Skip to content

chore(deps): bump the python-dependencies group across 1 directory with 4 updates - #21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-ebfe9ef7c7
Open

chore(deps): bump the python-dependencies group across 1 directory with 4 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/python-dependencies-ebfe9ef7c7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 11, 2026

Copy link
Copy Markdown

Bumps the python-dependencies group with 4 updates in the / directory: django, celery, psycopg and ruff.

Updates django from 6.1.1 to 6.1.3

Commits

Updates celery from 5.6.3 to 5.7.0

Release notes

Sourced from celery's releases.

v5.7.0

Celery 5.7.0

We're pleased to announce Celery 5.7.0, a new stable release of Celery.

This release brings substantial improvements to task workflows, worker reliability, result handling, scheduling, and broker connectivity. It also includes new integrations, improved Python compatibility, performance optimizations, and a large number of bug fixes contributed by the community.

A significant part of this release focuses on making complex Canvas workflows more reliable and efficient, improving worker behavior during broker disconnections and shutdown, and making result-backend state handling more consistent.

Highlights

  • More reliable Canvas workflows: Improved chains, groups, chords, nested workflows, callbacks, errbacks, and failure propagation. Several fixes also reduce unnecessary message growth in complex chains and chords.
  • Improved worker reliability: Better connection recovery, graceful shutdown, prefork process management, autoscaling, and handling of worker-process loss.
  • More predictable task results: Improved result-state consistency, retry handling, ignore_result behavior, and concurrent AsyncResult tracking.
  • Timezone and scheduling improvements: More reliable ETA, countdown, expiration, crontab, solar schedules, and Celery Beat behavior across daylight-saving-time transitions.
  • New Pydantic integration behavior: Tasks configured with pydantic=True can accept Pydantic model instances.
  • New pymemcache result backend support: Adds support for using pymemcache as a result backend.
  • Improved Redis result backend: New expiration settings for chord and failure results, improved Pub/Sub handling, and more reliable chord accounting.
  • Better Python compatibility: Python 3.10 is now the minimum supported version, with compatibility work for newer Python versions, including Python 3.14.
  • Improved worker operations: Cgroup-aware automatic concurrency detection and additional worker-management improvements.

What's New

Canvas, Chains, Groups, and Chords

Celery 5.7 includes extensive improvements to Canvas execution and composition, particularly for nested workflows and complex chains and chords.

  • Fixed failure propagation through chained tasks into chord bodies.
  • Improved chord failure handling when a chord header or a chained chord fails.
  • Fixed chord error handling when the chord body is itself a chain.
  • Improved handling of empty groups and chains, including empty groups inside chains and group headers.
  • Chains are now constructed in a single pass instead of repeatedly folding signatures with the | operator.
  • Reduced unnecessary message growth in chains of chords, chains of groups, implicit chords, and standalone chord bodies.
  • Improved nested group handling and preservation of group IDs.
  • Fixed duplicate nodes in GroupResult.as_tuple() after groups in chains.
  • Improved GroupResult fan-out behavior in chains.
  • Fixed eager execution behavior for chains containing Ignore or Reject.
  • Avoided unnecessary result-backend access when eagerly applying groups inside chains.
  • Improved task replacement with chains containing groups, including cases that previously could hang.
  • Improved callback execution when a task is replaced by a chain, ensuring callbacks are not invoked repeatedly.
  • Fixed eager-chain callback behavior so that chain links are dispatched once at the appropriate point.
  • Improved propagation of task options, ETA, and countdown values to chord headers.
  • Corrected the handling of link and link_error options on chords so they are applied to the chord body.
  • Improved errback argument classification and handling of new-style errback calls.
  • Preserved group errback mutability and improved stamped-header merging and revocation.
  • Improved signature cloning and option isolation, preventing cloned signatures from sharing mutable keyword arguments with their originals.
  • Fixed argument forwarding through nested chains during eager execution.
  • Improved map and starmap option merging.

These changes make complex Canvas compositions more predictable and reduce unnecessary broker traffic and message growth.

... (truncated)

Changelog

Sourced from celery's changelog.

5.7.0

:release-date: 2026-11-05 :release-by: Asif Saif Uddin

Celery v5.7.0 Stable Release is now available for testing and deploy to production. Please help us test this version and report any issues.

What's Changed Since 5.7.0rc1

This section summarizes the changes made since the Celery 5.7.0rc1 pre-release.

Canvas, Chains, Groups, and Chords

  • Run a replaced task's callbacks once when it is replaced with a chain (:ghpull:10927`).
  • Fix chord link and link-error options so they are passed to the body only (:ghpull:10778`).
  • Fix stamped header revocation (:ghpull:10884`).
  • Count each chord header task only once in the Redis backend (:ghpull:10919`).
  • Fix Redis chord claim cleanup ownership (:ghpull:10998`).
  • Fail the chord when chord_unlock retry is refused by the broker (:ghpull:10959`).

Task Execution and Result Handling

  • Fix retry argument conflicts when switching calling conventions (:ghpull:10895`).
  • Pass values to backend hooks by position again (:ghpull:10918`).
  • Don't mark a task REVOKED while another worker is running it (:ghpull:10922`).
  • Keep the first SUCCESS in the database, MongoDB, and Cassandra backends (:ghpull:10920, :ghpull:10944, :ghpull:10945`).
  • Don't record FAILURE when on_success raises after SUCCESS was stored (:ghpull:10759`).
  • Don't fail a task whose SUCCESS was stored before the worker was lost (:ghpull:10752`).
  • Fix a worker hang in WorkerLostError when result_backend_always_retry=True (:ghpull:10960`).
  • Fix send_task() overriding ignore_result defaults (:ghpull:10953`).
  • Preserve ignore_result overrides across task retries (:ghpull:10958`).
  • Make Task.apply() respect the task.ignore_result default (:ghpull:11001`).
  • Don't store RETRY for an ignored result when retrying after a lost worker (:ghpull:11009`).
  • Track every AsyncResult waiting on a task ID (:ghpull:10956`).
  • Allow ResultSet.add() after the set's results are ready (:ghpull:10930`).
  • Use the documented retry defaults in the database backend (:ghpull:10921`).
  • Fix Manager warning output during retries (:ghpull:10948`).
  • Wait between retries when the broker refuses a callback publish (:ghpull:10975`).
  • Merge signature options in map and starmap apply_async() (:ghpull:10787`).
  • Stop gating task publishing signals on cached receiver lists (:ghpull:10791`).

Worker Operations

... (truncated)

Commits
  • 6fcdbf9 Bump version: 5.7.0rc1 → 5.7.0 (#11025)
  • 4a1d6f4 Make beat's pidbox stop test tolerate slow runners (#11024)
  • 6a80d47 Added changelog and new features for celery v5.7.0 stable version (#11016)
  • 6b67b23 Fix dead Akismet and vine zipball links in the docs (#11021)
  • e82fa93 Chore(deps): Bump azure-identity from 1.26.0 to 1.27.0
  • 2fe0ead Chore(deps): Bump google-cloud-storage from 3.15.0 to 3.17.1 (#11013)
  • 89ce900 Fix#10997 - redis chord claim cleanup ownership (#10998)
  • 5d83c46 Don't store RETRY for an ignored result when retrying after a lost worker (#1...
  • 1f435e5 Use Cuba's 2025 fall-back in the midnight DST tests
  • 98b7ba9 Update kombu version to 5.7.0 (#11007)
  • Additional commits viewable in compare view

Updates psycopg from 3.3.6 to 3.3.8

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.9 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

  • Use the C implementation of the wait functions on Windows too. It was disabled because of an excessive CPU usage, fixed in Psycopg 3.2.11 (:ticket:[#645](https://github.com/psycopg/psycopg/issues/645)).
  • Fix dumping of Decimal 0 with large exponent (part of 🎫[#1414](https://github.com/psycopg/psycopg/issues/1414)).
  • Close the connection if the query cancellation following a Ctrl-C or a task cancellation is interrupted again, instead of leaving it stuck in ACTIVE state (:ticket:[#1435](https://github.com/psycopg/psycopg/issues/1435)).
  • Limit the memory used by :sql:COPY FROM if the server consumes data slower than it is produced. Add a !flush_threshold parameter to ~copy.LibpqWriter to tune it (:ticket:[#1437](https://github.com/psycopg/psycopg/issues/1437)).
  • Don't wait on the event loop when the socket is already writable, which made pipeline mode, ~AsyncCursor.executemany() and ~AsyncCopy.write() on async connections several times slower than on sync ones (:ticket:[#1468](https://github.com/psycopg/psycopg/issues/1468)).
  • Fix client-side quoting of negative zero floats and decimals, which could produce a -- SQL comment (:ticket:[#1480](https://github.com/psycopg/psycopg/issues/1480)).
  • Raise DataError instead of !ValueError registering a composite whose name or attributes are not valid namedtuple names, for instance Python keywords (:ticket:[#1482](https://github.com/psycopg/psycopg/issues/1482)).
  • Speed up the C implementation of the sync wait function, in particular when the connection doesn't need to wait, for instance at every ~Copy.write() (:ticket:[#1484](https://github.com/psycopg/psycopg/issues/1484)).
  • Don't replace the exception raised in a :sql:COPY block, for instance an interruption, with an error terminating the operation (:ticket:[#1486](https://github.com/psycopg/psycopg/issues/1486)).
  • Fix ~copy.QueuedLibpqWriter hanging forever, instead of raising the error, if sending data to the server fails while its queue is full (:ticket:[#1489](https://github.com/psycopg/psycopg/issues/1489)).
  • Performance improvements to lists dumping (:tickets:[#1490](https://github.com/psycopg/psycopg/issues/1490), [#1491](https://github.com/psycopg/psycopg/issues/1491)).
  • 2.5x faster UUID loading in the C implementation (:ticket:[#1494](https://github.com/psycopg/psycopg/issues/1494)).
  • Reduce the size of the binary packages by about 15 to 40%, depending on the platform.

Current release

... (truncated)

Commits
  • b9e2f35 chore: bump psycopg package version to 3.3.8
  • 53a0eb4 Merge pull request #1478 from dvarrazzo/fix-openssldir-1476
  • 0880f2e ci: fix skipping the OpenSSL build if already installed
  • d48cc84 fix(binary): don't use /etc/ssl as OpenSSL directory
  • 2ce4384 ci: only restore the libpq cache in the packages-bin workflow
  • 78bf2ad docs: add news entry for #1477
  • ae74a87 Revert "chore(deps): bump pypa/cibuildwheel"
  • 4daf632 chore: bump psycopg package version to 3.3.7
  • 7ce93bb chore(deps): bump pypa/cibuildwheel
  • 70dce7a test: run three assertions trapped after the expected exception
  • Additional commits viewable in compare view

Updates ruff from 0.16.8 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

  • [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
  • [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

  • Accept a bare raise before a semicolon (#29761)
  • Allow match identifiers after a semicolon (#29760)
  • Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
  • [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

  • Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

  • Coalesce source slices when formatting attributes (#29841)
  • Collect return statements with a statement-only visitor (#29911)
  • [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
  • Format node fields directly when comment handling is unnecessary (#29853)
  • Reduce formatter source-slice overhead (#29855)
  • Reuse a callee's qualified name across lint rules (#29916)
  • Skip invalid string character checks when the source contains none (#29883)
  • Use a Bloom filter for formatter comment lookups (#29852)
  • Use a concrete buffer for ordinary writes (#29819)

CLI

  • Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
  • Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

  • Correct the documented version and src defaults for ruff-action (#29880)
  • [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
  • [flake8-no-pep420] Document preview behavior (INP001) (#29764)
  • [isort] Expand I001 documentation (#29843)

Other changes

  • [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits
  • 05cdc36 Bump version to 0.17.4 (#30073)
  • c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
  • 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
  • 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
  • 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
  • 926ccc8 [ty] Handle output errors when generating shell completions (#29997)
  • c86652a [ty] Skip active Conda and Pixi environments during discovery if the environm...
  • c9150f0 Add project walltime benchmarks for Ruff (#30061)
  • 64989ec [ty] Report invalid module globs once per override pattern (#30031)
  • 367a563 [ty] Fix conditional type and tuple annotations (#29987)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the python-dependencies group across 1 directory wi…
e694b12 
…th 4 updates

Bumps the python-dependencies group with 4 updates in the / directory: [django](https://github.com/django/django), [celery](https://github.com/celery/celery), [psycopg](https://github.com/psycopg/psycopg) and [ruff](https://github.com/astral-sh/ruff).


Updates `django` from 6.1.1 to 6.1.3
- [Commits](django/django@6.1.1...6.1.3)

Updates `celery` from 5.6.3 to 5.7.0
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst)
- [Commits](celery/celery@v5.6.3...v5.7.0)

Updates `psycopg` from 3.3.6 to 3.3.8
- [Changelog](https://github.com/psycopg/psycopg/blob/master/docs/news.rst)
- [Commits](psycopg/psycopg@3.3.6...3.3.8)

Updates `ruff` from 0.16.8 to 0.17.4
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.8...0.17.4)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 6.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: celery
  dependency-version: 5.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
- dependency-name: psycopg
  dependency-version: 3.3.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-dependencies
- dependency-name: ruff
  dependency-version: 0.17.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Nov 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants