Skip to content

Bump the production-dependencies group across 1 directory with 21 updates#1847

Closed
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/pip/main/production-dependencies-c7d87916f8
Closed

Bump the production-dependencies group across 1 directory with 21 updates#1847
dependabot[bot] wants to merge 3 commits intomainfrom
dependabot/pip/main/production-dependencies-c7d87916f8

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 23, 2026 •
edited
Loading

Bumps the production-dependencies group with 21 updates in the / directory:

Package From To
flask 3.1.1 3.1.3
google-cloud-datastore 2.20.2 2.21.0
grpcio 1.71.0 1.78.0
gunicorn 23.0.0 25.1.0
pyyaml 6.0.2 6.0.3
requests 2.32.4 2.32.5
structlog 25.2.0 25.5.0
boto3 1.37.23 1.42.73
humanize 4.12.2 4.15.0
marshmallow 3.26.1 4.2.2
google-cloud-storage 3.1.0 3.10.1
jsonpointer 3.0.0 3.1.0
redis 7.1.0 7.3.0
flask-compress 1.17 1.23
uwsgi 2.0.28 2.0.31
email-validator 2.2.0 2.3.0
google-cloud-pubsub 2.29.0 2.36.0
google-cloud-tasks 2.19.2 2.21.0
simplejson 3.20.1 3.20.2
markupsafe 3.0.2 3.0.3
cachetools 6.2.2 7.0.5

Updates flask from 3.1.1 to 3.1.3

Release notes

Sourced from flask's releases.

3.1.3

This is the Flask 3.1.3 security fix release, which fixes a security issue but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.3/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-3

  • The session is marked as accessed for operations that only access the keys but not the values, such as in and len. GHSA-68rp-wp8r-4726

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776
Changelog

Sourced from flask's changelog.

Version 3.1.3

Released 2026-02-18

  • The session is marked as accessed for operations that only access the keys but not the values, such as in and len. :ghsa:68rp-wp8r-4726

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776
Commits
  • 22d9247 release version 3.1.3
  • 089cb86 Merge commit from fork
  • c17f379 request context tracks session access
  • 27be933 start version 3.1.3
  • 4e652d3 Abort if the instance folder cannot be created (#5903)
  • 3d03098 Abort if the instance folder cannot be created
  • 407eb76 document using gevent for async (#5900)
  • ac5664d document using gevent for async
  • 4f79d5b Increase required flit_core version to 3.11 (#5865)
  • fe3b215 Increase required flit_core version to 3.11
  • Additional commits viewable in compare view

Updates google-cloud-datastore from 2.20.2 to 2.21.0

Release notes

Sourced from google-cloud-datastore's releases.

v2.21.0

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Changelog

Sourced from google-cloud-datastore's changelog.

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Commits
  • 1dafc68 chore(main): release 2.21.0 (#595)
  • d391911 chore(python): remove CONTRIBUTING.rst from templates (#605)
  • 16b9c73 chore(python): fix incorrect import statement in README (#604)
  • ed92e8e fix: backwards-compatibility for previous meaning format (#603)
  • a7df080 chore: Update gapic-generator-python to 1.23.6 (#602)
  • 7c1171b fix: Allow protobuf 6.x (#598)
  • 7be9c4c chore: Update gapic-generator-python to v1.23.2 (#569)
  • 9f83d17 chore(python): conditionally load credentials in .kokoro/build.sh (#594)
  • 14a0f96 chore: update protoplus for python 3.13 (#579)
  • 59bf5f9 chore(python): Update the python version in docs presubmit to use 3.10 (#584)
  • See full diff in compare view

Updates grpcio from 1.71.0 to 1.78.0

Release notes

Sourced from grpcio's releases.

Release v1.78.0

This is release 1.78.0 (gutsy) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

C++

  • adding address_sorting dep in naming test build. (#41045)

Objective-C

  • [Backport][v1.78.x][Fix][Compiler] Plugins fall back to the edition 2023 for older protobuf. (#41358)

Python

  • [python] aio: fix race condition causing asyncio.run() to hang forever during the shutdown process. (#40989)
  • [Python] Migrate to pyproject.toml build system from setup.py builds. (#40833)
  • [Python] Log error details when ExecuteBatchError occurs (at DEBUG level). (#40921)
  • [Python] Update setuptools min version to 77.0.1 . (#40931)

Ruby

  • [ruby] Fix version comparison for the ruby_abi_version symbol for ruby 4 compatibility. (#41061)

Release v1.78.0-pre2

This is a prerelease of gRPC Core 1.78.0 (gutsy).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.78.0-pre1

This is a prerelease of gRPC Core 1.78.0 (gutsy).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.76.0

This is release 1.76.0 (genuine) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

... (truncated)

Commits
  • 5e6ba94 [build] add missing includes (backport to 1.78.x) (#41518)
  • e364c5c [PHP] ignore PHPUnit security advisory in Mac build (backport to 1.78.x) (#41...
  • ea4d627 [Release] Bump version to 1.78.0 (on v1.78.x branch) (#41489)
  • 9840ecd [Release] Bump version to 1.78.0-pre2 (on v1.78.x branch) (#41397)
  • ea1d162 [Backport][v1.78.x][Fix][Compiler] Plugins fall back to the edition 2023 for ...
  • 818a08f [Backport][v1.78.x][PHP] Fix runtime error with PHp8.5 alpha because zend_exc...
  • f7f1302 [Backport][v1.78.x][Fix][Build] Move xds-protos templates to the new path (#4...
  • a382034 [Release] Bump version to 1.78.0-pre1 (on v1.78.x branch) (#41290)
  • 8d22d62 [Release] Bump core version to 52.0.0 for upcoming release (#41288)
  • ad19eab [PH2][Settings][Security]
  • Additional commits viewable in compare view

Updates gunicorn from 23.0.0 to 25.1.0

Release notes

Sourced from gunicorn's releases.

Gunicorn 25.1.0

New Features

  • Control Interface (gunicornc): Add interactive control interface for managing running Gunicorn instances, similar to birdc for BIRD routing daemon ([PR #3505](benoitc/gunicorn#3505))

    • Unix socket-based communication with JSON protocol
    • Interactive mode with readline support and command history
    • Commands: show all/workers/dirty/config/stats/listeners
    • Worker management: worker add/remove/kill, dirty add/remove
    • Server control: reload, reopen, shutdown
    • New settings: --control-socket, --control-socket-mode, --no-control-socket
    • New CLI tool: gunicornc for connecting to control socket
    • See Control Interface Guide for details

  • Dirty Stash: Add global shared state between workers via dirty.stash ([PR #3503](benoitc/gunicorn#3503))

    • In-memory key-value store accessible by all workers
    • Supports get, set, delete, clear, keys, and has operations
    • Useful for sharing state like feature flags, rate limits, or cached data

  • Dirty Binary Protocol: Implement efficient binary protocol for dirty arbiter IPC using TLV (Type-Length-Value) encoding ([PR #3500](benoitc/gunicorn#3500))

    • More efficient than JSON for binary data
    • Supports all Python types: str, bytes, int, float, bool, None, list, dict
    • Better performance for large payloads

  • Dirty TTIN/TTOU Signals: Add dynamic worker scaling for dirty arbiters ([PR #3504](benoitc/gunicorn#3504))

    • Send SIGTTIN to increase dirty workers
    • Send SIGTTOU to decrease dirty workers
    • Respects minimum worker constraints from app configurations

Changes

  • ASGI Worker: Promoted from beta to stable
  • Dirty Arbiters: Now marked as beta feature

Documentation

  • Fix Markdown formatting in /configure documentation

25.0.3

What's Changed

Bug Fixes

  • Fix RuntimeError when StopIteration raised in ASGI coroutine (#3484)
  • Fix passing maxsplit in re.split() as positional argument (deprecated in Python 3.13)

... (truncated)

Commits
  • 2d43101 docs: merge gunicornc into 25.1.0 release
  • bf4ad8d docs: update 25.1.0 release date to 2026-02-13
  • 730350e Merge pull request #3505 from benoitc/feature/gunicornc-control-interface
  • 63df19b fix(tests): use process groups for reliable signal handling in PyPy
  • cd77bcc fix(tests): increase wait time for all server tests
  • 02ea985 fix(tests): improve server test reliability on FreeBSD
  • 6d81c9e fix: resolve pylint warnings
  • 7486baa fix: remove unused imports
  • 3e60d29 docs: add gunicornc control interface guide
  • e05e40d feat(ctl): add message-based dirty worker management
  • Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates structlog from 25.2.0 to 25.5.0

Release notes

Sourced from structlog's releases.

25.5.0

Highlights

Huge release! There's plenty of important little bug fixes and new features, but the headliner is definitely the improved ergonomics of structlog.dev.ConsoleRenderer. We have finally accepted that local development has different priorities than production and made it both mutable (with automatic re-configuration) and also easily retrievable (cr = ConsoleRenderer.get_active()). This allows you, for example, to disable Rich exception formatting as easily as structlog.dev.ConsoleRenderer.get_active().exception_formatter = structlog.dev.plain_traceback. Please check out the updated docs!

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), thanks.dev (@thnxdev), Privacy Solutions GmbH (@privacy-solutions), Quesma (@​QuesmaOrg), FilePreviews (@filepreviews), LambdaTest (@LambdaTest-Inc), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Jeff McCarrell (@jmccarrell), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), Roboflow (@roboflow), and Jeff McCarrell (@jmccarrell).

Full Changelog

Deprecated

  • structlog.dev.ConsoleRenderer()'s pad_event argument has been renamed to pad_event_to to differentiate it from the boolean pad_level argument. pad_event is now deprecated.

Added

  • Added structlog.dev.ConsoleRenderer.get_active() that returns the currently active structlog.dev.ConsoleRenderer(). #749

  • structlog.dev.ConsoleRenderer() now supports setting the exception_formatter attribute.

    You can now disable the pretty-printing of exceptions by setting it to structlog.dev.plain_traceback:

    cr = structlog.dev.ConsoleRenderer.get_active()
cr.exception_formatter = structlog.dev.plain_traceback

    Same goes for sort_keys, columns, colors, force_colors, level_styles, pad_event_to, event_key, timestamp_key, and repr_native_str.

    #749 #756 #757 #759

  • Added structlog.dev.ConsoleRenderer.get_default_column_styles() for reuse the default column styles. #741

  • structlog.testing.capture_logs() now optionally accepts processors to apply before capture. #728

... (truncated)

Changelog

Sourced from structlog's changelog.

25.5.0 - 2025-10-27

Deprecated

  • structlog.dev.ConsoleRenderer()'s pad_event argument has been renamed to pad_event_to to differentiate it from the boolean pad_level argument. pad_event is now deprecated.

Added

  • Added structlog.dev.ConsoleRenderer.get_active() that returns the currently active structlog.dev.ConsoleRenderer(). #749

  • structlog.dev.ConsoleRenderer() now supports setting the exception_formatter attribute.

    You can now disable the pretty-printing of exceptions by setting it to structlog.dev.plain_traceback:

    cr = structlog.dev.ConsoleRenderer.get_active()
cr.exception_formatter = structlog.dev.plain_traceback

    Same goes for sort_keys, columns, colors, force_colors, level_styles, pad_event_to, event_key, timestamp_key, and repr_native_str.

    #749 #756 #757 #759

  • Added structlog.dev.ConsoleRenderer.get_default_column_styles() for reuse the default column styles. #741

  • structlog.testing.capture_logs() now optionally accepts processors to apply before capture. #728

  • structlog.dev.RichTracebackFormatter now exposes the upstream code_width parameter. Default width is now None for full terminal width. Full terminal width is now handled by Rich itself, bringing support for reflow and COLUMN environment variable. Passing -1 for width is now deprecated and automatically replaced by None. #717

  • Native loggers now allow the passing of a dictionary for dictionary-based interpolation log.info("hello %(name)s!", {"name": "world"}). #748

  • On Python 3.11+, structlog.processors.CallsiteParameterAdder now supports CallsiteParameter.QUAL_NAME that adds the qualified name of the callsite, including scope and class names. This is only available for structlog-originated events since the standard library has no equivalent.

  • structlog.stdlib.LoggerFactory now supports the stacklevel parameter. #763

... (truncated)

Commits

Updates boto3 from 1.37.23 to 1.42.73

Commits
  • 3a06d63 Merge branch 'release-1.42.73'
  • ca7b043 Bumping version to 1.42.73
  • ef6697c Add changelog entries from botocore
  • 3c02c15 Merge branch 'release-1.42.72'
  • b7e01e9 Merge branch 'release-1.42.72' into develop
  • fcc3fe3 Bumping version to 1.42.72
  • 9d3625e Add changelog entries from botocore
  • dd8d8d6 Merge branch 'release-1.42.71'
  • 0d4401e Merge branch 'release-1.42.71' into develop
  • 45318a5 Bumping version to 1.42.71
  • Additional commits viewable in compare view

Updates humanize from 4.12.2 to 4.15.0

Release notes

Sourced from humanize's releases.

4.15.0

Added

Changed

Fixed

4.14.0

Added

Changed

4.13.0

Changed

Fixed

4.12.3

Fixed

Commits
  • 2ddb590 Replace Exception with more specific FileNotFoundError (#286)
  • e87f2e2 Add locale support for decimal separator in intword (#287)
  • 7175184 Add locale support for decimal separator in intword
  • 2526999 Update config (#285)
  • ba532d9 Replace Exception with more specific FileNotFoundError
  • bdc49ea Don't ignore UP038, it's been removed from Ruff
  • 86f116b Add seven-day cooldown to Renovate
  • e3f7116 No need for setup-python with prek-action
  • 3dca143 naturaldelta: round the value to nearest unit that makes sense (#272)
  • bac6f26 Apply suggestion from @​hugovk
  • Additional commits viewable in compare view

Updates marshmallow from 3.26.1 to 4.2.2

Changelog

Sourced from marshmallow's changelog.

4.2.2 (2026-02-04)

Bug fixes:

  • Fix behavior of fields.Contant(None) (:issue:2868). Thanks :user:T90REAL for reporting and emmanuel-ferdman for the fix.

4.2.1 (2026-01-23)

Bug fixes:

  • Fix validation of URLs beginning with uppercare FILE (:issue:2891). Thanks :user:thanhlecongg for reporting and fixing.

4.2.0 (2026-01-04)

Other changes:

  • many argument of Nested properly overrides schema instance value (:pr:2854). Thanks :user:jafournier for the PR.

4.1.2 (2025-12-19)

Bug fixes:

  • :cve:2025-68480: Merge error store messages without rebuilding collections. Thanks 카푸치노 for reporting and :user:deckar01 for the fix.

4.1.1 (2025-11-05)

Bug fixes:

  • Ensure URL validator is case-insensitive when using custom schemes (:pr:2874). Thanks :user:T90REAL for the PR.

4.1.0 (2025-11-01)

Other changes:

  • Add __len__ implementation to missing so that it can be used with validate.Length <marshmallow.validate.Length> (:pr:2861). Thanks :user:agentgodzilla for the PR.
  • Drop support for Python 3.9 (:pr:2363).

... (truncated)

Commits

Updates google-cloud-storage from 3.1.0 to 3.10.1

Release notes

Sourced from google-cloud-storage's releases.

google-cloud-storage: v3.10.1

3.10.1 (2026-03-23)

Bug Fixes

  • raise ValueError if api_endpoint is unset when using AnonymousCredentials in AsyncGrpcClient. (#1778) (17828ea3)

google-cloud-storage: v3.10.0

3.10.0 (2026-03-18)

Features

Perf Improvments

Bug Fixes

google-cloud-storage 3.9.0

3.9.0 (2026-02-02)

Features

  • update generation for MRD (#1730) (08bc7082)

  • add get_object method for async grpc client (#1735) (0e5ec29b)

  • Add micro-benchmarks for reads comparing standard (regional) vs rapid (zonal) buckets. (#1697) (1917649f)

  • Add support for opening via write_handle and fix write_handle type (#1715) (2bc15fa5)

  • add samples for appendable objects writes and reads (2e1a1eb5)

  • add samples for appendable objects writes and reads (#1705) (2e1a1eb5)

  • add context manager to mrd (#1724) (5ac2808a)

  • Move Zonal Buckets features of _experimental (#1728) (74c9ecc5)

  • add default user agent for grpc (#1726) (7b319469)

... (truncated)

Changelog

Sourced from google-cloud-storage's changelog.

3.10.1 (2026-03-23)

Bug Fixes

3.10.0 (2026-03-18)

Features

Perf Improvments

Bug Fixes

3.9.0 (2026-02-02)

Features

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Mar 23, 2026
@dependabot dependabot Bot requested a review from a team as a code owner March 23, 2026 11:01
@dependabot
Bump the production-dependencies group across 1 directory with 21 upd…
483fa68 
…ates

Bumps the production-dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flask](https://github.com/pallets/flask) | `3.1.1` | `3.1.3` |
| [google-cloud-datastore](https://github.com/googleapis/python-datastore) | `2.20.2` | `2.21.0` |
| [grpcio](https://github.com/grpc/grpc) | `1.71.0` | `1.78.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `23.0.0` | `25.1.0` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [structlog](https://github.com/hynek/structlog) | `25.2.0` | `25.5.0` |
| [boto3](https://github.com/boto/boto3) | `1.37.23` | `1.42.73` |
| [humanize](https://github.com/python-humanize/humanize) | `4.12.2` | `4.15.0` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.26.1` | `4.2.2` |
| [google-cloud-storage](https://github.com/googleapis/python-storage) | `3.1.0` | `3.10.1` |
| [jsonpointer](https://github.com/stefankoegl/python-json-pointer) | `3.0.0` | `3.1.0` |
| [redis](https://github.com/redis/redis-py) | `7.1.0` | `7.3.0` |
| [flask-compress](https://github.com/colour-science/flask-compress) | `1.17` | `1.23` |
| [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.28` | `2.0.31` |
| [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` |
| [google-cloud-pubsub](https://github.com/googleapis/google-cloud-python) | `2.29.0` | `2.36.0` |
| [google-cloud-tasks](https://github.com/googleapis/google-cloud-python) | `2.19.2` | `2.21.0` |
| [simplejson](https://github.com/simplejson/simplejson) | `3.20.1` | `3.20.2` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [cachetools](https://github.com/tkem/cachetools) | `6.2.2` | `7.0.5` |



Updates `flask` from 3.1.1 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.1...3.1.3)

Updates `google-cloud-datastore` from 2.20.2 to 2.21.0
- [Release notes](https://github.com/googleapis/python-datastore/releases)
- [Changelog](https://github.com/googleapis/python-datastore/blob/v2.21.0/CHANGELOG.md)
- [Commits](googleapis/python-datastore@v2.20.2...v2.21.0)

Updates `grpcio` from 1.71.0 to 1.78.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.71.0...v1.78.0)

Updates `gunicorn` from 23.0.0 to 25.1.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@23.0.0...25.1.0)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `structlog` from 25.2.0 to 25.5.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.2.0...25.5.0)

Updates `boto3` from 1.37.23 to 1.42.73
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.37.23...1.42.73)

Updates `humanize` from 4.12.2 to 4.15.0
- [Release notes](https://github.com/python-humanize/humanize/releases)
- [Commits](python-humanize/humanize@4.12.2...4.15.0)

Updates `marshmallow` from 3.26.1 to 4.2.2
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...4.2.2)

Updates `google-cloud-storage` from 3.1.0 to 3.10.1
- [Release notes](https://github.com/googleapis/python-storage/releases)
- [Changelog](https://github.com/googleapis/python-storage/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-storage@v3.1.0...v3.10.1)

Updates `jsonpointer` from 3.0.0 to 3.1.0
- [Commits](stefankoegl/python-json-pointer@v3.0.0...v3.1.0)

Updates `redis` from 7.1.0 to 7.3.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v7.1.0...v7.3.0)

Updates `flask-compress` from 1.17 to 1.23
- [Changelog](https://github.com/colour-science/flask-compress/blob/master/CHANGELOG.md)
- [Commits](colour-science/flask-compress@v1.17...v1.23)

Updates `uwsgi` from 2.0.28 to 2.0.31

Updates `email-validator` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/JoshData/python-email-validator/releases)
- [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md)
- [Commits](JoshData/python-email-validator@v2.2.0...v2.3.0)

Updates `google-cloud-pubsub` from 2.29.0 to 2.36.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-api-core-v2.29.0...google-cloud-pubsub-v2.36.0)

Updates `google-cloud-tasks` from 2.19.2 to 2.21.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-tasks-v2.19.2...google-cloud-tasks-v2.21.0)

Updates `simplejson` from 3.20.1 to 3.20.2
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](simplejson/simplejson@v3.20.1...v3.20.2)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `cachetools` from 6.2.2 to 7.0.5
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v6.2.2...v7.0.5)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: google-cloud-datastore
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: grpcio
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: gunicorn
  dependency-version: 25.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: structlog
  dependency-version: 25.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: boto3
  dependency-version: 1.42.73
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: humanize
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marshmallow
  dependency-version: 4.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: google-cloud-storage
  dependency-version: 3.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: jsonpointer
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: redis
  dependency-version: 7.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: flask-compress
  dependency-version: '1.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: uwsgi
  dependency-version: 2.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: email-validator
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-pubsub
  dependency-version: 2.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-tasks
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: simplejson
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: cachetools
  dependency-version: 7.0.5
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/pip/main/production-dependencies-c7d87916f8 branch from 0ee759a to 483fa68 Compare March 23, 2026 12:46
@ons-eq-team
Copy link
Copy Markdown
Contributor

ons-eq-team commented Mar 24, 2026

Benchmark Results

Percentile Averages:
50th: 88ms
90th: 303ms
95th: 497ms
99th: 977ms
99.9th: 1706ms
GETs (99th): 1137ms
POSTs (99th): 793ms

PDF: 9300ms
Session: 8100ms

Total Requests: 64,465
Total Failures: 0
Error Percentage: 0.0%

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 10, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 10, 2026
@dependabot dependabot Bot deleted the dependabot/pip/main/production-dependencies-c7d87916f8 branch April 10, 2026 07:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ons-eq-team @rmccar