chore(deps): bump the python-all group across 2 directories with 12 updates by dependabot[bot] · Pull Request #546 · deliveryhero/asya

dependabot · 2026-09-14T02:11:37Z

Updates the requirements on types-requests, pytest, boto3, coverage, pika, psycopg2-binary, pytest-order, redis, google-cloud-pubsub, google-cloud-storage, cryptography and prometheus-client to permit the latest version.
Updates types-requests to 2.33.0.20260906

Commits

See full diff in compare view

Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates boto3 to 1.43.92

Commits

4477cdc Merge branch 'release-1.43.92'
5d8a8ab Bumping version to 1.43.92
959442c Add changelog entries from botocore
5073bde Merge branch 'release-1.43.91'
19fa272 Merge branch 'release-1.43.91' into develop
036a8a0 Bumping version to 1.43.91
c01821b Add changelog entries from botocore
1833427 Bump https://github.com/astral-sh/ruff-pre-commit (#4840)
fb57e55 Merge branch 'release-1.43.90'
c1f45dc Merge branch 'release-1.43.90' into develop
Additional commits viewable in compare view

Updates coverage to 7.16.0

Release notes

Sourced from coverage's releases.

7.16.0

Version 7.16.0 — 2026-08-28

When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266.

The Coverage.switch_context() method now returns the previous context.

Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268.

Fixes to validation of options and configuration settings:

Negative precision settings now always cause useful error messages (pull 2261).

An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing “Couldn’t use data file …: user-defined function raised exception” error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262).

Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren’t strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263).

coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can’t reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with “Can’t combine statement coverage data with branch data”. Each named concurrency library is now properly considered (pull 2270).

Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265).

➡️ PyPI page: coverage 7.16.0. :arrow_right: To install: python3 -m pip install coverage==7.16.0

Changelog

Sourced from coverage's changelog.

Version 7.16.0 — 2026-08-28

When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266_.

The :meth:.Coverage.switch_context method now returns the previous context.

Fix: previously, a [paths] pattern would be replaced everywhere in a file path when it was only meant to be replaced once, in the leading portion of the path. This is now fixed, in pull 2268_.

Fixes to validation of options and configuration settings:

Negative precision settings now always cause useful error messages (pull 2261_).

An invalid regex in the --contexts option (or the [report] contexts setting) reported a confusing "Couldn't use data file ...: user-defined function raised exception" error. Now it raises a proper configuration error naming the bad regex, like other regex settings do (pull 2262_).

Non-string values in TOML configuration settings now produce a helpful error message instead of a traceback. This affects list settings whose elements aren't strings (like omit, exclude_lines, or a [paths] entry), file settings like data_file, and any wrong-typed value in the [paths] section (pull 2263_).

coverage run refuses run-affecting command-line options like --branch alongside --concurrency=multiprocessing, since they can't reach the subprocesses. The check only recognized multiprocessing as the entire option value, so --concurrency=multiprocessing,thread slipped through and failed later with "Can't combine statement coverage data with branch data". Each named concurrency library is now properly considered (pull 2270_).

Fix: coverage annotate -d DIR raised an AssertionError if any measured file had an extension other than .py, such as a .pyw file on Windows. The original extension is now restored on the annotated copy (pull 2265_).

.. _pull 2261: coveragepy/coveragepy#2261 .. _pull 2262: coveragepy/coveragepy#2262 .. _pull 2263: coveragepy/coveragepy#2263 .. _pull 2265: coveragepy/coveragepy#2265 .. _issue 2266: coveragepy/coveragepy#2266 .. _pull 2268: coveragepy/coveragepy#2268

... (truncated)

Commits

3e9fc16 docs: prep for 7.16.0
38be8d1 build: control check-manifest explicitly
8eb1266 docs(build): no longer commit sample_html
1a8b3fa docs: remove sample_html
aeaa79b docs: linklint is now sphinx-linklint
d5eaf3f test: a branchless way to re-add extensions
57e52fd docs: adjust CHANGES for #2270
b9d304d fix: check for multiprocessing in a --concurrency list (#2270)
a6ef928 chore: make upgrade
070461f chore: bump the action-dependencies group with 4 updates (#2271)
Additional commits viewable in compare view

Updates pika to 1.4.4

Release notes

Sourced from pika's releases.

1.4.4

https://pypi.org/project/pika/1.4.4/ | GitHub milestone

Changelog

Sourced from pika's changelog.

1.4.4 (2026-08-06)

Full Changelog

Merged pull requests:

Revert "Fix callLater typing by passing keyword arguments" #1678 (jeremycline)

1.4.2 (2026-07-23)

Full Changelog

Closed issues:

Importing pika.adapters can break asyncio subprocesses on Windows #1639

Merged pull requests:

Stop mutating global asyncio event loop policy on import #1642 (lukebakken)

1.4.1 (2026-05-22)

Merged pull requests:

Fix Channel.close() for channels with multiple consumers #1596 (gbenson)

1.4.0 (2026-05-06)

Full Changelog

Implemented enhancements:

Enforce yapf/google formatting in CI #1558

Add Hatch dev environment and scripts #1579 (lukebakken)

Drop more Python 2 compatibility code #1561 (lukebakken)

Closed issues:

Add Hatch scripts to standardize developer commands #1578

Fix outdated and broken documentation across the project #1568

Update Codecov default branch and badge #1563

GitHub actions workflows and test code need updates for RabbitMQ 4.3 #1547

datetime.datetime.utcfromtimestamp() is deprecated #1539

URLParameters这个类有bug #1533

Custom transport #1532

x-delay value is being returned in the header as a UINT64 and not a SINT16 #1531

Pika should advertise the exchange_exchange_bindings client capability #1530

Missing type annotations #1523

There is no info about return type of queue_declare() method of pika.channel #1522

Getting the user who sent the message #1510

... (truncated)

Commits

60fee42 pika 1.4.4
c1a768e Revert callLater keyword arguments and type _reactor as Any
ff4eae1 pika 1.4.3
3c9b50d Merge pull request #1658 from pika/pika-1.4.2
c5da6ff pika 1.4.2
c538d43 Merge pull request #1642 from pika/fix/gh-1639-windows-event-loop-policy-1.4.x
79efa49 Fix callLater typing by passing keyword arguments
7cb3661 Drain extra loop turn to await Tornado selector bootstrap
b3b8819 Replace deprecated event loop policy in tests with helper
c1c9651 Raise clear error when Windows loop lacks selector support
Additional commits viewable in compare view

Updates psycopg2-binary to 2.9.13

Changelog

Sourced from psycopg2-binary's changelog.

Current release

What's new in psycopg 2.9.13 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.15 (:ticket:[#1848](https://github.com/psycopg/psycopg2/issues/1848)).

Fix parsing of malformed bytea input.

Fix parsing of malformed int64 input in arrays (:ticket:[#1847](https://github.com/psycopg/psycopg2/issues/1847)).

Add a pyproject.toml file to declare a PEP 517 build backend (:ticket:[#1788](https://github.com/psycopg/psycopg2/issues/1788)).

Drop support for Python 3.9.

What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Fix infinite loop with malformed interval (:ticket:1835).

What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.14.

Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:[#1791](https://github.com/psycopg/psycopg2/issues/1791)).

Add riscv64 platform binary packages (:ticket:[#1813](https://github.com/psycopg/psycopg2/issues/1813)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 18.

Drop support for Python 3.8.

What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.13.

Receive notifications on commit (:ticket:[#1728](https://github.com/psycopg/psycopg2/issues/1728)).

~psycopg2.errorcodes map and ~psycopg2.errors classes updated to PostgreSQL 17.

Drop support for Python 3.7.

What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^

Add support for Python 3.12.

Drop support for Python 3.6.

What's new in psycopg 2.9.8

... (truncated)

Commits

f650e7a chore: bump to release 2.9.13
368c8a1 chore!: drop support for Python 3.9
9b39e65 chore: drop scaleway build support
2ca7041 fix: fix handling of PostgreSQL 18 exceptions
5385c02 Build CPython 3.15 wheels
1d32e1f ci: only attempt triggering documentation refresh when pushing on main repo
433e7b7 chore: add pyproject.toml file to declare a PEP 517 build backend
8fb80bc fix: fix parsing of malformed int64 input in arrays
f98014a fix: fix parsing of malformed bytea input
822b79c chore: bump dependencies in binary package
Additional commits viewable in compare view

Updates pytest-order to 1.5.0

Release notes

Sourced from pytest-order's releases.

pytest-order 1.5.0

Adds option --fail-all-on-failed-ordering to abort tests after a failed ordering (see Release Notes).

Changelog

Sourced from pytest-order's changelog.

Version 1.5.0 (2026-06-13)

Adds option to abort tests after a failed ordering.

New features

added option --fail-all-on-failed-ordering to abort the whole test run without executing any tests if some tests could not be ordered

Fixes

transitive relative chains are resolved as a single globally consistent order

Version 1.4.0 (2026-04-26)

Allows the plugin to run after --failed-first and similar options.

Changes

removed official support for Python 3.7-3.9 (EOL), added Python 3.13 and 3.14

New features

added option --order-after-ff, that allows to run pytest-order after built-in hooks like the --failed-first option (see #234)

Infrastructure

use trusted publisher for release (see https://docs.pypi.org/trusted-publishers/)

use pyproject.toml for project setup

Documentation

use a theme for documentation supporting dark mode

added use case for ordering test modules (see #51)

fixed documentation for --indulgent-ordering option

Version 1.3.0 (2024-08-22)

Allows to fail tests that cannot be ordered.

New features

added option --error-on-failed-ordering to make tests that cannot be ordered fail (see #140)

Infrastructure

added missing documentation examples, structured examples according to documentation structure

Version 1.2.1 (2024-04-02)

Bugfix release.

Fixes

handle dependency markers with the same alias name (see #71)

specify rootdir to recursive pytest calls to avoid searching a large directory tree unnecessarily (see #110)

Infrastructure

avoid unknown marker warning in tests (see #101)

added pytest 8 to CI tests

... (truncated)

Commits

725547f Release 1.5.0
43e0769 Implement --fail-all-on-failed-ordering (#246)
c411fc8 Fix relative ordering in complex transitive cases (#242)
5a67269 Bump codecov/codecov-action from 6 to 7
ce06e5d [pre-commit.ci] pre-commit autoupdate
1448804 [pre-commit.ci] pre-commit autoupdate
e8c9af0 [pre-commit.ci] pre-commit autoupdate
4b028bc [pre-commit.ci] pre-commit autoupdate
5d57cd7 [pre-commit.ci] pre-commit autoupdate
3ec2e30 [pre-commit.ci] pre-commit autoupdate
Additional commits viewable in compare view

Updates redis to 8.1.0

Release notes

Sourced from redis's releases.

8.1.0

Changes

✨ Highlights

Async maintenance notifications

redis-py now supports server-pushed maintenance notifications in the asyncio stack for both standalone and cluster clients, bringing the async client to parity with the sync implementation. When a Redis deployment signals maintenance events (such as node migration or failover windows), the async client reacts through the maintenance-notifications handler (redis/maint_notifications.py and its async integration under redis/asyncio/), allowing applications to adapt connection handling during maintenance without downtime. (#4177)

Expanded command coverage

This release adds a batch of new command surfaces across core data types and modules:

Lists — LMOVEM / BLMOVEM for moving multiple elements between lists (#4174).

Sets — SDIFFCARD and SUNIONCARD cardinality commands (#4171).

Streams — MAXCOUNT / MAXSIZE options for XREAD and XREADGROUP (#4173).

Time Series — TS.READ (#4170), TS.QUERYLABELS (#4197), TS.NRANGE / TS.NREVRANGE (#4163), and an exclude_empty (EXCLUDEEMPTY) option for TS.MRANGE / TS.MREVRANGE (#4188).

Search — FT.ALIASLIST (#4198) and a COLLECT reducer for aggregations (#4179).

Sentinel — replica sentinel aliases (#4127).

🚀 New Features

Add replica sentinel aliases (#4127)

Add TS.NRANGE and TS.NREVRANGE support to the timeseries command surface (#4163)

feat: add TS.READ command support to the timeseries module (#4170)

feat: add SDIFFCARD and SUNIONCARD command support (#4171)

feat: add MAXCOUNT/MAXSIZE support to XREAD and XREADGROUP (#4173)

feat: add LMOVEM and BLMOVEM commands for moving multiple list elements (#4174)

feat: add async maintenance-notifications support for standalone and cluster clients (#4177)

feat: add COLLECT reducer support to search aggregations (#4179)

feat: add exclude_empty (EXCLUDEEMPTY) option to TS.MRANGE and TS.MREVRANGE (#4188)

feat: add TS.QUERYLABELS support to the timeseries command surface (#4197)

feat: add FT.ALIASLIST support (#4198)

⚠️ Experimental

feat: add client-side HIMPORT fieldset support for standalone and cluster clients (#4205)

The feature considered unstable and public API might be changed in the future minor version

🐛 Bug Fixes

fix: detect closed pooled connection without consuming pending push data (RESP3 + hiredis) (#4156)

Fix Sentinel pool capacity loss after failover (#4193)

... (truncated)

Commits

e013126 Testing with 8.10 GA (#4227)
059d1e9 Fixed TS.NRANGE commands to correctly apply aggregators (#4225)
d486a0a Fix FIELDNAME alias dropping first character of un-prefixed fields (#4224)
fb93104 feat: add client-side HIMPORT fieldset support for standalone and cluster cli...
9197609 Fix lat/lon swap in search querystring geo() helper (#4223)
14714a0 fix: Fixed double decoding issue with unquote() (#4222)
227280a Update lib version to 8.1.0
88d16d0 Decode ACL LOG string values on the default RESP3 legacy callback (#4201)
599fd75 feat: add FT.ALIASLIST support (#4198)
71e275e test: add VectorField RERANK serialization tests for sync and async search (#...
Additional commits viewable in compare view

Updates google-cloud-pubsub to 2.40.0

Release notes

Sourced from google-cloud-pubsub's releases.

google-cloud-pubsub: v2.40.0

2.40.0 (2026-09-03)

Features

update googleapis and regenerate (#18229) (d4f8a57)

Changelog

Sourced from google-cloud-pubsub's changelog.

Changelog

PyPI History

3.15.0 (2026-06-02)

Features

regenerate google-cloud-d packages (#17092) (d49a2b9412b4ee9105125db36104a3e18344e0ad)

3.14.0 (2026-04-02)

Features

Update comments for proto fields (c36aa6169035fdb14bf84b0e56e4f81291600b5a)

Added a fields for image and table annotation output (c36aa6169035fdb14bf84b0e56e4f81291600b5a)

3.13.0 (2026-03-26)

Features

Allow Protobuf 7.x (1eb7c268482e55971966e284dac2cbeb903adcbb)

Bug Fixes

Require Python 3.9 (1eb7c268482e55971966e284dac2cbeb903adcbb)

Require google-api-core >= 2.11.0 (1eb7c268482e55971966e284dac2cbeb903adcbb)

Improve type checking (1eb7c268482e55971966e284dac2cbeb903adcbb)

3.12.0 (2026-03-23)

Features

Add a field for upgrading previous processor version when fine tuning (ee7dd7dc168ecf943440cef38efff348e8eff095)

3.11.0 (2026-03-05)

Features

Added a field for enabling image and table annotation for layout parser processor (6120fb0db084f5e8d1502fb1bb37594ac9976f6e)

3.10.0 (2026-02-12)

... (truncated)

Commits

ad2ef26 chore: release main (#18221)
182ff9f feat: add send and ack mutations Cloud Spanner Queues (#17728)
2d8093e chore(spanner): use nam6 instance config for test_create_instance_partition (...
7126a54 feat(bigtable): Rerouted DirectRow.commit to use mutate_row (#18191)
227fecc chore(main): release google-cloud-sql 0.1.1 (#18269)
813a5c1 feat: update API sources and regenerate (#18267)
21cc934 feat(sql): configure sqladmin namespace and regenerate (#18268)
85ddfe5 feat: add user-agent delegation telemetry for pandas-gbq (#18184)
990f86e feat(bigtable): Rerouted CheckAndMutateRows and ReadModifyWriteRows to data c...
5ecfe0a chore(main): release google-cloud-sql 0.1.0 (#18265)
Additional commits viewable in compare view

Updates google-cloud-storage to 3.14.1

Release notes

Sourced from google-cloud-storage's releases.

google-cloud-storage: v3.14.1

3.14.1 (2026-09-08)

Bug Fixes

storage: resolve reST link target mismatch in README and add long_description_content_type (#18210) (400f465), refs #18211

Changelog

Sourced from google-cloud-storage's changelog.

Changelog

PyPI History

3.15.0 (2026-06-02)

Features

regenerate google-cloud-d packages (#17092) (d49a2b9412b4ee9105125db36104a3e18344e0ad)

3.14.0 (2026-04-02)

Features

Update comments for proto fields (c36aa6169035fdb14bf84b0e56e4f81291600b5a)

Added a fields for image and table annotation output (c36aa6169035fdb14bf84b0e56e4f81291600b5a)

3.13.0 (2026-03-26)

Features

Allow Protobuf 7.x (1eb7c268482e55971966e284dac2cbeb903adcbb)

Bug Fixes

Require Python 3.9 (1eb7c268482e55971966e284dac2cbeb903adcbb)

Require google-api-core >= 2.11.0 (1eb7c268482e55971966e284dac2cbeb903adcbb)

Improve type checking (1eb7c268482e55971966e284dac2cbeb903adcbb)

3.12.0 (2026-03-23)

Features

Add a field for upgrading previous processor version when fine tuning (ee7dd7dc168ecf943440cef38efff348e8eff095)

3.11.0 (2026-03-05)

Features

Added a field for enabling image and table annotation for layout parser processor (6120fb0db084f5e8d1502fb1bb37594ac9976f6e)

3.10.0 (2026-02-12)

... (truncated)

Commits

3ca407b chore(main): release google-cloud-storage 3.14.1 (#18304)
3bbcbdf feat(bigtable): Rerouted MutateRows to use the data client (#18195)
400f465 fix(storage): resolve reST link target mismatch in README and add long_descri...
c5cc60a chore(spanner): bump google-cloud-spanner to 3.71.0 in samples (#18284)
036f734 chore: release main (#18276)
a700117 chore(main): release google-shopping-merchant-loyaltycustomers 0.1.1 (#18283)
ffa6e54 fix: correct client version strings (#18282)
b3d76b9 chore(main): release google-shopping-merchant-loyaltycustomers 0.1.0 (#18278)
492a0e3 feat(google/shopping/merchant/loyaltycustomers/v1): add google-shopping-merch...
b18bb4c fix(auth): parse hostname for mTLS and PSC endpoint certificate rotation (#18...
Additional commits viewable in compare view

Updates cryptography to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.
.. _v50-0-0:
50.0.0 - 2026-07-31
SECURITY ISSUE: :func:~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der and its PEM and S/MIME variants no longer expose distinguishable errors or timing when unwrapping a RecipientInfo's encryptedKey, which could act as a Bleichenbacher oracle for callers that decrypt untrusted messages. A random key is now substituted on failure, as described in :rfc:3218. Credit to @X1AOxiang for reporting the issue. CVE-2026-69247

Deprecated Diffie-Hellman key exchange over finite fields (FFDH). Everything FFDH is deprecated, including the types in cryptography.hazmat.primitives.asymmetric.dh and loading FFDH keys or parameters with the key loading APIs. Users should migrate to a more modern key exchange algorithm.

Added xof() class methods to :class:~cryptography.hazmat.primitives.hashes.SHAKE128 and :class:~cryptography.hazmat.primitives.hashes.SHAKE256 for constructing algorithm instances configured for use with :class:~cryptography.hazmat.primitives.hashes.XOFHash.

The :mod:X.509 verification <cryptography.x509.verification> APIs are now considered stable and are subject to our API stability policy.

Added the :doc:/cobblestone recipe, an implementation of the Cobblestone-128 and Cobblestone-256 instantiations of the C2SP chunked-encryption specification <https://c2sp.org/chunked-encryption>_ for streaming authenticated encryption of large messages.

Parsing a Signed Certificate Timestamp list now rejects encodings that carry trailing bytes after the list or after an individual SCT, instead of silently ignoring them.

Added support for using :class:~cryptography.x509.Name as a field type in the :doc:/hazmat/asn1/index module.

Loading a public key or an EC private key now rejects DER where the subjectPublicKey (or EC publicKey) BIT STRING declares a non-zero number of unused bits, instead of silently ignoring it.

Parsing a CRL entry's InvalidityDate extension now rejects a GeneralizedTime that carries fractional seconds or another non-DER form, matching the strict encoding already required for every other X.509 time field.

:func:~cryptography.x509.ocsp.load_der_ocsp_request and :func:~cryptography.x509.ocsp.load_der_ocsp_response now reject a request or response whose version field is not v1, the only version defined by RFC 6960, matching the version validation already performed when loading

... (truncated)

Commits

ffde75a bump for 50.0.1 + changelog (#15520)
dcb7050 Prepare for 50.0.0 release (#15372)
53fccd9 Don't leak how PKCS#7 encryptedKey decryption failed (#15369)
d472f97 Add from __future__ import annotations to all src/ Python files (#15371)
908773d Bump downstream dependencies in CI (#15368)
2cc07cc Bump BoringSSL, OpenSSL, AWS-LC in CI (#15367)
c94ede9 chore(deps): bump ruff from 0.16.0 to 0.16.1 (#15366)
67a8308 chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (#15365)
95018ff Release the GIL in one-shot AEAD encrypt/decrypt (#15361)
6954733 Release the GIL during DH and DSA parameter generation (#15364)
Additional commits viewable in compare view

Updates prometheus-client to 0.26.0

Release notes

Sourced from

…pdates Updates the requirements on [types-requests](https://github.com/python/typeshed), [pytest](https://github.com/pytest-dev/pytest), [boto3](https://github.com/boto/boto3), [coverage](https://github.com/coveragepy/coveragepy), [pika](https://github.com/pika/pika), [psycopg2-binary](https://github.com/psycopg/psycopg2), [pytest-order](https://github.com/pytest-dev/pytest-order), [redis](https://github.com/redis/redis-py), [google-cloud-pubsub](https://github.com/googleapis/google-cloud-python), [google-cloud-storage](https://github.com/googleapis/google-cloud-python), [cryptography](https://github.com/pyca/cryptography) and [prometheus-client](https://github.com/prometheus/client_python) to permit the latest version. Updates `types-requests` to 2.33.0.20260906 - [Commits](https://github.com/python/typeshed/commits) Updates `pytest` to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `pytest` to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@9.0.3...9.1.1) Updates `boto3` to 1.43.92 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.27...1.43.92) Updates `coverage` to 7.16.0 - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](coveragepy/coveragepy@7.14.1...7.16.0) Updates `pika` to 1.4.4 - [Release notes](https://github.com/pika/pika/releases) - [Changelog](https://github.com/pika/pika/blob/1.4.4/CHANGELOG.md) - [Commits](pika/pika@1.4.1...1.4.4) Updates `psycopg2-binary` to 2.9.13 - [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS) - [Commits](psycopg/psycopg2@2.9.12...2.9.13) Updates `pytest-order` to 1.5.0 - [Release notes](https://github.com/pytest-dev/pytest-order/releases) - [Changelog](https://github.com/pytest-dev/pytest-order/blob/main/CHANGELOG.md) - [Commits](pytest-dev/pytest-order@v1.4.0...v1.5.0) Updates `redis` to 8.1.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v8.0.0...v8.1.0) Updates `google-cloud-pubsub` to 2.40.0 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-cloud-pubsub-v2.39.0...google-cloud-pubsub-v2.40.0) Updates `google-cloud-storage` to 3.14.1 - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@google-cloud-storage-v3.11.0...google-cloud-storage-v3.14.1) Updates `cryptography` to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.1...50.0.1) Updates `prometheus-client` to 0.26.0 - [Release notes](https://github.com/prometheus/client_python/releases) - [Commits](prometheus/client_python@v0.25.0...v0.26.0) --- updated-dependencies: - dependency-name: types-requests dependency-version: 2.33.0.20260906 dependency-type: direct:production dependency-group: python-all - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production dependency-group: python-all - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production dependency-group: python-all - dependency-name: boto3 dependency-version: 1.43.92 dependency-type: direct:production dependency-group: python-all - dependency-name: coverage dependency-version: 7.16.0 dependency-type: direct:production dependency-group: python-all - dependency-name: pika dependency-version: 1.4.4 dependency-type: direct:production dependency-group: python-all - dependency-name: psycopg2-binary dependency-version: 2.9.13 dependency-type: direct:production dependency-group: python-all - dependency-name: pytest-order dependency-version: 1.5.0 dependency-type: direct:production dependency-group: python-all - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production dependency-group: python-all - dependency-name: google-cloud-pubsub dependency-version: 2.40.0 dependency-type: direct:production dependency-group: python-all - dependency-name: google-cloud-storage dependency-version: 3.14.1 dependency-type: direct:production dependency-group: python-all - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production dependency-group: python-all - dependency-name: prometheus-client dependency-version: 0.26.0 dependency-type: direct:production dependency-group: python-all ... Signed-off-by: dependabot[bot] <support@github.com>

codacy-production · 2026-09-14T02:13:28Z

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results

Complexity 0

View in Codacy

_{NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer}
_{TIP This summary will be updated as you push new changes.}

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 14, 2026

dependabot Bot requested a review from atemate as a code owner September 14, 2026 02:11

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 14, 2026

Navigation Menu

Repository navigation

chore(deps): bump the python-all group across 2 directories with 12 updates - #546

chore(deps): bump the python-all group across 2 directories with 12 updates#546
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/src/asya-crew/python-all-86dc29cea6

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

codacy-production Bot commented Sep 14, 2026

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

7.16.0

Version 7.16.0 — 2026-08-28

Version 7.16.0 — 2026-08-28

1.4.4

1.4.4 (2026-08-06)

1.4.2 (2026-07-23)

1.4.1 (2026-05-22)

1.4.0 (2026-05-06)

Current release

pytest-order 1.5.0

Version 1.5.0 (2026-06-13)

New features

Fixes

Version 1.4.0 (2026-04-26)

Changes

New features

Infrastructure

Documentation

Version 1.3.0 (2024-08-22)

New features

Infrastructure

Version 1.2.1 (2024-04-02)

Fixes

Infrastructure

8.1.0

Changes

✨ Highlights

Async maintenance notifications

Expanded command coverage

🚀 New Features

⚠️ Experimental

🐛 Bug Fixes

google-cloud-pubsub: v2.40.0

2.40.0 (2026-09-03)

Features

Changelog

3.15.0 (2026-06-02)

Features

3.14.0 (2026-04-02)

Features

3.13.0 (2026-03-26)

Features

Bug Fixes

3.12.0 (2026-03-23)

Features

3.11.0 (2026-03-05)

Features

3.10.0 (2026-02-12)

google-cloud-storage: v3.14.1

3.14.1 (2026-09-08)

Bug Fixes

Changelog

3.15.0 (2026-06-02)

Features

3.14.0 (2026-04-02)

Features

3.13.0 (2026-03-26)

Features

Bug Fixes

3.12.0 (2026-03-23)

Features

3.11.0 (2026-03-05)

Features

3.10.0 (2026-02-12)

Uh oh!

codacy-production Bot commented Sep 14, 2026

Up to standards ✅

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees