Bump the pip-major group across 1 directory with 5 updates #368

dependabot · 2026-01-26T00:11:07Z

Bumps the pip-major group with 5 updates in the / directory:

Package	From	To
gunicorn	`23.0.0`	`24.1.1`
marshmallow	`3.26.2`	`4.2.1`
okta	`2.9.8`	`3.0.0`
types-flask-cors	`5.0.0.20240902`	`6.0.0.20250809`
pytest	`8.3.4`	`9.0.2`

Updates gunicorn from 23.0.0 to 24.1.1

Release notes

Sourced from gunicorn's releases.

24.1.1

Bug Fixes

Fix forwarded_allow_ips and proxy_allow_ips to remain as strings for backward compatibility with external tools like uvicorn. Network validation now uses strict mode to detect invalid CIDR notation (e.g., 192.168.1.1/24 where host bits are set) (#3458, [PR #3459](benoitc/gunicorn#3459))

Full Changelog: benoitc/gunicorn@24.1.0...24.1.1

Gunicorn 24.1.0

New Features

Official Docker Image: Gunicorn now publishes official Docker images to GitHub Container Registry ([PR #3454](benoitc/gunicorn#3454))

Available at ghcr.io/benoitc/gunicorn

Based on Python 3.12 slim image

Uses recommended worker formula (2 × CPU + 1)

Configurable via environment variables

PROXY Protocol v2 Support: Extended PROXY protocol implementation to support the binary v2 format in addition to the existing text-based v1 format ([PR #3451](benoitc/gunicorn#3451))

New --proxy-protocol modes: off, v1, v2, auto

auto mode (default when enabled) detects v1 or v2 automatically

v2 binary format is more efficient and supports additional metadata

Works with HAProxy, AWS NLB/ALB, and other PROXY protocol v2 sources

CIDR Network Support: --forwarded-allow-ips and --proxy-allow-from now accept CIDR notation (e.g., 192.168.0.0/16) for specifying trusted networks ([PR #3449](benoitc/gunicorn#3449))

Socket Backlog Metric: New gunicorn.socket.backlog gauge metric reports the current socket backlog size on Linux systems ([PR #3450](benoitc/gunicorn#3450))

InotifyReloader Enhancement: The inotify-based reloader now watches newly imported modules, not just those loaded at startup ([PR #3447](benoitc/gunicorn#3447))

Bug Fixes

Fix signal handling regression where SIGCLD alias caused "Unhandled signal: cld" errors on Linux when workers fail during boot (#3453)

Fix socket blocking mode on keepalive connections preventing SSL handshake failures with async workers ([PR #3452](benoitc/gunicorn#3452))

Use smaller buffer size in finish_body() for faster timeout detection on slow or abandoned connections ([PR #3453](benoitc/gunicorn#3453))

Handle SSLWantReadError in finish_body() to prevent worker hangs during SSL renegotiation ([PR #3448](benoitc/gunicorn#3448))

Log SIGTERM as info level instead of warning to reduce noise in orchestrated environments ([PR #3446](benoitc/gunicorn#3446))

Print exception details to stderr when worker fails to boot ([PR #3443](benoitc/gunicorn#3443))

Fix unreader.unread() to prepend data to buffer instead of appending ([PR #3442](benoitc/gunicorn#3442))

Prevent RecursionError when pickling Config objects ([PR #3441](benoitc/gunicorn#3441))

Use proper exception chaining with raise from in glogging.py ([PR #3440](benoitc/gunicorn#3440))

Installation
pip install gunicorn==24.1.0
</tr></table> 

... (truncated)

Commits

375e79e release: bump version to 24.1.1
ad0c12d docs: add sponsors section to README
70200ee chore: add GitHub Sponsors funding configuration
6841804 docs: remove incorrect PR reference from Docker changelog entry
abce0ca docs: add 24.1.1 changelog entry for forwarded_allow_ips fix
e9a3f30 fix: keep forwarded_allow_ips as strings for backward compatibility (#3459)
d73ff4b docs: update main changelog with 24.1.0
53f2c31 ci: allow docs deploy on workflow_dispatch
eab5f0b ci: trigger Docker publish on tags with or without v prefix
a20d3fb docs: add Docker image to 24.1.0 changelog
Additional commits viewable in compare view

Updates marshmallow from 3.26.2 to 4.2.1

Changelog

Sourced from marshmallow's changelog.

4.2.1 (2026-01-23)

Bug fixes:

Fix validation of URLs beginning with uppercare FILE (:issue:2891). Thanks :user:thanhlecongg for reporting and fixing.

4.2.0 (2026-01-04)

Other changes:

many argument of Nested properly overrides schema instance value (:pr:2854). Thanks :user:jafournier for the PR.

4.1.2 (2025-12-19)

Bug fixes:

:cve:2025-68480: Merge error store messages without rebuilding collections. Thanks 카푸치노 for reporting and :user:deckar01 for the fix.

4.1.1 (2025-11-05)

Bug fixes:

Ensure URL validator is case-insensitive when using custom schemes (:pr:2874). Thanks :user:T90REAL for the PR.

4.1.0 (2025-11-01)

Other changes:

Add __len__ implementation to missing so that it can be used with validate.Length <marshmallow.validate.Length> (:pr:2861). Thanks :user:agentgodzilla for the PR.

Drop support for Python 3.9 (:pr:2363).

Test against Python 3.14 (:pr:2864).

4.0.1 (2025-08-28)

Bug fixes:

Fix wildcard import of from marshmallow import * (:pr:2823). Thanks :user:Florian-Laport for the PR.

... (truncated)

Commits

40105ad Bump version and update changelog
39e7c83 Merge pull request #2892 from thanhlecongg/fix-2891
78a94ea Fix docstring typo
8dc078e fix issue #2891
c62b911 add tests for issue #2891
d07bf5e [pre-commit.ci] pre-commit autoupdate (#2887)
44be02f Bump version and update changelog
2bf3ae6 feat: improve consistency of many arg with nested schema (#2854)
c860f56 Bump actions/upload-artifact from 5 to 6 (#2884)
63b947a Bump actions/download-artifact from 6 to 7 (#2885)
Additional commits viewable in compare view

Updates okta from 2.9.8 to 3.0.0

Release notes

Sourced from okta's releases.

v3.0.0

What's Changed

Upgrade SDK to OAS3.0 by @BinoyOza-okta in okta/okta-sdk-python#452

Added README changes. by @BinoyOza-okta in okta/okta-sdk-python#454

OKTA-937866 Adding dependabot file for python by @agrja-rastogi-okta in okta/okta-sdk-python#451

Add support for new Okta TLD domains (okta-gov.com, okta.mil, okta-miltest.com, trex-govcloud.com) by @BinoyOza-okta in okta/okta-sdk-python#455

New Contributors

@agrja-rastogi-okta made their first contribution in okta/okta-sdk-python#451

Full Changelog: okta/okta-sdk-python@v2.9.13...v3.0.0

v2.9.13

What's Changed

Expire and renew the access token when using OAuth 2.0 by @BinoyOza-okta in okta/okta-sdk-python#445

V2.9.13 Release changes by @BinoyOza-okta in okta/okta-sdk-python#446

Full Changelog: okta/okta-sdk-python@v2.9.12...v2.9.13

v2.9.12

What's Changed

Reduce JWT token expiration time. by @BinoyOza-okta in okta/okta-sdk-python#443

V2.9.12 Release changes by @BinoyOza-okta in okta/okta-sdk-python#444

Full Changelog: okta/okta-sdk-python@v2.9.11...v2.9.12

v2.9.11

What's Changed

Allow latest aenum release by @BinoyOza-okta in okta/okta-sdk-python#440

"Okta direct auth API grants" are not valid OAuthGrantType by @BinoyOza-okta in okta/okta-sdk-python#441

Fixed #435: added data_type parameter for OktaAPIResponse by @comrumino in okta/okta-sdk-python#438

V2.9.11 Release changes by @BinoyOza-okta in okta/okta-sdk-python#442

New Contributors

@BinoyOza-okta made their first contribution in okta/okta-sdk-python#440

@comrumino made their first contribution in okta/okta-sdk-python#438

Full Changelog: okta/okta-sdk-python@v2.9.10...v2.9.11

v2.9.10

What's Changed

Fix client creds auth by @csanders-git in okta/okta-sdk-python#429

New Contributors

@csanders-git made their first contribution in okta/okta-sdk-python#429

Full Changelog: okta/okta-sdk-python@v2.9.9...v2.9.10

... (truncated)

Changelog

Sourced from okta's changelog.

3.0.0

OKTA SDK PYTHON COMPREHENSIVE API MIGRATION REPORT

EXECUTIVE SUMMARY

This summary documents ALL METHOD CHANGES across the complete set of 350 operations between the older resource_clients directory and the newer api directory in the Okta Python SDK.

COMPLETE METHOD MIGRATION MAPPING

1. APPLICATION_CLIENT.PY → MULTIPLE APIs (53 METHODS)

FROM: application_client.py (53 methods) TO: Multiple specialized APIs

CORE APPLICATION METHODS (Retained in application_api.py):

✓ list_applications → list_applications (KEPT)

✓ create_application → create_application (KEPT)

✓ delete_application → delete_application (KEPT)

✓ get_application → get_application (KEPT)

✓ activate_application → activate_application (KEPT)

✓ deactivate_application → deactivate_application (KEPT)

✗ update_application → replace_application (RENAMED)

APPLICATION CONNECTION METHODS (→ application_connections_api.py):

✗ get_default_provisioning_connection_for_application → MOVED

✗ set_default_provisioning_connection_for_application → MOVED

✗ activate_default_provisioning_connection_for_application → MOVED

✗ deactivate_default_provisioning_connection_for_application → MOVED

CERTIFICATE/CSR METHODS (REMOVED - No direct equivalent):

✗ list_csrs_for_application → REMOVED

✗ generate_csr_for_application → REMOVED

✗ revoke_csr_from_application → REMOVED

✗ get_csr_for_application → REMOVED

✗ publish_cer_cert → REMOVED

✗ publish_binary_cer_cert → REMOVED

✗ publish_der_cert → REMOVED

✗ publish_binary_der_cert → REMOVED

✗ publish_binary_pem_cert → REMOVED

APPLICATION KEYS METHODS (REMOVED - No direct equivalent):

✗ list_application_keys → REMOVED

✗ generate_application_key → REMOVED

✗ get_application_key → REMOVED

✗ clone_application_key → REMOVED

... (truncated)

Commits

e9fa5b8 Merge pull request #455 from okta/OKTA-504329
6d85ea5 Merge pull request #451 from okta/OKTA-937866
6c3b63a - Added the new domains to the Okta domain list in the code files mentioned.
8ef9317 Merge pull request #454 from okta/readme-changes
fada5bf - Added link for the devforums in the README.md
780ecaa major (sdk): Migrate from Swagger 2.0 to OpenAPI 3.0
a423b78 adding dependabot file for python
e9764a4 Merge pull request #446 from okta/release-changes-v2.9.13
55fae99 - Release changelog and version changes.
f75f82c Merge pull request #445 from okta/OKTA-641384
Additional commits viewable in compare view

Updates types-flask-cors from 5.0.0.20240902 to 6.0.0.20250809

Commits

See full diff in compare view

Updates pytest from 8.3.4 to 9.0.2

Release notes

Sourced from pytest's releases.

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

#13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.

Improved documentation

#4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

#13895: Restore support for skipping tests via raise unittest.SkipTest.

#13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.

#13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.

#13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

#13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

... (truncated)

Commits

3d10b51 Prepare release version 9.0.2
188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
b7d7bef Merge pull request #14014 from bluetech/compat-note
bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
bc78386 Add CLI options reference documentation (#13930)
5a4e398 Fix docs typo (#14005) (#14008)
d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip-major group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [gunicorn](https://github.com/benoitc/gunicorn) | `23.0.0` | `24.1.1` | | [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.26.2` | `4.2.1` | | [okta](https://github.com/okta/okta-sdk-python) | `2.9.8` | `3.0.0` | | [types-flask-cors](https://github.com/typeshed-internal/stub_uploader) | `5.0.0.20240902` | `6.0.0.20250809` | | [pytest](https://github.com/pytest-dev/pytest) | `8.3.4` | `9.0.2` | Updates `gunicorn` from 23.0.0 to 24.1.1 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@23.0.0...24.1.1) Updates `marshmallow` from 3.26.2 to 4.2.1 - [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/marshmallow@3.26.2...4.2.1) Updates `okta` from 2.9.8 to 3.0.0 - [Release notes](https://github.com/okta/okta-sdk-python/releases) - [Changelog](https://github.com/okta/okta-sdk-python/blob/master/CHANGELOG.md) - [Commits](okta/okta-sdk-python@v2.9.8...v3.0.0) Updates `types-flask-cors` from 5.0.0.20240902 to 6.0.0.20250809 - [Commits](https://github.com/typeshed-internal/stub_uploader/commits) Updates `pytest` from 8.3.4 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.4...9.0.2) --- updated-dependencies: - dependency-name: gunicorn dependency-version: 24.1.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-major - dependency-name: marshmallow dependency-version: 4.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-major - dependency-name: okta dependency-version: 3.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-major - dependency-name: types-flask-cors dependency-version: 6.0.0.20250809 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-major - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: pip-major ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jan 26, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the pip-major group across 1 directory with 5 updates #368

Bump the pip-major group across 1 directory with 5 updates #368

dependabot bot commented on behalf of github Jan 26, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Bump the pip-major group across 1 directory with 5 updates #368

Are you sure you want to change the base?

Bump the pip-major group across 1 directory with 5 updates #368

Conversation

dependabot bot commented on behalf of github Jan 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

24.1.1

Bug Fixes

Gunicorn 24.1.0

New Features

Bug Fixes

Installation

4.2.1 (2026-01-23)

4.2.0 (2026-01-04)

4.1.2 (2025-12-19)

4.1.1 (2025-11-05)

4.1.0 (2025-11-01)

4.0.1 (2025-08-28)

v3.0.0

What's Changed

New Contributors

v2.9.13

What's Changed

v2.9.12

What's Changed

v2.9.11

What's Changed

New Contributors

v2.9.10

What's Changed

New Contributors

3.0.0

OKTA SDK PYTHON COMPREHENSIVE API MIGRATION REPORT

EXECUTIVE SUMMARY

COMPLETE METHOD MIGRATION MAPPING

1. APPLICATION_CLIENT.PY → MULTIPLE APIs (53 METHODS)

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

Improved documentation

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Jan 26, 2026 •

edited

Loading

1. `APPLICATION_CLIENT.PY` → MULTIPLE APIs (53 METHODS)