Bump the uv-dependencies group across 1 directory with 24 updates #407

dependabot · 2026-01-09T15:54:02Z

Bumps the uv-dependencies group with 24 updates in the / directory:

Package	From	To
algoliasearch-django	`3.0.0`	`4.0.0`
celery[redis]	`5.5.3`	`5.6.2`
django-anymail	`10.0`	`14.0`
django-avatar	`8.0.1`	`9.0.0`
django-crispy-forms	`1.13.0`	`2.5`
django-reversion	`6.0.0`	`6.1.0`
django	`5.2.8`	`6.0.1`
google-analytics-data	`0.19.0`	`0.20.0`
google-auth	`2.43.0`	`2.47.0`
matplotlib	`3.10.7`	`3.10.8`
numpy	`2.3.4`	`2.4.0`
pillow	`12.0.0`	`12.1.0`
sentry-sdk	`2.44.0`	`2.49.0`
scout-apm	`3.5.0`	`3.5.2`
crispy-bootstrap5	`0.7`	`2025.6`
playwright	`1.56.0`	`1.57.0`
pytest-playwright	`0.7.1`	`0.7.2`
pytest	`8.4.2`	`9.0.2`
basedpyright	`1.33.0`	`1.37.1`
celery-types	`0.23.0`	`0.24.0`
djangorestframework-stubs	`3.16.5`	`3.16.6`
ipython	`9.7.0`	`9.9.0`
prek	`0.2.14`	`0.2.27`
ruff	`0.14.5`	`0.14.11`

Updates algoliasearch-django from 3.0.0 to 4.0.0

Release notes

Sourced from algoliasearch-django's releases.

4.0.0

⚠ BREAKING CHANGES

drop support for python <3.8

drop support for python <4.0

remove method clear_index in favor of clear_objects

See upgrade guide

Changelog

Sourced from algoliasearch-django's changelog.

2024-12-26 4.0.0

[MAJOR] drop support for python <3.8 #336

[MAJOR] drop support for django <4.0 #336

[MAJOR] remove method clear_index in favor of clear_objects #336

Commits

cbf5df0 chore: release v4 (#338)
e869b15 fix: remove highlightResult from response (#337)
b71984f feat!: support new algoliasearch and django versions (#336)
7f23fc2 chore: add release process (#332)
2233054 chore: bump to 3.0.0
See full diff in compare view

Updates celery[redis] from 5.5.3 to 5.6.2

Release notes

Sourced from celery[redis]'s releases.

v5.6.2

What's Changed

Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeError when pool_cls is a string by @bruunotrindade in celery/celery#10045

Bugfix: Revoked tasks now immediately update backend status to REVOKED by @Nusnus in celery/celery#9869

Prepare for release: v5.6.2 by @Nusnus in celery/celery#10049

New Contributors

@bruunotrindade made their first contribution in celery/celery#10045

Full Changelog: celery/celery@v5.6.1...v5.6.2

v5.6.1

What's Changed

Fix Redis Sentinel ACL authentication support by @anthonykuzmich7 in celery/celery#10013

Fix: Broker heartbeats not sent during graceful shutdown by @weetster in celery/celery#9986

docs #5410 -- Document confirm_publish broker transport option by @JaeHyuckSa in celery/celery#10016

close DB pools only in prefork mode by @petrprikryl in celery/celery#10020

Fix: Avoid unnecessary Django database connection creation during cleanup by @snopoke in celery/celery#10015

reliable prefork detection by @petrprikryl in celery/celery#10023

better coverage by @petrprikryl in celery/celery#10029

Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example by @SpaceShaman in celery/celery#10030

Stop importing pytest_subtests by @cjwatson in celery/celery#10032

Only use exceptiongroup backport for Python < 3.11 by @cjwatson in celery/celery#10033

Prepare for release: v5.6.1 by @Nusnus in celery/celery#10037

New Contributors

@anthonykuzmich7 made their first contribution in celery/celery#10013

@weetster made their first contribution in celery/celery#9986

@JaeHyuckSa made their first contribution in celery/celery#10016

@snopoke made their first contribution in celery/celery#10015

@SpaceShaman made their first contribution in celery/celery#10030

Full Changelog: celery/celery@v5.6.0...v5.6.1

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

... (truncated)

Changelog

Sourced from celery[redis]'s changelog.

5.6.2

:release-date: 2026-01-04 :release-by: Tomer Nosrati

What's Changed
- Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeError when pool_cls is a string ([#10045](https://github.com/celery/celery/issues/10045))
- Bugfix: Revoked tasks now immediately update backend status to REVOKED ([#9869](https://github.com/celery/celery/issues/9869))
- Prepare for release: v5.6.2 ([#10049](https://github.com/celery/celery/issues/10049))
.. _version-5.6.1:
5.6.1
:release-date: 2025-12-29
:release-by: Tomer Nosrati
What's Changed
Fix Redis Sentinel ACL authentication support (#10013)

Fix: Broker heartbeats not sent during graceful shutdown (#9986)

docs #5410 -- Document confirm_publish broker transport option (#10016)

close DB pools only in prefork mode (#10020)

Fix: Avoid unnecessary Django database connection creation during cleanup (#10015)

reliable prefork detection (#10023)

better coverage (#10029)

Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example (#10030)

Stop importing pytest_subtests (#10032)

Only use exceptiongroup backport for Python < 3.11 (#10033)

Prepare for release: v5.6.1 (#10037)

.. _version-5.6.0:

5.6.0

:release-date: 2025-11-30 :release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights
See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below.
</tr></table> 

... (truncated)

Commits

6a43c84 Prepare for release: v5.6.2 (#10049)
333a82f Bugfix: Revoked tasks now immediately update backend status to REVOKED (#9869)
9d6ab11 Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeEr...
21dbc73 Prepare for release: v5.6.1 (#10037)
ba20bed Only use exceptiongroup backport for Python < 3.11 (#10033)
2167529 Stop importing pytest_subtests
0527296 Bump google-cloud-firestore from 2.21.0 to 2.22.0
5f8659b Clarify 'result_extended' setting usage in tasks
f19db70 Bump mypy from 1.19.0 to 1.19.1 (#10028)
6da72bd better coverage (#10029)
Additional commits viewable in compare view

Updates django-anymail from 10.0 to 14.0

Release notes

Sourced from django-anymail's releases.

v14.0

This release improves handling of Unicode characters everywhere email messages allow them, based on extensive testing on all supported ESPs. See International email in the docs for more information. There are several new workarounds for ESP bugs with non-ASCII characters, plus a handful of new errors to help you avoid Unicode bugs Anymail can't work around.

This release also includes support for Django 6.0 and adds the much-requested ESP Mailtrap.

See the Changelog for breaking changes and a full list of other features and fixes.

v13.1

Changelog

v13.0.1

Changelog

v13.0

Changelog

v12.0

Changelog

v11.1

Changelog

v11.0.1

Changelog

(This release is solely to update documentation and metadata. Code is identical to v11.0.)

v11.0

Breaking changes for Amazon SES; SparkPost (with template_id)

New merge_headers feature

And more…

Please check the changelog

v10.3

Changelog

v10.2

Changelog

v10.1

Changelog

Changelog

Sourced from django-anymail's changelog.

v14.0

2025-12-17

This release improves handling of Unicode characters everywhere email messages allow them, based on extensive testing on all supported ESPs. See International email <https://anymail.dev/en/stable/tips/international_email/#idna>_ in the docs for more information. There are several new workarounds for ESP bugs with non-ASCII characters, plus a handful of new errors to help you avoid Unicode bugs Anymail can't work around.

This release also includes support for Django 6.0 (earlier versions worked, but provoked deprecation warnings) and adds the much-requested ESP Mailtrap.

Breaking changes


(These changes don't affect the vast majority of Anymail users.)


International domain names: When sending email to a non-ASCII domain name,

use IDNA 2008 with UTS-46 pre-processing rather than obsolete IDNA 2003

encoding. This ensures email can be sent to newer domains enabled by IDNA 2008.
This change should make no difference for virtually all real-world email

addresses that worked with earlier Anymail releases. But trying to send to

emoji domains or others no longer allowed by IDNA 2008 will now raise an

AnymailInvalidAddress error.
To restore the old behavior or select a different encoding, use the new

IDNA_ENCODER setting. See

Domains (IDNA) &lt;https://anymail.dev/en/stable/tips/international_email/#idna&gt;_

in the docs.
As part of this change, Anymail now has a direct dependency on the idna

package. (It was already being installed as a sub-dependency of requests.)


Brevo: Raise an error if metadata or custom header values include Unicode

characters. This avoids a Brevo API bug that sends unencoded 8-bit headers,

which can cause bounces or dropped messages.


Mailgun: Raise an error if the from_email uses EAI (has a Unicode

local part). This avoids a Mailgun API bug that generates undeliverable

messages.


Resend: Raise an error if an attachment's filename has an extension that

doesn't match its content type. This tries to help you avoid a Resend API bug

that can silently drop sent messages.


Scaleway TEM: Raise an error if any address field uses EAI (has a Unicode

</tr></table>

... (truncated)

Commits

e0f50c2 Release 14.0
a575bfc Docs: update some outdated examples
d6e8374 CI/CD: reduce permissions to GitHub workflows
5ee1e0d Thank contributors and sponsors in readme
793617c Mailtrap: new ESP
ee96317 Postmark: Avoid KeyError in tracking webhook for bounce/unsubscribe payload
ab2e85f Amazon SES (docs): show TenantName and EndpointId examples
f57bdc7 Exempt webhooks from Django's LoginRequiredMiddleware
643f46f Support Django 6.0
131b1c1 Improve handling of non-ASCII characters in attachments
Additional commits viewable in compare view

Updates django-avatar from 8.0.1 to 9.0.0

Release notes

Sourced from django-avatar's releases.

Close all open files

Fix files not closed in create_thumbnail

Add Django 5.2 and 6.0 support

Add Python 3.13, 3.14 support

Drop Python 3.8, 3.9 support

Changelog

Sourced from django-avatar's changelog.

9.0.0

Fix files not closed in create_thumbnail

Add Django 5.2 and 6.0 support

Add Python 3.13, 3.14 support

Drop Python 3.8, 3.9 support

Commits

12e4745 9.0.0
0f72578 Update CHANGELOG for version 9.0.0
80a7c95 Close files in create thumbnail (#252)
7cb5533 [pre-commit.ci] pre-commit autoupdate (#250)
d1801ed Fix url in cofirm_delete (#254)
4955d2d Update versions of Python, Django, GitHub Actions, and pre-commit hooks (#253)
14495e8 Enable parameters for LibRavatar (#255)
45e741a Update Python and Django versions in CI workflow
a6cafaa [pre-commit.ci] pre-commit autoupdate (#249)
See full diff in compare view

Updates django-crispy-forms from 1.13.0 to 2.5

Release notes

Sourced from django-crispy-forms's releases.

2.5

Confirmed support for Python 3.14.

Confirmed support for Django 6.0.

Dropped support for Python 3.8.

2.4

Added support for Python 3.13.

Confirmed support for Django 5.2.

2.3

What's Changed

Fixed unexpected addition the 'active' css_class to AccordionGroup

2.2

Added support for Django 5.1.

Allowed pass through of context when rendering a Fieldset layout object.

Full Changelog: django-crispy-forms/django-crispy-forms@2.1...2.2

2.1

What's Changed

Added support for Django 5.0.

Dropped support for Django 3.2, 4.0 and 4.1.

Added support for Python 3.12.

Dropped support for Python 3.7.

New Contributors

@DanielSwain made their first contribution in django-crispy-forms/django-crispy-forms#1340

@sankarebarri made their first contribution in django-crispy-forms/django-crispy-forms#1342

@foarsitter made their first contribution in django-crispy-forms/django-crispy-forms#1353

Full Changelog: django-crispy-forms/django-crispy-forms@2.0...2.1

2.0 (2023-02-13)

Major Changes and Migration Guide

Removed all Bootstrap template packs. These template packs are now available as standalone packages. To upgrade, install the required template pack and add it to your INSTALLED_APPS setting.

Boostrap 2: PyPI -- GitHub

Boostrap 3: PyPI -- GitHub

Boostrap 4: PyPI -- GitHub

Also, support for Bootstrap 5 is provided by a 3rd party package under the django-crispy-forms organisation at crispy-bootstrap5.

... (truncated)

Changelog

Sourced from django-crispy-forms's changelog.

2.5 (2025-11-06)

Confirmed support for Python 3.14.

Confirmed support for Django 6.0.

Dropped support for Python 3.8.

2.4 (2025-04-13)

Added support for Python 3.13.

Confirmed support for Django 5.2.

2.3 (2024-07-19)

Fixed a bug in AccordionGroup rendering then it gets an unexpected css class active.

2.2 (2024-06-15)

Added support for Django 5.1.

Allowed pass through of context when rendering a Fieldset layout object.

2.1 (2023-10-15)

Added support for Django 5.0.

Dropped support for Django 3.2, 4.0 and 4.1.

Added support for Python 3.12.

Dropped support for Python 3.7.

See the 2.1 Milestone for the full change list.

2.0 (2023-02-13)

Release of django-crispy-forms 2.0. No changes introduced since 2.0a1.

2.0a1 (2023-01-18)

Major Changes and Migration Guide
Removed all Bootstrap template packs. These template packs are now available as standalone packages. To upgrade, install the required template pack and add it to your INSTALLED_APPS setting.

Boostrap 2: PyPI -- GitHub

Boostrap 3: PyPI -- GitHub

Boostrap 4: PyPI -- GitHub

Also, support for Bootstrap 5 is provided by a 3rd party package under the django-crispy-forms organisation at crispy-bootstrap5.
Removed uni-form template pack. Uni-Form specific classes previously added to every template pack e.g. textInput are now removed. If you require these classes, the previous behaviour can be restored by adding the following to CRISPY_CLASS_CONVERTERS in your settings file.
  converters = {
    "textinput": "textinput textInput",
    "fileinput": "fileinput fileUpload",
    "passwordinput": "textinput textInput",

... (truncated)

Commits

65fa8ae 2.5 Release. (#1424)
ca4ca14 PEP 639 licenses (#1413)
aaabe68 Updated pre-commit hook versions.
125dd16 Pyupgrade 3.9+
1f9c8ec Confirmed support for Python 3.14, Django. Drop support for Python 3.8.
93cb8c8 Correct names in special thanks section (#1421)
e327548 Added security policy. (#1419)
6481342 Enabled GitHub code of conduct (#1416)
dabd719 Add Project Logo. (#1415)
b3f1d22 2.4 Release. (#1412)
Additional commits viewable in compare view

Updates django-reversion from 6.0.0 to 6.1.0

Release notes

Sourced from django-reversion's releases.

v6.1.0

What's Changed

Implement date-based ordering and custom version sort by @micmarc in etianen/django-reversion#992

New Contributors

@micmarc made their first contribution in etianen/django-reversion#992

Full Changelog: etianen/django-reversion@v6.0.0...v6.1.0

Changelog

Sourced from django-reversion's changelog.

6.1.0 - 2025-12-12

Added history_order_by_date and get_version_ordering to VersionAdmin (@micmarc).

Commits

98483a3 v6.1.0
d2e425f Merge pull request #992 from micmarc/custom-version-sort
2ae8d84 Implement history_order_by_date and get_version_ordering() hook with defa...
abe3535 Update CHANGELOG.rst
ed6ef82 Update CHANGELOG.rst
See full diff in compare view

Updates django from 5.2.8 to 6.0.1

Commits

85eb963 [6.0.x] Bumped version for 6.0.1 release.
ac4a550 [6.0.x] Added release date for 6.0.1.
dcfc5b0 [6.0.x] Added release date for 5.2.10.
42bab76 [6.0.x] Fixed #36843, #36793 -- Reverted "Fixed #27489 -- Renamed permissions...
764af47 [6.0.x] Refs #33647 -- Fixed silent data truncation in bulk_create on Postgres.
b7b5465 [6.0.x] Fixed #36829 -- Reverted value of ClearableFileInput.use_fieldset to ...
90daa65 [6.0.x] Fixed #30515 -- Documented resolve_url() in docs/topics/http/shortcut...
d35daf8 [6.0.x] Fixed #36796 -- Handled lazy routes correctly in RoutePattern.match().
16107ab [6.0.x] Refs #36810 -- Avoided infinite recursion in LazyNonce.repr().
774543e [6.0.x] Fixed #36305 -- Added documentation indentation guidelines to contrib...
Additional commits viewable in compare view

Updates google-analytics-data from 0.19.0 to 0.20.0

Release notes

Sourced from google-analytics-data's releases.

google-cloud-batch 0.20.0

0.20.0 (2026-01-08)

Commits

c60ded4 chore: librarian release pull request: 20260108T181058Z (#15005)
c0e3e9d chore: disable treat warnings as errors (#15008)
45d4cee docs(samples): Update BigQuery Storage Arrow samples batching logic (#14961)
45149ba chore: librarian release pull request: 20260108T162506Z (#15001)
d58a9ba test: Add 'cryptography' 'cachetools' to test deps for bigquery-storage (#14999)
1028946 feat: add v1 api for google-cloud-maintenance-api (#14998)
b3cb4de chore: librarian generate pull request: 20260107T084051Z (#14995)
17cc128 chore: librarian generate pull request: 20251231T091651Z (#14991)
c353aa5 chore: librarian update image pull request: 20251219T024955Z (#14985)
f384538 chore: librarian release pull request: 20251217T215552Z (#14980)
Additional commits viewable in compare view

Updates google-auth from 2.43.0 to 2.47.0

Release notes

Sourced from google-auth's releases.

google-auth 2.47.0

2.47.0 (2026-01-06)

Features

drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4)

Bug Fixes

Python 3.8 support (#1918) (60dc2001)

google-auth 2.46.0

2.46.0 (2026-01-05)

Features

Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#1907) (0b9107d5)

Bug Fixes

Fix test coverage for mtls_helper (#1886) (02e71631)

use .read() instead of .content.read() in aiohttp transport (#1899) (12f4470f)

add types to default and verify_token and Request init based on comments in the source code. (#1588) (59a5f588)

fix the document of secure_authorized_session (#1536) (5d001470)

raise RefreshError for missing token in impersonated credentials (#1897) (94d04e09)

remove setup.cfg configuration for creating universal wheels (#1693) (c767531c)

Documentation

update urllib3 docstrings for v2 compatibility (#1903) (3f1aeea2)

google-auth 2.45.0

2.45.0 (2025-12-15)

Features

Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e)

google-auth 2.44.0

2.44.0 (2025-12-12)

Features

MDS connections use mTLS (#1856) (0387bb95)

... (truncated)

Changelog

Sourced from google-auth's changelog.

2.47.0 (2026-01-06)

Features

drop cachetools dependency in favor of simple local implementation (#1590) (5c07e1c4f52bc77a1b16fa3b7b3c5269c242f6f4)

Bug Fixes

Python 3.8 support (#1918) (60dc20014a35ec4ba71e8065b9a33ecbdbeca97a)

2.46.0 (2026-01-05)

Documentation

update urllib3 docstrings for v2 compatibility (#1903) (3f1aeea2d1014ea1d244a4c3470e52d74d55404b)

Features

Recognize workload certificate config in has_default_client_cert_source for mTLS for Agentic Identities (#1907) (0b9107d573123e358c347ffa067637f992af61b4)

Bug Fixes

add types to default and verify_token and Request init based on comments in the source code. (#1588) (59a5f588f7793b59d923a4185c8c07738da618f7)

fix the document of secure_authorized_session (#1536) (5d0014707fc359782df5ccfcaa75fd372fe9dce3)

remove setup.cfg configuration for creating universal wheels (#1693) (c767531ce05a89002d109f595187aff1fcaacfb7)

use .read() instead of .content.read() in aiohttp transport (#1899) (12f4470f808809e8abf1141f98d88ab720c3899b)

raise RefreshError for missing token in impersonated credentials (#1897) (94d04e090fdfc61926dd32bc1d65f8820b9cede5)

Fix test coverage for mtls_helper (#1886) (02e71631fe275d93825c2e957e830773e75133f7)

2.45.0 (2025-12-15)

Features

Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e6b0d09b94c467cd432a0a635e8b05f5c)

2.44.0 (2025-12-13)

Features

support Python 3.14 (#1822) (0f7097e78f247665b6ef0287d482033f7be2ed6d)

add ecdsa p-384 support (#1872) (39c381a5f6881b590025f36d333d12eff8dc60fc)

MDS connections use mTLS (#1856) (0387bb95713653d47e846cad3a010eb55ef2db4c)

Implement token revocation in STS client and add revoke() metho… (#1849) (d5638986ca03ee95bfffa9ad821124ed7e903e63)

... (truncated)

Commits

f32301a chore: librarian release pull request: 20260106T130342Z (#1922)
25f4ca6 chore: remove Python 3.7 support (#1919)
60dc200 fix: Python 3.8 support (#1918)
5c07e1c feat: drop cachetools dependency in favor of simple local implementation (#...
2cbc2a2 chore: librarian release pull request: 20260105T122553Z (#1913)
5b7b5d8 chore: librarian update image pull request: 20260105T112538Z (#1912)
7dbf05a chore: rename _refresh_token to _perform_refresh_token (#1900)
855a45a chore(deps): update all dependencies (#1894)
77c8bc4 tests: make the TLS tests skip when pyopenssl isn't available (#1873)
0b9107d feat: Recognize workload certificate config in has_default_client_cert_source...
Additional commits viewable in compare view

Updates matplotlib from 3.10.7 to 3.10.8

Release notes

Sourced from matplotlib's releases.

REL: v3.10.8

This is a bugfix release in the 3.10.x series.

The primary highlights of this release are:

Properly allow freethreaded mode in the MacOS backend

Better error handling for MacOS backend

Commits

1392cbe REL: v3.10.8
0b9ebb3 Doc release prep v3.10.8
bc7b5c4 Merge branch 'v3.10.7-doc' into v3.10.x
86b38d3 Github stats v3.10.8
9512188 Merge pull request #30717 from meeseeksmachine/auto-backport-of-pr-30714-on-v...
d300769 Backport PR #30714: FIX: Gracefully handle numpy arrays as input to check_in_...
799bc95 Merge pull request #30711 from ngoldbaum/v3.10.x
134000b Merge pull request #30697 from ngoldbaum/fix-plotting-on-worker-threads
5b8e219 TST: Run macosx backends in a subprocess
878e71a Backport PR #29810: Declare free-threaded support in MacOS backend extension ...
Additional commits viewable in compare view

Updates numpy from 2.3.4 to 2.4.0

Release notes

Sourced from numpy's releases.

2.4.0 (Dec 20, 2025)

NumPy 2.4.0 Release Notes

The NumPy 2.4.0 release continues the work to improve free threaded Python support, user dtypes implementation, and annotations. There are many expired deprecations and bug fixes as well.

This release supports Python versions 3.11-3.14

Highlights

Apart from annotations and same_value kwarg, the 2.4 highlights are mostly of interest to downstream developers. They should help in implementing new user dtypes.

Many annotation improvements. In particular, runtime signature introspection.

New casting kwarg 'same_value' for casting by value.

New PyUFunc_AddLoopsFromSpec function that can be used to add user sort loops using the ArrayMethod API.

New __numpy_dtype__ protocol.

Deprecations

Setting the strides attribute is deprecated

Setting the strides attribute is now deprecated since mutating an array is unsafe if an array is shared, especially by multiple threads. As an alternative, you can create a new view (no copy) via:

np.lib.stride_tricks.strided_window_view if applicable,

np.lib.stride_tricks.as_strided for the general case,

or the np.ndarray constructor (buffer is the original array) for a light-weight version.

(gh-28925)

Positional out argument to np.maximum, np.minimum is deprecated

Passing the output array out positionally to numpy.maximum and numpy.minimum is deprecated. For example, np.maximum(a, b, c) will emit a deprecation warning, since c is treated as the output buffer rather than a third input.

Always pass the output with the keyword form, e.g. np.maximum(a, b, out=c). This makes intent clear and simplifies type annotations.

(gh-29052)

align= must be passed as boolean to np.dtype()

... (truncated)

Changelog

Sourced from numpy's changelog.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

The things to check are the cibuildwheel version in .github/workflows/wheels.yml and the openblas versions in openblas_requirements.txt.

Make a release PR

Four documents usually need to be updated or created for the release PR:

The changelog

The release notes

The .mailmap file

The pyproject.toml file

These changes should be made in an ordinary PR against the maintenance branch. Other small, miscellaneous fixes may be part of this PR. The commit message might be something like::
REL: Prepare for the NumPy 2.4.0 release

Create 2.4.0-changelog.rst.
Update 2.4.0-notes.rst.
Update .mailmap.
Update pyproject.toml
Set the release version

Check the pyproject.toml file and set the release version and update the classifier if needed::
$ gvim pyproject.toml
Check the doc/source/release.rst file

make sure that the release notes have an entry in the release.rst file::

... (truncated)

Commits

c5ab79c Merge pull request #30487 from charris/prepare-2.4.0.2
05e379a REL: Prepare for the NumPy 2.4.0 release (2)

Bumps the uv-dependencies group with 24 updates in the / directory: | Package | From | To | | --- | --- | --- | | [algoliasearch-django](https://github.com/algolia/algoliasearch-django) | `3.0.0` | `4.0.0` | | [celery[redis]](https://github.com/celery/celery) | `5.5.3` | `5.6.2` | | [django-anymail](https://github.com/anymail/django-anymail) | `10.0` | `14.0` | | [django-avatar](https://github.com/jazzband/django-avatar) | `8.0.1` | `9.0.0` | | [django-crispy-forms](https://github.com/django-crispy-forms/django-crispy-forms) | `1.13.0` | `2.5` | | [django-reversion](https://github.com/etianen/django-reversion) | `6.0.0` | `6.1.0` | | [django](https://github.com/django/django) | `5.2.8` | `6.0.1` | | [google-analytics-data](https://github.com/googleapis/google-cloud-python) | `0.19.0` | `0.20.0` | | [google-auth](https://github.com/googleapis/google-auth-library-python) | `2.43.0` | `2.47.0` | | [matplotlib](https://github.com/matplotlib/matplotlib) | `3.10.7` | `3.10.8` | | [numpy](https://github.com/numpy/numpy) | `2.3.4` | `2.4.0` | | [pillow](https://github.com/python-pillow/Pillow) | `12.0.0` | `12.1.0` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.44.0` | `2.49.0` | | [scout-apm](https://github.com/scoutapp/scout_apm_python) | `3.5.0` | `3.5.2` | | [crispy-bootstrap5](https://github.com/django-crispy-forms/crispy-bootstrap5) | `0.7` | `2025.6` | | [playwright](https://github.com/microsoft/playwright-python) | `1.56.0` | `1.57.0` | | [pytest-playwright](https://github.com/microsoft/playwright-pytest) | `0.7.1` | `0.7.2` | | [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.2` | | [basedpyright](https://github.com/detachhead/basedpyright) | `1.33.0` | `1.37.1` | | [celery-types](https://github.com/sbdchd/celery-types) | `0.23.0` | `0.24.0` | | [djangorestframework-stubs](https://github.com/sponsors/typeddjango) | `3.16.5` | `3.16.6` | | [ipython](https://github.com/ipython/ipython) | `9.7.0` | `9.9.0` | | [prek](https://github.com/j178/prek) | `0.2.14` | `0.2.27` | | [ruff](https://github.com/astral-sh/ruff) | `0.14.5` | `0.14.11` | Updates `algoliasearch-django` from 3.0.0 to 4.0.0 - [Release notes](https://github.com/algolia/algoliasearch-django/releases) - [Changelog](https://github.com/algolia/algoliasearch-django/blob/master/ChangeLog) - [Commits](algolia/algoliasearch-django@3.0.0...4.0.0) Updates `celery[redis]` from 5.5.3 to 5.6.2 - [Release notes](https://github.com/celery/celery/releases) - [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst) - [Commits](celery/celery@v5.5.3...v5.6.2) Updates `django-anymail` from 10.0 to 14.0 - [Release notes](https://github.com/anymail/django-anymail/releases) - [Changelog](https://github.com/anymail/django-anymail/blob/main/CHANGELOG.rst) - [Commits](anymail/django-anymail@v10.0...v14.0) Updates `django-avatar` from 8.0.1 to 9.0.0 - [Release notes](https://github.com/jazzband/django-avatar/releases) - [Changelog](https://github.com/jazzband/django-avatar/blob/main/CHANGELOG.rst) - [Commits](jazzband/django-avatar@v8.0.1...v9.0.0) Updates `django-crispy-forms` from 1.13.0 to 2.5 - [Release notes](https://github.com/django-crispy-forms/django-crispy-forms/releases) - [Changelog](https://github.com/django-crispy-forms/django-crispy-forms/blob/main/CHANGELOG.md) - [Commits](django-crispy-forms/django-crispy-forms@1.13.0...2.5) Updates `django-reversion` from 6.0.0 to 6.1.0 - [Release notes](https://github.com/etianen/django-reversion/releases) - [Changelog](https://github.com/etianen/django-reversion/blob/master/CHANGELOG.rst) - [Commits](etianen/django-reversion@v6.0.0...v6.1.0) Updates `django` from 5.2.8 to 6.0.1 - [Commits](django/django@5.2.8...6.0.1) Updates `google-analytics-data` from 0.19.0 to 0.20.0 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-analytics-data-v0.19.0...google-analytics-data-v0.20.0) Updates `google-auth` from 2.43.0 to 2.47.0 - [Release notes](https://github.com/googleapis/google-auth-library-python/releases) - [Changelog](https://github.com/googleapis/google-auth-library-python/blob/main/CHANGELOG.md) - [Commits](googleapis/google-auth-library-python@v2.43.0...v2.47.0) Updates `matplotlib` from 3.10.7 to 3.10.8 - [Release notes](https://github.com/matplotlib/matplotlib/releases) - [Commits](matplotlib/matplotlib@v3.10.7...v3.10.8) Updates `numpy` from 2.3.4 to 2.4.0 - [Release notes](https://github.com/numpy/numpy/releases) - [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst) - [Commits](numpy/numpy@v2.3.4...v2.4.0) Updates `pillow` from 12.0.0 to 12.1.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.0.0...12.1.0) Updates `sentry-sdk` from 2.44.0 to 2.49.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.44.0...2.49.0) Updates `scout-apm` from 3.5.0 to 3.5.2 - [Release notes](https://github.com/scoutapp/scout_apm_python/releases) - [Changelog](https://github.com/scoutapp/scout_apm_python/blob/master/CHANGELOG.md) - [Commits](scoutapp/scout_apm_python@v3.5.0...v3.5.2) Updates `crispy-bootstrap5` from 0.7 to 2025.6 - [Release notes](https://github.com/django-crispy-forms/crispy-bootstrap5/releases) - [Changelog](https://github.com/django-crispy-forms/crispy-bootstrap5/blob/main/CHANGELOG.md) - [Commits](django-crispy-forms/crispy-bootstrap5@0.7...2025.6) Updates `playwright` from 1.56.0 to 1.57.0 - [Release notes](https://github.com/microsoft/playwright-python/releases) - [Commits](microsoft/playwright-python@v1.56.0...v1.57.0) Updates `pytest-playwright` from 0.7.1 to 0.7.2 - [Release notes](https://github.com/microsoft/playwright-pytest/releases) - [Commits](microsoft/playwright-pytest@v0.7.1...v0.7.2) Updates `pytest` from 8.4.2 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.0.2) Updates `basedpyright` from 1.33.0 to 1.37.1 - [Release notes](https://github.com/detachhead/basedpyright/releases) - [Commits](DetachHead/basedpyright@v1.33.0...v1.37.1) Updates `celery-types` from 0.23.0 to 0.24.0 - [Commits](https://github.com/sbdchd/celery-types/commits) Updates `djangorestframework-stubs` from 3.16.5 to 3.16.6 - [Commits](https://github.com/sponsors/typeddjango/commits) Updates `ipython` from 9.7.0 to 9.9.0 - [Release notes](https://github.com/ipython/ipython/releases) - [Commits](ipython/ipython@9.7.0...9.9.0) Updates `prek` from 0.2.14 to 0.2.27 - [Release notes](https://github.com/j178/prek/releases) - [Changelog](https://github.com/j178/prek/blob/master/CHANGELOG.md) - [Commits](j178/prek@v0.2.14...v0.2.27) Updates `ruff` from 0.14.5 to 0.14.11 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.14.5...0.14.11) --- updated-dependencies: - dependency-name: algoliasearch-django dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: celery[redis] dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: django-anymail dependency-version: '14.0' dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: django-avatar dependency-version: 9.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: django-crispy-forms dependency-version: '2.5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: django-reversion dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: django dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: google-analytics-data dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: google-auth dependency-version: 2.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: matplotlib dependency-version: 3.10.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: numpy dependency-version: 2.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: pillow dependency-version: 12.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: sentry-sdk dependency-version: 2.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: scout-apm dependency-version: 3.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: crispy-bootstrap5 dependency-version: '2025.6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: playwright dependency-version: 1.57.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: pytest-playwright dependency-version: 0.7.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: uv-dependencies - dependency-name: basedpyright dependency-version: 1.37.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: celery-types dependency-version: 0.24.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: djangorestframework-stubs dependency-version: 3.16.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: ipython dependency-version: 9.9.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: uv-dependencies - dependency-name: prek dependency-version: 0.2.27 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: uv-dependencies - dependency-name: ruff dependency-version: 0.14.11 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: uv-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

codecov · 2026-01-09T15:58:35Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.60%. Comparing base (11e0017) to head (b866e90).

❗ There is a different number of reports uploaded between BASE (11e0017) and HEAD (b866e90). Click for more details.

HEAD has 1 upload less than BASE

Flag BASE (11e0017) HEAD (b866e90)

4 3

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #407      +/-   ##
==========================================
- Coverage   62.73%   54.60%   -8.13%     
==========================================
  Files         115      115              
  Lines        9202     9202              
==========================================
- Hits         5773     5025     -748     
- Misses       3429     4177     +748

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

dependabot bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Jan 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the uv-dependencies group across 1 directory with 24 updates #407

Bump the uv-dependencies group across 1 directory with 24 updates #407

Uh oh!

dependabot bot commented on behalf of github Jan 9, 2026

5.6.1

Uh oh!

codecov bot commented Jan 9, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Bump the uv-dependencies group across 1 directory with 24 updates #407

Are you sure you want to change the base?

Bump the uv-dependencies group across 1 directory with 24 updates #407

Uh oh!

Conversation

dependabot bot commented on behalf of github Jan 9, 2026

4.0.0

⚠ BREAKING CHANGES

v5.6.2

What's Changed

New Contributors

v5.6.1

What's Changed

New Contributors

v5.6.0

Key Highlights

Python 3.9 Minimum Version

SQS: Reverted to pycurl from urllib3

5.6.2

5.6.1

5.6.0

v14.0

v13.1

v13.0.1

v13.0

v12.0

v11.1

v11.0.1

v11.0

v10.3

v10.2

v10.1

v14.0

Close all open files

2.5

2.4

2.3

What's Changed

2.2

2.1

What's Changed

New Contributors

2.0 (2023-02-13)

Major Changes and Migration Guide

2.5 (2025-11-06)

2.4 (2025-04-13)

2.3 (2024-07-19)

2.2 (2024-06-15)

2.1 (2023-10-15)

2.0 (2023-02-13)

2.0a1 (2023-01-18)

Major Changes and Migration Guide

v6.1.0

What's Changed

New Contributors

6.1.0 - 2025-12-12

google-cloud-batch 0.20.0

0.20.0 (2026-01-08)

google-auth 2.47.0

2.47.0 (2026-01-06)

Features

Bug Fixes

google-auth 2.46.0

2.46.0 (2026-01-05)

Features

Bug Fixes

Documentation

google-auth 2.45.0

2.45.0 (2025-12-15)

Features

google-auth 2.44.0

2.44.0 (2025-12-12)

Features

2.47.0 (2026-01-06)

Features

Bug Fixes

2.46.0 (2026-01-05)

Documentation

Features

SQS: Reverted to `pycurl` from `urllib3`

Setting the `strides` attribute is deprecated

Positional `out` argument to `np.maximum`, `np.minimum` is deprecated

`align=` must be passed as boolean to `np.dtype()`

Check the `doc/source/release.rst` file

codecov bot commented Jan 9, 2026 •

edited

Loading