Skip to content

Bump the production-dependencies group with 19 updates #1792

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 4 commits into from
Closed

Bump the production-dependencies group with 19 updates #1792

dependabot wants to merge 4 commits into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 5, 2025 •
edited
Loading

Bumps the production-dependencies group with 20 updates:

Package From To
flask 3.1.1 3.1.2
google-cloud-datastore 2.20.2 2.21.0
grpcio 1.71.0 1.76.0
pyyaml 6.0.2 6.0.3
requests 2.32.4 2.32.5
structlog 25.2.0 25.5.0
boto3 1.37.23 1.42.3
humanize 4.12.2 4.14.0
google-cloud-storage 3.1.0 3.6.0
redis 6.4.0 7.1.0
flask-compress 1.17 1.23
uwsgi 2.0.28 2.0.31
email-validator 2.2.0 2.3.0
google-cloud-pubsub 2.29.0 2.33.0
google-cloud-tasks 2.19.2 2.20.0
simplejson 3.20.1 3.20.2
markupsafe 3.0.2 3.0.3
cachetools 5.5.2 6.2.2
gevent 24.11.1 25.9.1

Updates flask from 3.1.1 to 3.1.2

Release notes

Sourced from flask's releases.

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776
Changelog

Sourced from flask's changelog.

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776
Commits
  • 2c1b30d release version 3.1.2
  • 1292419 Update GitHub Actions workflow for artifact handling (#5795)
  • 4dd52ca Update GitHub Actions workflow for artifact handling
  • 55c6255 update dev dependencies
  • d8259eb use Jinja name consistently
  • 38b4c1e refactor stream_with_context for async views (#5799)
  • 9822a03 refactor stream_with_context for async views
  • 49b7e7b security docs for TRUSTED_HOSTS (#5798)
  • b228ca3 security docs for TRUSTED_HOSTS
  • ff64079 update flask-talisman link
  • Additional commits viewable in compare view

Updates google-cloud-datastore from 2.20.2 to 2.21.0

Release notes

Sourced from google-cloud-datastore's releases.

v2.21.0

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Changelog

Sourced from google-cloud-datastore's changelog.

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Commits
  • 1dafc68 chore(main): release 2.21.0 (#595)
  • d391911 chore(python): remove CONTRIBUTING.rst from templates (#605)
  • 16b9c73 chore(python): fix incorrect import statement in README (#604)
  • ed92e8e fix: backwards-compatibility for previous meaning format (#603)
  • a7df080 chore: Update gapic-generator-python to 1.23.6 (#602)
  • 7c1171b fix: Allow protobuf 6.x (#598)
  • 7be9c4c chore: Update gapic-generator-python to v1.23.2 (#569)
  • 9f83d17 chore(python): conditionally load credentials in .kokoro/build.sh (#594)
  • 14a0f96 chore: update protoplus for python 3.13 (#579)
  • 59bf5f9 chore(python): Update the python version in docs presubmit to use 3.10 (#584)
  • See full diff in compare view

Updates grpcio from 1.71.0 to 1.76.0

Release notes

Sourced from grpcio's releases.

Release v1.76.0

This is release 1.76.0 (genuine) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • Prioritize system CA over bundled CA. (#40583)
  • [event_engine] Introduce a event_engine_poller_for_python experiment. (#40243)
  • [metrics] add grpc.lb.backend_service label. (#40486)

C#

  • [csharp tools] #39374 Grpc.Tools can't process file Suffix name with Upper character. (#40072)

Python

  • [Python] gRPC AsyncIO: Improve CompletionQueue polling performance. (#39993)

Release v1.76.0-pre1

This is a prerelease of gRPC Core 1.76.0 (genuine).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.75.1

This is release gRPC Core 1.75.1 (gemini).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

  • Release grpcio wheels with Python 3.14 support (#40403)
  • Asyncio: fixes grpc shutdown race condition occurring during python interpreter finalizations. (#40447)
    • This also addresses previously reported issues with empty error message on Python interpreter exit (Error in sys.excepthook:/Original exception was: empty): #36655, #38679, #33342
  • Python 3.14: preserve current behavior when using grpc.aio async methods outside of a running event loop. (#40750)
    • Note: using async methods outside of a running event loop is discouraged by Python, and will be deprecated in future gRPC releases. Please use the asyncio.run() function (or asyncio.Runner for custom loop factories). For interactive mode, use dedicated asyncio REPL: python -m asyncio.

Full Changelog: grpc/grpc@v1.75.0...v1.75.1

... (truncated)

Commits
  • f5ffb68 [Release] Bump version to 1.76.0 (on v1.76.x branch) (#40925)
  • ffd8379 [Release] Bump version to 1.76.0-pre1 (on v1.76.x branch) (#40798)
  • 835d394 [Release] Bump core version to 51.0.0 for upcoming release (#40784)
  • de6ce7f [PH2] Add files for goaway support (#40786)
  • f7dd7f4 [PH2][Trivial][CleanUp]
  • 2d40a37 [PH2][ChannelZ][ZTrace][Skeleton]
  • 83acb27 [build] Add Missing Dependencies for reflection_proto in Preparation for Enab...
  • abfe8a2 [PH2] Stream list represents streams open for reads.
  • c65d8de [PH2][Expt] Fix the experiment expiry
  • 755d025 Fix latent_see_test flakiness
  • Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates structlog from 25.2.0 to 25.5.0

Release notes

Sourced from structlog's releases.

25.5.0

Highlights

Huge release! There's plenty of important little bug fixes and new features, but the headliner is definitely the improved ergonomics of structlog.dev.ConsoleRenderer. We have finally accepted that local development has different priorities than production and made it both mutable (with automatic re-configuration) and also easily retrievable (cr = ConsoleRenderer.get_active()). This allows you, for example, to disable Rich exception formatting as easily as structlog.dev.ConsoleRenderer.get_active().exception_formatter = structlog.dev.plain_traceback. Please check out the updated docs!

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), thanks.dev (@thnxdev), Privacy Solutions GmbH (@privacy-solutions), Quesma (@​QuesmaOrg), FilePreviews (@filepreviews), LambdaTest (@LambdaTest-Inc), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Jeff McCarrell (@jmccarrell), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), Roboflow (@roboflow), and Jeff McCarrell (@jmccarrell).

Full Changelog

Deprecated

  • structlog.dev.ConsoleRenderer()'s pad_event argument has been renamed to pad_event_to to differentiate it from the boolean pad_level argument. pad_event is now deprecated.

Added

  • Added structlog.dev.ConsoleRenderer.get_active() that returns the currently active structlog.dev.ConsoleRenderer(). #749

  • structlog.dev.ConsoleRenderer() now supports setting the exception_formatter attribute.

    You can now disable the pretty-printing of exceptions by setting it to structlog.dev.plain_traceback:

    cr = structlog.dev.ConsoleRenderer.get_active()
cr.exception_formatter = structlog.dev.plain_traceback

    Same goes for sort_keys, columns, colors, force_colors, level_styles, pad_event_to, event_key, timestamp_key, and repr_native_str.

    #749 #756 #757 #759

  • Added structlog.dev.ConsoleRenderer.get_default_column_styles() for reuse the default column styles. #741

  • structlog.testing.capture_logs() now optionally accepts processors to apply before capture. #728

... (truncated)

Changelog

Sourced from structlog's changelog.

25.5.0 - 2025-10-27

Deprecated

  • structlog.dev.ConsoleRenderer()'s pad_event argument has been renamed to pad_event_to to differentiate it from the boolean pad_level argument. pad_event is now deprecated.

Added

  • Added structlog.dev.ConsoleRenderer.get_active() that returns the currently active structlog.dev.ConsoleRenderer(). #749

  • structlog.dev.ConsoleRenderer() now supports setting the exception_formatter attribute.

    You can now disable the pretty-printing of exceptions by setting it to structlog.dev.plain_traceback:

    cr = structlog.dev.ConsoleRenderer.get_active()
cr.exception_formatter = structlog.dev.plain_traceback

    Same goes for sort_keys, columns, colors, force_colors, level_styles, pad_event_to, event_key, timestamp_key, and repr_native_str.

    #749 #756 #757 #759

  • Added structlog.dev.ConsoleRenderer.get_default_column_styles() for reuse the default column styles. #741

  • structlog.testing.capture_logs() now optionally accepts processors to apply before capture. #728

  • structlog.dev.RichTracebackFormatter now exposes the upstream code_width parameter. Default width is now None for full terminal width. Full terminal width is now handled by Rich itself, bringing support for reflow and COLUMN environment variable. Passing -1 for width is now deprecated and automatically replaced by None. #717

  • Native loggers now allow the passing of a dictionary for dictionary-based interpolation log.info("hello %(name)s!", {"name": "world"}). #748

  • On Python 3.11+, structlog.processors.CallsiteParameterAdder now supports CallsiteParameter.QUAL_NAME that adds the qualified name of the callsite, including scope and class names. This is only available for structlog-originated events since the standard library has no equivalent.

  • structlog.stdlib.LoggerFactory now supports the stacklevel parameter. #763

... (truncated)

Commits

Updates boto3 from 1.37.23 to 1.42.3

Commits
  • 3471175 Merge branch 'release-1.42.3'
  • 2e3d125 Bumping version to 1.42.3
  • 04ebd3c Add changelog entries from botocore
  • cc95ab6 Merge branch 'release-1.42.2'
  • 743b8e4 Merge branch 'release-1.42.2' into develop
  • 8f7ba80 Bumping version to 1.42.2
  • 119aff9 Add changelog entries from botocore
  • 65b24a4 Merge branch 'release-1.42.1'
  • 71a06cf Merge branch 'release-1.42.1' into develop
  • 5991e64 Bumping version to 1.42.1
  • Additional commits viewable in compare view

Updates humanize from 4.12.2 to 4.14.0

Release notes

Sourced from humanize's releases.

4.14.0

Added

Changed

4.13.0

Changed

Fixed

4.12.3

Fixed

Commits

Updates google-cloud-storage from 3.1.0 to 3.6.0

Release notes

Sourced from google-cloud-storage's releases.

v3.6.0

3.6.0 (2025-11-17)

Features

  • Add support for partial list buckets (#1606) (92fc2b0)
  • Make return_partial_success and unreachable fields public for list Bucket (#1601) (323cddd)
  • zb-experimental: Add async write object stream (5ab8103)
  • zb-experimental: Add async write object stream (#1612) (5ab8103)

Bug Fixes

v3.5.0

3.5.0 (2025-11-05)

Features

  • Ensure that Python in FIPS mode can fetch MD5 implementation (#1522) (961536c)
  • Provide option to update user_agent (#1596) (02f1451)

Bug Fixes

  • Deprecate credentials_file argument (74415a2)
  • Flaky system tests for resumable_media (#1592) (7fee3dd)
  • Make download_ranges compatible with asyncio.create_task(..) (#1591) (faf8b83)
  • Make download_ranges compatible with asyncio.create_task(..) (#1591) (faf8b83)
  • Redact sensitive data from OTEL traces and fix env var parsing (#1553) (a38ca19)
  • Redact sensitive data from OTEL traces and fix env var parsing (#1553) (a38ca19)
  • Use separate header object for each upload in Transfer Manager MPU (#1595) (0d867bd)

v3.4.1

3.4.1 (2025-10-08)

Bug Fixes

  • Fixes #1561 by adding an option to specify the entire object checksum for resumable uploads via the upload_from_string, upload_from_file, and upload_from_filename methods (acb918e)

v3.4.0

3.4.0 (2025-09-15)

Features

... (truncated)

Changelog

Sourced from google-cloud-storage's changelog.

3.6.0 (2025-11-17)

Features

  • Add support for partial list buckets (#1606) (92fc2b0)
  • Make return_partial_success and unreachable fields public for list Bucket (#1601) (323cddd)
  • zb-experimental: Add async write object stream (5ab8103)
  • zb-experimental: Add async write object stream (#1612) (5ab8103)

Bug Fixes

3.5.0 (2025-11-05)

Features

  • experimental: Add base resumption strategy for bidi streams (#1594) (5fb85ea)
  • experimental: Add checksum for bidi reads operation (#1566) (93ce515)
  • experimental: Add read resumption strategy (#1599) (5d5e895)
  • experimental: Handle BidiReadObjectRedirectedError for bidi reads (#1600) (71b0f8a)
  • Indicate that md5 is used as a CRC (#1522) (961536c)
  • Provide option to update user_agent (#1596) (02f1451)

Bug Fixes

  • Deprecate credentials_file argument (74415a2)
  • Flaky system tests for resumable_media (#1592) (7fee3dd)
  • Make download_ranges compatible with asyncio.create_task(..) (#1591) (faf8b83)
  • Make download_ranges compatible with asyncio.create_task(..) (#1591) (faf8b83)
  • Redact sensitive data from OTEL traces and fix env var parsing (#1553) (a38ca19)
  • Redact sensitive data from OTEL traces and fix env var parsing (#1553) (a38ca19)
  • Use separate header object for each upload in Transfer Manager MPU (#1595) (0d867bd)

3.4.1 (2025-10-08)

Bug Fixes

  • Fixes #1561 by adding an option to specify the entire object checksum for resumable uploads via the upload_from_string, upload_from_file, and upload_from_filename methods (acb918e)

3.4.0 (2025-09-15)

Features

... (truncated)

Commits
  • 0b70a28 chore(main): release 3.6.0 (#1603)
  • 5ab8103 feat(zb-experimental): add async write object stream (#1612)
  • 92fc2b0 feat: add support for partial list buckets (#1606)
  • 195d644 fix: dont pass credentials to StorageClient (#1608)
  • 323cddd feat: make return_partial_success and unreachable fields public for list Buck...
  • c2cd474 chore(main): release 3.5.0 (#1568)
  • 71b0f8a feat(experimental): Handle BidiReadObjectRedirectedError for bidi reads (#1600)
  • 5d5e895 feat(experimental): Add read resumption strategy (#1599)
  • 5fb85ea feat(experimental): Add base resumption strategy for bidi streams (#1594)
  • 0d867bd fix: Use separate header object for each upload in Transfer Manager MPU (#1595)
  • Additional commits viewable in compare view

Updates redis from 6.4.0 to 7.1.0

Release notes

Sourced from redis's releases.

7.1.0

Changes

🚀 New Features

  • Adding MSETEX command support. (#3823)
  • Adding CLAIM option to XREADGROUP command + unit tests (#3825)
  • Apply routing and response aggregation policies in OSS Cluster mode (#3834)

🧪 Experimental Features

  • Adding support for CAS/CAD commands. (#3837)
  • Adding support for HYBRID search. (#3813 #3843)

🔥 Breaking changes (in experimental features)

  • Replace default health check and failure detector with custom (#3822)

🐛 Bug Fixes

  • Add **options to parse functions for sentinel (#3831)
  • Generating unique command cache key (#3765)

🧰 Maintenance

  • Adding Redis 8.4 RC1 image to test matrix. (#3820)
  • Remove Python 3.9 support. Add Python 3.14 support. (#3814)
  • Sync readme with 7.0.1 and update lib version to latest stable released version - 7.0.1 (#3821)
  • Bump rojopolis/spellcheck-github-actions from 0.52.0 to 0.53.0 (#3827)
  • Bump actions/upload-artifact from 4 to 5 (#3828)
  • Bump github/codeql-action from 3 to 4 (#3829)
  • Fixing flaky tests (#3833 #3838)
  • Update 8.4 RC image tag to 8.4-RC1-pre.2 for pipeline test matrix (#3832)
  • Add missing f-string when returning an error. (#3841)
  • Adding latest 8.4 image to test matrix. Updating the Hybrid VSIM query format to be in sync with spec after srv issue was fixed. (#3843)
  • Expand cluster READ_COMMANDS with additional read-only commands and reorganize the list of commands by category (#3845)
  • Update Type Hints for List Command Parameters from str to KeyT (#3848)
  • Changing log level to be debug for failed maintenance notification enablement when enabled='auto' (#3851)
  • Added custom event handler section (#3853)
  • Changing current version to 8.4 as it is already GA (#3854)

We'd like to thank all the contributors who worked on this release! @​ShubhamKaudewar @​matthewwiese @​peperon @​vladvildanov @​petyaslavova

7.0.1

Changes

This release adds small fixes related to documentation.

🧰 Maintenance

  • Add 'multi_database' section to documentation index (313d93f)
  • Revised multi-database client documentation(78df745)
  • Adding info about Multi-database client in README.md (3f7a55e)
Description has been truncated

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 5, 2025
@dependabot dependabot bot requested a review from a team as a code owner December 5, 2025 08:13
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 5, 2025
@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-c1315df31e branch from d3a501c to f7f1464 Compare December 12, 2025 08:13
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Dec 12, 2025

Benchmark Results

Percentile Averages:
50th: 81ms
90th: 371ms
95th: 652ms
99th: 1264ms
99.9th: 2250ms
GETs (99th): 1502ms
POSTs (99th): 990ms

PDF: 16000ms
Session: 8500ms

Total Requests: 63,031
Total Failures: 0
Error Percentage: 0.0%

@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-c1315df31e branch from f7f1464 to b8deb8b Compare December 17, 2025 13:53
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Dec 18, 2025

Benchmark Results

Percentile Averages:
50th: 106ms
90th: 447ms
95th: 702ms
99th: 1345ms
99.9th: 2513ms
GETs (99th): 1596ms
POSTs (99th): 1054ms

PDF: 9800ms
Session: 8900ms

Total Requests: 60,835
Total Failures: 0
Error Percentage: 0.0%

@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-c1315df31e branch from b8deb8b to 5a68dc9 Compare December 19, 2025 08:13
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Dec 19, 2025

Benchmark Results

Percentile Averages:
50th: 77ms
90th: 288ms
95th: 485ms
99th: 975ms
99.9th: 1675ms
GETs (99th): 1152ms
POSTs (99th): 771ms

PDF: 9300ms
Session: 8300ms

Total Requests: 64,902
Total Failures: 0
Error Percentage: 0.0%

@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-c1315df31e branch from 5a68dc9 to fe78e56 Compare December 26, 2025 08:14
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Dec 26, 2025

Benchmark Results

Percentile Averages:
50th: 79ms
90th: 202ms
95th: 350ms
99th: 773ms
99.9th: 1588ms
GETs (99th): 936ms
POSTs (99th): 584ms

PDF: 8900ms
Session: 7600ms

Total Requests: 66,453
Total Failures: 0
Error Percentage: 0.0%

@dependabot
Bump the production-dependencies group with 20 updates
b9aa899 
Bumps the production-dependencies group with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [flask](https://github.com/pallets/flask) | `3.1.1` | `3.1.2` |
| [google-cloud-datastore](https://github.com/googleapis/python-datastore) | `2.20.2` | `2.21.0` |
| [grpcio](https://github.com/grpc/grpc) | `1.71.0` | `1.76.0` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [structlog](https://github.com/hynek/structlog) | `25.2.0` | `25.5.0` |
| [boto3](https://github.com/boto/boto3) | `1.37.23` | `1.42.3` |
| [humanize](https://github.com/python-humanize/humanize) | `4.12.2` | `4.14.0` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.26.1` | `4.1.0` |
| [google-cloud-storage](https://github.com/googleapis/python-storage) | `3.1.0` | `3.6.0` |
| [redis](https://github.com/redis/redis-py) | `6.4.0` | `7.1.0` |
| [flask-compress](https://github.com/colour-science/flask-compress) | `1.17` | `1.23` |
| [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.28` | `2.0.31` |
| [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` |
| [google-cloud-pubsub](https://github.com/googleapis/python-pubsub) | `2.29.0` | `2.33.0` |
| [google-cloud-tasks](https://github.com/googleapis/google-cloud-python) | `2.19.2` | `2.20.0` |
| [simplejson](https://github.com/simplejson/simplejson) | `3.20.1` | `3.20.2` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [cachetools](https://github.com/tkem/cachetools) | `5.5.2` | `6.2.2` |
| [gevent](https://github.com/gevent/gevent) | `24.11.1` | `25.9.1` |


Updates `flask` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.1...3.1.2)

Updates `google-cloud-datastore` from 2.20.2 to 2.21.0
- [Release notes](https://github.com/googleapis/python-datastore/releases)
- [Changelog](https://github.com/googleapis/python-datastore/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-datastore@v2.20.2...v2.21.0)

Updates `grpcio` from 1.71.0 to 1.76.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.71.0...v1.76.0)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `structlog` from 25.2.0 to 25.5.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.2.0...25.5.0)

Updates `boto3` from 1.37.23 to 1.42.3
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.37.23...1.42.3)

Updates `humanize` from 4.12.2 to 4.14.0
- [Release notes](https://github.com/python-humanize/humanize/releases)
- [Commits](python-humanize/humanize@4.12.2...4.14.0)

Updates `marshmallow` from 3.26.1 to 4.1.0
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...4.1.0)

Updates `google-cloud-storage` from 3.1.0 to 3.6.0
- [Release notes](https://github.com/googleapis/python-storage/releases)
- [Changelog](https://github.com/googleapis/python-storage/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-storage@v3.1.0...v3.6.0)

Updates `redis` from 6.4.0 to 7.1.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v6.4.0...v7.1.0)

Updates `flask-compress` from 1.17 to 1.23
- [Changelog](https://github.com/colour-science/flask-compress/blob/master/CHANGELOG.md)
- [Commits](colour-science/flask-compress@v1.17...v1.23)

Updates `uwsgi` from 2.0.28 to 2.0.31

Updates `email-validator` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/JoshData/python-email-validator/releases)
- [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md)
- [Commits](JoshData/python-email-validator@v2.2.0...v2.3.0)

Updates `google-cloud-pubsub` from 2.29.0 to 2.33.0
- [Release notes](https://github.com/googleapis/python-pubsub/releases)
- [Changelog](https://github.com/googleapis/python-pubsub/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-pubsub@v2.29.0...v2.33.0)

Updates `google-cloud-tasks` from 2.19.2 to 2.20.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-tasks-v2.19.2...google-cloud-tasks-v2.20.0)

Updates `simplejson` from 3.20.1 to 3.20.2
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](simplejson/simplejson@v3.20.1...v3.20.2)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `cachetools` from 5.5.2 to 6.2.2
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v5.5.2...v6.2.2)

Updates `gevent` from 24.11.1 to 25.9.1
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@24.11.1...25.9.1)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: google-cloud-datastore
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: grpcio
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: structlog
  dependency-version: 25.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: boto3
  dependency-version: 1.42.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: humanize
  dependency-version: 4.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marshmallow
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: google-cloud-storage
  dependency-version: 3.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: redis
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: flask-compress
  dependency-version: '1.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: uwsgi
  dependency-version: 2.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: email-validator
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-pubsub
  dependency-version: 2.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-tasks
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: simplejson
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: cachetools
  dependency-version: 6.2.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: gevent
  dependency-version: 25.9.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-c1315df31e branch from fe78e56 to b9aa899 Compare January 9, 2026 08:23
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Jan 9, 2026

Benchmark Results

Percentile Averages:
50th: 84ms
90th: 298ms
95th: 492ms
99th: 999ms
99.9th: 1626ms
GETs (99th): 1214ms
POSTs (99th): 751ms

PDF: 12000ms
Session: 8500ms

Total Requests: 64,596
Total Failures: 0
Error Percentage: 0.0%

@rmccar rmccar changed the title Bump the production-dependencies group with 20 updates Bump the production-dependencies group with 19 updates Jan 15, 2026
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Jan 15, 2026

Benchmark Results

Percentile Averages:
50th: 94ms
90th: 320ms
95th: 506ms
99th: 969ms
99.9th: 1951ms
GETs (99th): 1197ms
POSTs (99th): 706ms

PDF: 13000ms
Session: 8700ms

Total Requests: 63,738
Total Failures: 0
Error Percentage: 0.0%

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jan 23, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jan 23, 2026
@dependabot dependabot bot deleted the dependabot/pip/main/production-dependencies-c1315df31e branch January 23, 2026 08:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ons-eq-team @rmccar