An open index of dependabot pull requests across open source projects.

Bump the action-deps group across 1 directory with 5 updates

Open
Number: #177
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 1
Created: September 08, 2025 at 04:34 PM UTC
(9 months ago)
Updated: September 15, 2025 at 04:42 PM UTC
(9 months ago)
Labels:
dependencies python backend
Description:

Bumps the action-deps group with 5 updates in the /backend directory:

Package From To
flask 3.1.1 3.1.2
sqlalchemy-utils 0.41.2 0.42.0
redis 6.2.0 6.4.0
sqlalchemy 2.0.41 2.0.43
pytest 8.4.1 8.4.2

Updates flask from 3.1.1 to 3.1.2

Release notes

Sourced from flask's releases.

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776
Changelog

Sourced from flask's changelog.

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776
Commits
  • 2c1b30d release version 3.1.2
  • 1292419 Update GitHub Actions workflow for artifact handling (#5795)
  • 4dd52ca Update GitHub Actions workflow for artifact handling
  • 55c6255 update dev dependencies
  • d8259eb use Jinja name consistently
  • 38b4c1e refactor stream_with_context for async views (#5799)
  • 9822a03 refactor stream_with_context for async views
  • 49b7e7b security docs for TRUSTED_HOSTS (#5798)
  • b228ca3 security docs for TRUSTED_HOSTS
  • ff64079 update flask-talisman link
  • Additional commits viewable in compare view

Updates sqlalchemy-utils from 0.41.2 to 0.42.0

Release notes

Sourced from sqlalchemy-utils's releases.

0.42.0

  • Drop support for Python 3.7 and 3.8.
  • Drop support for sqlalchemy 1.3.
  • Add support for Python 3.12 and 3.13.
  • Add a Read the Docs configuration file.
  • Make documentation builds reproducible.
  • Test documentation builds in CI.
  • Fix Pendulum parsing of datetime instances with timezones. (#755)
  • Migrate package metadata to PEP 621 format in pyproject.toml
  • Migrate to ruff <https://docs.astral.sh/ruff/>_ for code linting and formatting, replacing flake8 and isort with a faster Rust-based tool.
Changelog

Sourced from sqlalchemy-utils's changelog.

0.42.0 (2025-08-30) ^^^^^^^^^^^^^^^^^^^

  • Drop support for Python 3.7 and 3.8.
  • Drop support for sqlalchemy 1.3.
  • Add support for Python 3.12 and 3.13.
  • Add a Read the Docs configuration file.
  • Make documentation builds reproducible.
  • Test documentation builds in CI.
  • Fix Pendulum parsing of datetime instances with timezones. (#755)
  • Migrate package metadata to PEP 621 format in pyproject.toml
  • Migrate to ruff <https://docs.astral.sh/ruff/>_ for code linting and formatting, replacing flake8 and isort with a faster Rust-based tool.
Commits
  • 2cd4b00 Release 0.42.0
  • be118cc Merge branch 'master' into releases
  • 9de2325 Bump version to 0.42.0
  • 9749666 Merge pull request #788 from kurtmckee/use-pyupgrade
  • cf767be Merge pull request #787 from kurtmckee/update-docs-builds
  • 12e1784 Run pre-commit run -a
  • 1e4ec91 Add pyupgrade as a pre-commit hook
  • f9ee4a4 Resolve "unknown interpreted text role" warnings
  • 2cb371f Fix doc build errors (autodoc needs sqlalchemy-utils importable)
  • c52e14f Update the Read the Docs OS and Python versions
  • Additional commits viewable in compare view

Updates redis from 6.2.0 to 6.4.0

Release notes

Sourced from redis's releases.

6.4.0

Changes

🚀 New Features

  • Added epsilon property to the vsim command (#3723)

🧰 Maintenance

  • Updating the latest Redis image for github pipeline testing (#3726)

We'd like to thank all the contributors who worked on this release! @​htemelski-redis @​elena-kolevska @​petyaslavova @​vladvildanov

6.3.0

Changes

🚀 New Features

  • Add support for new BITOP operations: DIFF, DIFF1, ANDOR, ONE (#3690)
  • Support new VAMANA vector index type (#3702)
  • Add new stream commands (#3711)
  • add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)

🐛 Bug Fixes

  • Fixing sentinel command execution to allow returning of actual responses when meaningful - behaviour controlled by 'return_responses' argument. (#3191)
  • Annotate deprecated_args decorator to preserve wrapped function type signature (#3701)
  • Fix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)
  • add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)
  • SentinelManagedConnection searches for new master upon connection failure (#3560) (#3601)

🧰 Maintenance

  • fix: avoid instantiating a connection on repr_ (#3653)
  • Fixing the return type hint for the transaction method in the standalone client. (#3660)
  • Bump rojopolis/spellcheck-github-actions from 0.48.0 to 0.49.0 (#3665)
  • Dropping integration tests with Redis 6.2 from pipeline actions. (#3659)
  • Remove deprecated arg from call to ClusterPipeline (#3670)
  • TransactionStrategy reset: UNWATCH only when status is watching (#3671)
  • KeyT for set operations (#3190)
  • Removing references to old docs site 'https://redis-py.readthedocs.io/' replaced by 'https://redis.readthedocs.io/' (#3674)
  • Removing unnecessary check for tests using AsyncMock (#3432)
  • Updating test images for github pipeline execution (#3678)
  • Updating the latest Redis image for pipeline testing (#3695)
  • Bump rojopolis/spellcheck-github-actions from 0.49.0 to 0.51.0 (#3689)
  • DOC-5225 testable probabilistic dt examples (#3691)
  • Update README.md (#3699)
  • Convert the value to int type only if it exists in CLIENT INFO (#3688)
  • Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)
  • DOC-5424 time series examples (#3705)
  • Adding information in connection pool class doc string for available SSLConnection class, that can be used for SSL connections (#3710)

... (truncated)

Commits
  • fff669d Updated package version
  • 43ce2a4 Updating the latest Redis image for github pipeline testing (#3726)
  • 64426cb Added epsilon property to the vsim command (#3723)
  • 67ab74d Add new stream commands (#3711)
  • 4c9512b Adding information in connection pool class doc string for available SSLConne...
  • 31399ed SentinelManagedConnection searches for new master upon connection failure (#3...
  • 7291deb add async Retry __eq__ and __hash__ & fix ExponentialWithJitterBackof...
  • 4cf094f Fix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)
  • a001416 DOC-5424 time series examples (#3705)
  • 2b1ff53 Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.41 to 2.0.43

Release notes

Sourced from sqlalchemy's releases.

2.0.43

Released: August 11, 2025

orm

  • [orm] [bug] Fixed issue where using the post_update feature would apply incorrect "pre-fetched" values to the ORM objects after a multi-row UPDATE process completed. These "pre-fetched" values would come from any column that had an Column.onupdate callable or a version id generator used by orm.Mapper.version_id_generator; for a version id generator that delivered random identifiers like timestamps or UUIDs, this incorrect data would lead to a DELETE statement against those same rows to fail in the next step.

    References: #12748

  • [orm] [bug] Fixed issue where _orm.mapped_column.use_existing_column parameter in _orm.mapped_column() would not work when the _orm.mapped_column() is used inside of an Annotated type alias in polymorphic inheritance scenarios. The parameter is now properly recognized and processed during declarative mapping configuration.

    References: #12787

  • [orm] [bug] Improved the implementation of the _orm.selectin_polymorphic() inheritance loader strategy to properly render the IN expressions using chunks of 500 records each, in the same manner as that of the _orm.selectinload() relationship loader strategy. Previously, the IN expression would be arbitrarily large, leading to failures on databases that have limits on the size of IN expressions including Oracle Database.

    References: #12790

engine

  • [engine] [usecase] Added new parameter create_engine.skip_autocommit_rollback which provides for a per-dialect feature of preventing the DBAPI .rollback() from being called under any circumstances, if the connection is detected as being in "autocommit" mode. This improves upon a critical performance issue identified in MySQL dialects where the network overhead of the .rollback() call remains prohibitive even if autocommit mode is set.

    References: #12784

postgresql

... (truncated)

Commits

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Package:
flask
Ecosystem:
pip
Version Change:
3.1.1 → 3.1.2
Update Type:
Patch
Package:
pytest
Ecosystem:
pip
Version Change:
8.4.1 → 8.4.2
Update Type:
Patch
Package:
sqlalchemy
Ecosystem:
pip
Version Change:
2.0.41 → 2.0.43
Update Type:
Patch
Package:
redis
Ecosystem:
pip
Version Change:
6.2.0 → 6.4.0
Update Type:
Minor
Ecosystem:
pip
Version Change:
0.41.2 → 0.42.0
Update Type:
Minor
Technical Details
ID: 7805711
UUID: 3394901846
Node ID: PR_kwDOMqijUM6na-7H
Host: GitHub
Repository: zakerby/python-react-template