Skip to content

build(deps): bump the pip group across 1 directory with 8 updates#18

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/WHartTest_Django/pip-230ba9801b
Open

build(deps): bump the pip group across 1 directory with 8 updates#18
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/pip/WHartTest_Django/pip-230ba9801b

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 28, 2025

Bumps the pip group with 8 updates in the /WHartTest_Django directory:

Package From To
django 5.2 5.2.8
djangorestframework-simplejwt 5.3.1 5.5.1
langchain-core 0.3.60 0.3.80
langgraph-checkpoint 2.0.26 3.0.0
langgraph-checkpoint-sqlite 2.0.10 2.0.11
langchain-community 0.3.24 0.3.27
langchain-text-splitters 0.3.8 0.3.9
pypdf 5.6.0 6.4.0

Updates django from 5.2 to 5.2.8

Commits
  • 47fe39a [5.2.x] Bumped version for 5.2.8 release.
  • ac9fcf6 [5.2.x] Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on ...
  • 6703f36 [5.2.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via th...
  • 4f5d904 [5.2.x] Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedire...
  • cbdf128 [5.2.x] Fixed #36704 -- Fixed system check error for proxy model with a compo...
  • 6775888 [5.2.x] Fixed #36696 -- Fixed NameError when inspecting functions with deferr...
  • d5dfffa [5.2.x] Added stub release notes and release date for 5.2.8, 5.1.14, and 4.2.26.
  • 368f955 [5.2.x] Fixed #36681 -- Removed English pluralization bias from example in do...
  • 71267c9 [5.2.x] Fixed #35095 -- Clarified Swiss number formatting in docs/topics/i18n...
  • 9b37bd5 [5.2.x] Made RemoteTestResultTest.test_pickle_errors_detection() compatible w...
  • Additional commits viewable in compare view

Updates djangorestframework-simplejwt from 5.3.1 to 5.5.1

Release notes

Sourced from djangorestframework-simplejwt's releases.

v5.5.1

5.5.1

Missing Migration for rest_framework_simplejwt.token_blacklist app. A previously missing migration (0013_blacklist) has now been added. This issue arose because the migration file was mistakenly not generated earlier. This migration was never part of an official release, but users following the latest master branch may have encountered it.

Notes for Users If you previously ran makemigrations in production and have a 0013_blacklist migration in your django_migrations table, follow these steps before upgrading:

  1. Roll back to the last known migration:
python manage.py migrate rest_framework_simplejwt.token_blacklist 0012
  1. Upgrade djangorestframework-simplejwt to the latest version.
  2. Apply the migrations correctly:
python manage.py migrate

Important: If other migrations depend on 0013_blacklist, be cautious when removing it. You may need to adjust or regenerate dependent migrations to ensure database integrity.

New Contributors

Full Changelog: jazzband/djangorestframework-simplejwt@v5.5.0...v5.5.1

v5.5.0

Differing Behavior Change

What's Changed

... (truncated)

Changelog

Sourced from djangorestframework-simplejwt's changelog.

5.5.1

Missing Migration for rest_framework_simplejwt.token_blacklist app. A previously missing migration (0013_blacklist) has now been added. This issue arose because the migration file was mistakenly not generated earlier. This migration was never part of an official release, but users following the latest master branch may have encountered it.

Notes for Users If you previously ran makemigrations in production and have a 0013_blacklist migration in your django_migrations table, follow these steps before upgrading:

  1. Roll back to the last known migration:
python manage.py migrate rest_framework_simplejwt.token_blacklist 0012
  1. Upgrade djangorestframework-simplejwt to the latest version.
  2. Apply the migrations correctly:
python manage.py migrate

Important: If other migrations depend on 0013_blacklist, be cautious when removing it. You may need to adjust or regenerate dependent migrations to ensure database integrity.

5.5.0

5.4.0

Commits

Updates langchain-core from 0.3.60 to 0.3.80

Release notes

Sourced from langchain-core's releases.

langchain-core==0.3.80

Changes since langchain-core==0.3.79

release(core): 0.3.80 (#34039) fix(core): fix validation for input variables in f-string templates, restrict functionality supported by jinja2, mustache templates (GHSA-6qv9-48xg-fc7f) (#34038)

langchain-core==0.3.79

Changes since langchain-core==0.3.78

release(core): 0.3.79 (#33401) fix(core): handle parent/child mustache vars (#33346)

langchain-core==0.3.78

Changes since langchain-core==0.3.77

release(core): 0.3.78 (#33253) feat(core): add optional include_id param to convert_to_openai_messages function (#33248)

Commits

Updates langgraph-checkpoint from 2.0.26 to 3.0.0

Release notes

Sourced from langgraph-checkpoint's releases.

checkpoint==3.0.0

Changes since checkpoint==2.1.2

  • release: Checkpointers 3.0 (#6313)
  • chore: Restrict "json" type deserialization (#6269)
  • feat: adding cursory Python 3.14 support (#6298)
  • style: fixes for ref docs (#6297)
  • chore: drop Python 3.9 (and syntax) (#6289)
  • docs: style linting (#6260)
  • fix: rename away from LangGraph Platform (#6281)

checkpointpostgres==3.0.0

Changes since checkpointpostgres==2.0.25

  • release: Checkpointers 3.0 (#6313)
  • feat: adding cursory Python 3.14 support (#6298)
  • chore: drop Python 3.9 (and syntax) (#6289)
  • docs: style linting (#6260)

checkpointsqlite==3.0.0

Changes since checkpointsqlite==2.0.11

  • release: Checkpointers 3.0 (#6313)
  • chore: Restrict "json" type deserialization (#6269)
  • feat: adding cursory Python 3.14 support (#6298)
  • chore: drop Python 3.9 (and syntax) (#6289)
  • docs: style linting (#6260)
  • chore(checkpoint): bump patch version (#6244)
  • chore(deps): upgrade dependencies with uv lock --upgrade (#6211)
  • fix(checkpoint-sqlite): Handle TTL refresh correctly in AsyncSqliteStore.asearch (#5213)
  • chore(deps): upgrade dependencies with uv lock --upgrade (#6176)
  • test: Add tests for before and limit parameters for list SqliteSaver (#5816)
  • chore(deps): upgrade dependencies with uv lock --upgrade (#6146)
  • fix(checkpoint): preserve non-ascii text in InMemoryStore embeddings (#6111)
  • feat(langgraph): implement redis node level cache (#5834)

checkpoint==2.1.2

Changes since checkpoint==2.1.1

  • chore(checkpoint): bump patch version (#6244)
  • fix(checkpoint): handle metadata.writes when serializing old checkpoints with Jsonb (#6236)
  • chore(deps): upgrade dependencies with uv lock --upgrade (#6211)
  • chore(deps): upgrade dependencies with uv lock --upgrade (#6176)
  • fix(checkpoint): use tolerant float comparison to fix test failing on x86_64 architecture (#6157)
  • chore(deps): upgrade dependencies with uv lock --upgrade (#6146)
  • fix(checkpoint): preserve non-ascii text in InMemoryStore embeddings (#6111)
  • feat(sdk-py): client qparams (#5918)
  • feat(langgraph): implement redis node level cache (#5834)
  • fix: add resiliency for task cancellation (#5846)
  • perf: Save updated_channels to checkpoint (#5828)

... (truncated)

Commits

Updates langgraph-checkpoint-sqlite from 2.0.10 to 2.0.11

Release notes

Sourced from langgraph-checkpoint-sqlite's releases.

checkpointsqlite==2.0.11

Changes since checkpointsqlite==2.0.10

  • chore(checkpoint-sqlite): Release 2.0.11 (#5667)
  • fix(checkpoint-sqlite): add validation to filter keys in sql store (#5666)
  • langgraph-checkpoint 2.1.1
  • fix(docs): broken URL in _AIO_ERROR_MSG for AsyncSqliteSaver (#5483)
  • fix[deps]: update lockfiles / deps bounds for internal tools (#5301)
  • langgraph: remove support for thread_ts (old alias for checkpoint_id) (#5295)
  • Fix deadlock in SqliteStore
  • Reduce extraneous keys in checkpoint.metadata
  • If FuturesDict callback has been GCed, don't call it
  • Preparation for 0.5 release: langgraph-checkpoint (#5124)
  • Restore compatibility with custom checkpointer classes created in prior versions
  • serialize/deserialize pandas with pickle fallback (#5057)
  • Support numpy array serialization in JsonPlusSerializer (#5035)
  • Update ormsgpack (#5034)
  • Remove Checkpoint.pending_sends
Commits
  • a3d7b6f chore(checkpoint-sqlite): Release 2.0.11 (#5667)
  • bc9d45b fix(checkpoint-sqlite): add validation to filter keys in sql store (#5666)
  • 7d3f008 docs: more thorough notes on v0.6 features and changes (#5623)
  • ed678f4 Merge branch 'main' into sr/version-added-for-context
  • 22411ba lint
  • 5b9021f typo
  • aaff464 move deprecation note for config_schema
  • 3a23a25 docs: [LangGraph Server Changelog Bot] Changelog updates for new version(s) (...
  • f685739 Update changelog via LangGraph Server Changelog Bot
  • cdaa7ba chore: typing for headers in remote graph (#5653)
  • Additional commits viewable in compare view

Updates langchain-community from 0.3.24 to 0.3.27

Commits
  • bdf1cd3 fix(langchain): update deps
  • 77c9819 fix(text-splitters): update langchain-core version to 0.3.72
  • 7f015b6 fix(text-splitters): update lock for release
  • 71ad451 Merge branch 'master' of github.com:langchain-ai/langchain
  • 2c42893 fix(langchain): update langchain-core version to 0.3.72
  • 0e139fb release(langchain): 0.3.27 (#32227)
  • 622bb05 fix(langchain): class HTMLSemanticPreservingSplitter ignores the text inside ...
  • 56dde3a feat(langchain): v1 scaffolding (#32166)
  • bd3d649 release(core): 0.3.72 (#32214)
  • fb5da83 fix(core): Dereference Refs for pydantic schema fails in tool schema generati...
  • Additional commits viewable in compare view

Updates langchain-text-splitters from 0.3.8 to 0.3.9

Commits
  • 77c9819 fix(text-splitters): update langchain-core version to 0.3.72
  • 7f015b6 fix(text-splitters): update lock for release
  • 71ad451 Merge branch 'master' of github.com:langchain-ai/langchain
  • 2c42893 fix(langchain): update langchain-core version to 0.3.72
  • 0e139fb release(langchain): 0.3.27 (#32227)
  • 622bb05 fix(langchain): class HTMLSemanticPreservingSplitter ignores the text inside ...
  • 56dde3a feat(langchain): v1 scaffolding (#32166)
  • bd3d649 release(core): 0.3.72 (#32214)
  • fb5da83 fix(core): Dereference Refs for pydantic schema fails in tool schema generati...
  • a7d0e42 docs: fix typos in documentation (#32201)
  • Additional commits viewable in compare view

Updates pypdf from 5.6.0 to 6.4.0

Release notes

Sourced from pypdf's releases.

Version 6.4.0, 2025-11-23

What's new

Security (SEC)

New Features (ENH)

  • Parse and format comb fields in text widget annotations (#3519) by @​PJBrs

Robustness (ROB)

  • Silently ignore Adobe Ascii85 whitespace for suffix detection (#3528) by @​mbierma

Full Changelog

Version 6.3.0, 2025-11-16

What's new

New Features (ENH)

Bug Fixes (BUG)

Full Changelog

Version 6.2.0, 2025-11-09

What's new

New Features (ENH)

Bug Fixes (BUG)

Documentation (DOC)

Full Changelog

Version 6.1.3, 2025-10-22

What's new

Security (SEC)

Bug Fixes (BUG)

  • PageObject.scale() scales media box incorrectly (#3489) by @​Nid01

... (truncated)

Changelog

Sourced from pypdf's changelog.

Version 6.4.0, 2025-11-23

Security (SEC)

  • Reduce default limit for LZW decoding

New Features (ENH)

  • Parse and format comb fields in text widget annotations (#3519)

Robustness (ROB)

  • Silently ignore Adobe Ascii85 whitespace for suffix detection (#3528)

Full Changelog

Version 6.3.0, 2025-11-16

New Features (ENH)

  • Wrap and align text in flattened PDF forms (#3465)

Bug Fixes (BUG)

  • Fix missing "PreventGC" when cloning (#3520)
  • Preserve JPEG image quality by default (#3516)

Full Changelog

Version 6.2.0, 2025-11-09

New Features (ENH)

  • Add 'strict' parameter to PDFWriter (#3503)

Bug Fixes (BUG)

  • PdfWriter.append fails when there are articles being None (#3509)

Documentation (DOC)

  • Execute docs examples in CI (#3507)

Full Changelog

Version 6.1.3, 2025-10-22

Security (SEC)

  • Allow limiting size of LZWDecode streams (#3502)
  • Avoid infinite loop when reading broken DCT-based inline images (#3501)

Bug Fixes (BUG)

  • PageObject.scale() scales media box incorrectly (#3489)

Robustness (ROB)

  • Fail with explicit exception when image mode is an empty array (#3500)

Full Changelog

... (truncated)

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 28, 2025
Bumps the pip group with 8 updates in the /WHartTest_Django directory:

| Package | From | To |
| --- | --- | --- |
| [django](https://github.com/django/django) | `5.2` | `5.2.8` |
| [djangorestframework-simplejwt](https://github.com/jazzband/djangorestframework-simplejwt) | `5.3.1` | `5.5.1` |
| [langchain-core](https://github.com/langchain-ai/langchain) | `0.3.60` | `0.3.80` |
| [langgraph-checkpoint](https://github.com/langchain-ai/langgraph) | `2.0.26` | `3.0.0` |
| [langgraph-checkpoint-sqlite](https://github.com/langchain-ai/langgraph) | `2.0.10` | `2.0.11` |
| [langchain-community](https://github.com/langchain-ai/langchain) | `0.3.24` | `0.3.27` |
| [langchain-text-splitters](https://github.com/langchain-ai/langchain) | `0.3.8` | `0.3.9` |
| [pypdf](https://github.com/py-pdf/pypdf) | `5.6.0` | `6.4.0` |



Updates `django` from 5.2 to 5.2.8
- [Commits](django/django@5.2...5.2.8)

Updates `djangorestframework-simplejwt` from 5.3.1 to 5.5.1
- [Release notes](https://github.com/jazzband/djangorestframework-simplejwt/releases)
- [Changelog](https://github.com/jazzband/djangorestframework-simplejwt/blob/master/CHANGELOG.md)
- [Commits](jazzband/djangorestframework-simplejwt@v5.3.1...v5.5.1)

Updates `langchain-core` from 0.3.60 to 0.3.80
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-core==0.3.60...langchain-core==0.3.80)

Updates `langgraph-checkpoint` from 2.0.26 to 3.0.0
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==2.0.26...checkpoint==3.0.0)

Updates `langgraph-checkpoint-sqlite` from 2.0.10 to 2.0.11
- [Release notes](https://github.com/langchain-ai/langgraph/releases)
- [Commits](langchain-ai/langgraph@checkpoint==2.0.10...checkpointsqlite==2.0.11)

Updates `langchain-community` from 0.3.24 to 0.3.27
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain==0.3.24...langchain==0.3.27)

Updates `langchain-text-splitters` from 0.3.8 to 0.3.9
- [Release notes](https://github.com/langchain-ai/langchain/releases)
- [Commits](langchain-ai/langchain@langchain-text-splitters==0.3.8...langchain-text-splitters==0.3.9)

Updates `pypdf` from 5.6.0 to 6.4.0
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@5.6.0...6.4.0)

---
updated-dependencies:
- dependency-name: django
  dependency-version: 5.2.8
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: djangorestframework-simplejwt
  dependency-version: 5.5.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-core
  dependency-version: 0.3.80
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langgraph-checkpoint
  dependency-version: 3.0.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langgraph-checkpoint-sqlite
  dependency-version: 2.0.11
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-community
  dependency-version: 0.3.27
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: langchain-text-splitters
  dependency-version: 0.3.9
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: pypdf
  dependency-version: 6.4.0
  dependency-type: direct:production
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/WHartTest_Django/pip-230ba9801b branch from fc4e13b to 03122dd Compare December 16, 2025 07:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants