Skip to content

Bump the python-dependencies group across 1 directory with 9 updates#35

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-dependencies-6c4657005e
Open

Bump the python-dependencies group across 1 directory with 9 updates#35
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-dependencies-6c4657005e

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Dec 22, 2025 •
edited
Loading

Bumps the python-dependencies group with 9 updates in the / directory:

Package From To
celery 5.5.3 5.6.0
sqlalchemy 2.0.44 2.0.45
typer 0.20.0 0.20.1
pydantic 2.12.3 2.12.5
pydantic-settings 2.11.0 2.12.0
pikepdf 9.11.0 10.0.3
black 25.9.0 25.12.0
pre-commit 4.3.0 4.5.1
pytest 8.4.2 9.0.2

Updates celery from 5.5.3 to 5.6.0

Release notes

Sourced from celery's releases.

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

Contributed by @​auvipy in celery/celery#9620.

Security Fix: Broker Credential Leak Prevention

Fixed a security issue where broker URLs containing passwords were being logged in plaintext by the delayed delivery mechanism. Broker credentials are now properly sanitized in all log output.

Contributed by @​giancarloromeo in celery/celery#9997.

Memory Leak Fixes

Two significant memory leaks have been fixed in this release:

Exception Handling Memory Leak: Fixed a critical memory leak in task exception handling that was particularly severe on Python 3.11+ due to enhanced traceback data. The fix properly breaks reference cycles in tracebacks to allow garbage collection.

Contributed by @​jaiganeshs21 in celery/celery#9799.

Pending Result Memory Leak: Fixed a memory leak where AsyncResult subscriptions were not being cleaned up when results were forgotten.

Contributed by @​tsoos99dev in celery/celery#9806.

ETA Task Memory Limit

New configuration option worker_eta_task_limit to prevent out-of-memory crashes when workers fetch large numbers of ETA or countdown tasks. Previously, workers could exhaust available memory when the broker contained many scheduled tasks.

Example usage:

app.conf.worker_eta_task_limit = 1000

Contributed by @​sashu2310 in celery/celery#9853.

Queue Type Selection for Auto-created Queues

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.0

:release-date: 2025-11-30 :release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights


See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below.

Python 3.9 Minimum Version


Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python
version is now 3.9. Users still on Python 3.8 must upgrade their Python version
before upgrading to Celery 5.6.0.


Additionally, this release includes initial support for Python 3.14.


SQS: Reverted to pycurl from urllib3


The switch from pycurl to urllib3 for the SQS transport (introduced in
Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS
users:


    

  • Processing throughput dropped from ~100 tasks/sec to ~3/sec in some environments
    • 

  • UnknownOperationException errors causing container crash loops
    • 

  • Silent message processing failures with no error logs
    • 



Users of the SQS transport must ensure pycurl is installed. If you removed
pycurl after upgrading to Celery 5.5.0, you will need to reinstall it.


Contributed by @auvipy <https://github.com/auvipy>_ in
[#9620](https://github.com/celery/celery/issues/9620) <https://github.com/celery/celery/pull/9620>_.


Security Fix: Broker Credential Leak Prevention


Fixed a security issue where broker URLs containing passwords were being logged
in plaintext by the delayed delivery mechanism. Broker credentials are now
properly sanitized in all log output.


Contributed by @giancarloromeo <https://github.com/giancarloromeo>_ in
[#9997](https://github.com/celery/celery/issues/9997) <https://github.com/celery/celery/pull/9997>_.


Memory Leak Fixes
</tr></table>

... (truncated)

Commits

Updates sqlalchemy from 2.0.44 to 2.0.45

Release notes

Sourced from sqlalchemy's releases.

2.0.45

Released: December 9, 2025

orm

  • [orm] [bug] Fixed issue where calling Mapper.add_property() within mapper event hooks such as MapperEvents.instrument_class(), MapperEvents.after_mapper_constructed(), or MapperEvents.before_mapper_configured() would raise an AttributeError because the mapper's internal property collections were not yet initialized. The Mapper.add_property() method now handles early-stage property additions correctly, allowing properties including column properties, deferred columns, and relationships to be added during mapper initialization events. Pull request courtesy G Allajmi.

    References: #12858

  • [orm] [bug] Fixed issue in Python 3.14 where dataclass transformation would fail when a mapped class using MappedAsDataclass included a relationship() referencing a class that was not available at runtime (e.g., within a TYPE_CHECKING block). This occurred when using Python 3.14's PEP 649 deferred annotations feature, which is the default behavior without a from __future__ import annotations directive.

    References: #12952

examples

  • [examples] [bug] Fixed the "short_selects" performance example where the cache was being used in all the examples, making it impossible to compare performance with and without the cache. Less important comparisons like "lambdas" and "baked queries" have been removed.

sql

  • [sql] [bug] Some improvements to the _sql.ClauseElement.params() method to replace bound parameters in a query were made, however the ultimate issue in #12915 involving ORM _orm.aliased() cannot be fixed fully until 2.1, where the method is being rewritten to work without relying on Core cloned traversal.

    References: #12915

  • [sql] [bug] Fixed issue where using the ColumnOperators.in_() operator with a nested CompoundSelect statement (e.g. an INTERSECT of UNION queries) would raise a NotImplementedError when the

... (truncated)

Commits

Updates typer from 0.20.0 to 0.20.1

Release notes

Sourced from typer's releases.

0.20.1

Features

  • ✨ Add support for standard tracebacks via the env TYPER_STANDARD_TRACEBACK. PR #1299 by @​colin-nolan.

Fixes

  • 🐛 Ensure that options_metavar is passed through correctly. PR #816 by @​gar1t.
  • 🐛 Ensure an optional argument is shown in brackets, even when metavar is set. PR #1409 by @​svlandeg.
  • 🐛 Ensure that the default rich_markup_mode is interpreted correctly. PR #1304 by @​svlandeg.

Refactors

Docs

  • 📝 Ensure that bold letters are rendered correctly in printing.md. PR #1365 by @​svlandeg.
  • 🩺 Update test badge to only reflect pushes to master. PR #1414 by @​svlandeg.
  • 📝 Update console output on the Rich help formatting page. PR #1430 by @​svlandeg.
  • 📝 Update emoji used in Rich help formatting tutorial. PR #1429 by @​svlandeg.
  • 📝 Remove duplicate explanation how the path is resolved. PR #956 by @​dennis-rall.
  • 📝 Update docs to use Typer() more prominently. PR #1418 by @​svlandeg.
  • 💄 Use font 'Fira Code' to fix display of Rich panels in docs in Windows. PR #1419 by @​tiangolo.

Internal

... (truncated)

Changelog

Sourced from typer's changelog.

0.20.1

Features

  • ✨ Add support for standard tracebacks via the env TYPER_STANDARD_TRACEBACK. PR #1299 by @​colin-nolan.

Fixes

  • 🐛 Ensure that options_metavar is passed through correctly. PR #816 by @​gar1t.
  • 🐛 Ensure an optional argument is shown in brackets, even when metavar is set. PR #1409 by @​svlandeg.
  • 🐛 Ensure that the default rich_markup_mode is interpreted correctly. PR #1304 by @​svlandeg.

Refactors

Docs

  • 📝 Ensure that bold letters are rendered correctly in printing.md. PR #1365 by @​svlandeg.
  • 🩺 Update test badge to only reflect pushes to master. PR #1414 by @​svlandeg.
  • 📝 Update console output on the Rich help formatting page. PR #1430 by @​svlandeg.
  • 📝 Update emoji used in Rich help formatting tutorial. PR #1429 by @​svlandeg.
  • 📝 Remove duplicate explanation how the path is resolved. PR #956 by @​dennis-rall.
  • 📝 Update docs to use Typer() more prominently. PR #1418 by @​svlandeg.
  • 💄 Use font 'Fira Code' to fix display of Rich panels in docs in Windows. PR #1419 by @​tiangolo.

Internal

... (truncated)

Commits
  • e777d1d 🔖 Release version 0.20.1
  • 0cbd43f 📝 Update release notes
  • 10f23a4 🐛 Ensure that options_metavar is passed through correctly (#816)
  • f61933c 📝 Update release notes
  • 2cfdb99 🐛 Ensure an optional argument is shown in brackets, even when metavar is se...
  • bc43a7a 📝 Update release notes
  • fd4241f ♻️ Refactor the handling of shellingham (#1347)
  • b400735 📝 Update release notes
  • f0a432a 📝 Ensure that bold letters are rendered correctly in printing.md (#1365)
  • f654f9d 📝 Update release notes
  • Additional commits viewable in compare view

Updates pydantic from 2.12.3 to 2.12.5

Release notes

Sourced from pydantic's releases.

v2.12.5 2025-11-26

v2.12.5 (2025-11-26)

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

  • Fix pickle error when using model_construct() on a model with MISSING as a default value by @​ornariece in #12522.
  • Several updates to the documentation by @​Viicos.

Full Changelog: pydantic/pydantic@v2.12.4...v2.12.5

v2.12.4 2025-11-05

v2.12.4 (2025-11-05)

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Full Changelog: pydantic/pydantic@v2.12.3...v2.12.4

Changelog

Sourced from pydantic's changelog.

v2.12.5 (2025-11-26)

GitHub release

This is the fifth 2.12 patch release, addressing an issue with the MISSING sentinel and providing several documentation improvements.

The next 2.13 minor release will be published in a couple weeks, and will include a new polymorphic serialization feature addressing the remaining unexpected changes to the serialize as any behavior.

  • Fix pickle error when using model_construct() on a model with MISSING as a default value by @​ornariece in #12522.
  • Several updates to the documentation by @​Viicos.

v2.12.4 (2025-11-05)

GitHub release

This is the fourth 2.12 patch release, fixing more regressions, and reverting a change in the build() method of the AnyUrl and Dsn types.

This patch release also fixes an issue with the serialization of IP address types, when serialize_as_any is used. The next patch release will try to address the remaining issues with serialize as any behavior by introducing a new polymorphic serialization feature, that should be used in most cases in place of serialize as any.

Commits
  • bd2d0dd Prepare release v2.12.5
  • 7d0302e Document security implications when using create_model()
  • e9ef980 Fix typo in Standard Library Types documentation
  • f2c20c0 Add pydantic-docs dev dependency, make use of versioning blocks
  • a76c1aa Update documentation about JSON Schema
  • 8cbc72c Add documentation about custom __init__()
  • 99eba59 Add additional test for FieldInfo.get_default()
  • c710769 Special case MISSING sentinel in smart_deepcopy()
  • 20a9d77 Do not delete mock validator/serializer in rebuild_dataclass()
  • c86515a Update parts of the model and revalidate_instances documentation
  • Additional commits viewable in compare view

Updates pydantic-settings from 2.11.0 to 2.12.0

Release notes

Sourced from pydantic-settings's releases.

v2.12.0

What's Changed

New Contributors

Full Changelog: pydantic/pydantic-settings@v2.11.0...v2.12.0

Commits

Updates pikepdf from 9.11.0 to 10.0.3

Commits
  • e244075 Prevent use of latest python-xmp-toolkit (breaking change of base library lib...
  • 76894f0 Shut up broken cifuzz.yml
  • 590513c Bump version: v10.0.3
  • a93cbfa v10.0.3 release notes
  • e9e2046 Fix some typingissues in pyright
  • 4e606a5 Merge branch 'main' of github.com:pikepdf/pikepdf
  • 3bf2c34 Merge pull request #693 from Anri-Lombard/fix-orphaned-objects-issue-691
  • 120d7a9 Leave a comment to explain why temp pdf is used
  • 8603440 Update project files
  • e0c77be Fix orphaned objects created by PdfImage.as_pil_image()
  • Additional commits viewable in compare view

Updates black from 25.9.0 to 25.12.0

Release notes

Sourced from black's releases.

25.12.0

Please test out the draft 2026 style in version 26.1a1! This style will be finalized in the January release (26.1.0). Most of the changes in --preview will be in the 2026 stable style, but not all. Please share your feedback!

This release (25.12.0) will still produce the 2025 style.

Highlights

  • Black no longer supports running with Python 3.9 (#4842)

Stable style

  • Fix bug where comments preceding # fmt: off/# fmt: on blocks were incorrectly removed, particularly affecting Jupytext's # %% [markdown] comments (#4845)
  • Fix crash when multiple # fmt: skip comments are used in a multi-part if-clause, on string literals, or on dictionary entries with long lines (#4872)
  • Fix possible crash when fmt: directives aren't on the top level (#4856)

Preview style

  • Fix fmt: skip skipping the line after instead of the line it's on (#4855)
  • Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)
  • Fix fix_fmt_skip_in_one_liners crashing on with statements (#4853)
  • Fix fix_fmt_skip_in_one_liners crashing on annotated parameters (#4854)
  • Fix new lines being added after imports with # fmt: skip on them (#4894)

Packaging

  • Releases now include arm64 Windows binaries and wheels (#4814)

Integrations

  • Add output-file input to GitHub Action psf/black to write formatter output to a file for artifact capture and log cleanliness (#4824)

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

... (truncated)

Changelog

Sourced from black's changelog.

25.12.0

Highlights

  • Black no longer supports running with Python 3.9 (#4842)

Stable style

  • Fix bug where comments preceding # fmt: off/# fmt: on blocks were incorrectly removed, particularly affecting Jupytext's # %% [markdown] comments (#4845)
  • Fix crash when multiple # fmt: skip comments are used in a multi-part if-clause, on string literals, or on dictionary entries with long lines (#4872)
  • Fix possible crash when fmt: directives aren't on the top level (#4856)

Preview style

  • Fix fmt: skip skipping the line after instead of the line it's on (#4855)
  • Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)
  • Fix fix_fmt_skip_in_one_liners crashing on with statements (#4853)
  • Fix fix_fmt_skip_in_one_liners crashing on annotated parameters (#4854)
  • Fix new lines being added after imports with # fmt: skip on them (#4894)

Packaging

  • Releases now include arm64 Windows binaries and wheels (#4814)

Integrations

  • Add output-file input to GitHub Action psf/black to write formatter output to a file for artifact capture and log cleanliness (#4824)

25.11.0

Highlights

  • Enable base 3.14 support (#4804)
  • Add support for the new Python 3.14 t-string syntax introduced by PEP 750 (#4805)

Stable style

  • Fix bug where comments between # fmt: off and # fmt: on were reformatted (#4811)
  • Comments containing fmt directives now preserve their exact formatting instead of being normalized (#4811)

Preview style

  • Move multiline_string_handling from --unstable to --preview (#4760)
  • Fix bug where module docstrings would be treated as normal strings if preceded by comments (#4764)

... (truncated)

Commits
  • 782e560 Pin actions/checkout@v5.0.0 (#4895)
  • f0f4094 Fix new lines being added after imports with # fmt: skip on them (#4894)
  • 70fc194 Revert "Fix # fmt: skip ignored in deeply nested expressions" (#4893)
  • 7044b14 Prepare 25.12.0 release (#4891)
  • 5b470f0 Fix # fmt: skip ignored in deeply nested expressions (#4883)
  • 1b342ef Fix crash when multiple # fmt: skip comments are used in multi-part if-clau...
  • 7b265f1 Pin Hatch to hopefully fix Docker builds (#4878)
  • c9523f4 Attempt to fix Docker build failures (#4876)
  • 0f376e0 Fix crashes when fmt directives are indented (#4856)
  • a8bfcc1 Fix fmt: skip skipping the line after instead of the line it's on (#4855)
  • Additional commits viewable in compare view

Updates pre-commit from 4.3.0 to 4.5.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.1

Fixes

  • Fix language: python with repo: local without additional_dependencies.

pre-commit v4.5.0

Features

pre-commit v4.4.0

Features

Fixes

Changelog

Sourced from pre-commit's changelog.

4.5.1 - 2025-12-16

Fixes

  • Fix language: python with repo: local without additional_dependencies.

4.5.0 - 2025-11-22

Features

4.4.0 - 2025-11-08

Features

Fixes

Commits
  • 8a0630c v4.5.1
  • fcbc745 Merge pull request #3597 from pre-commit/empty-setup-py
  • 51592ee fix python local template when artifact dirs are present
  • 67e8faf Merge pull request #3596 from pre-commit/pre-commit-ci-update-config

@dependabot
Bump the python-dependencies group across 1 directory with 9 updates
8917bce 
Bumps the python-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [celery](https://github.com/celery/celery) | `5.5.3` | `5.6.0` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.44` | `2.0.45` |
| [typer](https://github.com/fastapi/typer) | `0.20.0` | `0.20.1` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.3` | `2.12.5` |
| [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.11.0` | `2.12.0` |
| [pikepdf](https://github.com/pikepdf/pikepdf) | `9.11.0` | `10.0.3` |
| [black](https://github.com/psf/black) | `25.9.0` | `25.12.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.3.0` | `4.5.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.4.2` | `9.0.2` |



Updates `celery` from 5.5.3 to 5.6.0
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst)
- [Commits](celery/celery@v5.5.3...v5.6.0)

Updates `sqlalchemy` from 2.0.44 to 2.0.45
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `typer` from 0.20.0 to 0.20.1
- [Release notes](https://github.com/fastapi/typer/releases)
- [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md)
- [Commits](fastapi/typer@0.20.0...0.20.1)

Updates `pydantic` from 2.12.3 to 2.12.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.3...v2.12.5)

Updates `pydantic-settings` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/pydantic/pydantic-settings/releases)
- [Commits](pydantic/pydantic-settings@v2.11.0...v2.12.0)

Updates `pikepdf` from 9.11.0 to 10.0.3
- [Release notes](https://github.com/pikepdf/pikepdf/releases)
- [Commits](pikepdf/pikepdf@v9.11.0...v10.0.3)

Updates `black` from 25.9.0 to 25.12.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@25.9.0...25.12.0)

Updates `pre-commit` from 4.3.0 to 4.5.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.3.0...v4.5.1)

Updates `pytest` from 8.4.2 to 9.0.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.2...9.0.2)

---
updated-dependencies:
- dependency-name: celery
  dependency-version: 5.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: sqlalchemy
  dependency-version: 2.0.45
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: typer
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pydantic
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: pydantic-settings
  dependency-version: 2.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pikepdf
  dependency-version: 10.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-dependencies
- dependency-name: black
  dependency-version: 25.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pre-commit
  dependency-version: 4.5.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.0.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Dec 22, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants