Skip to content

chore(deps): bump the production-dependencies group across 1 directory with 13 updates#164

Open
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/pip/staging/production-dependencies-5cf573a398
Open

chore(deps): bump the production-dependencies group across 1 directory with 13 updates#164
dependabot[bot] wants to merge 1 commit into
stagingfrom
dependabot/pip/staging/production-dependencies-5cf573a398

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 13 updates in the / directory:

Package From To
alembic 1.13.1 1.18.5
cachetools 7.1.3 7.1.4
cryptography 48.0.0 49.0.0
fastapi 0.136.1 0.139.2
gitpython 3.1.50 3.1.53
grpcio 1.80.0 1.82.1
grpcio-testing 1.80.0 1.82.1
grpcio-tools 1.80.0 1.82.1
phonenumbers 9.0.30 9.0.34
pymysql 1.1.3 1.2.0
sentry-sdk 2.60.0 2.66.0
sqlalchemy 2.0.50 2.0.51
tqdm 4.67.3 4.69.0

Updates alembic from 1.13.1 to 1.18.5

Release notes

Sourced from alembic's releases.

1.18.5

Released: June 25, 2026

usecase

  • [usecase] [commands] Added --splice support to the merge() command. Previously, the merge command would suggest using --splice when attempting to merge non-head revisions, but the flag was not actually accepted by the command. The splice parameter is now available in both the command-line interface and the command.merge() function, matching the existing support in command.revision(). Pull request courtesy Kadir Can Ozden.

    References: #1712

  • [usecase] [environment] Added ScriptDirectory.get_heads.consider_depends_on parameter to ScriptDirectory.get_heads(). When set to True, head revisions that are also a dependency of another revision via depends_on are excluded from the result, matching the effective heads that would be present in the alembic_version table after running all upgrades.

    References: #1806

bug

  • [bug] [autogenerate] Fixed rendering of dialect keyword arguments containing ~sqlalchemy.schema.Column objects within sequences, such as postgresql_include. These were previously rendered using repr(), producing invalid Python in the generated migration scripts. Column objects within list or tuple values are now correctly rendered as their string column names. Pull request courtesy Ajay Singh.

    References: #1258

  • [bug] [mysql] Implemented type comparison for ENUM datatypes on MySQL, which checks that the individual enum values are equivalent. If additional entries are on either side, this generates a diff. Changes of order do not generate a diff. Pull request courtesy Furkan Köykıran.

    References: #1745, #779

  • [bug] [operations] Fixed bug where the inline_references parameter of Operations.add_column() did not include foreign key referential actions such as ON DELETE, ON UPDATE, DEFERRABLE, INITIALLY, and MATCH when rendering the inline REFERENCES clause.

... (truncated)

Commits

Updates cachetools from 7.1.3 to 7.1.4

Changelog

Sourced from cachetools's changelog.

v7.1.4 (2026-05-22)

  • Minor unit test improvements.

  • Update build environment.

Commits
  • 48284d7 Release v7.1.4.
  • 55ea96b Update build environment.
  • c5439fe Add threading tests for lock-only decorators.
  • 91828fc Run threading tests unconditionally with timeout.
  • See full diff in compare view

Updates cryptography from 48.0.0 to 49.0.0

Changelog

Sourced from cryptography's changelog.

49.0.0 - 2026-06-12


* **BACKWARDS INCOMPATIBLE:** Support for ``x86_64`` macOS has been removed.
  We now only publish ``arm64`` wheels for macOS.
* **BACKWARDS INCOMPATIBLE:** Support for 32-bit Windows has been removed.
  Users should move to a 64-bit Python installation.
* **BACKWARDS INCOMPATIBLE:** Removed the deprecated
  ``PUBLIC_KEY_TYPES``, ``PRIVATE_KEY_TYPES``,
  ``CERTIFICATE_PRIVATE_KEY_TYPES``, ``CERTIFICATE_ISSUER_PUBLIC_KEY_TYPES``,
  and ``CERTIFICATE_PUBLIC_KEY_TYPES`` type aliases. Use
  ``PublicKeyTypes``, ``PrivateKeyTypes``, ``CertificateIssuerPrivateKeyTypes``,
  ``CertificateIssuerPublicKeyTypes``, and ``CertificatePublicKeyTypes``
  instead. These were deprecated in version 40.0.
* **BACKWARDS INCOMPATIBLE:** :class:`~cryptography.hazmat.primitives.ciphers.algorithms.ChaCha20`
  now treats the first 4 bytes of the ``nonce`` as a 32-bit little-endian block
  counter (as defined in :rfc:`7539`) and tracks the number of bytes processed.
  Attempting to encrypt or decrypt more data than the counter allows before it
  would overflow now raises a :class:`ValueError` rather than silently diverging
  from RFC 7539. Setting the counter portion of the ``nonce`` to zero allows
  encrypting up to 256 GiB with a given nonce.
* **BACKWARDS INCOMPATIBLE:** Loading an X.509 certificate whose ECDSA or DSA
  signature ``AlgorithmIdentifier`` contains encoded NULL parameters now raises
  a :class:`ValueError`. Such certificates are invalid, but older versions of
  Java emitted them; previously they loaded with a deprecation warning.
* Fixed cross-compilation of the CFFI bindings when ``PYO3_CROSS_LIB_DIR``
  is set. The build now derives the Python include directory from
  ``PYO3_CROSS_LIB_DIR`` instead of querying the host interpreter, which
  previously caused the build to fail during cross-compilations for embedded
  systems, on hosts which have same-version Python development headers
  installed as the target Python.
* Added support for signing and verifying X.509 certificates, certificate
  signing requests, and certificate revocation lists with
  :doc:`/hazmat/primitives/asymmetric/mldsa` keys, as well as loading
  certificates that contain ML-DSA public keys.
* Added :meth:`~cryptography.hazmat.primitives.hpke.KEM.enc_length` to
  :class:`~cryptography.hazmat.primitives.hpke.KEM` so callers can split the
  encapsulated key from the ciphertext returned by
  :meth:`~cryptography.hazmat.primitives.hpke.Suite.encrypt`.
* :meth:`~cryptography.x509.verification.ExtensionPolicy.require_present`,
  :meth:`~cryptography.x509.verification.ExtensionPolicy.may_be_present`, and
  :meth:`~cryptography.x509.verification.ExtensionPolicy.require_not_present`
  now accept any extension type. Previously only a fixed set of extension
  types was supported, which made it impossible to account for otherwise
  unrecognized critical extensions during path validation.
* Added support for using :class:`~cryptography.x509.Certificate`,
  :class:`~cryptography.x509.CertificateSigningRequest`, and
  :class:`~cryptography.x509.CertificateRevocationList` as field types in
  :doc:`/hazmat/asn1/index` structures.
* Added :func:`~cryptography.hazmat.asn1.value_set`, a class decorator that
</tr></table> 

... (truncated)

Commits
  • e300bbe bump version and changelog for 49.0.0 (#15030)
  • fa74cd8 Add external mu (message representative) support for ML-DSA (#14979)
  • f594db3 chore(deps): bump openssl from 0.10.80 to 0.10.81 (#15029)
  • 608e011 chore(deps): bump openssl-sys from 0.9.116 to 0.9.117 (#15028)
  • a322bc4 chore(deps): bump cc from 1.2.63 to 1.2.64 (#15027)
  • 33181a7 Reject critical nameConstraints extensions containing directoryName constrain...
  • 6080dc7 Bump dependencies that dependabot isn't (#15026)
  • 121faa3 chore(deps): bump virtualenv from 21.4.2 to 21.4.3 (#15023)
  • 829520b Add more robust processing for DH parameters. (#15016)
  • 0f05001 Bump downstream dependencies in CI (#15025)
  • Additional commits viewable in compare view

Updates fastapi from 0.136.1 to 0.139.2

Release notes

Sourced from fastapi's releases.

0.139.2

Fixes

  • 🐛 Refactor router route building to make it thread-safe, mainly relevant for tests running in parallel threads (uncommon). PR #16013 by @​tiangolo.

0.139.1

Fixes

  • 🐛 Fix frontend fallback support for doted paths like /users/john.doe. PR #16011 by @​tiangolo.

Docs

  • 📝 Fix topic repository list not being displayed and skip_users not being applied. PR #15995 by @​YuriiMotov.

Translations

Internal

... (truncated)

Commits
  • 866b7a3 🔖 Release version 0.139.2 (#16014)
  • 7b3effe 📝 Update release notes
  • 7fe315c 🐛 Refactor router route building to make it thread-safe, mainly relevant for ...
  • c48e67b 🔖 Release version 0.139.1 (#16012)
  • 2acc4fb 📝 Update release notes
  • eb75fd0 🐛 Fix frontend fallback support for doted paths like /users/john.doe (#16011)
  • 9b8410b 📝 Update release notes
  • e24d44c 📝 Fix topic repository list not being displayed and skip_users not being ap...
  • 93b78f8 📝 Update release notes
  • b959b44 📝 Update release notes
  • Additional commits viewable in compare view

Updates gitpython from 3.1.50 to 3.1.53

Release notes

Sourced from gitpython's releases.

3.1.53 - Security

What's Changed

New Contributors

Full Changelog: gitpython-developers/GitPython@3.1.52...3.1.53

3.1.52 Security

GHSA-rwj8-pgh3-r573: Environment-variable exfiltration via os.path.expandvars() on Repo.clone_from() URL

What's Changed

Full Changelog: gitpython-developers/GitPython@3.1.51...3.1.52

3.1.51 - Security

What's Changed

New Contributors

... (truncated)

Commits
  • faf3c09 prepare for security fix
  • 6a5eb6a Merge pull request #2176 from gitpython-developers/fix-config-injection
  • 1ed1b92 fix: validate config section delimiters
  • 354eb2f Merge pull request #2159 from Siesta0217/fix-core-hooks-path-commit-hooks
  • 9bc287a Address review feedback about hook resolution
  • 406b98e fix: respect core.hooksPath for commit hooks
  • 5bc2560 upate contributing guide to avoid agent impersonation
  • 15527ef Merge pull request #2175 from gitpython-developers/submodule-deinit-fix
  • b9d82c0 fix: make submodule.update() after submodule.deinit() work
  • f89e18c Merge pull request #2174 from gitpython-developers/basedpyright
  • Additional commits viewable in compare view

Updates grpcio from 1.80.0 to 1.82.1

Release notes

Sourced from grpcio's releases.

Release v1.82.1

This is release gRPC Core 1.82.1 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

Full Changelog: grpc/grpc@v1.82.0...v1.82.1

Release v1.82.0

This is release gRPC Core 1.82.0 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes. This is release 1.82.0 (glacier) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [call creds] Add support for looking up and attaching regional access boundary policy metadata. (#41594)
  • Unregister CFStream callbacks during endpoint shutdown. (#42211)
  • Fix fd 0 incorrectly treated as invalid across POSIX socket code. (#41764)
  • [xDS] enable new ORCA-to-LRS propagation behavior (gRFC A85). (#42411)
  • [RetryFilter::LegacyCallData]: avoid tripping abseil nullopt assertion. (#42405)
  • [xds] Implement A114: WRR support for custom backend metrics. (#41750)
  • [Core] Upgrade to protobuf 35 (#42512)

PHP

  • [Backport][v1.82.x][PHP] Add PIE support for PHP extention. (#42873)

Python

Added 2026-07-12: CAUTION! This gRPC Python release 1.82.0 was yanked from PyPI on 2026-07-07 due to issue grpc/grpc#42906.

... (truncated)

Commits
  • acccf84 [Release] Bump version to 1.82.1 (on v1.82.x branch) (#42924)
  • 4f356a0 [Backport][v1.82.x][Python] Update lower bound for protobuf from 6.33.5 to 7....
  • 742600a [Release] Bump version to 1.82.0 (on v1.82.x branch) (#42876)
  • 1a59ee2 [Backport][v1.82.x][PHP] Add PIE support for PHP extention (#42873)
  • 6c34462 [Release] Bump version to 1.82.0-pre2 (on v1.82.x branch) (#42789)
  • 0ddb577 [Backport][v1.82.x] Memory optimization experiments (#42788)
  • b3580d6 [Backport][v1.82.x][PSM interop] adds python kokoro config file for regional ...
  • d8183a8 [Backport][v1.82.x][PSM interop] adds kokoro config file for regional TD test...
  • f3289ea [Release] Bump version to 1.82.0-pre1 (on v1.82.x branch) (#42639)
  • 9a7455f [Release] Bump core version to 55.0.0 for upcoming release (#42626)
  • Additional commits viewable in compare view

Updates grpcio-testing from 1.80.0 to 1.82.1

Updates grpcio-tools from 1.80.0 to 1.82.1

Release notes

Sourced from grpcio-tools's releases.

Release v1.82.1

This is release gRPC Core 1.82.1 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

Full Changelog: grpc/grpc@v1.82.0...v1.82.1

Release v1.82.0

This is release gRPC Core 1.82.0 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes. This is release 1.82.0 (glacier) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [call creds] Add support for looking up and attaching regional access boundary policy metadata. (#41594)
  • Unregister CFStream callbacks during endpoint shutdown. (#42211)
  • Fix fd 0 incorrectly treated as invalid across POSIX socket code. (#41764)
  • [xDS] enable new ORCA-to-LRS propagation behavior (gRFC A85). (#42411)
  • [RetryFilter::LegacyCallData]: avoid tripping abseil nullopt assertion. (#42405)
  • [xds] Implement A114: WRR support for custom backend metrics. (#41750)
  • [Core] Upgrade to protobuf 35 (#42512)

PHP

  • [Backport][v1.82.x][PHP] Add PIE support for PHP extention. (#42873)

Python

Added 2026-07-12: CAUTION! This gRPC Python release 1.82.0 was yanked from PyPI on 2026-07-07 due to issue grpc/grpc#42906.

... (truncated)

Commits
  • acccf84 [Release] Bump version to 1.82.1 (on v1.82.x branch) (#42924)
  • 4f356a0 [Backport][v1.82.x][Python] Update lower bound for protobuf from 6.33.5 to 7....
  • 742600a [Release] Bump version to 1.82.0 (on v1.82.x branch) (#42876)
  • 6c34462 [Release] Bump version to 1.82.0-pre2 (on v1.82.x branch) (#42789)
  • f3289ea [Release] Bump version to 1.82.0-pre1 (on v1.82.x branch) (#42639)
  • 3618643 [Core] Upgrade to protobuf 35 (#42512)
  • 05ffa92 [Core] Upgrade protobuf to 34 (#42191)
  • c75da17 Fix typos (#42398)
  • 9cde6ba [Release] Bump version to 1.82.0-dev (on master branch) (#42362)
  • f440d36 [Python] Fix windows build escape characters (#42339)
  • Additional commits viewable in compare view

Updates phonenumbers from 9.0.30 to 9.0.34

Commits
  • 671b53f Prep for 9.0.34 release
  • b1f3bb2 Generated files for metadata
  • 20eecc2 Merge metadata changes from upstream 9.0.34
  • fdcad9b README.md: use pyproject-build tool
  • 0efec90 Fix lint
  • 6400333 Prep for 9.0.33 release
  • 4419992 Generated files for metadata
  • 2e01d60 Merge metadata changes from upstream 9.0.33
  • bdee3ff Merge code changes from upstream v9.0.33
  • facd74c Prep for 9.0.32 release
  • Additional commits viewable in compare view

Updates pymysql from 1.1.3 to 1.2.0

Release notes

Sourced from pymysql's releases.

v1.2.0

What's Changed

New Contributors

Full Changelog: PyMySQL/PyMySQL@v1.1.3...v1.2.0

Changelog

Sourced from pymysql's changelog.

v1.2.0

Release date: 2026-05-19

Breaking changes

  • Connection.ping() change the default to not reconnect and deprecate reconnect argument. Create a new connection if you want to reconnect. (#1241)

  • Error classes in Cursor class are removed. (#1240)

  • connect() arguments db and passwd now emit DeprecationWarning. Use database and password instead. (#1240)

  • Reorganize TLS connection behavior.

    • PyMySQL uses TLS by default when server supports it. Use ssl_disabled=True to prohibit SSL. (#1213)

    • When ssl_verify_cert=True, ssl_verify_identity=True, an ssl.SSLContext is passed, or when any other SSL option is configured, the connection requires SSL and raises OperationalError (CR_SSL_CONNECTION_ERROR) if the server doesn't support it. (#1234)

Other changes

  • Support MySQL 8 row/column alias syntax in executemany INSERT regex. (#1235)
  • Expose SQLSTATE on MySQL protocol exceptions without changing exception formatting. (#1236)
  • Reject non-finite decimal.Decimal query parameters (NaN, sNaN, ±Infinity). (#1237)
  • Connection.set_charset(charset) now emits DeprecationWarning.
Commits
  • 0f1c324 use ubuntu-latest for pypi publishing
  • 53b16b2 Release v1.2.0 (#1244)
  • 637fe7e Deprecate Connection.set_charset() at runtime and document warning behavior...
  • 23ca04a add AGENTS.md
  • 7349a44 deprecate reconnect in Connection.ping() (#1241)
  • ad5c50c update CHANGELOG
  • c963edb Deprecation and removals (#1240)
  • af6b9b4 Prepare CHANGELOG for v1.2.0 release from v1.1.3 changes (#1238)
  • c7bf73f docs: update outdated requirements and reference links (#1239)
  • c532b8d Reject non-finite decimal.Decimal query parameters (NaN, sNaN, `±Infini...
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.60.0 to 2.66.0

Release notes

Sourced from sentry-sdk's releases.

2.66.0

New Features ✨

  • (tracing) Promote trace_lifecycle and ignore_spans to top-level options by @​ericapisani in #6821

Bug Fixes 🐛

Tracing

  • Skip child span creation in streaming path when no current span (HTTP clients) by @​sentrivana in #6811
  • Skip child span creation in streaming path when no current span (task queues) by @​sentrivana in #6814
  • Skip child span creation in streaming path when no current span (misc) by @​sentrivana in #6815
  • Skip child span creation in streaming path when no current span (databases) by @​sentrivana in #6808
  • Skip child span creation in streaming path when no current span (web frameworks) by @​sentrivana in #6810
  • Skip child span creation in streaming path when no current span (django) by @​sentrivana in #6809

Internal Changes 🔧

2.65.0

New Features ✨

Huey

Other

Bug Fixes 🐛

Tracing

Other

  • (django) Avoid ValueError in async middleware process_* hooks by @​r0ro in #6698
  • (scope) Drop None user attribute values in set_user by @​ericapisani in #6692
  • (starlette) Don't overwrite user set during request in AuthenticationMiddleware by @​ericapisani in #6760

Internal Changes 🔧

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.66.0

New Features ✨

  • (tracing) Promote trace_lifecycle and ignore_spans to top-level options by @​ericapisani in #6821

Bug Fixes 🐛

Tracing

  • Skip child span creation in streaming path when no current span (HTTP clients) by @​sentrivana in #6811
  • Skip child span creation in streaming path when no current span (task queues) by @​sentrivana in #6814
  • Skip child span creation in streaming path when no current span (misc) by @​sentrivana in #6815
  • Skip child span creation in streaming path when no current span (databases) by @​sentrivana in #6808
  • Skip child span creation in streaming path when no current span (web frameworks) by @​sentrivana in #6810
  • Skip child span creation in streaming path when no current span (django) by @​sentrivana in #6809

Internal Changes 🔧

2.65.0

New Features ✨

Huey

Other

Bug Fixes 🐛

Tracing

Other

  • (django) Avoid ValueError in async middleware process_* hooks by @​r0ro in #6698
  • (scope) Drop None user attribute values in set_user by

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/staging/production-dependencies-5cf573a398 branch from fba03e2 to e30f4db Compare July 14, 2026 13:00
…y with 13 updates

Bumps the production-dependencies group with 13 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.13.1` | `1.18.5` |
| [cachetools](https://github.com/tkem/cachetools) | `7.1.3` | `7.1.4` |
| [cryptography](https://github.com/pyca/cryptography) | `48.0.0` | `49.0.0` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.136.1` | `0.139.2` |
| [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.50` | `3.1.53` |
| [grpcio](https://github.com/grpc/grpc) | `1.80.0` | `1.82.1` |
| [grpcio-testing](https://grpc.io) | `1.80.0` | `1.82.1` |
| [grpcio-tools](https://github.com/grpc/grpc) | `1.80.0` | `1.82.1` |
| [phonenumbers](https://github.com/daviddrysdale/python-phonenumbers) | `9.0.30` | `9.0.34` |
| [pymysql](https://github.com/PyMySQL/PyMySQL) | `1.1.3` | `1.2.0` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.60.0` | `2.66.0` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.50` | `2.0.51` |
| [tqdm](https://github.com/tqdm/tqdm) | `4.67.3` | `4.69.0` |



Updates `alembic` from 1.13.1 to 1.18.5
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `cachetools` from 7.1.3 to 7.1.4
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v7.1.3...v7.1.4)

Updates `cryptography` from 48.0.0 to 49.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@48.0.0...49.0.0)

Updates `fastapi` from 0.136.1 to 0.139.2
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.136.1...0.139.2)

Updates `gitpython` from 3.1.50 to 3.1.53
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.50...3.1.53)

Updates `grpcio` from 1.80.0 to 1.82.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.80.0...v1.82.1)

Updates `grpcio-testing` from 1.80.0 to 1.82.1

Updates `grpcio-tools` from 1.80.0 to 1.82.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.80.0...v1.82.1)

Updates `phonenumbers` from 9.0.30 to 9.0.34
- [Commits](daviddrysdale/python-phonenumbers@v9.0.30...v9.0.34)

Updates `pymysql` from 1.1.3 to 1.2.0
- [Release notes](https://github.com/PyMySQL/PyMySQL/releases)
- [Changelog](https://github.com/PyMySQL/PyMySQL/blob/main/CHANGELOG.md)
- [Commits](PyMySQL/PyMySQL@v1.1.3...v1.2.0)

Updates `sentry-sdk` from 2.60.0 to 2.66.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.60.0...2.66.0)

Updates `sqlalchemy` from 2.0.50 to 2.0.51
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `tqdm` from 4.67.3 to 4.69.0
- [Release notes](https://github.com/tqdm/tqdm/releases)
- [Commits](tqdm/tqdm@v4.67.3...v4.69.0)

---
updated-dependencies:
- dependency-name: alembic
  dependency-version: 1.18.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: cachetools
  dependency-version: 7.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: cryptography
  dependency-version: 49.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: fastapi
  dependency-version: 0.139.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: gitpython
  dependency-version: 3.1.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: grpcio
  dependency-version: 1.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: grpcio-testing
  dependency-version: 1.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: grpcio-tools
  dependency-version: 1.82.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: phonenumbers
  dependency-version: 9.0.34
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: pymysql
  dependency-version: 1.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sentry-sdk
  dependency-version: 2.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: sqlalchemy
  dependency-version: 2.0.51
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: tqdm
  dependency-version: 4.68.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/staging/production-dependencies-5cf573a398 branch from e30f4db to 7d8f096 Compare July 20, 2026 17:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants