Bump the production-dependencies group across 1 directory with 8 updates by dependabot[bot] · Pull Request #393 · mozilla-services/eliot

dependabot · 2026-09-01T09:16:11Z

Bumps the production-dependencies group with 8 updates in the / directory:

Package	From	To
boltons	`26.0.0`	`26.1.0`
click	`8.4.2`	`8.5.0`
datadog	`0.52.2`	`0.53.0`
gunicorn	`26.0.0`	`26.2.0`
msgpack	`1.2.1`	`1.2.2`
ruff	`0.15.20`	`0.16.5`
sentry-sdk	`2.64.0`	`2.68.1`
symbolic	`13.6.1`	`13.9.0`

Updates boltons from 26.0.0 to 26.1.0

Release notes

Sourced from boltons's releases.

26.1.0

Fixed strutils.singularize mangling words ending in 'ss'

Fixed fileutils.AtomicSaver to accept os.PathLike

Fixed copy.copy/copy.deepcopy collapsing dictutils.OrderedMultiDict values

Sped up strutils.MultiReplace match lookup

Fixed setutils.IndexedSet out-of-range negative indexing wrapping around

Fixed setutils.IndexedSet slicing after removals

Full Changelog: mahmoud/boltons@26.0.0...26.1.0

Changelog

Sourced from boltons's changelog.

26.1.0

(July 17, 2026)

Fixed [strutils.singularize][strutils.singularize] mangling words ending in 'ss'

Fixed [fileutils.AtomicSaver][fileutils.AtomicSaver] to accept os.PathLike

Fixed copy.copy/copy.deepcopy collapsing [dictutils.OrderedMultiDict][dictutils.OrderedMultiDict] values

Sped up [strutils.MultiReplace][strutils.MultiReplace] match lookup

Fixed [setutils.IndexedSet][setutils.IndexedSet] out-of-range negative indexing wrapping around

Fixed [setutils.IndexedSet][setutils.IndexedSet] slicing after removals

Commits

1d52527 boltons version 26.1.0
4c24615 chore(ci): upgrade actions to latest and pin to commit SHAs
1e61524 fix(strutils): stop singularize() mangling words ending in 'ss'
55dfe50 fix(fileutils): accept os.PathLike in AtomicSaver
ebc7a8f Fix copy.copy/copy.deepcopy collapsing OrderedMultiDict values
bba729b Speed up MultiReplace match lookup
f5cf8b5 Remove listutils test import side effect
d0a284f fix IndexedSet out-of-range negative indexing wrapping around (x[-n-k], pop(-...
609cabe fix IndexedSet slicing after removals: keep iter_slice bounds in apparent ind...
979fa9b bump version to 26.0.1dev
See full diff in compare view

Updates click from 8.4.2 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). #3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653

Fix test failures when using pytest >= 9.1. {pr}3656

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). {pr}3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641

{func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695

The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits

8b19813 Release version 8.5.0
2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
131c86a Add FAQ entry about UnicodeEncodeError on Windows
e1fd594 Add support of pathlib.Path to edit (#3781)
a1d8785 Add support of pathlib.Path to edit
2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
a6256bf Forwards all user's parameters set in PAGER
61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
9835b0f Resolve the pager command once, in _pager_contextmanager
f36d58b Refactor pager stream handling (#3767)
Additional commits viewable in compare view

Updates datadog from 0.52.2 to 0.53.0

Release notes

Sourced from datadog's releases.

v0.53.0

See CHANGELOG.md for details.

Changelog

Sourced from datadog's changelog.

v0.53.0 / 2026-07-24

[Fixed] Add DD_DOGSTATSD_URL support for Unix and UDP URLs. See #968.

[Added] Retry DogStatsD UDS connect failures. See #964.

Commits

d18ac6d Release 0.53.0 (#976)
f51d496 Retry DogStatsD UDS connect failures (#964)
81d40c7 Add DD_DOGSTATSD_URL support for unix and udp urls (#968)
See full diff in compare view

Updates gunicorn from 26.0.0 to 26.2.0

Release notes

Sourced from gunicorn's releases.

gunicorn 26.2.0

Cleartext HTTP/2 lands, and an HTTP/2 security fix.

