Update all non-major dependencies by renovate[bot] · Pull Request #1587 · ImageMarkup/isic

renovate · 2026-09-01T02:43:32Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
daisyui (source)	`5.7.9` → `5.7.36`	dependencies	patch	`5.7.37`
django (changelog)	`==5.2.16` → `==5.2.17`	project.dependencies	patch
django-allauth (changelog)	`==65.18.0` → `==65.19.2`	project.dependencies	minor	`65.19.3`
django-cachalot	`==2.9.0` → `==2.9.1`	project.dependencies	patch
django-debug-toolbar (changelog)	`==7.0.0` → `==7.1.1`	project.optional-dependencies	minor
elasticsearch	`==9.4.1` → `==9.5.1`	project.dependencies	minor
elasticsearch (source)	`9.4.4` → `9.5.3`	service	minor
elasticsearch (source)	`9.4.4` → `9.5.3`		minor
gunicorn (changelog)	`==26.0.0` → `==26.2.0`	project.dependencies	minor
hatchling (source, changelog)	`==1.31.0` → `==1.32.0`	build-system.requires	minor
ipython	`==9.16.0` → `==9.17.1`	project.optional-dependencies	minor
numpy (changelog)	`==2.5.1` → `==2.5.3`	project.dependencies	patch
psycopg (changelog)	`==3.3.4` → `==3.3.5`	project.dependencies	patch
pydantic (changelog)	`==2.13.4` → `==2.13.5`	project.dependencies	patch
pyexiv2	`==2.15.5` → `==2.16.0`	project.dependencies	minor
sentry-sdk (changelog)	`==2.66.1` → `==2.69.1`	project.dependencies	minor

Release Notes

saadeghi/daisyui (daisyui)

`v5.7.36`

Compare Source

Bug Fixes

checkbox tick and dash alignment (#4743) (0ca4325)
loading spinner shrinks inside a flex container (#4744) (f585b8e)

`v5.7.35`

Compare Source

Bug Fixes

prevent badge shrink inside a flex container (#4745) (da60fca)

`v5.7.34`

Compare Source

Bug Fixes

FAB wrong font size when using prefix (#4729) (3ce15b4)

`v5.7.33`

Compare Source

Bug Fixes

otp border width and position (#4730) (fe56cba)

`v5.7.32`

Compare Source

Bug Fixes

dropdown RTL positions (#4716) (c0fec1b)

`v5.7.28`

Compare Source

Bug Fixes

breadcrumbs item focus ring being cropped (#4724) (cc339e7)

`v5.7.27`

Compare Source

Bug Fixes

join item border overlap when there's a wrapper (#4719) (96fd80a)

`v5.7.26`

Compare Source

Bug Fixes

tooltip font weight (03217ba)

`v5.7.25`

Compare Source

Bug Fixes

checkbox - add style for aria-checked="mixed" like :indeterminate (#4713) (5e5b8b4)

`v5.7.24`

Compare Source

Bug Fixes

improve skeleton animation for RTL (#4712) (16a2857)

`v5.7.23`

Compare Source

Bug Fixes

menu-paged summary hides children (badge, icon, etc) when details is open (#4710) (4929505)

`v5.7.22`

Compare Source

Bug Fixes

floating label position on RTL (#4701) (66274aa)

`v5.7.21`

Compare Source

Bug Fixes

FAB selector style leack for fab-flower actions (#4683) (e4e6419)

`v5.7.20`

Compare Source

Bug Fixes

text-rotate - selector targets direct children, to avoid style leaking (#4682) (44856dc)

`v5.7.19`

Compare Source

Bug Fixes

alert grid (#4684) (3b99c0c)

`v5.7.18`

Compare Source

Bug Fixes

don't force dock layout onto script/style/template children (#4679) (b5a1209)

`v5.7.17`

Compare Source

Bug Fixes

checkbox/radio .btn color when checked (#4677) (53f81f3)

`v5.7.16`

Compare Source

Bug Fixes

horizontal menu alignment (1125e2a)

`v5.7.15`

Compare Source

Bug Fixes

allow override of content in calendar and menu (#4652) (17eccda)
input, select isolation (d9bd200), references #3722 #4320 #4618
OTP isolation (b5196b8), references #4642

`v5.7.14`

Compare Source

Bug Fixes

table: pin thead/tfoot as a group so multi-row headers stack (#4643). Closes: #4350 (38ac3d3)

`v5.7.13`

Compare Source

Bug Fixes

improve tooltip in join (#4642). closes: #4618 (319f6d9), references #4320

`v5.7.12`

Compare Source

Bug Fixes

prevent select arrow to rotate when select is focused but not open (#4655) (3362dc2)

`v5.7.11`

Compare Source

Bug Fixes

improve RTL of input and join (#4654). closes: #4644 (93aa945)

`v5.7.10`

Compare Source

Bug Fixes

move tooltip default position in l3 in main definition (#4653). closes: #4647 (7923f53)

django/django (django)

`v5.2.17`

Compare Source

allauth/django-allauth (django-allauth)

noripyt/django-cachalot (django-cachalot)

`v2.9.1`

Compare Source

Add support for Django 6.1

django-commons/django-debug-toolbar (django-debug-toolbar)

`v7.1.1`

Compare Source

Changelog

Serialize TaskResult in the Tasks panel to accommodate the storage mechanism.
Removed whitespace on Task panel’s kwargs column.

What's Changed

Serialize the TaskResult class for Tasks panel. by @tim-schilling in #2444

Full Changelog: django-commons/django-debug-toolbar@7.1.0...7.1.1

`v7.1.0`

Compare Source

Changelog

Added a Tasks panel that shows tasks queued during the request via Django’s built-in tasks framework (django.tasks, Django 6.0+). On older versions of Django, the panel explains that upgrading is required.
Fixed the Django version check in the SQL panel test suite for Django’s boolean parameter handling.
Fixed show_toolbar_with_docker on Docker runtimes such as OrbStack that can resolve host.docker.internal to an address outside the container network.
Restored the select and explain buttons for queries that run without parameters.
Fixed the error shown when panel content fails to load, which could not find the toolbar window inside the shadow root.
Stopped the history panel buttons from submitting their form when clicked before the panel script has loaded, which navigated away from the page.
Added support for Django 6.1.

What's Changed

Fix the Django version check in the SQL panel by @matthiask in #2403
fix some small issues in docs/installation.rst by @leggewie in #2409
Silence the MiddlewareMixin deprecation warning explicitly by @matthiask in #2416
Add Tasks panel showing tasks queued during the request by @onxxdatas in #2407
Fix integration tests by @novucs in #2434
Add support for Django 6.1 by @ulgens in #2435
Fix show_toolbar_with_docker on runtimes with unrelated host address by @Sanjays2402 in #2422
Improve selenium tests reliability in CI by @tim-schilling in #2438

New Contributors

@leggewie made their first contribution in #2409
@onxxdatas made their first contribution in #2407
@novucs made their first contribution in #2434
@Sanjays2402 made their first contribution in #2422

Full Changelog: django-commons/django-debug-toolbar@7.0.0...7.1.0

elastic/elasticsearch-py (elasticsearch)

`v9.5.1`

Compare Source

Changelog

`v9.5.0`

Compare Source

Changelog

elastic/dockerfiles (elasticsearch)

`v9.5.3`

Compare Source

`v9.5.2`

Compare Source

`v9.5.1`

Compare Source

`v9.4.6`

Compare Source

`v9.4.5`

Compare Source

benoitc/gunicorn (gunicorn)

`v26.2.0`: gunicorn 26.2.0

Compare Source

Cleartext HTTP/2 lands, and an HTTP/2 security fix.

Cleartext HTTP/2 (h2c)

http2_cleartext accepts prior-knowledge, upgrade, both or off (the
default). Prior knowledge serves a connection that opens with the HTTP/2
preface; upgrade honours an HTTP/1.1 Upgrade: h2c request. Both work on the
gthread, gevent and asgi workers.

This is for deployments where TLS is terminated by a proxy that speaks HTTP/2
upstream, so the hop into gunicorn no longer drops to HTTP/1.1. Only peers in
forwarded_allow_ips are considered; everyone else is served HTTP/1.x exactly
as if the setting were off. Each mechanism is enabled separately, so turning one
on does not turn the other on.

Do not expose a cleartext HTTP/2 port to the internet.

Security

HTTP2Request built its headers straight from the stream, so nothing the HTTP/1
path enforces applied over HTTP/2: the underscore and header_map policy,
duplicate Host and Content-Type, control characters in values, and the
forwarded_allow_ips trust gate. An untrusted client could set SCRIPT_NAME
and forge HTTP_* entries in the WSGI environ, and decide wsgi.url_scheme
through :scheme. Both request classes now share one policy mixin, and the
scheme comes from the transport.

If you serve HTTP/2, this is the reason to upgrade.

Other HTTP/2 fixes

WSGI responses were buffered whole before anything was sent; they stream now.
HEAD, 204 and 304 no longer carry a body. Events read while blocked on a
flow-control window were discarded, losing requests and body data outright.
sendfile() is refused on HTTP/2 responses rather than bypassing framing.

Request bodies dropped on Upgrade requests

On the ASGI worker with the fast parser, any request carrying an Upgrade
header reached the application with an empty body, whatever the header's value
and with HTTP/2 switched off entirely. Fixed in gunicorn_h1c 0.6.9, which the
fast extra now requires.

Full changelog: https://gunicorn.org/news/

`v26.1.0`: gunicorn 26.1.0

Compare Source

New Features

Glob patterns in reload_extra_files: entries containing *, ? or [
are treated as patterns, so ui/*/config.json watches every view's config
without listing them one by one. Patterns are re-expanded on every reload
check rather than once at startup, so a file created later starts being
watched without restarting gunicorn, and ** recurses. A pattern matching
nothing warns instead of failing, since with live expansion it may match later
(#1643,
#3662).

Security

Dependency floors raised past known advisories: every declared floor was
checked against the advisory database. tornado, h2, setuptools and
pymdown-extensions permitted vulnerable versions and now require the first
clean release; pytest and httpx were unpinned and now carry floors. The
tornado example pinned tornado<6, which was both the source of several
advisories and older than the >=6.5.0 the tornado worker needs, so the
example could not run as pinned.

Bug Fixes

SIGHUP did not reload the logger configuration: Arbiter.reload()
re-read the configuration file but kept using the logger built at startup,
calling only reopen_files() on its existing handlers. Changes to
logconfig, logconfig_dict, logconfig_json and loglevel were ignored
until a full restart, which in containers meant replacing the pod. The
existing logger now re-runs its setup on reload, so new handlers, formats
and levels take effect while the process identity and its listeners are
preserved, and re-running the setup no longer stacks duplicate syslog
handlers. An invalid log configuration on reload is not fatal either: the
error is reported on stderr, the previous working configuration is restored
and the master keeps running with it
(#3353).
Truncated chunked bodies accepted: RFC 9112 section 7.1.2 ends a chunked
body with 0 CRLF CRLF, the second CRLF being the mandatory empty trailer
section. ChunkedReader.parse_chunk_size() swallowed the NoMoreData raised
while scanning for it, so a body cut short right after the last chunk line was
treated as complete instead of rejected. It now raises
ChunkMissingTerminator
(#3382,
#3685).
--spew crashed on dynamically generated code: the trace hook indexed the
2-tuple returned by inspect.getsourcelines() by line number rather than
indexing the list of lines, so a frame with no __file__ raised
AttributeError: 'int' object has no attribute 'rstrip' on line 1 and
IndexError beyond it. The tuple is now unpacked and offset by the source's
starting line (#3344,
#3495).
Duplicate Host and Content-Type headers accepted: RFC 9110 section 5.3
allows only one of each, and a repeat cannot be merged into a list, so the
message means different things to gunicorn and to anything downstream. Both
are now rejected with InvalidHeader. The check lives in the policy hook
shared by both parsers, so the pure-Python and fast parsers agree. Duplicate
Content-Length was already rejected and is unchanged
(#3366,
#3548).
Non-worker children reported as failed workers: reap_workers() reaps
every child through waitpid(-1), including processes the kernel reparented
onto gunicorn when it runs as PID 1 in a container, but it logged the exit
status before checking whether the pid was ever a worker. An unrelated process
produced Worker (pid:N) exited with code M and triggered alerts. More
seriously, such a process exiting with code 3 or 4 raised HaltServer and shut
the server down. Ownership is now established first: the dirty arbiter is
reported as itself, unknown children are reaped silently at debug level, and
only real workers can halt the server
(#3220,
#3566).
Dirty arbiter exits were invisible on SIGCHLD: handle_chld() called
reap_workers() first, whose waitpid(-1) claimed the dirty arbiter before
reap_dirty_arbiter() could identify it, so the latter always hit ECHILD and
its reporting never ran. The dirty arbiter is now reaped first, and
reap_workers() recognises it if it exits mid-loop.
Dirty arbiter returned stale responses after a worker timeout: when a
request reached dirty_timeout the arbiter answered the client with a timeout
error but kept the worker connection open. The worker's late response was then
the first message waiting on that socket, so the next request routed to the
same worker received the previous request's result, and every request after it
stayed one response behind. The connection is now closed on timeout, so the
late answer is discarded with it
(#3626).
ASGI connection count leaked on server-initiated close: nr_conns was
only decremented in connection_lost(), behind a guard keyed on the same
flag _close_transport() sets first. Every close the server started (a
Connection: close response, a keepalive timeout, an error abort) leaked one
count, so ASGIWorker._shutdown() ran the full graceful_timeout and warned
about connections that were already gone. The guard now uses its own flag, so
the decrement and the rest of the cleanup run exactly once whichever side
closes first (#3661).
Inotify reloader on cwd-relative extra files: reload_extra_files entries
with no directory part (for example .env) produced an empty dirname, and
watching it raised InotifyError with ENOENT. The current directory is now
watched as . (#3377,
#3667).
StatsD zero-valued metrics: gauges, counters, histograms and timers
reporting 0 were silently dropped because the value was tested for
truthiness. Only None is skipped now
(#3676).
Spurious no-body warning from sendfile(): a HEAD, 204 or 304 response
served through sendfile() warned about dropped body bytes even when the
file was empty and nothing was dropped. It now warns only when there are
bytes to drop, matching write()
(#3684).
Bare except in the gevent websocket example: narrowed to
except Exception (#3683).
ASGI receive() cancellation: Let asyncio.CancelledError propagate
from BodyReceiver instead of swallowing it and returning
http.disconnect. Frameworks that cancel their disconnect listener after
the response completes (Django) no longer see the cancel masked, so
request_finished fires and close_old_connections() runs. Fixes idle
database connections leaking since 25.1.0
(#3627,
#3654).
Control socket leak on SIGHUP reload: The control thread is now marked
ready once its loop and server are live, and the stop paths wait on that
readiness before scheduling shutdown. Reloads no longer leak one thread and
its selector fd plus unix socket per worker, which eventually raised
"too many open files"
(#3648).
WSGI body framing on HEAD/1xx/204/304: Mirror the ASGI strip-and-warn
behavior on the WSGI path. Content-Length is stripped on 1xx/204 per
RFC 9110 section 6.4.2, body bytes are dropped for no-body responses in
both write() and sendfile(), and a single warning is logged per request
(#3413).

Refactoring

Pass log arguments to the logger instead of pre-formatting the worker
termination message in Arbiter.reap_workers()
(#3678).

Changes

packaging is no longer a runtime dependency: it was only ever imported by
the gevent worker, to compare gevent's version. It moved to the gevent and
testing extras, so a plain pip install gunicorn pulls in nothing
(#3643).
Fast HTTP Parser: Require gunicorn_h1c >= 0.6.6, which rejects duplicate
Host and Content-Type headers in the C parser itself. Gunicorn already
refuses them on both the WSGI and ASGI paths, so this changes nothing that is
reachable; it moves the rejection to where the bytes are read and lets the
ASGI corpus exercise those cases against the fast parser directly.

Full changelog: https://gunicorn.org/2026-news/

pypa/hatch (hatchling)

`v1.32.0`: Hatchling v1.32.0

Compare Source

Changed:

Bump default core metadata version to 2.5
Add tomlkit as a runtime dependency, which is required to rewrite pyproject.toml when setting a static version

Added:

The version command can now set a version that is statically defined by the project.version field, updating pyproject.toml in place. Pass --force to allow an explicit downgrade

Fixed:

Allow the ; private annotation on project.import-names and project.import-namespaces entries rather than rejecting them as invalid import names.
Reject project.readme paths that are absolute or resolve outside of the project directory.

ipython/ipython (ipython)

`v9.17.1`

Compare Source

`v9.17.0`

Compare Source

`v9.16.1`

Compare Source

numpy/numpy (numpy)

`v2.5.3`

Compare Source

`v2.5.2`

Compare Source

psycopg/psycopg (psycopg)

`v3.3.5`

Compare Source

pydantic/pydantic (pydantic)

`v2.13.5`

Compare Source

LeoHsiao1/pyexiv2 (pyexiv2)

`v2.16.0`

Compare Source

[api] Separate the values of types XmpBag and XmpSeq with a list instead of a comma. (issue #176 )
[api] Change the value of 'Xmp.xmpMM.History'. Previously, it would return an empty string:
```
>>> img.read_xmp()['Xmp.xmpMM.History']
''
```
Now it will return the data type in XML:
```
>>> img.read_xmp()['Xmp.xmpMM.History']
'type="Seq"'
```
You don't need to pay attention to this change because it is not the actual stored data.

getsentry/sentry-python (sentry-sdk)

`v2.69.1`

Compare Source

New Features ✨

(django) Add http.route attribute by @alexander-alderman-webb in #7428

Bug Fixes 🐛

(aiohttp) Preserve SigV4-signed propagation headers by @Robinbinu in #7427

Internal Changes 🔧

Mcp

Parametrize tests on the streaming trace lifecycle by @alexander-alderman-webb in #7424
Remove vacuous tests by @alexander-alderman-webb in #7420

Other

(cohere) Parametrize tests on the streaming trace lifecycle by @alexander-alderman-webb in #7419
(openai-agents) Parametrize tests on stream_gen_ai_spans and the streaming trace lifecycle by @alexander-alderman-webb in #7405

`v2.69.0`

Compare Source

New Features ✨

Other

(aiohttp) Add http.route attribute by @alexander-alderman-webb in #7341
(bottle) Add http.route attribute by @alexander-alderman-webb in #7343
(clickhouse_driver) Set breadcrumbs in the streaming trace lifecycle by @alexander-alderman-webb in #7325
(docs) Add Plausible analytics to Sphinx docs by @ericapisani in #7319
(falcon) Add http.route attribute by @alexander-alderman-webb in #7340
(fastapi) Add http.route attribute by @alexander-alderman-webb in #7322
(flask) Add http.route attribute by @alexander-alderman-webb in #7344
(pyramid) Add http.route attribute by @alexander-alderman-webb in #7347
(quart) Add http.route attribute by @alexander-alderman-webb in #7348
(sqlalchemy) Add more db system names for span data by @ericapisani in #7329
(starlette) Add http.route attribute by @alexander-alderman-webb in #7338
(types) Export SpanJSON type by @ericapisani in #7331
Add Python 3.15 to test matrix by @sentrivana in #7326

Bug Fixes 🐛

Mcp

Handle None arguments in tool and prompt handlers by @alexander-alderman-webb in #7387
Don't report stateless StreamableHTTP servers as stdio by @Snaylaker in #7224

Openai

Read input_text parts for the Responses API by @alexander-alderman-webb in #7333
Check Response.output is a list before iterating by @alexander-alderman-webb in #7238

Starlette

Use url transaction source for host routing by @mjq in #7266
Set transaction name on current scope in sync handler by @mjq in #7201

Other

(batcher) Do not let a failed flush kill the flusher thread (#7138) by @zkasuran in #7186
(boto3) Fix botocore SigV4 failures caused by post-sign trace propagation by @pabloDeputter in #7050
(httpx,httpx2) Always capture breadcrumb by @sentrivana in #7351
(mcp,langchain) Add mechanism to captured exceptions by @gmassello in #7226
(openai-agents) Use isinstance to determine tool type by @alexander-alderman-webb in #7412
(quart) Skip quart-flask-patch and adjust error test for quart>=0.23 by @ericapisani in #7320
Allow to correctly compare parsed versions by @sentrivana in #7184

Internal Changes 🔧

Openai Agents

Capture spans instead of reading from span recorder by @alexander-alderman-webb in #7404
Pin openai version when incompatible by @alexander-alderman-webb in #7236

Pydantic Ai

Replace individual hooks with hooks.on.model_request by @alexander-alderman-webb in #7327
Fix instructions test for pydantic-ai >=2.36.0 by @ericapisani in #7321

Other

(aiohttp) Remove dead segment name code by @mjq in #7284
(anthropic) Include StreamedSpan in type annotations by @alexander-alderman-webb in #7373
(mcp) Inline _extract_handler_data_from_args() by @alexander-alderman-webb in #7386
(quart) Fix flake caused by flushing spans on segment end by @alexander-alderman-webb in #7240
(stdlib) Remove urllib3 workaround by @pabloDeputter in #7283
Add openai-agents to uv typing group by @alexander-alderman-webb in #7415
Add aiohttp to uv typing group by @alexander-alderman-webb in #7395
Isolate httpx test suite from httpx2 by @ZaafirRizwan in #7398
Remove test_langchain_embeddings_error_handling() by @alexander-alderman-webb in #7389
Add tiktoken to uv typing group by @alexander-alderman-webb in #7394
Reference renamed coverage action by @MathurAditya724 in #7371
Remove flaky detector by @sl0thentr0py in #7363
Add openai to uv typing group by @alexander-alderman-webb in #7334
🤖 Update test matrix with new releases (08/31) by @github-actions in #7303
Add anthropic to uv typing group by @alexander-alderman-webb in #7324
Add google-genai to uv typing group by @alexander-alderman-webb in #7323
Use tagged versions for getsentry/codecov-action by @alexander-alderman-webb in #7241
Update test matrix with new releases (08/24) by @alexander-alderman-webb in #7228
Add httpx dependency to tests relying on get_model_response() by @alexander-alderman-webb in #7235
Access the 'type' in an event using .get by @ericapisani in #7239

`v2.68.1`

Compare Source

`enable_logs`

(logs) Don't stop sending auto-collected logs when enable_logs=True by @sentrivana in #7237

If you have enable_logs set to True, our logging integrations for the standard library logging module as well as Loguru will auto-collect logs and send them to Sentry as Sentry logs by default, preserving old behavior. Turning automatic collection off for a specific integration can still be achieved using the capture_sentry_logs integration option.
```
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration

sentry_sdk.init(
    enable_logs=True,
    integrations=[
        LoggingIntegration(capture_sentry_logs=True),
        LoguruIntegration(capture_sentry_logs=False),
    ],
)
```
Please note that the enable_logs option is deprecated and will be removed in the next major release. The sentry_sdk.logger.X API now works regardless of it, and auto-collection can be opted into via the capture_sentry_logs integration-level options, which are False by default, unless you have enable_logs=True. We've added this compatibility layer to make the transition to a enable_logs-free world easier.

Bug Fixes 🐛

(django) Add failed_request_status_codes by @mgaligniana in #7140
(anthropic) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7207
(google_genai) Gate streaming gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7210
(langchain) Use gen_ai.tool.definitions attribute when data collection is enabled by @ericapisani in #7204
(langgraph,huggingface_hub) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7208
(openai) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7205
(openai_agents) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7209

`v2.68.0`

Compare Source

Important

We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

Action Needed

If you had enable_logs set to True:

If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.
I

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM, on day 1 of the month (* 0-3 1 * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

coderabbitai · 2026-09-10T01:16:11Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: 6e28f450-088a-495f-9f40-14a4023fa2da

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

renovate Bot force-pushed the renovate/all-minor-patch branch 28 times, most recently from 12706b3 to dcc527b Compare September 10, 2026 01:16

renovate Bot force-pushed the renovate/all-minor-patch branch from dcc527b to 9725c70 Compare September 11, 2026 15:29

renovate Bot force-pushed the renovate/all-minor-patch branch 5 times, most recently from 7c0b37a to baae1aa Compare September 13, 2026 21:39

Update all non-major dependencies

541b4d4

renovate Bot force-pushed the renovate/all-minor-patch branch from baae1aa to 541b4d4 Compare September 14, 2026 09:06

Navigation Menu

Uh oh!

Update all non-major dependencies - #1587

Update all non-major dependencies#1587
renovate[bot] wants to merge 1 commit into
masterfrom
renovate/all-minor-patch

renovate Bot commented Sep 1, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Sep 10, 2026 •

edited

Loading

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Changelog

What's Changed

Changelog

What's Changed

New Contributors

v26.2.0: gunicorn 26.2.0

Cleartext HTTP/2 (h2c)

Security

Other HTTP/2 fixes

Request bodies dropped on Upgrade requests

v26.1.0: gunicorn 26.1.0

New Features

Security

Bug Fixes

Refactoring

Changes

v1.32.0: Hatchling v1.32.0

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Mcp

Other

New Features ✨

Other

Bug Fixes 🐛

Mcp

Openai

Starlette

Other

Internal Changes 🔧

Openai Agents

Pydantic Ai

Other

enable_logs

Bug Fixes 🐛

Important

Action Needed

Configuration

Uh oh!

coderabbitai Bot commented Sep 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Sep 1, 2026 •

edited

Loading

`v26.2.0`: gunicorn 26.2.0

`v26.1.0`: gunicorn 26.1.0

`v1.32.0`: Hatchling v1.32.0

`enable_logs`

coderabbitai Bot commented Sep 10, 2026 •

edited

Loading