Skip to content

Bump the production-dependencies group across 1 directory with 21 updates #1815

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump the production-dependencies group across 1 directory with 21 updates #1815

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 23, 2026

Bumps the production-dependencies group with 21 updates in the / directory:

Package From To
flask 3.1.1 3.1.2
google-cloud-datastore 2.20.2 2.21.0
grpcio 1.71.0 1.76.0
gunicorn 23.0.0 24.0.0
pyyaml 6.0.2 6.0.3
requests 2.32.4 2.32.5
structlog 25.2.0 25.5.0
boto3 1.37.23 1.42.33
humanize 4.12.2 4.15.0
marshmallow 3.26.1 4.2.0
google-cloud-storage 3.1.0 3.8.0
redis 6.4.0 7.1.0
flask-compress 1.17 1.23
uwsgi 2.0.28 2.0.31
email-validator 2.2.0 2.3.0
google-cloud-pubsub 2.29.0 2.34.0
google-cloud-tasks 2.19.2 2.21.0
simplejson 3.20.1 3.20.2
markupsafe 3.0.2 3.0.3
cachetools 5.5.2 6.2.4
gevent 24.11.1 25.9.1

Updates flask from 3.1.1 to 3.1.2

Release notes

Sourced from flask's releases.

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776
Changelog

Sourced from flask's changelog.

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776
Commits
  • 2c1b30d release version 3.1.2
  • 1292419 Update GitHub Actions workflow for artifact handling (#5795)
  • 4dd52ca Update GitHub Actions workflow for artifact handling
  • 55c6255 update dev dependencies
  • d8259eb use Jinja name consistently
  • 38b4c1e refactor stream_with_context for async views (#5799)
  • 9822a03 refactor stream_with_context for async views
  • 49b7e7b security docs for TRUSTED_HOSTS (#5798)
  • b228ca3 security docs for TRUSTED_HOSTS
  • ff64079 update flask-talisman link
  • Additional commits viewable in compare view

Updates google-cloud-datastore from 2.20.2 to 2.21.0

Release notes

Sourced from google-cloud-datastore's releases.

v2.21.0

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Changelog

Sourced from google-cloud-datastore's changelog.

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Commits
  • 1dafc68 chore(main): release 2.21.0 (#595)
  • d391911 chore(python): remove CONTRIBUTING.rst from templates (#605)
  • 16b9c73 chore(python): fix incorrect import statement in README (#604)
  • ed92e8e fix: backwards-compatibility for previous meaning format (#603)
  • a7df080 chore: Update gapic-generator-python to 1.23.6 (#602)
  • 7c1171b fix: Allow protobuf 6.x (#598)
  • 7be9c4c chore: Update gapic-generator-python to v1.23.2 (#569)
  • 9f83d17 chore(python): conditionally load credentials in .kokoro/build.sh (#594)
  • 14a0f96 chore: update protoplus for python 3.13 (#579)
  • 59bf5f9 chore(python): Update the python version in docs presubmit to use 3.10 (#584)
  • See full diff in compare view

Updates grpcio from 1.71.0 to 1.76.0

Release notes

Sourced from grpcio's releases.

Release v1.76.0

This is release 1.76.0 (genuine) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • Prioritize system CA over bundled CA. (#40583)
  • [event_engine] Introduce a event_engine_poller_for_python experiment. (#40243)
  • [metrics] add grpc.lb.backend_service label. (#40486)

C#

  • [csharp tools] #39374 Grpc.Tools can't process file Suffix name with Upper character. (#40072)

Python

  • [Python] gRPC AsyncIO: Improve CompletionQueue polling performance. (#39993)

Release v1.76.0-pre1

This is a prerelease of gRPC Core 1.76.0 (genuine).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.75.1

This is release gRPC Core 1.75.1 (gemini).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

  • Release grpcio wheels with Python 3.14 support (#40403)
  • Asyncio: fixes grpc shutdown race condition occurring during python interpreter finalizations. (#40447)
    • This also addresses previously reported issues with empty error message on Python interpreter exit (Error in sys.excepthook:/Original exception was: empty): #36655, #38679, #33342
  • Python 3.14: preserve current behavior when using grpc.aio async methods outside of a running event loop. (#40750)
    • Note: using async methods outside of a running event loop is discouraged by Python, and will be deprecated in future gRPC releases. Please use the asyncio.run() function (or asyncio.Runner for custom loop factories). For interactive mode, use dedicated asyncio REPL: python -m asyncio.

Full Changelog: grpc/grpc@v1.75.0...v1.75.1

... (truncated)

Commits
  • f5ffb68 [Release] Bump version to 1.76.0 (on v1.76.x branch) (#40925)
  • ffd8379 [Release] Bump version to 1.76.0-pre1 (on v1.76.x branch) (#40798)
  • 835d394 [Release] Bump core version to 51.0.0 for upcoming release (#40784)
  • de6ce7f [PH2] Add files for goaway support (#40786)
  • f7dd7f4 [PH2][Trivial][CleanUp]
  • 2d40a37 [PH2][ChannelZ][ZTrace][Skeleton]
  • 83acb27 [build] Add Missing Dependencies for reflection_proto in Preparation for Enab...
  • abfe8a2 [PH2] Stream list represents streams open for reads.
  • c65d8de [PH2][Expt] Fix the experiment expiry
  • 755d025 Fix latent_see_test flakiness
  • Additional commits viewable in compare view

Updates gunicorn from 23.0.0 to 24.0.0

Release notes

Sourced from gunicorn's releases.

24.0.0

New Features

  • ASGI Worker (Beta): Native asyncio-based ASGI support for running async Python frameworks like FastAPI, Starlette, and Quart without external dependencies

    • HTTP/1.1 with keepalive connections
    • WebSocket support
    • Lifespan protocol for startup/shutdown hooks
    • Optional uvloop for improved performance

  • uWSGI Binary Protocol: Support for receiving requests from nginx via uwsgi_pass directive

  • Documentation Migration: Migrated to MkDocs with Material theme

Security

Install

pip install gunicorn==24.0.0
Commits
  • 3960372 Merge pull request #3426 from benoitc/website-2025
  • d34d3de docs: Set release date for 24.0.0
  • 066e6d8 docs: Move ASGI worker tab after Gthread
  • c6b1159 docs: Add Tornado worker to design page
  • c959dae docs: Redesign architecture page with visual components
  • 571bc12 docs: Add punchy theme with vibrant colors and modern features
  • 73adc7c docs: Add collapsible TOC for settings reference
  • dcec6e7 docs: Modern landing page with custom template
  • 5ea4eb3 docs: Add 2026 changelog and modernize README
  • 0b96103 docs: Configure GitHub Pages deployment with custom domain
  • Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates structlog from 25.2.0 to 25.5.0

Release notes

Sourced from structlog's releases.

25.5.0

Highlights

Huge release! There's plenty of important little bug fixes and new features, but the headliner is definitely the improved ergonomics of structlog.dev.ConsoleRenderer. We have finally accepted that local development has different priorities than production and made it both mutable (with automatic re-configuration) and also easily retrievable (cr = ConsoleRenderer.get_active()). This allows you, for example, to disable Rich exception formatting as easily as structlog.dev.ConsoleRenderer.get_active().exception_formatter = structlog.dev.plain_traceback. Please check out the updated docs!

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), thanks.dev (@thnxdev), Privacy Solutions GmbH (@privacy-solutions), Quesma (@​QuesmaOrg), FilePreviews (@filepreviews), LambdaTest (@LambdaTest-Inc), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Jeff McCarrell (@jmccarrell), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), Roboflow (@roboflow), and Jeff McCarrell (@jmccarrell).

Full Changelog

Deprecated

  • structlog.dev.ConsoleRenderer()'s pad_event argument has been renamed to pad_event_to to differentiate it from the boolean pad_level argument. pad_event is now deprecated.

Added

  • Added structlog.dev.ConsoleRenderer.get_active() that returns the currently active structlog.dev.ConsoleRenderer(). #749

  • structlog.dev.ConsoleRenderer() now supports setting the exception_formatter attribute.

    You can now disable the pretty-printing of exceptions by setting it to structlog.dev.plain_traceback:

    cr = structlog.dev.ConsoleRenderer.get_active()
cr.exception_formatter = structlog.dev.plain_traceback

    Same goes for sort_keys, columns, colors, force_colors, level_styles, pad_event_to, event_key, timestamp_key, and repr_native_str.

    #749 #756 #757 #759

  • Added structlog.dev.ConsoleRenderer.get_default_column_styles() for reuse the default column styles. #741

  • structlog.testing.capture_logs() now optionally accepts processors to apply before capture. #728

... (truncated)

Changelog

Sourced from structlog's changelog.

25.5.0 - 2025-10-27

Deprecated

  • structlog.dev.ConsoleRenderer()'s pad_event argument has been renamed to pad_event_to to differentiate it from the boolean pad_level argument. pad_event is now deprecated.

Added

  • Added structlog.dev.ConsoleRenderer.get_active() that returns the currently active structlog.dev.ConsoleRenderer(). #749

  • structlog.dev.ConsoleRenderer() now supports setting the exception_formatter attribute.

    You can now disable the pretty-printing of exceptions by setting it to structlog.dev.plain_traceback:

    cr = structlog.dev.ConsoleRenderer.get_active()
cr.exception_formatter = structlog.dev.plain_traceback

    Same goes for sort_keys, columns, colors, force_colors, level_styles, pad_event_to, event_key, timestamp_key, and repr_native_str.

    #749 #756 #757 #759

  • Added structlog.dev.ConsoleRenderer.get_default_column_styles() for reuse the default column styles. #741

  • structlog.testing.capture_logs() now optionally accepts processors to apply before capture. #728

  • structlog.dev.RichTracebackFormatter now exposes the upstream code_width parameter. Default width is now None for full terminal width. Full terminal width is now handled by Rich itself, bringing support for reflow and COLUMN environment variable. Passing -1 for width is now deprecated and automatically replaced by None. #717

  • Native loggers now allow the passing of a dictionary for dictionary-based interpolation log.info("hello %(name)s!", {"name": "world"}). #748

  • On Python 3.11+, structlog.processors.CallsiteParameterAdder now supports CallsiteParameter.QUAL_NAME that adds the qualified name of the callsite, including scope and class names. This is only available for structlog-originated events since the standard library has no equivalent.

  • structlog.stdlib.LoggerFactory now supports the stacklevel parameter. #763

... (truncated)

Commits

Updates boto3 from 1.37.23 to 1.42.33

Commits
  • 9cadce5 Merge branch 'release-1.42.33'
  • b0f2cf3 Bumping version to 1.42.33
  • 6e690ed Add changelog entries from botocore
  • b84ec5e Add BOTOCORE_TCP_KEEPALIVE environment variable documentation (#4705)
  • 36cebd3 Merge branch 'release-1.42.32'
  • d4d1044 Merge branch 'release-1.42.32' into develop
  • 4571884 Bumping version to 1.42.32
  • dcbc83d Add changelog entries from botocore
  • b781827 Merge branch 'release-1.42.31'
  • 4fb3f58 Merge branch 'release-1.42.31' into develop
  • Additional commits viewable in compare view

Updates humanize from 4.12.2 to 4.15.0

Release notes

Sourced from humanize's releases.

4.15.0

Added

Changed

Fixed

4.14.0

Added

Changed

4.13.0

Changed

Fixed

4.12.3

Fixed

Commits
  • 2ddb590 Replace Exception with more specific FileNotFoundError (#286)
  • e87f2e2 Add locale support for decimal separator in intword (#287)
  • 7175184 Add locale support for decimal separator in intword
  • 2526999 Update config (#285)
  • ba532d9 Replace Exception with more specific FileNotFoundError
  • bdc49ea Don't ignore UP038, it's been removed from Ruff
  • 86f116b Add seven-day cooldown to Renovate
  • e3f7116 No need for setup-python with prek-action
  • 3dca143 naturaldelta: round the value to nearest unit that makes sense (#272)
  • bac6f26 Apply suggestion from @​hugovk
  • Additional commits viewable in compare view

Updates marshmallow from 3.26.1 to 4.2.0

Changelog

Sourced from marshmallow's changelog.

4.2.0 (2026-01-04)

Other changes:

  • many argument of Nested properly overrides schema instance value (:pr:2854). Thanks :user:jafournier for the PR.

4.1.2 (2025-12-19)

Bug fixes:

  • :cve:2025-68480: Merge error store messages without rebuilding collections. Thanks 카푸치노 for reporting and :user:deckar01 for the fix.

4.1.1 (2025-11-05)

Bug fixes:

  • Ensure URL validator is case-insensitive when using custom schemes (:pr:2874). Thanks :user:T90REAL for the PR.

4.1.0 (2025-11-01)

Other changes:

  • Add __len__ implementation to missing so that it can be used with validate.Length <marshmallow.validate.Length> (:pr:2861). Thanks :user:agentgodzilla for the PR.
  • Drop support for Python 3.9 (:pr:2363).
  • Test against Python 3.14 (:pr:2864).

4.0.1 (2025-08-28)

Bug fixes:

  • Fix wildcard import of from marshmallow import * (:pr:2823). Thanks :user:Florian-Laport for the PR.

4.0.0 (2025-04-16)

See :ref:upgrading_4_0 for a guide on updating your code.

Features:

... (truncated)

Commits

Updates google-cloud-storage from 3.1.0 to 3.8.0

Release notes

Sourced from google-cloud-storage's releases.

google-cloud-storage 3.8.0

3.8.0 (2026-01-13)

Features

Bug Fixes

  • no state lookup while opening bidi-write stream (2d5a7b16)

  • no state lookup while opening bidi-write stream (#1636) (2d5a7b16)

  • close write object stream always (#1661) (4a609a4b)

  • add system test for opening with read_handle (#1672) (6dc711da)

v3.7.0

3.7.0 (2025-12-09)

Features

  • Auto enable mTLS when supported certificates are detected (#1637) (4e91c54)
  • Send entire object checksum in the final api call of resumable upload (#1654) (ddce7e5)
  • Support urllib3 >= 2.6.0 (#1658) (57405e9)

Bug Fixes

  • bucket: Move blob fails when the new blob name contains characters that need to be url encoded (#1605) (ec470a2)

v3.6.0

3.6.0 (2025-11-17)

Features

... (truncated)

Changelog

Sourced from google-cloud-storage's changelog.

3.8.0 (2026-01-13)

Features

Bug Fixes

3.7.0 (2025-12-09)

Features

  • Auto enable mTLS when supported certificates are detected (#1637) (4e91c54)
  • Send entire object checksum in the final api call of resumable upload (#1654) (ddce7e5)
  • Support urllib3 >= 2.6.0 (#1658) (57405e9)

Bug Fixes

  • Fix for move_blob failure when the new blob name contains characters that need to be url encoded (#1605) (ec470a2)

3.6.0 (2025-11-17)

Features

  • Add support for partial list buckets (#1606) (92fc2b0)
  • Make return_partial_success and unreachable fields public for list Bucket (#1601) (323cddd)
  • zb-experimental: Add async write object stream (5ab8103)
  • zb-experimental: Add async write object stream (#1612) (5ab8103)

Bug Fixes

3.5.0 (2025-11-05)

... (truncated)

Commits
  • 16cf512 chore: librarian release pull request: 20260113T144551Z (#1704)
  • 94ad895 chore(librarian): bump library version to 3.7.0 (#1703)
  • 89bfe7a feat(experimental): flush the last chunk in append method (#1699)
  • a57ea0e feat(experimental): add write resumption strategy (#1663)
  • 0c35d3f chore(tests): add test for reading unfinalized appendable objects with genera...
  • d90f0ee feat(experimental): add bidi stream retry manager. (#1632)
  • a994dbf Revert "skip notification tests until b/470069573 is fixed" (#1694)
  • dfc60b3 chore: delete topic after creation (#1687)
  • 1333c95 feat: implement "append_from_file" (#1686)
  • fe6d7c9 chore: optimization to reduce number of open TCP connections while running zo...
  • Additional commits viewable in compare view

Updates redis from 6.4.0 to 7.1.0

Release notes

Sourced from redis's releases.

7.1.0

Changes

🚀 New Features

  • Adding MSETEX command support. (#3823)
  • Adding CLAIM option to XREADGROUP command + unit tests (#3825)
  • Apply routing and response aggregation policies in OSS Cluster mode (#3834)

🧪 Experimental Features

  • Adding support for CAS/CAD commands. (#3837)
  • Adding support for HYBRID search. (#3813 #3843)

🔥 Breaking changes (in experimental features)

  • Replace default health check and failure detector with custom (#3822)

🐛 Bug Fixes

  • Add **options to parse functions for sentinel (#3831)
  • Generating unique command cache key (#3765)

🧰 Maintenance

  • Adding Redis 8.4 RC1 image to test matrix. (#3820)
  • Remove Python 3.9 support. Add Python 3.14 support. (

@dependabot
Bump the production-dependencies group across 1 directory with 21 upd…
ad88ebf 
…ates

Bumps the production-dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flask](https://github.com/pallets/flask) | `3.1.1` | `3.1.2` |
| [google-cloud-datastore](https://github.com/googleapis/python-datastore) | `2.20.2` | `2.21.0` |
| [grpcio](https://github.com/grpc/grpc) | `1.71.0` | `1.76.0` |
| [gunicorn](https://github.com/benoitc/gunicorn) | `23.0.0` | `24.0.0` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [structlog](https://github.com/hynek/structlog) | `25.2.0` | `25.5.0` |
| [boto3](https://github.com/boto/boto3) | `1.37.23` | `1.42.33` |
| [humanize](https://github.com/python-humanize/humanize) | `4.12.2` | `4.15.0` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.26.1` | `4.2.0` |
| [google-cloud-storage](https://github.com/googleapis/python-storage) | `3.1.0` | `3.8.0` |
| [redis](https://github.com/redis/redis-py) | `6.4.0` | `7.1.0` |
| [flask-compress](https://github.com/colour-science/flask-compress) | `1.17` | `1.23` |
| [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.28` | `2.0.31` |
| [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` |
| [google-cloud-pubsub](https://github.com/googleapis/python-pubsub) | `2.29.0` | `2.34.0` |
| [google-cloud-tasks](https://github.com/googleapis/google-cloud-python) | `2.19.2` | `2.21.0` |
| [simplejson](https://github.com/simplejson/simplejson) | `3.20.1` | `3.20.2` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [cachetools](https://github.com/tkem/cachetools) | `5.5.2` | `6.2.4` |
| [gevent](https://github.com/gevent/gevent) | `24.11.1` | `25.9.1` |



Updates `flask` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.1...3.1.2)

Updates `google-cloud-datastore` from 2.20.2 to 2.21.0
- [Release notes](https://github.com/googleapis/python-datastore/releases)
- [Changelog](https://github.com/googleapis/python-datastore/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-datastore@v2.20.2...v2.21.0)

Updates `grpcio` from 1.71.0 to 1.76.0
- [Release notes](https://github.com/grpc/grpc/releases)
- [Commits](grpc/grpc@v1.71.0...v1.76.0)

Updates `gunicorn` from 23.0.0 to 24.0.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@23.0.0...24.0.0)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `structlog` from 25.2.0 to 25.5.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.2.0...25.5.0)

Updates `boto3` from 1.37.23 to 1.42.33
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.37.23...1.42.33)

Updates `humanize` from 4.12.2 to 4.15.0
- [Release notes](https://github.com/python-humanize/humanize/releases)
- [Commits](python-humanize/humanize@4.12.2...4.15.0)

Updates `marshmallow` from 3.26.1 to 4.2.0
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...4.2.0)

Updates `google-cloud-storage` from 3.1.0 to 3.8.0
- [Release notes](https://github.com/googleapis/python-storage/releases)
- [Changelog](https://github.com/googleapis/python-storage/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-storage@v3.1.0...v3.8.0)

Updates `redis` from 6.4.0 to 7.1.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v6.4.0...v7.1.0)

Updates `flask-compress` from 1.17 to 1.23
- [Changelog](https://github.com/colour-science/flask-compress/blob/master/CHANGELOG.md)
- [Commits](colour-science/flask-compress@v1.17...v1.23)

Updates `uwsgi` from 2.0.28 to 2.0.31

Updates `email-validator` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/JoshData/python-email-validator/releases)
- [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md)
- [Commits](JoshData/python-email-validator@v2.2.0...v2.3.0)

Updates `google-cloud-pubsub` from 2.29.0 to 2.34.0
- [Release notes](https://github.com/googleapis/python-pubsub/releases)
- [Changelog](https://github.com/googleapis/python-pubsub/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-pubsub@v2.29.0...v2.34.0)

Updates `google-cloud-tasks` from 2.19.2 to 2.21.0
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-tasks-v2.19.2...google-cloud-tasks-v2.21.0)

Updates `simplejson` from 3.20.1 to 3.20.2
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](simplejson/simplejson@v3.20.1...v3.20.2)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `cachetools` from 5.5.2 to 6.2.4
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v5.5.2...v6.2.4)

Updates `gevent` from 24.11.1 to 25.9.1
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@24.11.1...25.9.1)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: google-cloud-datastore
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: grpcio
  dependency-version: 1.76.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: gunicorn
  dependency-version: 24.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: structlog
  dependency-version: 25.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: boto3
  dependency-version: 1.42.33
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: humanize
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marshmallow
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: google-cloud-storage
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: redis
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: flask-compress
  dependency-version: '1.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: uwsgi
  dependency-version: 2.0.31
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: email-validator
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-pubsub
  dependency-version: 2.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-tasks
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: simplejson
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: cachetools
  dependency-version: 6.2.4
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: gevent
  dependency-version: 25.9.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 23, 2026
@dependabot dependabot bot requested a review from a team as a code owner January 23, 2026 08:18
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 23, 2026
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Jan 23, 2026

Benchmark Results

Percentile Averages:
50th: 89ms
90th: 289ms
95th: 491ms
99th: 1023ms
99.9th: 2091ms
GETs (99th): 1194ms
POSTs (99th): 826ms

PDF: 10000ms
Session: 7400ms

Total Requests: 64,344
Total Failures: 0
Error Percentage: 0.0%

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ons-eq-team