Cleartext HTTP/2 (h2c)

http2_cleartext accepts prior-knowledge, upgrade, both or off (the default). Prior knowledge serves a connection that opens with the HTTP/2 preface; upgrade honours an HTTP/1.1 Upgrade: h2c request. Both work on the gthread, gevent and asgi workers.

This is for deployments where TLS is terminated by a proxy that speaks HTTP/2 upstream, so the hop into gunicorn no longer drops to HTTP/1.1. Only peers in forwarded_allow_ips are considered; everyone else is served HTTP/1.x exactly as if the setting were off. Each mechanism is enabled separately, so turning one on does not turn the other on.

Do not expose a cleartext HTTP/2 port to the internet.

Security

HTTP2Request built its headers straight from the stream, so nothing the HTTP/1 path enforces applied over HTTP/2: the underscore and header_map policy, duplicate Host and Content-Type, control characters in values, and the forwarded_allow_ips trust gate. An untrusted client could set SCRIPT_NAME and forge HTTP_* entries in the WSGI environ, and decide wsgi.url_scheme through :scheme. Both request classes now share one policy mixin, and the scheme comes from the transport.

If you serve HTTP/2, this is the reason to upgrade.

Other HTTP/2 fixes

WSGI responses were buffered whole before anything was sent; they stream now. HEAD, 204 and 304 no longer carry a body. Events read while blocked on a flow-control window were discarded, losing requests and body data outright. sendfile() is refused on HTTP/2 responses rather than bypassing framing.

Request bodies dropped on Upgrade requests

On the ASGI worker with the fast parser, any request carrying an Upgrade header reached the application with an empty body, whatever the header's value and with HTTP/2 switched off entirely. Fixed in gunicorn_h1c 0.6.9, which the fast extra now requires.

Full changelog: https://gunicorn.org/news/

gunicorn 26.1.0

New Features

Glob patterns in reload_extra_files: entries containing *, ? or [

... (truncated)

Commits

36f2a3c gunicorn 26.2.0
cbba350 test: cover the h2c edge paths that had none
9885411 Merge pull request #3703 from cormier/fix-inconsistency-in-control-socket-docs
86f0919 Merge pull request #3704 from methane/doc-wsgi-h1c
5853551 Merge pull request #3712 from Rotzbua/patch-1
7bce87e Merge pull request #3700 from benoitc/fix/sponsor-logo-path
972dfb0 Merge pull request #3690 from melbinjp/docs/contributing-settings-path
7b3f16b Merge pull request #3711 from benoitc/docs/http2-changelog
5bf237c http2: require gunicorn_h1c 0.6.9 and drop the upgrade body workaround
7cf0338 test: skip the fast-parser cases when gunicorn_h1c is absent
Additional commits viewable in compare view

Updates msgpack from 1.2.1 to 1.2.2

Release notes

Sourced from msgpack's releases.

v1.2.2

What's Changed

fix docstring for read_size by @methane in msgpack/msgpack-python#700

unpacker: fix silent datetime truncation with datetime=3 by @methane in msgpack/msgpack-python#701

run test with debug build by @methane in msgpack/msgpack-python#702

fix: add reentrant guard to Unpacker.feed() by @methane in msgpack/msgpack-python#704

Bump actions/checkout from 6.0.3 to 7.0.0 in the all-dependencies group by @dependabot[bot] in msgpack/msgpack-python#705

Improve error handling and reporting in unpacking functions by @methane in msgpack/msgpack-python#707

test_unpack.py: add tests for ExtraData by @methane in msgpack/msgpack-python#708

Bump the all-dependencies group with 2 updates by @dependabot[bot] in msgpack/msgpack-python#709

Fix Timestamp.from_datetime() precision for far-future datetimes by @gaoflow in msgpack/msgpack-python#710

Fix typos in test and docs by @maxtaran2010 in msgpack/msgpack-python#712

Bump the all-dependencies group across 1 directory with 5 updates by @dependabot[bot] in msgpack/msgpack-python#719

fix: use-after-free in unpackb() ExtraData path for non-contiguous input by @ThomasWaldmann in msgpack/msgpack-python#722

Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the all-dependencies group by @dependabot[bot] in msgpack/msgpack-python#721

Bump pypa/cibuildwheel from 4.1.1 to 4.2.0 in the all-dependencies group by @dependabot[bot] in msgpack/msgpack-python#724

Convert Packer's buf_size once by @hdimer in msgpack/msgpack-python#726

fix: translate RecursionError to StackError in fallback Unpacker.skip() by @hdimer in msgpack/msgpack-python#727

Validate nanoseconds range when unpacking timestamps in the C extension by @chuenchen309 in msgpack/msgpack-python#716

Avoid parallel execution of the recursion-limit nesting test on free-threaded builds by @methane with @Copilot in msgpack/msgpack-python#729

Raise OverflowError when use_single_float cannot represent a value by @dylanpulver in msgpack/msgpack-python#728

release v1.2.2 by @methane in msgpack/msgpack-python#730

New Contributors

@gaoflow made their first contribution in msgpack/msgpack-python#710

@maxtaran2010 made their first contribution in msgpack/msgpack-python#712

@hdimer made their first contribution in msgpack/msgpack-python#726

@chuenchen309 made their first contribution in msgpack/msgpack-python#716

@dylanpulver made their first contribution in msgpack/msgpack-python#728

Full Changelog: msgpack/msgpack-python@v1.2.1...v1.2.2

Changelog

Sourced from msgpack's changelog.

1.2.2

Release Date: 2026-08-27

Fix the read_size documentation. #700

Fix silent truncation when unpacking an out-of-range timestamp with timestamp=3. #701

Prevent reentrant calls to Unpacker.feed() while unpacking. #704

Improve error handling and reporting in unpacking functions. #707

Fix Timestamp.from_datetime() precision for far-future datetimes. #710

Fix typos in the documentation. #712

Validate the nanoseconds range when unpacking timestamps in the C extension. #716

Fix a use-after-free in the unpackb() ExtraData path for non-contiguous input. #722

Prevent a buffer overflow when converting Packer's buf_size. #726

Translate RecursionError to StackError in the fallback Unpacker.skip(). #727

Raise OverflowError when use_single_float=True cannot represent a value. #728

Commits

7381b31 release
ee1bd3c release v1.2.2 (#730)
57d28a2 Raise OverflowError when use_single_float cannot represent a value (#728)
d374a17 Avoid parallel execution of the recursion-limit nesting test on free-threaded...
e94e1dc Validate nanoseconds range when unpacking timestamps in the C extension (#716)
2e4be09 fix: translate RecursionError to StackError in fallback Unpacker.skip() (#727)
9f9bdae Convert Packer's buf_size once (#726)
809bfcd remove unused variable
186d4db Bump pypa/cibuildwheel from 4.1.1 to 4.2.0(#724)
ea6b84f Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the all-dependencie...
Additional commits viewable in compare view

Updates ruff from 0.15.20 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

Allow rules without codes (#28049)

Introduce category selectors (#27666)

Update preview default rules and categories (#27877)

Bug fixes

[flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)

[flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)

[flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

Document rule acceptance guidelines (#27910)

Document the new category selectors (#27906)

Contributors

@AlexWaygood

@sharkdp

@jelle-openai

@charliermarsh

@ntBre

@aarushkandukoori

Install ruff 0.16.5

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"
Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

Allow rules without codes (#28049)

Introduce category selectors (#27666)

Update preview default rules and categories (#27877)

Bug fixes

[flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)

[flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)

[flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

Document rule acceptance guidelines (#27910)

Document the new category selectors (#27906)

Contributors

@AlexWaygood

@sharkdp

@jelle-openai

@charliermarsh

@ntBre

@aarushkandukoori

0.16.4

Released on 2026-08-20.

Preview features

[flake8-use-pathlib] Add autofix for PTH116 (#26460)

[refurb] Restrict delete-full-slice to lists (FURB131) (#27711)

[refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)

[pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)

[pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

9e4938c Bump 0.16.5 (#28110)
aad0e90 Allow rules without codes (#28049)
5fdab73 Update preview default rules and categories (#27877)
29c8e5b Document rule acceptance guidelines (#27910)
50a4d7f Document the new category selectors (#27906)
ada8795 Introduce category selectors (#27666)
d894723 [ty] Infer lambda parameters through callable type aliases (#28109)
2685fde [ty] Narrow functional enum members in == and match (#28103)
efcffd2 [ty] Intersection simplifications with subtype-related generic specialization...
eb78048 [ty] Bump ecosystem-analyzer for HTML escaping (#28104)
Additional commits viewable in compare view

Updates sentry-sdk from 2.64.0 to 2.68.1

Release notes

Sourced from sentry-sdk's releases.

2.68.1

enable_logs
(logs) Don't stop sending auto-collected logs when enable_logs=True by @sentrivana in #7237

If you have enable_logs set to True, our logging integrations for the standard library logging module as well as Loguru will auto-collect logs and send them to Sentry as Sentry logs by default, preserving old behavior. Turning automatic collection off for a specific integration can still be achieved using the capture_sentry_logs integration option.
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration
sentry_sdk.init(
enable_logs=True,
integrations=[
LoggingIntegration(capture_sentry_logs=True),
LoguruIntegration(capture_sentry_logs=False),
],
)
Please note that the enable_logs option is deprecated and will be removed in the next major release. The sentry_sdk.logger.X API now works regardless of it, and auto-collection can be opted into via the capture_sentry_logs integration-level options, which are False by default, unless you have enable_logs=True. We've added this compatibility layer to make the transition to a enable_logs-free world easier.
Bug Fixes 🐛

(django) Add failed_request_status_codes by @mgaligniana in #7140

(anthropic) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7207

(google_genai) Gate streaming gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7210

(langchain) Use gen_ai.tool.definitions attribute when data collection is enabled by @ericapisani in #7204

(langgraph,huggingface_hub) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7208

(openai) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7205

(openai_agents) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7209

2.68.0

Important
We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

Action Needed

If you had enable_logs set to True:

If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.

If you were auto-collecting logs from either LoggingIntegration or LoguruIntegration, the auto-collection will be turned off in this release. You can switch auto-collection on explicitly with:
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.68.1

enable_logs
(logs) Don't stop sending auto-collected logs when enable_logs=True by @sentrivana in #7237

If you have enable_logs set to True, our logging integrations for the standard library logging module as well as Loguru will auto-collect logs and send them to Sentry as Sentry logs by default, preserving old behavior. Turning automatic collection off for a specific integration can still be achieved using the capture_sentry_logs integration option.
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration
sentry_sdk.init(
enable_logs=True,
integrations=[
LoggingIntegration(capture_sentry_logs=True),
LoguruIntegration(capture_sentry_logs=False),
],
)
Please note that the enable_logs option is deprecated and will be removed in the next major release. The sentry_sdk.logger.X API now works regardless of it, and auto-collection can be opted into via the capture_sentry_logs integration-level options, which are False by default, unless you have enable_logs=True. We've added this compatibility layer to make the transition to a enable_logs-free world easier.
Bug Fixes 🐛

(django) Add failed_request_status_codes by @mgaligniana in #7140

(anthropic) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7207

(google_genai) Gate streaming gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7210

(langchain) Use gen_ai.tool.definitions attribute when data collection is enabled by @ericapisani in #7204

(langgraph,huggingface_hub) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7208

(openai) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7205

(openai_agents) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7209

2.68.0

Important
We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

Action Needed

If you had enable_logs set to True:

If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.

If you were auto-collecting logs from either LoggingIntegration or LoguruIntegration, the auto-collection will be turned off in this release. You can switch auto-collection on explicitly with:

... (truncated)

Commits

98f7d91 Update changelog
8f886ff release: 2.68.1
df4ec02 fix(logs): Don't stop sending auto-collected logs when enable_logs=True (#7...
e320318 test(pyramid): Add tests for data_collection gating of request body (#7218)
7b8a385 test(bottle): Add tests for data_collection gating of request body (#7217)
cbcadc9 test(sanic): Add tests for data_collection gating of request body (#7216)
e42c798 feat(tornado): Gate request body collection on data_collection option (#7215)
d05bb60 test(django): Add tests for data_collection gating of request body (#7213)
bcce67b feat(wsgi): Gate request body collection on data_collection option (#7212)
41220c4 fix(google_genai): Gate streaming gen_ai.response.tool_calls on outputs, no...
Additional commits viewable in compare view

Updates symbolic from 13.6.1 to 13.9.0

smarnach · 2026-09-02T12:53:45Z

@dependabot rebase

Bumps the production-dependencies group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [boltons](https://github.com/mahmoud/boltons) | `26.0.0` | `26.1.0` | | [click](https://github.com/pallets/click) | `8.4.2` | `8.5.0` | | [datadog](https://github.com/DataDog/datadogpy) | `0.52.2` | `0.53.0` | | [gunicorn](https://github.com/benoitc/gunicorn) | `26.0.0` | `26.2.0` | | [msgpack](https://github.com/msgpack/msgpack-python) | `1.2.1` | `1.2.2` | | [ruff](https://github.com/astral-sh/ruff) | `0.15.20` | `0.16.5` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.64.0` | `2.68.1` | | symbolic | `13.6.1` | `13.9.0` | Updates `boltons` from 26.0.0 to 26.1.0 - [Release notes](https://github.com/mahmoud/boltons/releases) - [Changelog](https://github.com/mahmoud/boltons/blob/master/CHANGELOG.md) - [Commits](mahmoud/boltons@26.0.0...26.1.0) Updates `click` from 8.4.2 to 8.5.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.4.2...8.5.0) Updates `datadog` from 0.52.2 to 0.53.0 - [Release notes](https://github.com/DataDog/datadogpy/releases) - [Changelog](https://github.com/DataDog/datadogpy/blob/master/CHANGELOG.md) - [Commits](DataDog/datadogpy@v0.52.2...v0.53.0) Updates `gunicorn` from 26.0.0 to 26.2.0 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@26.0.0...26.2.0) Updates `msgpack` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md) - [Commits](msgpack/msgpack-python@v1.2.1...v1.2.2) Updates `ruff` from 0.15.20 to 0.16.5 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.15.20...0.16.5) Updates `sentry-sdk` from 2.64.0 to 2.68.1 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.64.0...2.68.1) Updates `symbolic` from 13.6.1 to 13.9.0 --- updated-dependencies: - dependency-name: boltons dependency-version: 26.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: click dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: datadog dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: gunicorn dependency-version: 26.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: msgpack dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: ruff dependency-version: 0.16.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: sentry-sdk dependency-version: 2.68.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: symbolic dependency-version: 13.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Sep 1, 2026

dependabot Bot changed the title ~~Bump the production-dependencies group with 8 updates~~ Bump the production-dependencies group across 1 directory with 8 updates Sep 2, 2026

dependabot Bot force-pushed the dependabot/uv/production-dependencies-553fba390e branch from d93f518 to d24edf9 Compare September 2, 2026 12:56

smarnach enabled auto-merge September 2, 2026 13:05

smarnach approved these changes Sep 2, 2026

View reviewed changes

smarnach added this pull request to the merge queue Sep 2, 2026

Merged via the queue into main with commit 98ce0f7 Sep 2, 2026
1 check passed

smarnach deleted the dependabot/uv/production-dependencies-553fba390e branch September 2, 2026 13:08

Navigation Menu

Bump the production-dependencies group across 1 directory with 8 updates - #393

Bump the production-dependencies group across 1 directory with 8 updates#393
smarnach merged 1 commit into
mainfrom
dependabot/uv/production-dependencies-553fba390e

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

Action Needed

Action Needed

Uh oh!

smarnach commented Sep 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

26.1.0

26.1.0

8.5.0

Version 8.5.0

v0.53.0

v0.53.0 / 2026-07-24

gunicorn 26.2.0

Cleartext HTTP/2 (h2c)

Security

Other HTTP/2 fixes

Request bodies dropped on Upgrade requests

gunicorn 26.1.0

New Features

v1.2.2

What's Changed

New Contributors

1.2.2

0.16.5

Release Notes

Preview features

Bug fixes

Server

Documentation

Contributors

Install ruff 0.16.5

Install prebuilt binaries via shell script

Install prebuilt binaries via powershell script

Download ruff 0.16.5

0.16.5

Preview features

Bug fixes

Server

Documentation

Contributors

0.16.4

Preview features

Bug fixes

2.68.1

enable_logs

Bug Fixes 🐛

2.68.0

Important

Action Needed

2.68.1

enable_logs

Bug Fixes 🐛

2.68.0

Important

Action Needed

Uh oh!

smarnach commented Sep 2, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot Bot commented on behalf of github Sep 1, 2026 •

edited

Loading

`enable_logs`

`enable_logs`