Skip to content

Bump the python-dependencies group across 1 directory with 12 updates - #120

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-b70acc34de
Closed

Bump the python-dependencies group across 1 directory with 12 updates#120
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-dependencies-b70acc34de

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Updates the requirements on numpy, scipy, python-dateutil, requests, beautifulsoup4, django-debug-toolbar, gunicorn, pytest, selenium, openai, bertopic and sentence-transformers to permit the latest version.
Updates numpy to 2.5.2

Release notes

Sourced from numpy's releases.

v2.5.2 (Aug 9, 2026)

NumPy 2.5.2 Release Notes

The NumPy 2.5.2 is a patch release that fixes bugs discovered after the 2.5.1 release. The big news is that it includes wheels for the newly released Python 3.15.0rc1.

This release supports Python versions 3.12-3.15

C API changes

PyArray_StringDTypeObject is opaque under the abi3t stable ABI

The PyArray_StringDTypeObject was accidentally exposed in NumPy 2.5 when targeting the free-threading-compatible stable ABI (Py_TARGET_ABI3T). PyArray_StringDTypeObject is now an opaque struct: extensions compiled that way cannot access its fields, since the struct layout depends on the size of the object header. Any code that accessed PyArray_StringDTypeObject fields in an abi3t build would have crashed, so we are making this API change in a bugfix release.

The NpyString allocator API remains usable by passing the descriptor object pointer, e.g. NpyString_acquire_allocator((PyArray_StringDTypeObject *)descr).

(gh-31771)

Contributors

A total of 16 people contributed to this release. People with a "+" by their names contributed a patch for the first time.

  • Abhijeetsingh Meena +
  • Charalampos Stratakis
  • Charles Harris
  • Chris Ninham +
  • David Woods
  • Geonho +
  • Gopu Yeshwanth Reddy +
  • Iason Krommydas
  • Ijtihed Kilani
  • Jelle Zijlstra +
  • Joren Hammudoglu
  • Kumar Aditya
  • Mike Boyle
  • Nathan Goldbaum
  • Raghuveer Devulapalli
  • Sebastian Berg

... (truncated)

Changelog

Sourced from numpy's changelog.

This is a walkthrough of the NumPy 2.4.0 release on Linux, which will be the first feature release using the numpy/numpy-release <https://github.com/numpy/numpy-release>__ repository.

The commands can be copied into the command line, but be sure to replace 2.4.0 with the correct version. This should be read together with the :ref:general release guide <prepare_release>.

Facility preparation

Before beginning to make a release, use the requirements/*_requirements.txt files to ensure that you have the needed software. Most software can be installed with pip, but some will require apt-get, dnf, or whatever your system uses for software. You will also need a GitHub personal access token (PAT) to push the documentation. There are a few ways to streamline things:

  • Git can be set up to use a keyring to store your GitHub personal access token. Search online for the details.

Prior to release

Add/drop Python versions

When adding or dropping Python versions, multiple config and CI files need to be edited in addition to changing the minimum version in pyproject.toml. Make these changes in an ordinary PR against main and backport if necessary. We currently release wheels for new Python versions after the first Python RC once manylinux and cibuildwheel support that new Python version.

Backport pull requests

Changes that have been marked for this release must be backported to the maintenance/2.4.x branch.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

... (truncated)

Commits
  • 48fecee REL: Prepare for the NumPy 2.5.2 release (#32226)
  • ecf599c Merge pull request #32221 from charris/backport-32151
  • 3c7ac97 Merge pull request #32220 from charris/backport-32205
  • 23b30f4 BUG: avoid segfaults when legacy copyswap slot is not defined (#32151)
  • 4964ca8 TYP: isclose shape-typing fix for 2d array-likes (#32205)
  • c37ed94 MAINT: Skip limited_api tests on some platforms. (#32214)
  • 5cfd73b Merge pull request #32206 from charris/update-cibuildwheel
  • d8262bc MAINT: Update cibuildwheel to v4.2.0
  • 988d94d Merge pull request #32158 from charris/backport-32133
  • b2e4f97 BUG: avoid possible stack overflow in arraydescr_dealloc (#32133)
  • Additional commits viewable in compare view

Updates scipy to 1.18.1

Release notes

Sourced from scipy's releases.

SciPy 1.18.1 Release Notes

SciPy 1.18.1 is a bug-fix release with no new features compared to 1.18.0. This release includes binaries on PyPI for Python 3.15, and the minimum required version of the GCC toolchain has been increased to 10.3.0.

Authors

  • Name (commits)
  • Wasim Akram (2) +
  • Jake Bowhay (1)
  • Michael Bratsch (1)
  • Dietrich Brunn (1)
  • Evgeni Burovski (1)
  • Aadya Chinubhai (1)
  • Lucas Colley (3)
  • Tekin Ertekin (1) +
  • Fuyugithub (2) +
  • Ralf Gommers (11)
  • Joren Hammudoglu (1)
  • Ijtihed Kilani (1) +
  • Andrew Nelson (2)
  • Ilhan Polat (1)
  • Tyler Reddy (39)
  • romao05 (1) +
  • Michael Simacek (1) +
  • Jacob Vanderplas (2)

A total of 18 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Note that the source and binary assets associated with this release were published to PyPI using trusted publishing, and so the trusted assets and their hashes are made available more securely at https://pypi.org/project/scipy/1.18.1/ rather than providing them here in a less secure manner.

A complete list of issues and pull requests associated with this release is available in the associated README.txt.

Commits
  • e4e854e REL: SciPy 1.18.1 rel commit
  • 3c8e5f8 BLD, MAINT: pythran bounds for 1.18.1 (#25978)
  • 54c0f95 BLD, MAINT: pythran bounds for 1.18.1
  • 45a355d Merge pull request #25884 from tylerjereddy/treddy_backports_1.18.1
  • a717e28 DOC: PR 25884 revisions
  • bb489c0 DOC: PR 25884 revisions
  • 09bca24 BLD: package: pin meson on win-64 to avoid clang-cl bug (#25913)
  • 095fe56 DOC, BLD: PR 25884 revisions
  • e66ea64 DOC: update minimum GCC version in toolchain roadmap
  • c021653 TST: tolerance bumps and skips on 32-bit platforms
  • Additional commits viewable in compare view

Updates python-dateutil to 2.9.0.post0

Release notes

Sourced from python-dateutil's releases.

2.9.0.post0

Version 2.9.0.post0 (2024-03-01)

Bugfixes

  • Pinned setuptools_scm to <8, which should make the generated _version.py file compatible with all supported versions of Python.
Changelog

Sourced from python-dateutil's changelog.

Version 2.9.0.post0 (2024-03-01)

Bugfixes

  • Pinned setuptools_scm to <8, which should make the generated _version.py file compatible with all supported versions of Python.

Version 2.9.0 (2024-02-29)

Data updates

  • Updated tzdata version to 2024a. (gh pr #1342)

Features

  • Made all dateutil submodules lazily imported using PEP 562 <https://www.python.org/dev/peps/pep-0562/>_. On Python 3.7+, things like import dateutil; dateutil.tz.gettz("America/New_York") will now work without explicitly importing dateutil.tz, with the import occurring behind the scenes on first use. The old behavior remains on Python 3.6 and earlier. Fixed by Orson Adams. (gh issue #771, gh pr #1007)

Bugfixes

  • Removed a call to datetime.utcfromtimestamp, which is deprecated as of Python 3.12. Reported by Hugo van Kemenade (gh pr #1284), fixed by Thomas Grainger (gh pr #1285).

Documentation changes

  • Added note into docs and tests where relativedelta would return last day of the month only if the same day on a different month resolves to a date that doesn't exist. Reported by @​hawkEye-01 (gh issue #1167). Fixed by @​Mifrill (gh pr #1168)

Version 2.8.2 (2021-07-08)

Data updates

  • Updated tzdata version to 2021a. (gh pr #1128)

... (truncated)

Commits

Updates requests to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

  • Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

  • Widened json input type from dict and list to Mapping and Sequence. (#7436)
  • Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
  • Response.reason moved from str | None to str to improve handling for users. (#7437)
  • Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

  • Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

    Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

  • Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
  • Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
  • Requests added support for Python 3.14t. (#7419)

Bugfixes

  • Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
  • Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
  • Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

Updates beautifulsoup4 to 4.15.0

Updates django-debug-toolbar to 7.1.1

Release notes

Sourced from django-debug-toolbar's releases.

7.1.1

Changelog

  • Serialize TaskResult in the Tasks panel to accommodate the storage mechanism.
  • Removed whitespace on Task panel’s kwargs column.

What's Changed

Full Changelog: django-commons/django-debug-toolbar@7.1.0...7.1.1

Changelog

Sourced from django-debug-toolbar's changelog.

7.1.1 (2026-08-14)

  • Serialize TaskResult in the Tasks panel to accommodate the storage mechanism.
  • Removed whitespace on Task panel's kwargs column.

7.1.0 (2026-08-10)

  • Added a Tasks panel that shows tasks queued during the request via Django's built-in tasks framework (django.tasks, Django 6.0+). On older versions of Django, the panel explains that upgrading is required.
  • Fixed the Django version check in the SQL panel test suite for Django's boolean parameter handling.
  • Fixed show_toolbar_with_docker on Docker runtimes such as OrbStack that can resolve host.docker.internal to an address outside the container network.
  • Restored the select and explain buttons for queries that run without parameters.
  • Fixed the error shown when panel content fails to load, which could not find the toolbar window inside the shadow root.
  • Stopped the history panel buttons from submitting their form when clicked before the panel script has loaded, which navigated away from the page.
  • Added support for Django 6.1.
  • Improved cache hit/miss reporting in the Cache panel for cache.get() calls with a supplied default value, while documenting the remaining ambiguity when a cached value equals the supplied default.

7.0.0 (2026-06-17)

  • Prevent check from failing when ROOT_URLCONF is not defined.
  • Prevent toolbar storage from failing when serialized panel data contains mapping keys that are not JSON-compatible.
  • Prevent debounce race conditions in the history panel for rapid fetch requests.
  • Added a note to the prerequisites section of the installation docs about requiring an up-to-date browser.
  • Dropped support for Django 4.2 and Django 5.1 .
  • Updated to render the toolbar in a shadow DOM for better isolation from the rest of the page. This can be disabled with the setting USE_SHADOW_DOM.
  • Note that custom themes overriding CSS variables on :root must move those overrides to #djDebug, and custom panels that rely on external styles or DOM lookups reaching into the toolbar will need updates to work with the shadow DOM.
  • Added graceful degradation for SQL queries that exceed sqlparse's token limits. When SQLParseError is raised, the SQL panel now automatically disables grouping and retries formatting, preventing crashes with large

... (truncated)

Commits
  • f307de1 Version 7.1.1
  • 73951a4 Bump the github-actions group with 3 updates (#2439)
  • 678b687 [pre-commit.ci] pre-commit autoupdate (#2442)
  • 7627683 Serialize the TaskResult class for Tasks panel. (#2444)
  • a2d4260 Version 7.1.0
  • d89606a Improve selenium tests reliability in CI (#2438)
  • e367e1b Fix show_toolbar_with_docker on runtimes with unrelated host address (#2422)
  • 49f4ef3 [pre-commit.ci] pre-commit autoupdate
  • 3d3d010 Add support for Django 6.1
  • f571734 Stop the history panel buttons from submitting their forms
  • Additional commits viewable in compare view

Updates gunicorn to 26.2.0

Release notes

Sourced from gunicorn's releases.

gunicorn 26.2.0

Cleartext HTTP/2 lands, and an HTTP/2 security fix.

Cleartext HTTP/2 (h2c)

http2_cleartext accepts prior-knowledge, upgrade, both or off (the default). Prior knowledge serves a connection that opens with the HTTP/2 preface; upgrade honours an HTTP/1.1 Upgrade: h2c request. Both work on the gthread, gevent and asgi workers.

This is for deployments where TLS is terminated by a proxy that speaks HTTP/2 upstream, so the hop into gunicorn no longer drops to HTTP/1.1. Only peers in forwarded_allow_ips are considered; everyone else is served HTTP/1.x exactly as if the setting were off. Each mechanism is enabled separately, so turning one on does not turn the other on.

Do not expose a cleartext HTTP/2 port to the internet.

Security

HTTP2Request built its headers straight from the stream, so nothing the HTTP/1 path enforces applied over HTTP/2: the underscore and header_map policy, duplicate Host and Content-Type, control characters in values, and the forwarded_allow_ips trust gate. An untrusted client could set SCRIPT_NAME and forge HTTP_* entries in the WSGI environ, and decide wsgi.url_scheme through :scheme. Both request classes now share one policy mixin, and the scheme comes from the transport.

If you serve HTTP/2, this is the reason to upgrade.

Other HTTP/2 fixes

WSGI responses were buffered whole before anything was sent; they stream now. HEAD, 204 and 304 no longer carry a body. Events read while blocked on a flow-control window were discarded, losing requests and body data outright. sendfile() is refused on HTTP/2 responses rather than bypassing framing.

Request bodies dropped on Upgrade requests

On the ASGI worker with the fast parser, any request carrying an Upgrade header reached the application with an empty body, whatever the header's value and with HTTP/2 switched off entirely. Fixed in gunicorn_h1c 0.6.9, which the fast extra now requires.

Full changelog: https://gunicorn.org/news/

Commits
  • 36f2a3c gunicorn 26.2.0
  • cbba350 test: cover the h2c edge paths that had none
  • 9885411 Merge pull request #3703 from cormier/fix-inconsistency-in-control-socket-docs
  • 86f0919 Merge pull request #3704 from methane/doc-wsgi-h1c
  • 5853551 Merge pull request #3712 from Rotzbua/patch-1
  • 7bce87e Merge pull request #3700 from benoitc/fix/sponsor-logo-path
  • 972dfb0 Merge pull request #3690 from melbinjp/docs/contributing-settings-path
  • 7b3f16b Merge pull request #3711 from benoitc/docs/http2-changelog
  • 5bf237c http2: require gunicorn_h1c 0.6.9 and drop the upgrade body workaround
  • 7cf0338 test: skip the fast-parser cases when gunicorn_h1c is absent
  • Additional commits viewable in compare view

Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

  • #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
  • #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
  • #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
  • #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.
Commits
  • cf470ec Prepare release version 9.1.1
  • e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
  • 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
  • 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
  • b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
  • 9a567e0 [automated] Update plugin list (#14617) (#14618)
  • ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
  • 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
  • 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
  • 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
  • Additional commits viewable in compare view

Updates selenium to 4.48.0

Release notes

Sourced from selenium's releases.

Selenium 4.48.0

Detailed Changelogs by Component

Java     |     Python     |     DotNet     |     Ruby     |     JavaScript

What's Changed

New Contributors

Full Changelog: SeleniumHQ/selenium@selenium-4.47.0...selenium-4.48.0

Commits
  • 27f5213 [build] Prepare for release of selenium-4.48.0 (#17956)
  • 857ff4f [build] remove cddl updates from release preparation
  • 2183264 [dotnet] [bidi] SetMediaFeaturesOverride command in Emulation module (#17953)
  • 5fd1f41 [build] unlock trunk when release preparation PR is closed without merging
  • 5b053b5 [js][bidi] Add BiDi connection-level event subscription (#17946)
  • 498c0e7 [build] alert Slack when a CDP update lands on trunk (#17950)
  • 7bfaedb [rb] reject an inbound BiDi scalar outside its union's declared arms (#17947)
  • 083869c [dotnet] [bidi] Throw in case of unknown discriminator (#17948)
  • 5b3666d [py] update new BiDi layer generation to conform to latest proposed ADR (#17942)
  • a4b3c3d [build] stop updating browsers and CDP during release preparation (#17940)
  • Additional commits viewable in compare view

Updates openai to 3.6.0

Release notes

Sourced from openai's releases.

v3.6.0

3.6.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#3749) (52421d1)

Bug Fixes

  • auth: harden X.509 workload identity integration (#3740) (fc3ad6c)

Chores

  • deps-dev: bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719) (4f5598c)
  • deps-dev: bump mypy from 1.17 to 2.3.1 (#3747) (0b52c9e)
  • deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659) (95f0b43)
  • deps-dev: bump pyright from 1.1.399 to 1.1.413 (#3744) (9917c6e)
  • deps-dev: bump rich from 14.2.0 to 15.0.0 (#3717) (7a5484d)
  • deps: bump actions/checkout from 6.0.2 to 7.0.1 (#3665) (d0a2550)
  • deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#3669) (f627619)
  • deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745) (a36010d)

Build System

  • deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#3672) (d765db7)
  • deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666) (dacbb66)
Changelog

Sourced from openai's changelog.

3.6.0 (2026-08-27)

Features

  • api: add compute_units to Responses and Chat Completions usage (#3749) (52421d1)

Bug Fixes

  • auth: harden X.509 workload identity integration (#3740) (fc3ad6c)

Chores

  • deps-dev: bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719) (4f5598c)
  • deps-dev: bump mypy from 1.17 to 2.3.1 (#3747) (0b52c9e)
  • deps-dev: bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659) (95f0b43)
  • deps-dev: bump pyright from 1.1.399 to 1.1.413 (#3744) (9917c6e)
  • deps-dev: bump rich from 14.2.0 to 15.0.0 (#3717) (7a5484d)
  • deps: bump actions/checkout from 6.0.2 to 7.0.1 (#3665) (d0a2550)
  • deps: bump actions/download-artifact from 6.0.0 to 8.0.1 (#3669) (f627619)
  • deps: bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745) (a36010d)

Build System

  • deps: bump actions/setup-python from 5.6.0 to 7.0.0 (#3672) (d765db7)
  • deps: bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666) (dacbb66)

3.5.0 (2026-08-27)

Features

  • api: make function call output call IDs optional (#3738) (c74501d)

3.4.0 (2026-08-25)

Features

  • api: Add obfuscation field to ChatCompletionChunk (#3690) (c7d8e1d)
  • api: add project residency configuration and cost quantity units (#3726) (bc4f8ef)

Bug Fixes

  • api: encode Realtime call offers and session configuration (#3736) (555ac48)
  • apply consistent origin checks to WebSocket redirects (#3693) (1b324d0)

... (truncated)

Commits
  • 1cfa80a release: 3.6.0 (#3752)
  • 9917c6e chore(deps-dev): bump pyright from 1.1.399 to 1.1.413 (#3744)
  • 0b52c9e chore(deps-dev): bump mypy from 1.17 to 2.3.1 (#3747)
  • 4f5598c chore(deps-dev): bump @​stdy/cli from 0.22.1 to 0.22.2 (#3719)
  • 95f0b43 chore(deps-dev): bump pandas-stubs from 2.2.2.240807 to 2.3.3.260113 (#3659)
  • a36010d chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.7 (#3745)
  • 7a5484d chore(deps-dev): bump rich from 14.2.0 to 15.0.0 (#3717)
  • d0a2550 chore(deps): bump actions/checkout from 6.0.2 to 7.0.1 (#3665)
  • dacbb66 build(deps): bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.2 (#3666)
  • d765db7 build(deps): bump actions/setup-python from 5.6.0 to 7.0.0 (#3672)
  • Additional commits viewable in compare view

Updates bertopic to 0.17.4

Release notes

Sourced from bertopic's releases.

v0.17.4

Preparing for MEGA!-scale BERTopic with Multi-GPU UMAP and the following necessary updates:

  • Update installation instructions for cuML with BERTopic by @​csadorf in #2446
  • Speed up ._create_topic_vectors by replacing DataFrame .loc with NumPy masking @​jinsolp in #2406
  • Modify _reduce_dimensionality to use fit_transform by @​betatim in #2416
  • Fix incorrect label in zero-shot svg in documentation by @​huisman in

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 2, 2026
@dependabot
Bump the python-dependencies group across 1 directory with 12 updates
90b6981 
Updates the requirements on [numpy](https://github.com/numpy/numpy), [scipy](https://github.com/scipy/scipy), [python-dateutil](https://github.com/dateutil/dateutil), [requests](https://github.com/psf/requests), [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/), [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar), [gunicorn](https://github.com/benoitc/gunicorn), [pytest](https://github.com/pytest-dev/pytest), [selenium](https://github.com/SeleniumHQ/Selenium), [openai](https://github.com/openai/openai-python), [bertopic](https://github.com/MaartenGr/BERTopic) and [sentence-transformers](https://github.com/huggingface/sentence-transformers) to permit the latest version.

Updates `numpy` to 2.5.2
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.0.0...v2.5.2)

Updates `scipy` to 1.18.1
- [Release notes](https://github.com/scipy/scipy/releases)
- [Commits](scipy/scipy@v1.15.0...v1.18.1)

Updates `python-dateutil` to 2.9.0.post0
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@2.9.0...2.9.0.post0)

Updates `requests` to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.31.0...v2.34.2)

Updates `beautifulsoup4` to 4.15.0

Updates `django-debug-toolbar` to 7.1.1
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@4.4...7.1.1)

Updates `gunicorn` to 26.2.0
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@23.0.0...26.2.0)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.0...9.1.1)

Updates `selenium` to 4.48.0
- [Release notes](https://github.com/SeleniumHQ/Selenium/releases)
- [Commits](SeleniumHQ/selenium@selenium-4.30.0...selenium-4.48.0)

Updates `openai` to 3.6.0
- [Release notes](https://github.com/openai/openai-python/releases)
- [Changelog](https://github.com/openai/openai-python/blob/main/CHANGELOG.md)
- [Commits](openai/openai-python@v1.0.0...v3.6.0)

Updates `bertopic` to 0.17.4
- [Release notes](https://github.com/MaartenGr/BERTopic/releases)
- [Changelog](https://github.com/MaartenGr/BERTopic/blob/master/docs/changelog.md)
- [Commits](MaartenGr/BERTopic@v0.16.0...v0.17.4)

Updates `sentence-transformers` to 6.0.0
- [Release notes](https://github.com/huggingface/sentence-transformers/releases)
- [Commits](huggingface/sentence-transformers@v2.2.0...v6.0.0)

---
updated-dependencies:
- dependency-name: beautifulsoup4
  dependency-version: 4.15.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: bertopic
  dependency-version: 0.17.4
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: django-debug-toolbar
  dependency-version: 7.1.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: gunicorn
  dependency-version: 26.2.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: numpy
  dependency-version: 2.5.2
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: openai
  dependency-version: 3.6.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: python-dateutil
  dependency-version: 2.9.0.post0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: scipy
  dependency-version: 1.18.1
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: selenium
  dependency-version: 4.48.0
  dependency-type: direct:production
  dependency-group: python-dependencies
- dependency-name: sentence-transformers
  dependency-version: 6.0.0
  dependency-type: direct:production
  dependency-group: python-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the python-dependencies group with 12 updates Bump the python-dependencies group across 1 directory with 12 updates Sep 3, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/python-dependencies-b70acc34de branch from aaf725a to 90b6981 Compare September 3, 2026 01:13
@dependabot @github

dependabot Bot commented on behalf of github Sep 14, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 14, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/python-dependencies-b70acc34de branch September 14, 2026 02:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants