Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the python-packages group with 5 updates:

Package From To
celery 5.6.0 5.6.1
fastapi 0.127.0 0.128.0
python-keycloak 5.8.1 6.0.0
faker 39.0.0 40.1.0
coverage 7.13.0 7.13.1

Updates celery from 5.6.0 to 5.6.1

Release notes

Sourced from celery's releases.

v5.6.1

What's Changed

New Contributors

Full Changelog: celery/celery@v5.6.0...v5.6.1

Changelog

Sourced from celery's changelog.

5.6.1

:release-date: 2025-12-29 :release-by: Tomer Nosrati

What's Changed


- Fix Redis Sentinel ACL authentication support ([#10013](https://github.com/celery/celery/issues/10013))
- Fix: Broker heartbeats not sent during graceful shutdown ([#9986](https://github.com/celery/celery/issues/9986))
- docs [#5410](https://github.com/celery/celery/issues/5410) -- Document confirm_publish broker transport option ([#10016](https://github.com/celery/celery/issues/10016))
- close DB pools only in prefork mode ([#10020](https://github.com/celery/celery/issues/10020))
- Fix: Avoid unnecessary Django database connection creation during cleanup ([#10015](https://github.com/celery/celery/issues/10015))
- reliable prefork detection ([#10023](https://github.com/celery/celery/issues/10023))
- better coverage ([#10029](https://github.com/celery/celery/issues/10029))
- Docs: clarify `result_extended` vs periodic task metadata and show `headers["periodic_task_name"]` example ([#10030](https://github.com/celery/celery/issues/10030))
- Stop importing pytest_subtests ([#10032](https://github.com/celery/celery/issues/10032))
- Only use exceptiongroup backport for Python < 3.11 ([#10033](https://github.com/celery/celery/issues/10033))
- Prepare for release: v5.6.1 ([#10037](https://github.com/celery/celery/issues/10037))

.. _version-5.6.0:

Commits

Updates fastapi from 0.127.0 to 0.128.0

Release notes

Sourced from fastapi's releases.

0.128.0

Breaking Changes

Internal

0.127.1

Refactors

Docs

Translations

Internal

Commits

Updates python-keycloak from 5.8.1 to 6.0.0

Changelog

Sourced from python-keycloak's changelog.

v6.0.0 (2025-12-28)

BREAKING CHANGE

  • changes the behavior of get_group_by_path to raise an exception in case the path is not found, which is now the definitive new behavior

v5.12.0 (2025-12-27)

Feat

  • Add PKCE support (RFC 7636) (#670)

v5.11.0 (2025-12-27)

Feat

  • implement authz import request (#685)

v5.10.0 (2025-12-27)

Feat

  • add get_role_composites_by_id method (#680)

v5.9.0 (2025-12-27)

Feat

  • add pool_maxsize parameter to connection managers (#651)
Commits
  • 60e9927 revert: Revert error handling change in KeycloakAdmin.get_group_by_path (#676)
  • 3ea146d docs: changelog update
  • 6361733 feat: Add PKCE support (RFC 7636) (#670)
  • 16411f7 docs: changelog update
  • 05763ae feat: implement authz import request (#685)
  • dacef71 docs: changelog update
  • 3ea1a0a feat: add get_role_composites_by_id method (#680)
  • c5a8309 chore: correct argument type hint in send_update_account and a_send_update_ac...
  • 0645cdf docs: changelog update
  • 18f4d50 feat: add pool_maxsize parameter to connection managers (#651)
  • Additional commits viewable in compare view

Updates faker from 39.0.0 to 40.1.0

Release notes

Sourced from faker's releases.

Release v40.1.0

See CHANGELOG.md.

Release v40.0.0

See CHANGELOG.md.

Release v39.1.0

See CHANGELOG.md.

Changelog

Sourced from faker's changelog.

v40.1.0 - 2025-12-29

v40.0.0 - 2025-12-29

  • Capitalize en_GB address street suffixes. Thanks @​nspcc-cm.

v39.1.0 - 2025-12-29

  • Add french female variants for jobs. Thanks @​T0nio and Camille.
Commits
  • 1c0855e Bump version: 40.0.0 → 40.1.0
  • 11c7a0d 📝 Update CHANGELOG.md
  • 8889ca5 💄 Format code
  • 1cab83e feat: Add selective uniqueness with exclude_types() (#2299)
  • 708e8ce Bump version: 39.1.0 → 40.0.0
  • de1bb99 📝 Update CHANGELOG.md
  • 9c4badb Fix/capitalise en_GB address street suffixes (#2291)
  • 9d10859 Add Faker Galactic Provider to Community Providers page (#2289)
  • 8efbb31 Bump version: 39.0.0 → 39.1.0
  • 7dde029 📝 Update CHANGELOG.md
  • Additional commits viewable in compare view

Updates coverage from 7.13.0 to 7.13.1

Changelog

Sourced from coverage's changelog.

Version 7.13.1 — 2025-12-28

  • Added: the JSON report now includes a "start_line" key for function and class regions, indicating the first line of the region in the source. Closes issue 2110_.

  • Added: The debug data command now takes file names as arguments on the command line, so you can inspect specific data files without needing to set the COVERAGE_FILE environment variable.

  • Fix: the JSON report used to report module docstrings as executed lines, which no other report did, as described in issue 2105_. This is now fixed, thanks to Jianrong Zhao.

  • Fix: coverage.py uses a more disciplined approach to detecting where third-party code is installed, and avoids measuring it. This shouldn't change any behavior. If you find that it does, please get in touch.

  • Performance: data files that will be combined now record their hash as part of the file name. This lets us skip duplicate data more quickly, speeding the combining step.

  • Docs: added a section explaining more about what is considered a missing branch and how it is reported: :ref:branch_explain, as requested in issue 1597. Thanks to Ayisha Mohammed <pull 2092_>.

  • Tests: the test suite misunderstood what core was being tested if COVERAGE_CORE wasn't set on 3.14+. This is now fixed, closing issue 2109_.

.. _issue 1597: coveragepy/coveragepy#1597 .. _pull 2092: coveragepy/coveragepy#2092 .. _issue 2105: coveragepy/coveragepy#2105 .. _issue 2109: coveragepy/coveragepy#2109 .. _issue 2110: coveragepy/coveragepy#2110

.. _changes_7-13-0:

Commits
  • a6afdc3 docs: sample HTML for 7.13.1
  • a497081 docs: prep for 7.13.1
  • e992033 docs: polish up CHANGES
  • 18bba6e chore: bump the action-dependencies group with 4 updates (#2111)
  • 80fb808 refactor: (?x:...) lets us use re.VERBOSE even when combining later
  • cc272bd docs: leave a comment so we'll find this when 3.12 is the minimum
  • 70d007d types: be explicit
  • a2c1940 types: fully import modules that will be patched
  • 57b975d types: explicit Protocol inheritance permits changing parameter names
  • 63ec12d types: clarify that morfs arguments can be a single morf
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the python-packages group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [celery](https://github.com/celery/celery) | `5.6.0` | `5.6.1` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.127.0` | `0.128.0` |
| [python-keycloak](https://github.com/marcospereirampj/python-keycloak) | `5.8.1` | `6.0.0` |
| [faker](https://github.com/joke2k/faker) | `39.0.0` | `40.1.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.13.0` | `7.13.1` |


Updates `celery` from 5.6.0 to 5.6.1
- [Release notes](https://github.com/celery/celery/releases)
- [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst)
- [Commits](celery/celery@v5.6.0...v5.6.1)

Updates `fastapi` from 0.127.0 to 0.128.0
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.127.0...0.128.0)

Updates `python-keycloak` from 5.8.1 to 6.0.0
- [Changelog](https://github.com/marcospereirampj/python-keycloak/blob/master/CHANGELOG.md)
- [Commits](marcospereirampj/python-keycloak@v5.8.1...v6.0.0)

Updates `faker` from 39.0.0 to 40.1.0
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v39.0.0...v40.1.0)

Updates `coverage` from 7.13.0 to 7.13.1
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.13.0...7.13.1)

---
updated-dependencies:
- dependency-name: celery
  dependency-version: 5.6.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-packages
- dependency-name: fastapi
  dependency-version: 0.128.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-packages
- dependency-name: python-keycloak
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: faker
  dependency-version: 40.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: python-packages
- dependency-name: coverage
  dependency-version: 7.13.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: python-packages
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the type:dependency Dependency-related changes label Jan 1, 2026
@MTSOnGithub MTSOnGithub enabled auto-merge (rebase) January 1, 2026 05:10
@github-actions
Copy link

github-actions bot commented Jan 1, 2026

Coverage

Coverage Report •
FileStmtsMissCoverMissing
TOTAL526762888% 
report-only-changed-files is enabled. No files were changed during this commit :)

@dolfinus dolfinus disabled auto-merge January 1, 2026 08:18
@dolfinus dolfinus merged commit b25f31b into develop Jan 1, 2026
55 of 58 checks passed
@dolfinus dolfinus deleted the dependabot/uv/python-packages-f72a7f9bc3 branch January 1, 2026 08:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

type:dependency Dependency-related changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants