14 1.43.5
azure-storage-blob 12.27.1 12.28.0
redis 7.1.0 7.4.0
tox 4.29.0 4.53.1
tox-uv 1.28.0 1.35.2
pre-commit 4.5.1 4.6.0
pre-commit-uv 4.2.0 4.2.1
pallets-sphinx-themes 2.3.0 2.5.0
pylint 4.0.4 4.0.5
pytest-cov 7.0.0 7.1.0
moto 5.1.18 5.2.0
psycopg2-binary 2.9.11 2.9.12
mypy 1.19.1 2.0.0
pyright 1.1.407 1.1.409
types-boto3 1.42.14 1.43.5
types-peewee 3.18.3.20251105 4.0.1.20260503
types-wtforms 3.2.1.20250809 3.2.1.20260408
types-shapely 2.1.0.20250917 2.1.0.20260408

Updates werkzeug from 3.1.6 to 3.1.8

Release notes

Sourced from werkzeug's releases.

3.1.8

This is the Werkzeug 3.1.8 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Werkzeug/3.1.8/ Changes: https://werkzeug.palletsprojects.com/page/changes/#version-3-1-8 Milestone: https://github.com/pallets/werkzeug/milestone/45?closed=1

  • Request.host and get_host return the empty string if the header is missing or has invalid characters. #3142

3.1.7

This is the Werkzeug 3.1.7 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Werkzeug/3.1.7/ Changes: https://werkzeug.palletsprojects.com/page/changes/#version-3-1-7 Milestone: https://github.com/pallets/werkzeug/milestone/44?closed=1

  • parse_list_header preserves partially quoted items, discards empty items, and returns empty for unclosed quoted values. #3128
  • WWWAuthenticate.to_header does not produce a trailing space when there are no parameters. #3127
  • Transfer-Encoding is parsed as a set. #3134
  • Request.host, get_host, and host_is_trusted validate the characters of the value. An empty value is no longer allowed. A Unix socket server address is ignored. The trusted_list argument to host_is_trusted is optional. #3113
  • Fix multipart form parser handling of newline at boundary. #3088
  • Response.make_conditional sets the Accept-Ranges header even if it is not a satisfiable range request. #3108
  • merge_slashes merges any number of consecutive slashes. #3121
Changelog

Sourced from werkzeug's changelog.

Version 3.1.8

Released 2026-04-02

  • Request.host and get_host return the empty string if the header is missing or has invalid characters. :issue:3142

Version 3.1.7

Released 2026-03-23

  • parse_list_header preserves partially quoted items, discards empty items, and returns empty for unclosed quoted values. :pr:3128
  • WWWAuthenticate.to_header does not produce a trailing space when there are no parameters. :issue:3127
  • Transfer-Encoding is parsed as a set. :pr:3134
  • Request.host, get_host, and host_is_trusted validate the characters of the value. An empty value is no longer allowed. A Unix socket server address is ignored. The trusted_list argument to host_is_trusted is optional. :pr:3113
  • Fix multipart form parser handling of newline at boundary. :issue:3088
  • Response.make_conditional sets the Accept-Ranges header even if it is not a satisfiable range request. :issue:3108
  • merge_slashes merges any number of consecutive slashes. :issue:3121
Commits

Updates wtforms from 3.2.1 to 3.2.2

Release notes

Sourced from wtforms's releases.

3.2.2

What's Changed

New Contributors

Full Changelog: pallets-eco/wtforms@3.2.1...3.2.2

Changelog

Sourced from wtforms's changelog.

Version 3.2.2

Released 2026-05-03

  • Fix :class:~validators.Disabled validation with provided formdata. :pr:880
  • End support for Python 3.9, start support for Python 3.14. :pr:883
  • Add Tamil and Serbian translations.
Commits
  • ea57c11 chore: bump to 3.2.2
  • 326dd44 chore: pre-commit update
  • 414e41c doc: translation instructions and changelog
  • 383cd0c Added translation using Weblate (Serbian)
  • 40d5718 fix: readthedocs build
  • 83a4412 chore: allow downstream tests to raise warnings
  • 409edac Merge pull request #888 from azmeuk/gha-downstream
  • 69b2e67 chore: pyproject and GHA cleaning
  • 0117d4a chore: add GHA downstream tests
  • e6b503c Merge pull request #884 from kurtmckee/rm-py39-refs
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.45 to 2.0.49

Release notes

Sourced from sqlalchemy's releases.

2.0.49

Released: April 3, 2026

orm

  • [orm] [bug] Fixed issue where _orm.Session.get() would bypass the identity map and emit unnecessary SQL when with_for_update=False was passed, rather than treating it equivalently to the default of None. Pull request courtesy of Joshua Swanson.

    References: #13176

  • [orm] [bug] Fixed issue where chained _orm.joinedload() options would not be applied correctly when the final relationship in the chain is declared on a base mapper and accessed through a subclass mapper in a _orm.with_polymorphic() query. The path registry now correctly computes the natural path when a property declared on a base class is accessed through a path containing a subclass mapper, ensuring the loader option can be located during query compilation.

    References: #13193

  • [orm] [bug] [inheritance] Fixed issue where using _orm.Load.options() to apply a chained loader option such as _orm.joinedload() or _orm.selectinload() with _orm.PropComparator.of_type() for a polymorphic relationship would not generate the necessary clauses for the polymorphic subclasses. The polymorphic loading strategy is now correctly propagated when using a call such as joinedload(A.b).options(joinedload(B.c.of_type(poly))) to match the behavior of direct chaining e.g. joinedload(A.b).joinedload(B.c.of_type(poly)).

    References: #13202

  • [orm] [bug] [inheritance] Fixed issue where using chained loader options such as _orm.selectinload() after _orm.joinedload() with _orm.PropComparator.of_type() for a polymorphic relationship would not properly apply the chained loader option. The loader option is now correctly applied when using a call such as joinedload(A.b.of_type(poly)).selectinload(poly.SubClass.c) to eagerly load related objects.

    References: #13209

typing

  • [typing] [bug] Fixed a typing issue where the typed members of :data:.func would return the appropriate class of the same name, however this creates an issue for

... (truncated)

Commits

Updates geoalchemy2 from 0.18.1 to 0.19.0

Release notes

Sourced from geoalchemy2's releases.

0.19.0

What's Changed

Full Changelog: geoalchemy/geoalchemy2@0.18.4...0.19.0

0.18.4

What's Changed

Full Changelog: geoalchemy/geoalchemy2@0.18.3...0.18.4

0.18.3

What's Changed

Full Changelog: geoalchemy/geoalchemy2@0.18.2...0.18.3

0.18.2

What's Changed

Full Changelog: geoalchemy/geoalchemy2@0.18.1...0.18.2

Changelog

Sourced from geoalchemy2's changelog.

0.19.0

0.18.4

0.18.3

0.18.2

Commits
  • 792cc5e Release: 0.19.0 (#599)
  • 9d17680 Fix: Ensure _GISType.column_expression is compatible with TypeDecorator (#598)
  • 3d4d8ec CI: Fix Too many connections errors in MySQL and MariaDB (#597)
  • b5d6336 [pre-commit.ci] pre-commit autoupdate (#595)
  • 187f092 Improve WKT parsing and fix comparator doc typo (#594)
  • dce1bb1 CI: Fix triggers after default branch was renamed main (#593)
  • beb96c3 Release: 0.18.4 (#591)
  • 6266c25 CI: Move to the official Coveralls action (#592)
  • f402f63 CI: Make Coveralls optional since the service is down at the moment (#590)
  • 36ebd0f Fix: fix setuptools deprecation warning (#589)
  • Additional commits viewable in compare view

Updates pymongo from 4.15.5 to 4.17.0

Release notes

Sourced from pymongo's releases.

PyMongo 4.17.0

Community notes

What's Changed

... (truncated)

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.17.0 (2026/04/20)

PyMongo 4.17 brings a number of changes including:

  • has_key, iterkeys and itervalues in :class:bson.son.SON have been deprecated and will be removed in PyMongo 5.0. These methods were deprecated in favor of the standard dictionary containment operator in and the keys() and values() methods, respectively.
  • Added the :meth:~pymongo.asynchronous.client_session.AsyncClientSession.bind and :meth:~pymongo.client_session.ClientSession.bind methods that allow users to bind a session to all database operations within the scope of a context manager instead of having to explicitly pass the session to each individual operation. See the Transactions docs <https://www.mongodb.com/docs/languages/python/pymongo-driver/current/crud/transactions/#methods>_ for examples and more information.
  • Added support for MongoDB's Intelligent Workload Management (IWM) and ingress connection rate limiting features. The driver now gracefully handles write-blocking scenarios and optimizes connection establishment during high-load conditions to maintain application availability. See the IWM <https://www.mongodb.com/docs/atlas/intelligent-workload-management>_ or Overload Errors <https://www.mongodb.com/docs/atlas/overload-errors/?interface=driver&language=python>_ docs for more information.

Changes in Version 4.16.0 (2026/01/07)

PyMongo 4.16 brings a number of changes including:

  • Removed invalid documents from :class:bson.errors.InvalidDocument error messages as doing so may leak sensitive user data. Instead, invalid documents are stored in :attr:bson.errors.InvalidDocument.document.
  • PyMongo now requires dnspython>=2.6.1, since dnspython 1.0 is no longer maintained. The minimum version is 2.6.1 to account for CVE-2023-29483 <https://www.cve.org/CVERecord?id=CVE-2023-29483>_.
  • Removed support for Eventlet. Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.
  • Use Zstandard support from the standard library for Python 3.14+, and use backports.zstd for older versions.
  • Fixed return type annotation for find_one_and_* methods on :class:~pymongo.asynchronous.collection.AsyncCollection and :class:~pymongo.synchronous.collection.Collection to include None.
  • Added support for NumPy 1D-arrays in :class:bson.binary.BinaryVector.
  • Prevented :class:~pymongo.encryption.ClientEncryption from loading the crypt shared library to fix "MongoCryptError: An existing crypt_shared library is loaded by the application" unless the linked library search path is set.
Commits
  • f2103a9 Prep branch v4.17
  • 3491c08 PYTHON-5801 - Update changelog for 4.17 release (#2762)
  • 912ef33 PYTHON-5798 - Overload retargeting prose tests do not ensure that sec… (#2760)
  • b4e2c03 PYTHON-5800 - Simple collation is included in index information (#2761)
  • f31ba09 PYTHON-5797 - Add IWM and Overload Error links to changelog (#2757)
  • 5da9183 PYTHON-5794 - Add prose tests to verify correct retry behavior when a… (#2755)
  • 35e51a5 Revert "PYTHON-5768 Add AGENTS.md w/copilot instructions" (#2744) (#2754)
  • f41dd5c PYTHON-5772 Increase _gcp_helpers.py coverage (#2749)
  • 49e7a05 PYTHON-5760 Increase _azure_helpers.py coverage (#2747)
  • a2b0cd8 PYTHON-5795 Fix absolute link to CONTRIBUTING.md in README.md (#2756)
  • Additional commits viewable in compare view

Updates mongoengine from 0.29.1 to 0.29.3

Changelog

Sourced from mongoengine's changelog.

Changes in 0.29.3

  • Remove mentions of mongoengine[dot]org has we no longer own it #2905

Changes in 0.29.2

  • fixes relted with
Commits

Updates peewee from 3.18.3 to 4.0.5

Release notes

Sourced from peewee's releases.

4.0.5

  • Fix bug where db_value() may not get called in subclasses of Postgres JSONField / BinaryJSONField, refs #3044.
  • Fix bug where indexes for table may be defined on multiple schema, #3043.
  • Always fall-through to base exception class if exception is not recognized in DB drivers. This simplifies checking driver-specific subclasses of standard DB-API exceptions.

View commits

4.0.4

  • Fix SQL generation for partial indexes with nulls (not) distinct clause.
  • Raise an ImproperlyConfigured if pg driver unavailable at model definition-time when field db-hooks are used, rather than AttributeError.

View commits

alien_moon_mission_flags_full

4.0.3

  • Refactor test suite - this was a mechanical refactor, just moving things around and trying to group things more clearly. Also added new tests covering some gaps.
  • Expand multi-value types to include generator expressions, so you can write stuff like .in(a for a in iterable if cond).
  • Ensure quotes embedded in entity names are escaped.
  • Improved specification of FOR UPDATE clauses.
  • Fix for negative values in paginate() method.
  • Fix for newer MySQL server versions in feature detection code.
  • More robust handling of unusual aliases / invalid attr names in cursor wrapper.
  • Better handling of duplicated column names in cursor wrapper implementations.
  • Improve performance of ModelCursorWrapper when reconstructing model instance graphs after multi-table selects.
  • If only psycopg3 is installed, use it by default (#3036)

View commits

1871_Vereshchagin_Apotheose_des_Krieges_anagoria

4.0.2

  • Remove all Python 2.x compatibility code.
  • Add streaming result cursors to pwasyncio module via db.iterate(query).
  • Better serialization and deserialization of datetimes and binary data in the DataSet module. Previously binary data was encoded as base64, going forward hex is the new default. For base64 specify base64_bytes=True.
  • Improvements to Postgres BinaryJSONField, support atomic removal of sub-elements, as well as alternate helper for extracting sub-elements and querying array length.
  • Pydantic integration

View commits

4.0.1

  • Ensure gr_context is set on greenlet in greenlet_spawn so that contextvars will be operable in sync handlers.
  • Removed SqliteExtDatabase (it basically served no purpose in 4.0). Use SqliteDatabase instead.
  • Moved driver and extension-specific pooled implementations into the corresponding extension module rather than putting all into playhouse.pool.
  • Restore custom dumps option for postgres JSON fields.
  • Major docs rewrite / reorganization.

View commits

... (truncated)

Changelog

Sourced from peewee's changelog.

4.0.5

  • Fix bug where db_value() may not get called in subclasses of Postgres JSONField / BinaryJSONField, refs #3044.
  • Fix bug where indexes for table may be defined on multiple schema, #3043.
  • Always fall-through to base exception class if exception is not recognized in DB drivers. This simplifies checking driver-specific subclasses of standard DB-API exceptions.

View commits

4.0.4

  • Fix SQL generation for partial indexes with nulls (not) distinct clause.
  • Raise an ImproperlyConfigured if pg driver unavailable at model definition-time when field db-hooks are used, rather than AttributeError.

View commits

4.0.3

  • Refactor test suite - this was a mechanical refactor, just moving things around and trying to group things more clearly. Also added new tests covering some gaps.
  • Expand multi-value types to include generator expressions, so you can write stuff like .in(a for a in iterable if cond).
  • Ensure quotes embedded in entity names are escaped.
  • Improved specification of FOR UPDATE clauses.
  • Fix for negative values in paginate() method.
  • Fix for newer MySQL server versions in feature detection code.
  • More robust handling of unusual aliases / invalid attr names in cursor wrapper.
  • Better handling of duplicated column names in cursor wrapper implementations.
  • Improve performance of ModelCursorWrapper when reconstructing model instance graphs after multi-table selects.
  • If only psycopg3 is installed, use it by default (#3036)

View commits

4.0.2

  • Remove all Python 2.x compatibility code.
  • Add streaming result cursors to pwasyncio module via db.iterate(query).
  • Better serialization and deserialization of datetimes and binary data in the DataSet module. Previously binary data was encoded as base64, going forward hex is the new default. For base64 specify base64_bytes=True.
  • Improvements to Postgres BinaryJSONField, support atomic removal of sub-elements, as well as alternate helper for extracting sub-elements and querying array length.
  • Pydantic integration

... (truncated)

Commits
  • 93da1ac 4.0.5
  • b0b5f1a Tests for #3044 - custom db_value in json field subclass
  • 4f2bbfb Pass through to db_value(), don't just naively wrap. fixes #3044
  • 19a1ca7 Ensure we don't introspect pg indexes defined on diff schema.
  • 2fc7057 Merge pull request #3042 from JacksonKontny/add-scalars-documentation
  • eb909b1 Add documentation for scalars method
  • e031803 Rename some duplicate-named tests.
  • 6575593 Few more clarifications for gaps in docs.
  • be15346 Clarify some inconsistencies in doc
  • f3d8645 Always fallback to base if exc not in known db-api for wrapper.
  • Additional commits viewable in compare view

Updates wtf-peewee from 3.0.6 to 3.1.0

Commits
  • d16af6d 3.1.0
  • 15d1fe8 Clean up error messages and add test for length validator too.
  • 810bdb2 Fix validation on foreign-key for missing object.
  • 0638331 Add test for checking form data
  • 9a2af51 Add support for JSON fields in PostgreSQL and SQLite
  • 6eed100 3.0.7
  • See full diff in compare view

Updates boto3 from 1.42.14 to 1.43.5

Commits

Updates azure-storage-blob from 12.27.1 to 12.28.0

Commits
  • b3301ac STG 100 GA Release Date for 2026-01-06
  • beb8dfa [Storage][STG 100] Prepare branch for GA + cherry-pick block size change (#44...
  • 874cfcf [Storage] Update Swagger and Release Date (#44243)
  • 4aca0cc Fix perf tests on Python 3.14 + Storage change (#44230)
  • cd5ecc5 [Storage] Fix 100 Live Tests (#44108)
  • 1cd78b1 [Storage] Added support for Python 3.14 + update 100 release date (#44224)
  • 471cda1 [Storage] Add Blob download perf test that uses HTTP library directly (#44111)
  • 9e53510 [Storage] Decompression for Binary Response in Download APIs (#43587)
  • 68b646b Removed create file with data and file semantics features (#43978)
  • 09f0066 [Storage] Added Support for UseDevelopmentStorage=true; for Connection Stri...
  • Additional commits viewable in compare view

Updates redis from 7.1.0 to 7.4.0

Release notes

Sourced from redis's releases.

7.4.0

Changes

🐛 Bug Fixes

  • Fix AttributeError in cluster metrics recording when connection is None or ClusterNode object instance is used to extract the connection info (#3999)
  • Fixing security concern in repr methods for ConnectionPools - passwords might leak in plain text logs (#3998)
  • Refactored connection count and SCH metric collection (#4001)

🧪 Experimental Features

-Refactored health check logic for MultiDBClient (#3994)

🧰 Maintenance

  • Expose basic Otel classes and functions to be importable through redis.observability to match the examples in the readthedocs (#3996)

We'd like to thank all the contributors who worked on this release! @​vladvildanov @​petyaslavova

7.3.0

Changes

OpenTelemetry Native Metrics Support for asynchronous clients Added comprehensive OpenTelemetry metrics support for asynchronous clients following the OpenTelemetry Database Client Semantic Conventions. Metric groups include:

  • Command metrics: Operation duration with retry tracking
  • Connection basic: Connection count and creation time
  • Resiliency: Errors, handoffs, timeout relaxation
  • Connection advanced: Wait time and use time
  • Pubsub metrics: Published and received messages
  • Stream me...

    Description has been truncated

@dependabot
build(deps): bump the python-requirements group across 1 directory wi…
5eef93c 
…th 27 updates

Bumps the python-requirements group with 26 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.6` | `3.1.8` |
| [wtforms](https://github.com/pallets-eco/wtforms) | `3.2.1` | `3.2.2` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.45` | `2.0.49` |
| [geoalchemy2](https://github.com/geoalchemy/geoalchemy2) | `0.18.1` | `0.19.0` |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.15.5` | `4.17.0` |
| [mongoengine](https://github.com/MongoEngine/mongoengine) | `0.29.1` | `0.29.3` |
| [peewee](https://github.com/coleifer/peewee) | `3.18.3` | `4.0.5` |
| [wtf-peewee](https://github.com/coleifer/wtf-peewee) | `3.0.6` | `3.1.0` |
| [boto3](https://github.com/boto/boto3) | `1.42.14` | `1.43.5` |
| [azure-storage-blob](https://github.com/Azure/azure-sdk-for-python) | `12.27.1` | `12.28.0` |
| [redis](https://github.com/redis/redis-py) | `7.1.0` | `7.4.0` |
| [tox](https://github.com/tox-dev/tox) | `4.29.0` | `4.53.1` |
| [tox-uv](https://github.com/tox-dev/tox-uv) | `1.28.0` | `1.35.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.1` | `4.6.0` |
| [pre-commit-uv](https://github.com/tox-dev/pre-commit-uv) | `4.2.0` | `4.2.1` |
| [pallets-sphinx-themes](https://github.com/pallets/pallets-sphinx-themes) | `2.3.0` | `2.5.0` |
| [pylint](https://github.com/pylint-dev/pylint) | `4.0.4` | `4.0.5` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` |
| [moto](https://github.com/getmoto/moto) | `5.1.18` | `5.2.0` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.11` | `2.9.12` |
| [mypy](https://github.com/python/mypy) | `1.19.1` | `2.0.0` |
| [pyright](https://github.com/RobertCraigie/pyright-python) | `1.1.407` | `1.1.409` |
| [types-boto3](https://github.com/youtype/mypy_boto3_builder) | `1.42.14` | `1.43.5` |
| [types-peewee](https://github.com/python/typeshed) | `3.18.3.20251105` | `4.0.1.20260503` |
| [types-wtforms](https://github.com/python/typeshed) | `3.2.1.20250809` | `3.2.1.20260408` |
| [types-shapely](https://github.com/python/typeshed) | `2.1.0.20250917` | `2.1.0.20260408` |



Updates `werkzeug` from 3.1.6 to 3.1.8
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.6...3.1.8)

Updates `wtforms` from 3.2.1 to 3.2.2
- [Release notes](https://github.com/pallets-eco/wtforms/releases)
- [Changelog](https://github.com/pallets-eco/wtforms/blob/main/CHANGES.rst)
- [Commits](pallets-eco/wtforms@3.2.1...3.2.2)

Updates `sqlalchemy` from 2.0.45 to 2.0.49
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `geoalchemy2` from 0.18.1 to 0.19.0
- [Release notes](https://github.com/geoalchemy/geoalchemy2/releases)
- [Changelog](https://github.com/geoalchemy/geoalchemy2/blob/main/CHANGES.txt)
- [Commits](geoalchemy/geoalchemy2@0.18.1...0.19.0)

Updates `pymongo` from 4.15.5 to 4.17.0
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.15.5...4.17.0)

Updates `mongoengine` from 0.29.1 to 0.29.3
- [Release notes](https://github.com/MongoEngine/mongoengine/releases)
- [Changelog](https://github.com/MongoEngine/mongoengine/blob/v0.29.3/docs/changelog.rst)
- [Commits](MongoEngine/mongoengine@v0.29.1...v0.29.3)

Updates `peewee` from 3.18.3 to 4.0.5
- [Release notes](https://github.com/coleifer/peewee/releases)
- [Changelog](https://github.com/coleifer/peewee/blob/master/CHANGELOG.md)
- [Commits](coleifer/peewee@3.18.3...4.0.5)

Updates `wtf-peewee` from 3.0.6 to 3.1.0
- [Commits](coleifer/wtf-peewee@3.0.6...3.1.0)

Updates `boto3` from 1.42.14 to 1.43.5
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.42.14...1.43.5)

Updates `azure-storage-blob` from 12.27.1 to 12.28.0
- [Release notes](https://github.com/Azure/azure-sdk-for-python/releases)
- [Commits](Azure/azure-sdk-for-python@azure-storage-blob_12.27.1...azure-storage-blob_12.28.0)

Updates `redis` from 7.1.0 to 7.4.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.1.0...v7.4.0)

Updates `tox` from 4.29.0 to 4.53.1
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.29.0...4.53.1)

Updates `tox-uv` from 1.28.0 to 1.35.2
- [Release notes](https://github.com/tox-dev/tox-uv/releases)
- [Commits](tox-dev/tox-uv@1.28.0...1.35.2)

Updates `pre-commit` from 4.5.1 to 4.6.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.5.1...v4.6.0)

Updates `pre-commit-uv` from 4.2.0 to 4.2.1
- [Release notes](https://github.com/tox-dev/pre-commit-uv/releases)
- [Commits](tox-dev/pre-commit-uv@4.2.0...4.2.1)

Updates `pallets-sphinx-themes` from 2.3.0 to 2.5.0
- [Release notes](https://github.com/pallets/pallets-sphinx-themes/releases)
- [Changelog](https://github.com/pallets/pallets-sphinx-themes/blob/main/CHANGES.md)
- [Commits](pallets/pallets-sphinx-themes@2.3.0...2.5.0)

Updates `pylint` from 4.0.4 to 4.0.5
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v4.0.4...v4.0.5)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0)

Updates `moto` from 5.1.18 to 5.2.0
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.1.18...5.2.0)

Updates `botocore` from 1.42.14 to 1.43.5
- [Commits](boto/botocore@1.42.14...1.43.5)

Updates `psycopg2-binary` from 2.9.11 to 2.9.12
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.11...2.9.12)

Updates `mypy` from 1.19.1 to 2.0.0
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.19.1...v2.0.0)

Updates `pyright` from 1.1.407 to 1.1.409
- [Release notes](https://github.com/RobertCraigie/pyright-python/releases)
- [Commits](RobertCraigie/pyright-python@v1.1.407...v1.1.409)

Updates `types-boto3` from 1.42.14 to 1.43.5
- [Release notes](https://github.com/youtype/mypy_boto3_builder/releases)
- [Commits](https://github.com/youtype/mypy_boto3_builder/commits)

Updates `types-peewee` from 3.18.3.20251105 to 4.0.1.20260503
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-wtforms` from 3.2.1.20250809 to 3.2.1.20260408
- [Commits](https://github.com/python/typeshed/commits)

Updates `types-shapely` from 2.1.0.20250917 to 2.1.0.20260408
- [Commits](https://github.com/python/typeshed/commits)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: wtforms
  dependency-version: 3.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: sqlalchemy
  dependency-version: 2.0.49
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: geoalchemy2
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: pymongo
  dependency-version: 4.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: mongoengine
  dependency-version: 0.29.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: peewee
  dependency-version: 4.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-requirements
- dependency-name: wtf-peewee
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: boto3
  dependency-version: 1.43.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: azure-storage-blob
  dependency-version: 12.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: redis
  dependency-version: 7.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: tox
  dependency-version: 4.53.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: tox-uv
  dependency-version: 1.35.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: pre-commit
  dependency-version: 4.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: pre-commit-uv
  dependency-version: 4.2.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: pallets-sphinx-themes
  dependency-version: 2.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: pylint
  dependency-version: 4.0.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: moto
  dependency-version: 5.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: botocore
  dependency-version: 1.43.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: psycopg2-binary
  dependency-version: 2.9.12
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: mypy
  dependency-version: 2.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-requirements
- dependency-name: pyright
  dependency-version: 1.1.409
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: types-boto3
  dependency-version: 1.43.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-requirements
- dependency-name: types-peewee
  dependency-version: 4.0.1.20260503
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-requirements
- dependency-name: types-wtforms
  dependency-version: 3.2.1.20260408
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-requirements
- dependency-name: types-shapely
  dependency-version: 2.1.0.20260408
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-requirements
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels May 7, 2026
@ElLorans ElLorans mentioned this pull request May 10, 2026
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants