Skip to content

chore(deps): bump the pip-backend-majors group across 1 directory with 6 updates - #185

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dashboard/backend/pip-backend-majors-a8da2216a5
Open

chore(deps): bump the pip-backend-majors group across 1 directory with 6 updates#185
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/dashboard/backend/pip-backend-majors-a8da2216a5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip-backend-majors group with 6 updates in the /dashboard/backend directory:

Package From To
aiofiles 24.1.0 25.1.0
websockets 15.0.1 17.0.1
redis 5.2.0 8.1.0
rq 1.16.2 2.11.0
structlog 24.4.0 26.1.0
qrcode 7.4.2 8.2

Updates aiofiles from 24.1.0 to 25.1.0

Release notes

Sourced from aiofiles's releases.

v25.1.0

  • Switch to uv + add Python v3.14 support. (#219)
  • Add ruff formatter and linter. #216
  • Drop Python 3.8 support. If you require it, use version 24.1.0. #204

New Contributors

Full Changelog: Tinche/aiofiles@v24.1.0...v25.1.0

Changelog

Sourced from aiofiles's changelog.

25.1.0 (2025-10-09)

  • Switch to uv + add Python v3.14 support. (#219)
  • Add ruff formatter and linter. #216
  • Drop Python 3.8 support. If you require it, use version 24.1.0. #204
Commits

Updates websockets from 15.0.1 to 17.0.1

Release notes

Sourced from websockets's releases.

17.0.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

17.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

16.1.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

16.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

16.0

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • fd3f16c Release version 17.0.1.
  • 3e4634a Remove superfluous "no cover" pragmas.
  • b93ef1e Add tests for the asyncio server.
  • fef04d8 Fix backpressure in the Trio implementation.
  • eb3600c Restore compatibility of serve_forever with uvloop.
  • 8b5e767 Simplify asyncio server implementation.
  • 94f6384 Refactor connection handling outside of Server class.
  • 3826993 Unpin sphinx.
  • 31ec002 Add Trio to requirements for building docs.
  • ff7a7fb Increase timeout for building wheels.
  • Additional commits viewable in compare view

Updates redis from 5.2.0 to 8.1.0

Release notes

Sourced from redis's releases.

8.1.0

Changes

✨ Highlights

Async maintenance notifications

redis-py now supports server-pushed maintenance notifications in the asyncio stack for both standalone and cluster clients, bringing the async client to parity with the sync implementation. When a Redis deployment signals maintenance events (such as node migration or failover windows), the async client reacts through the maintenance-notifications handler (redis/maint_notifications.py and its async integration under redis/asyncio/), allowing applications to adapt connection handling during maintenance without downtime. (#4177)

Expanded command coverage

This release adds a batch of new command surfaces across core data types and modules:

  • ListsLMOVEM / BLMOVEM for moving multiple elements between lists (#4174).
  • SetsSDIFFCARD and SUNIONCARD cardinality commands (#4171).
  • StreamsMAXCOUNT / MAXSIZE options for XREAD and XREADGROUP (#4173).
  • Time SeriesTS.READ (#4170), TS.QUERYLABELS (#4197), TS.NRANGE / TS.NREVRANGE (#4163), and an exclude_empty (EXCLUDEEMPTY) option for TS.MRANGE / TS.MREVRANGE (#4188).
  • SearchFT.ALIASLIST (#4198) and a COLLECT reducer for aggregations (#4179).
  • Sentinel — replica sentinel aliases (#4127).

🚀 New Features

  • Add replica sentinel aliases (#4127)
  • Add TS.NRANGE and TS.NREVRANGE support to the timeseries command surface (#4163)
  • feat: add TS.READ command support to the timeseries module (#4170)
  • feat: add SDIFFCARD and SUNIONCARD command support (#4171)
  • feat: add MAXCOUNT/MAXSIZE support to XREAD and XREADGROUP (#4173)
  • feat: add LMOVEM and BLMOVEM commands for moving multiple list elements (#4174)
  • feat: add async maintenance-notifications support for standalone and cluster clients (#4177)
  • feat: add COLLECT reducer support to search aggregations (#4179)
  • feat: add exclude_empty (EXCLUDEEMPTY) option to TS.MRANGE and TS.MREVRANGE (#4188)
  • feat: add TS.QUERYLABELS support to the timeseries command surface (#4197)
  • feat: add FT.ALIASLIST support (#4198)

⚠️ Experimental

  • feat: add client-side HIMPORT fieldset support for standalone and cluster clients (#4205)

The feature considered unstable and public API might be changed in the future minor version

🐛 Bug Fixes

  • fix: detect closed pooled connection without consuming pending push data (RESP3 + hiredis) (#4156)
  • Fix Sentinel pool capacity loss after failover (#4193)

... (truncated)

Commits
  • e013126 Testing with 8.10 GA (#4227)
  • 059d1e9 Fixed TS.NRANGE commands to correctly apply aggregators (#4225)
  • d486a0a Fix FIELDNAME alias dropping first character of un-prefixed fields (#4224)
  • fb93104 feat: add client-side HIMPORT fieldset support for standalone and cluster cli...
  • 9197609 Fix lat/lon swap in search querystring geo() helper (#4223)
  • 14714a0 fix: Fixed double decoding issue with unquote() (#4222)
  • 227280a Update lib version to 8.1.0
  • 88d16d0 Decode ACL LOG string values on the default RESP3 legacy callback (#4201)
  • 599fd75 feat: add FT.ALIASLIST support (#4198)
  • 71e275e test: add VectorField RERANK serialization tests for sync and async search (#...
  • Additional commits viewable in compare view

Updates rq from 1.16.2 to 2.11.0

Release notes

Sourced from rq's releases.

v2.11

  • CronJob now keeps a history of jobs it created, accessible via cron_job.get_job_ids(). Thanks @​selwin!
  • RQScheduler now acquire and refresh locks before enqueueing. Thanks @​selwin!
  • Each CronJob now has a name. Thanks @​selwin!
  • rq worker-pool now supports custom exception handlers. Thanks @​njits030!
  • rq worker-pool now honors the DICT_CONFIG logging setting from config files. Thanks @​razchiriac!
  • Execution now stores the name of the worker running it. Thanks @​selwin!
  • Fixed an issue where calling create_cron() multiple times creates duplicate jobs. Thanks @​selwin!
  • Fixed SpawnWorker compatibility with redis-py >= 8.1. Thanks @​b3n4kh!
  • Worker log messages now include the worker name and job ID. Thanks @​selwin!

v2.10

v2.9.1

v2.9

  • Added json and pickle shorthand aliases for serializers. These can now be used when creating queues/workers and with the --serializer CLI option. Thanks @​selwin!
  • Fixed a bug where SpawnWorker does not use user supplied serializer. Thanks @​selwin!
  • Queue.parse_args() now returns a EnqueueArgs named tuple. Thanks @​libmilos-so!
  • Fixed a race condition that could cause worker keys in Redis to get out of sync when Redis is under load. Thanks @​terencehonles!
  • Enqueueing deferred jobs now removes them from DeferredJobRegistry. Thanks @​selwin!
  • SpawnWorker now uses repr() when reconstructing worker, job and queue identifiers in child processes. Thanks @​selwin!
  • Minor typing and cleanup improvements. Thanks @​selwin and @​rextea!

v2.8

  • Added support for unique jobs. Passing unique=True with job_id prevents duplicate jobs from being enqueued or scheduled. Thanks @​selwin!
  • Result now stores execution metadata (execution_id, execution_started_at and execution_ended_at). Thanks @​selwin!
  • Retry now supports enqueue_at_front=True, allowing retried jobs to be requeued at the front of the queue. Thanks @​crazillagodzilla!
  • Custom job_id values may only contain letters, numbers, underscores and dashes. Thanks @​selwin!
  • When a job is stopped, its dependencies are no longer enqueued. Thanks @​selwin!
  • DeferredJobRegistry is now scored by job creation time. Thanks @​selwin!
  • Workers now print a warning instead of raising an exception when CLIENT LIST is not supported. Thanks @​selwin and @​djmaze!

v2.7

v2.6.1

v2.6

  • Added CronScheduler.all() that returns a list of active schedulers. Thanks @​selwin!

... (truncated)

Changelog

Sourced from rq's changelog.

RQ 2.11.0 (2026-08-17)

  • CronJob now keeps a history of jobs it created, accessible via cron_job.get_job_ids(). Thanks @​selwin!
  • RQScheduler now acquire and refresh locks before enqueueing. Thanks @​selwin!
  • Each CronJob now has a name. Thanks @​selwin!
  • rq worker-pool now supports custom exception handlers. Thanks @​njits030!
  • rq worker-pool now honors the DICT_CONFIG logging setting from config files. Thanks @​razchiriac!
  • Execution now stores the name of the worker running it. Thanks @​selwin!
  • Fixed an issue where calling create_cron() multiple times creates duplicate jobs. Thanks @​selwin!
  • Fixed SpawnWorker compatibility with redis-py >= 8.1. Thanks @​b3n4kh!
  • Worker log messages now include the worker name and job ID. Thanks @​selwin!

RQ 2.10.0 (2026-06-20)

RQ 2.9.1 (2026-06-06)

RQ 2.9.0 (2026-05-19)

  • Added json and pickle shorthand aliases for serializers. These can now be used when creating queues/workers and with the --serializer CLI option. Thanks @​selwin!
  • Fixed a bug where SpawnWorker does not use user supplied serializer. Thanks @​selwin!
  • Queue.parse_args() now returns a EnqueueArgs named tuple. Thanks @​libmilos-so!
  • Fixed a race condition that could cause worker keys in Redis to get out of sync when Redis is under load. Thanks @​terencehonles!
  • Enqueueing deferred jobs now removes them from DeferredJobRegistry. Thanks @​selwin!
  • SpawnWorker now uses repr() when reconstructing worker, job and queue identifiers in child processes. Thanks @​selwin!
  • Minor typing and cleanup improvements. Thanks @​selwin and @​rextea!

RQ 2.8.0 (2026-04-16)

  • Added support for unique jobs. Passing unique=True with job_id prevents duplicate jobs from being enqueued or scheduled. Thanks @​selwin!
  • Result now stores execution metadata (execution_id, execution_started_at and execution_ended_at). Thanks @​selwin!
  • Retry now supports enqueue_at_front=True, allowing retried jobs to be requeued at the front of the queue. Thanks @​crazillagodzilla!
  • Custom job_id values may only contain letters, numbers, underscores and dashes. Thanks @​selwin!
  • When a job is stopped, its dependencies are no longer enqueued. Thanks @​selwin!
  • DeferredJobRegistry is now scored by job creation time. Thanks @​selwin!
  • Workers now print a warning instead of raising an exception when CLIENT LIST is not supported. Thanks @​selwin and @​djmaze!

RQ 2.7.0 (2026-02-22)

RQ 2.6.1 (2025-11-22)

RQ 2.6 (2025-09-06)

  • Added CronScheduler.all() that returns a list of active schedulers. Thanks @​selwin!

... (truncated)

Commits

Updates structlog from 24.4.0 to 26.1.0

Release notes

Sourced from structlog's releases.

26.1.0

Highlights

Given how long this release took, it's pretty thicc with nice things all over the board! Apologies for the long release cycle; it's been a victim of the slopocalypse and me trying to navigate my way thru the new normal. Extra big thanks to my sponsors for not abandoning me in these unironically trying times. ❤️

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Kraken Tech (@kraken-tech), Klaviyo (@klaviyo), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Ecosystems (@ecosyste-ms), TestMu AI Open Source Office (Formerly LambdaTest) (@LambdaTest-Inc), GitHub (@github), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Al Sweigart (@asweigart), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Full Changelog

Removed

  • Python 3.8 and 3.9 support.

Deprecated

  • Support for better-exceptions is deprecated and will be removed within a year. Use our Rich integration or copy-paste the one line of code you need. #802

Added

  • Python 3.15 support. #813

  • structlog.dev.rich_monochrome_traceback for Rich-based monochrome exception rendering and add support for it throughout structlog.dev.ConsoleRenderer when the user asks for no colors. #794

  • structlog.BytesLogger now has a name attribute which allows you to use it with the structlog.stdlib.add_logger_name() processor without using the standard library integration. #786

  • structlog.processors.CallsiteParameterAdder now supports CallsiteParameter.QUAL_MODULE that adds the qualified import name of the module of the callsite, or __main__ if the module is the entry point. This is only available for structlog-originated events since the standard library has no equivalent (except for the convention of setting the logger's name to __name__). #812

  • structlog.stdlib.BoundLogger now has is_enabled_for() and get_effective_level() methods that are snake_case aliases for its isEnabledFor() and getEffectiveLevel() methods. This makes it more compatible with the native structlog.typing.FilteringBoundLogger, so you can swap configurations without changing your call sites. #818

Changed

  • structlog.dev.ConsoleRenderer does not warn anymore when the exception key has a rendered value despite having a fancy formatter configured. #790

... (truncated)

Changelog

Sourced from structlog's changelog.

26.1.0 - 2026-06-06

Removed

  • Python 3.8 and 3.9 support.

Deprecated

  • Support for better-exceptions is deprecated and will be removed within a year. Use our Rich integration or copy-paste the one line of code you need. #802

Added

  • Python 3.15 support. #813

  • structlog.dev.rich_monochrome_traceback for Rich-based monochrome exception rendering and add support for it throughout structlog.dev.ConsoleRenderer when the user asks for no colors. #794

  • structlog.BytesLogger now has a name attribute which allows you to use it with the structlog.stdlib.add_logger_name() processor without using the standard library integration. #786

  • structlog.processors.CallsiteParameterAdder now supports CallsiteParameter.QUAL_MODULE that adds the qualified import name of the module of the callsite, or __main__ if the module is the entry point. This is only available for structlog-originated events since the standard library has no equivalent (except for the convention of setting the logger's name to __name__). #812

  • structlog.stdlib.BoundLogger now has is_enabled_for() and get_effective_level() methods that are snake_case aliases for its isEnabledFor() and getEffectiveLevel() methods. This makes it more compatible with the native structlog.typing.FilteringBoundLogger, so you can swap configurations without changing your call sites. #818

Changed

  • structlog.dev.ConsoleRenderer does not warn anymore when the exception key has a rendered value despite having a fancy formatter configured. #790

Fixed

  • structlog.BytesLogger, structlog.PrintLogger, and structlog.WriteLogger now hold weak references to the files they use for output. This prevents their leakage in long-running processes that open many logfiles, such as task executors that create a per-task BytesLogger or WriteLogger. #807

  • structlog.WriteLogger is usable after unpickling. #787

  • structlog.processors.CallsiteParameterAdder now reports the calling thread's id and name for async log methods, instead of the thread from the executor pool that runs the underlying sync logger.

... (truncated)

Commits

Updates qrcode from 7.4.2 to 8.2

Changelog

Sourced from qrcode's changelog.

8.2 (01 May 2025)

  • Optimize QRColorMask apply_mask method for enhanced performance
  • Fix typos on StyledPilImage embeded_* parameters. The old parameters with the typos are still accepted for backward compatibility.

8.1 (02 April 2025)

  • Added support for Python 3.13.

8.0 (27 September 2024)

  • Added support for Python 3.11 and 3.12.

  • Drop support for Python <=3.8.

  • Change local development setup to use Poetry_.

  • Testsuite and code quality checks are done through Github Actions.

  • Code quality and formatting utilises ruff_.

  • Removed typing_extensions as a dependency, as it's no longer required with having Python 3.9+ as a requirement. having Python 3.9+ as a requirement.

  • Only allow high error correction rate (qrcode.ERROR_CORRECT_H) when generating QR codes with embedded images to ensure content is readable

.. _Poetry: https://python-poetry.org .. _ruff: https://astral.sh/ruff

Commits

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Aug 28, 2026
@dependabot @github

dependabot Bot commented on behalf of github Aug 28, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: dashboard. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot added python Pull requests that update python code dependencies Pull requests that update a dependency file labels Aug 28, 2026
@github-actions

Copy link
Copy Markdown

PR Check Results

Code Formatting: Passed
Linting: Passed
Type Checking: Failed
Tests: Failed

⚠️ Some checks failed. Please review the details above.

@github-actions

github-actions Bot commented Aug 28, 2026

Copy link
Copy Markdown

⚠️ WARN Trivy Security Scan Results

Severity Count
🔴 CRITICAL 0
🟠 HIGH 39
Total 39

Scans performed:

  • 📁 Filesystem (vulnerabilities, secrets, misconfigurations)
  • 🐳 Backend Docker image
  • 🐳 Frontend Docker image
  • 🏗️ IaC misconfiguration detection

⚠️ HIGH vulnerabilities should be addressed. Review required.

📋 View detailed SARIF reports

Download artifacts from this workflow run for full SARIF reports.
Results are also available in the GitHub Security tab.


Trivy v0.71.0 | aquasecurity/trivy

@dependabot dependabot Bot changed the title chore(deps): bump the pip-backend-majors group in /dashboard/backend with 6 updates chore(deps): bump the pip-backend-majors group across 1 directory with 6 updates Aug 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/pip/dashboard/backend/pip-backend-majors-a8da2216a5 branch from 6635923 to 1bf3f75 Compare August 28, 2026 20:53
@github-actions

Copy link
Copy Markdown

PR Check Results

Code Formatting: Passed
Linting: Passed
Type Checking: Failed
Tests: Failed

⚠️ Some checks failed. Please review the details above.

@dependabot
dependabot Bot force-pushed the dependabot/pip/dashboard/backend/pip-backend-majors-a8da2216a5 branch from 1bf3f75 to 5deb7e3 Compare August 28, 2026 21:20
@github-actions

Copy link
Copy Markdown

PR Check Results

Code Formatting: Passed
Linting: Passed
Type Checking: Failed
Tests: Failed

⚠️ Some checks failed. Please review the details above.

@dependabot
dependabot Bot force-pushed the dependabot/pip/dashboard/backend/pip-backend-majors-a8da2216a5 branch from 5deb7e3 to 43f06e0 Compare August 28, 2026 22:40
@github-actions

Copy link
Copy Markdown

PR Check Results

Code Formatting: Passed
Linting: Passed
Type Checking: Failed
Tests: Failed

⚠️ Some checks failed. Please review the details above.

…h 6 updates

Bumps the pip-backend-majors group with 6 updates in the /dashboard/backend directory:

| Package | From | To |
| --- | --- | --- |
| [aiofiles](https://github.com/Tinche/aiofiles) | `24.1.0` | `25.1.0` |
| [websockets](https://github.com/python-websockets/websockets) | `15.0.1` | `17.0.1` |
| [redis](https://github.com/redis/redis-py) | `5.2.0` | `8.1.0` |
| [rq](https://github.com/rq/rq) | `1.16.2` | `2.11.0` |
| [structlog](https://github.com/hynek/structlog) | `24.4.0` | `26.1.0` |
| [qrcode](https://github.com/lincolnloop/python-qrcode) | `7.4.2` | `8.2` |



Updates `aiofiles` from 24.1.0 to 25.1.0
- [Release notes](https://github.com/Tinche/aiofiles/releases)
- [Changelog](https://github.com/Tinche/aiofiles/blob/main/CHANGELOG.md)
- [Commits](Tinche/aiofiles@v24.1.0...v25.1.0)

Updates `websockets` from 15.0.1 to 17.0.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@15.0.1...17.0.1)

Updates `redis` from 5.2.0 to 8.1.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.2.0...v8.1.0)

Updates `rq` from 1.16.2 to 2.11.0
- [Release notes](https://github.com/rq/rq/releases)
- [Changelog](https://github.com/rq/rq/blob/master/CHANGES.md)
- [Commits](rq/rq@v1.16.2...v2.11)

Updates `structlog` from 24.4.0 to 26.1.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@24.4.0...26.1.0)

Updates `qrcode` from 7.4.2 to 8.2
- [Changelog](https://github.com/lincolnloop/python-qrcode/blob/main/CHANGES.rst)
- [Commits](lincolnloop/python-qrcode@v7.4.2...v8.2)

---
updated-dependencies:
- dependency-name: aiofiles
  dependency-version: 25.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-backend-majors
- dependency-name: qrcode
  dependency-version: '8.2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-backend-majors
- dependency-name: redis
  dependency-version: 8.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-backend-majors
- dependency-name: rq
  dependency-version: 2.11.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-backend-majors
- dependency-name: structlog
  dependency-version: 26.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-backend-majors
- dependency-name: websockets
  dependency-version: 17.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip-backend-majors
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/dashboard/backend/pip-backend-majors-a8da2216a5 branch from 43f06e0 to d9175bc Compare August 28, 2026 23:46
@github-actions

Copy link
Copy Markdown

PR Check Results

Code Formatting: Passed
Linting: Passed
Type Checking: Failed
Tests: Failed

⚠️ Some checks failed. Please review the details above.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants