Skip to content

Bump the pip group across 4 directories with 7 updates #2

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
dependabot wants to merge 1 commit into
base: master
Choose a base branch
from
Open

Bump the pip group across 4 directories with 7 updates #2

dependabot wants to merge 1 commit into from

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jul 1, 2025

Updates the requirements on certifi, grpcio, protobuf, requests, urllib3, werkzeug and setuptools to permit the latest version.
Updates certifi from 2024.6.2 to 2024.7.4

Commits

Updates grpcio from 1.64.1 to 1.73.1

Release notes

Sourced from grpcio's releases.

Release v1.73.1

This is release 1.73.1 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

Release v1.73.0

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

  • [Dep] Update Protobuf to v31.0. (#39392)
  • [Core] Added GPR_DISABLE_ABSEIL_SYNC. (#39562)
  • [xds_override_host] pass through per-endpoint args when creating subchannels. (#39532)
  • Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#39297)
  • [URI] fix parsing of user_info in proxy settings. (#39004)
  • [EventEngine] Fix busy loop in thread pool when shutting down. (#39258)
  • [Dep] Added a flag to build with openssl instead of boringssl. (#39188)
  • [EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#39079)

C++

  • [OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#39554)

Python

  • [Python] Pin Cython to 3.1.1. (#39609)
  • [Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#39586)

Ruby

  • [Ruby] add remove_unused_artifacts to opt build. (#39593)

... (truncated)

Commits
  • 6eae42b [Release] Bump version to 1.73.1 (on v1.73.x branch) (#39973)
  • e6b3f29 [Backport][v1.73.x][Python Core][EventEngine] Fix Python reconnect issues: us...
  • 95dd243 [Release] Bump version to 1.73.0 (on v1.73.x branch) (#39787)
  • 9f9728c [Release] Bump version to 1.73.0-pre2 (on v1.73.x branch) (#39721)
  • 481fcfd [xDS] remove env var guards for gRFCs A81, A82, and A83 (#39711)
  • 5d0f2c8 Fix Python linux distribtest for aarch64_alpine target and enable for presubm...
  • ce0bd2d [Release] Bump version to 1.73.0-pre1 (on v1.73.x branch) (#39643)
  • 233368b [Backport][v1.73.x][Python] Fix Python Linux distribtests copy conflicts (#39...
  • f71fac7 [Release] Bump core version to 48.0.0 for upcoming release (#39611)
  • c19a471 [Python] Pin Cython to 3.1.1 (#39609)
  • Additional commits viewable in compare view

Updates protobuf from 4.25.3 to 4.25.8

Commits
  • a4cbdd3 Updating version.json and repo version numbers to: 25.8
  • 29445be Merge pull request #21880 from shaod2/py-25
  • cc13b69 Remove debugging code and add EOLs
  • d31100c Manually backport recursion limit enforcement to 25.x
  • 88a3b90 Change pre-22 poison pill to only log once per affected message type. (#21754)
  • 320eafa Weaken vulnerable gencode poison pills to warning by default.
  • f584fe3 Merge branch 'protocolbuffers:25.x' into 25.x
  • c710036 Update test_upb.yml to use ubuntu-22
  • 9721758 Fix missing trailing newline.
  • cca7b28 Update test_upb.yml to use ubuntu-22
  • Additional commits viewable in compare view

Updates requests from 2.32.3 to 2.32.4

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • 021dc72 Polish up release tooling for last manual release
  • 821770e Bump version and add release notes for v2.32.4
  • 59f8aa2 Add netrc file search information to authentication documentation (#6876)
  • 5b4b64c Add more tests to prevent regression of CVE 2024 47081
  • 7bc4587 Add new test to check netrc auth leak (#6962)
  • 96ba401 Only use hostname to do netrc lookup instead of netloc
  • 7341690 Merge pull request #6951 from tswast/patch-1
  • 6716d7c remove links
  • a7e1c74 Update docs/conf.py
  • c799b81 docs: fix dead links to kenreitz.org
  • Additional commits viewable in compare view

Updates urllib3 from 2.2.1 to 2.5.0

Release notes

Sourced from urllib3's releases.

2.5.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Security issues

urllib3 2.5.0 fixes two moderate security issues:

Features

  • Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 for more information. (#3610)
  • Added support for version 0.5 of hatch-vcs (#3612)

Bugfixes

  • Raised exception for HTTPResponse.shutdown on a connection already released to the pool. (#3581)
  • Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. (#3615)

2.4.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Features

  • Applied PEP 639 by specifying the license fields in pyproject.toml. (#3522)
  • Updated exceptions to save and restore more properties during the pickle/serialization process. (#3567)
  • Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. (#3571)

Bugfixes

  • Fixed a bug with partial reads of streaming data in Emscripten. (#3555)

Misc

  • Switched to uv for installing development dependecies. (#3550)
  • Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. (#3566)

2.3.0

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.5.0 (2025-06-18)

Features

  • Added support for the compression.zstd module that is new in Python 3.14. See PEP 784 <https://peps.python.org/pep-0784/>_ for more information. ([#3610](https://github.com/urllib3/urllib3/issues/3610) <https://github.com/urllib3/urllib3/issues/3610>__)
  • Added support for version 0.5 of hatch-vcs ([#3612](https://github.com/urllib3/urllib3/issues/3612) <https://github.com/urllib3/urllib3/issues/3612>__)

Bugfixes

  • Fixed a security issue where restricting the maximum number of followed redirects at the urllib3.PoolManager level via the retries parameter did not work.
  • Made the Node.js runtime respect redirect parameters such as retries and redirects.
  • Raised exception for HTTPResponse.shutdown on a connection already released to the pool. ([#3581](https://github.com/urllib3/urllib3/issues/3581) <https://github.com/urllib3/urllib3/issues/3581>__)
  • Fixed incorrect CONNECT statement when using an IPv6 proxy with connection_from_host. Previously would not be wrapped in []. ([#3615](https://github.com/urllib3/urllib3/issues/3615) <https://github.com/urllib3/urllib3/issues/3615>__)

2.4.0 (2025-04-10)

Features

  • Applied PEP 639 by specifying the license fields in pyproject.toml. ([#3522](https://github.com/urllib3/urllib3/issues/3522) <https://github.com/urllib3/urllib3/issues/3522>__)
  • Updated exceptions to save and restore more properties during the pickle/serialization process. ([#3567](https://github.com/urllib3/urllib3/issues/3567) <https://github.com/urllib3/urllib3/issues/3567>__)
  • Added verify_flags option to create_urllib3_context with a default of VERIFY_X509_PARTIAL_CHAIN and VERIFY_X509_STRICT for Python 3.13+. ([#3571](https://github.com/urllib3/urllib3/issues/3571) <https://github.com/urllib3/urllib3/issues/3571>__)

Bugfixes

  • Fixed a bug with partial reads of streaming data in Emscripten. ([#3555](https://github.com/urllib3/urllib3/issues/3555) <https://github.com/urllib3/urllib3/issues/3555>__)

Misc

  • Switched to uv for installing development dependecies. ([#3550](https://github.com/urllib3/urllib3/issues/3550) <https://github.com/urllib3/urllib3/issues/3550>__)
  • Removed the multiple.intoto.jsonl asset from GitHub releases. Attestation of release files since v2.3.0 can be found on PyPI. ([#3566](https://github.com/urllib3/urllib3/issues/3566) <https://github.com/urllib3/urllib3/issues/3566>__)

2.3.0 (2024-12-22)

... (truncated)

Commits
  • aaab4ec Release 2.5.0
  • 7eb4a2a Merge commit from fork
  • f05b132 Merge commit from fork
  • d03fe32 Fix HTTP tunneling with IPv6 in older Python versions
  • 11661e9 Bump github/codeql-action from 3.28.0 to 3.29.0 (#3624)
  • 6a0ecc6 Update v2 migration guide to 2.4.0 (#3621)
  • 8e32e60 Raise exception for shutdown on a connection already released to the pool (#3...
  • 9996e0f Fix emscripten CI for Chrome 137+ (#3599)
  • 4fd1a99 Bump RECENT_DATE (#3617)
  • c4b5917 Add support for the new compression.zstd module in Python 3.14 (#3611)
  • Additional commits viewable in compare view

Updates werkzeug from 3.0.3 to 3.0.6

Release notes

Sourced from werkzeug's releases.

3.0.6

This is the Werkzeug 3.0.6 security fix release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Werkzeug/3.0.6/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-0-6

  • Fix how max_form_memory_size is applied when parsing large non-file fields. GHSA-q34m-jh98-gwm2
  • safe_join catches certain paths on Windows that were not caught by ntpath.isabs on Python < 3.11. GHSA-f9vj-2wh5-fj8j

3.0.5

This is the Werkzeug 3.0.5 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Werkzeug/3.0.5/ Changes: https://werkzeug.palletsprojects.com/en/stable/changes/#version-3-0-5 Milestone: https://github.com/pallets/werkzeug/milestone/37?closed=1

  • The Watchdog reloader ignores file closed no write events. #2945
  • Logging works with client addresses containing an IPv6 scope. #2952
  • Ignore invalid authorization parameters. #2955
  • Improve type annotation fore SharedDataMiddleware. #2958
  • Compatibility with Python 3.13 when generating debugger pin and the current UID does not have an associated name. #2957

3.0.4

This is the Werkzeug 3.0.4 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.

PyPI: https://pypi.org/project/Werkzeug/3.0.4/ Changes: https://werkzeug.palletsprojects.com/en/3.0.x/changes/#version-3-0-4 Milestone: https://github.com/pallets/werkzeug/milestone/36?closed=1

  • Restore behavior where parsing multipart/x-www-form-urlencoded data with invalid UTF-8 bytes in the body results in no form data parsed rather than a 413 error. #2930
  • Improve parse_options_header performance when parsing unterminated quoted string values. #2904
  • Debugger pin auth is synchronized across threads/processes when tracking failed entries. #2916
  • Dev server handles unexpected SSLEOFError due to issue in Python < 3.13. #2926
  • Debugger pin auth works when the URL already contains a query string. #2918
Changelog

Sourced from werkzeug's changelog.

Version 3.0.6

Released 2024-10-25

  • Fix how max_form_memory_size is applied when parsing large non-file fields. :ghsa:q34m-jh98-gwm2
  • safe_join catches certain paths on Windows that were not caught by ntpath.isabs on Python < 3.11. :ghsa:f9vj-2wh5-fj8j

Version 3.0.5

Released 2024-10-24

  • The Watchdog reloader ignores file closed no write events. :issue:2945
  • Logging works with client addresses containing an IPv6 scope :issue:2952
  • Ignore invalid authorization parameters. :issue:2955
  • Improve type annotation fore SharedDataMiddleware. :issue:2958
  • Compatibility with Python 3.13 when generating debugger pin and the current UID does not have an associated name. :issue:2957

Version 3.0.4

Released 2024-08-21

  • Restore behavior where parsing multipart/x-www-form-urlencoded data with invalid UTF-8 bytes in the body results in no form data parsed rather than a 413 error. :issue:2930
  • Improve parse_options_header performance when parsing unterminated quoted string values. :issue:2904
  • Debugger pin auth is synchronized across threads/processes when tracking failed entries. :issue:2916
  • Dev server handles unexpected SSLEOFError due to issue in Python < 3.13. :issue:2926
  • Debugger pin auth works when the URL already contains a query string. :issue:2918
Commits

Updates setuptools from 68.2.2 to 78.1.1

Changelog

Sourced from setuptools's changelog.

v78.1.1

Bugfixes

  • More fully sanitized the filename in PackageIndex._download. (#4946)

v78.1.0

Features

  • Restore access to _get_vc_env with a warning. (#4874)

v78.0.2

Bugfixes

  • Postponed removals of deprecated dash-separated and uppercase fields in setup.cfg. All packages with deprecated configurations are advised to move before 2026. (#4911)

v78.0.1

Misc

v78.0.0

Bugfixes

  • Reverted distutils changes that broke the monkey patching of command classes. (#4902)

Deprecations and Removals

  • Setuptools no longer accepts options containing uppercase or dash characters in setup.cfg.

... (truncated)

Commits

Updates grpcio to 1.73.1

Release notes

Sourced from grpcio's releases.

Release v1.73.1

This is release 1.73.1 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

Release v1.73.0

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

  • [Dep] Update Protobuf to v31.0. (#39392)
  • [Core] Added GPR_DISABLE_ABSEIL_SYNC. (#39562)
  • [xds_override_host] pass through per-endpoint args when creating subchannels. (#39532)
  • Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#39297)
  • [URI] fix parsing of user_info in proxy settings. (#39004)
  • [EventEngine] Fix busy loop in thread pool when shutting down. (#39258)
  • [Dep] Added a flag to build with openssl instead of boringssl. (#39188)
  • [EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#39079)

C++

  • [OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#39554)

Python

  • [Python] Pin Cython to 3.1.1. (#39609)
  • [Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#39586)

Ruby

  • [Ruby] add remove_unused_artifacts to opt build. (#39593)

... (truncated)

Commits
  • 6eae42b [Release] Bump version to 1.73.1 (on v1.73.x branch) (#39973)
  • e6b3f29 [Backport][v1.73.x][Python Core][EventEngine] Fix Python reconnect issues: us...
  • 95dd243 [Release] Bump version to 1.73.0 (on v1.73.x branch) (#39787)
  • 9f9728c [Release] Bump version to 1.73.0-pre2 (on v1.73.x branch) (#39721)
  • 481fcfd [xDS] remove env var guards for gRFCs A81, A82, and A83 (#39711)
  • 5d0f2c8 Fix Python linux distribtest for aarch64_alpine target and enable for presubm...
  • ce0bd2d [Release] Bump version to 1.73.0-pre1 (on v1.73.x branch) (#39643)
  • 233368b [Backport][v1.73.x][Python] Fix Python Linux distribtests copy conflicts (#39...
  • f71fac7 [Release] Bump core version to 48.0.0 for upcoming release (#39611)
  • c19a471 [Python] Pin Cython to 3.1.1 (#39609)
  • Additional commits viewable in compare view

Updates certifi to 2025.6.15

Commits

Updates grpcio to 1.73.1

Release notes

Sourced from grpcio's releases.

Release v1.73.1

This is release 1.73.1 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

Release v1.73.0

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

  • [Dep] Update Protobuf to v31.0. (#39392)
  • [Core] Added GPR_DISABLE_ABSEIL_SYNC. (#39562)
  • [xds_override_host] pass through per-endpoint args when creating subchannels. (#39532)
  • Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#39297)
  • [URI] fix parsing of user_info in proxy settings. (#39004)
  • [EventEngine] Fix busy loop in thread pool when shutting down. (#39258)
  • [Dep] Added a flag to build with openssl instead of boringssl. (#39188)
  • [EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#39079)

C++

  • [OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#39554)

Python

  • [Python] Pin Cython to 3.1.1. (#39609)
  • [Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#39586)

Ruby

  • [Ruby] add remove_unused_artifacts to opt build. (#39593)

... (truncated)

Commits
  • 6eae42b [Release] Bump version to 1.73.1 (on v1.73.x branch) (#39973)
  • e6b3f29 [Backport][v1.73.x][Python Core][EventEngine] Fix Python reconnect issues: us...
  • 95dd243 [Release] Bump version to 1.73.0 (on v1.73.x branch) (#39787)
  • 9f9728c [Release] Bump version to 1.73.0-pre2 (on v1.73.x branch) (#39721)
  • 481fcfd [xDS] remove env var guards for gRFCs A81, A82, and A83 (#39711)
  • 5d0f2c8 Fix Python linux distribtest for aarch64_alpine target and enable for presubm...
  • ce0bd2d [Release] Bump version to 1.73.0-pre1 (on v1.73.x branch) (#39643)
  • 233368b [Backport][v1.73.x][Python] Fix Python Linux distribtests copy conflicts (#39...
  • f71fac7 [Release] Bump core version to 48.0.0 for upcoming release (#39611)
  • c19a471 [Python] Pin Cython to 3.1.1 (#39609)
  • Additional commits viewable in compare view

Updates protobuf to 6.31.1

Commits
  • a4cbdd3 Updating version.json and repo version numbers to: 25.8
  • 29445be Merge pull request #21880 from shaod2/py-25
  • cc13b69 Remove debugging code and add EOLs
  • d31100c Manually backport recursion limit enforcement to 25.x
  • 88a3b90 Change pre-22 poison pill to only log once per affected message type. (#21754)
  • 320eafa Weaken vulnerable gencode poison pills to warning by default.
  • f584fe3 Merge branch 'protocolbuffers:25.x' into 25.x
  • c710036 Update test_upb.yml to use ubuntu-22
  • 9721758 Fix missing trailing newline.
  • cca7b28 Update test_upb.yml to use ubuntu-22
  • Additional commits viewable in compare view

Updates grpcio to 1.73.1

Release notes

Sourced from grpcio's releases.

Release v1.73.1

This is release 1.73.1 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

Release v1.73.0

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

  • [Dep] Update Protobuf to v31.0. (#39392)
  • [Core] Added GPR_DISABLE_ABSEIL_SYNC. (#39562)
  • [xds_override_host] pass through per-endpoint args when creating subchannels. (#39532)
  • Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#39297)
  • [URI] fix parsing of user_info in proxy settings. (#39004)
  • [EventEngine] Fix busy loop in thread pool when shutting down. (#39258)
  • [Dep] Added a flag to build with openssl instead of boringssl. (#39188)
  • [EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#39079)

C++

  • [OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#39554)

Python

  • [Python] Pin Cython to 3.1.1. (#39609)
  • [Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#39586)

Ruby

  • [Ruby] add remove_unused_artifacts to opt build. (#39593)

... (truncated)

Commits
  • 6eae42b [Release] Bump version to 1.73.1 (on v1.73.x branch) (#39973)
  • e6b3f29 [Backport][v1.73.x][Python Core][EventEngine] Fix Python reconnect issues: us...
  • 95dd243 [Release] Bump version to 1.73.0 (on v1.73.x branch) (#39787)
  • 9f9728c [Release] Bump version to 1.73.0-pre2 (on v1.73.x branch) (#39721)
  • 481fcfd [xDS] remove env var guards for gRFCs A81, A82, and A83 (#39711)
  • 5d0f2c8 Fix Python linux distribtest for aarch64_alpine target and enable for presubm...
  • ce0bd2d [Release] Bump version to 1.73.0-pre1 (on v1.73.x branch) (#39643)
  • 233368b [Backport][v1.73.x][Python] Fix Python Linux distribtests copy conflicts (#39...
  • f71fac7 [Release] Bump core version to 48.0.0 for upcoming release (#39611)
  • c19a471 [Python] Pin Cython to 3.1.1 (#39609)
  • Additional commits viewable in compare view

Updates protobuf to 6.31.1

Commits
  • a4cbdd3 Updating version.json and repo version numbers to: 25.8
  • 29445be Merge pull request #21880 from shaod2/py-25
  • cc13b69 Remove debugging code and add EOLs
  • d31100c Manually backport recursion limit enforcement to 25.x
  • 88a3b90 Change pre-22 poison pill to only log once per affected message type. (#21754)
  • 320eafa Weaken vulnerable gencode poison pills to warning by default.
  • f584fe3 Merge branch 'protocolbuffers:25.x' into 25.x
  • c710036 Update test_upb.yml to use ubuntu-22
  • 9721758 Fix missing trailing newline.
  • cca7b28 Update test_upb.yml to use ubuntu-22
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
Bump the pip group across 4 directories with 7 updates
b231ffb 
Updates the requirements on [certifi](https://github.com/certifi/python-certifi), [grpcio](https://github.com/grpc/grpc), [protobuf](https://github.com/protocolbuffers/protobuf), [requests](https://github.com/psf/requests), [urllib3](https://github.com/urllib3/urllib3), [werkzeug](https://github.com/pallets/werkzeug) and [setuptools](https://github.com/pypa/setuptools) to permit the latest version.

Updates `certifi` from 2024.6.2 to 2024.7.4
- [Commits](certifi/python-certifi@2024.06.02...2024.07.04)

Updates `grpcio` from 1.64.1 to 1.73.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md)
- [Commits](grpc/grpc@v1.64.1...v1.73.1)

Updates `protobuf` from 4.25.3 to 4.25.8
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v4.25.3...v4.25.8)

Updates `requests` from 2.32.3 to 2.32.4
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.4)

Updates `urllib3` from 2.2.1 to 2.5.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.2.1...2.5.0)

Updates `werkzeug` from 3.0.3 to 3.0.6
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.0.3...3.0.6)

Updates `setuptools` from 68.2.2 to 78.1.1
- [Release notes](https://github.com/pypa/setuptools/releases)
- [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst)
- [Commits](pypa/setuptools@v68.2.2...v78.1.1)

Updates `grpcio` to 1.73.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md)
- [Commits](grpc/grpc@v1.64.1...v1.73.1)

Updates `certifi` to 2025.6.15
- [Commits](certifi/python-certifi@2024.06.02...2024.07.04)

Updates `grpcio` to 1.73.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md)
- [Commits](grpc/grpc@v1.64.1...v1.73.1)

Updates `protobuf` to 6.31.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v4.25.3...v4.25.8)

Updates `grpcio` to 1.73.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md)
- [Commits](grpc/grpc@v1.64.1...v1.73.1)

Updates `protobuf` to 6.31.1
- [Release notes](https://github.com/protocolbuffers/protobuf/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf/blob/main/protobuf_release.bzl)
- [Commits](protocolbuffers/protobuf@v4.25.3...v4.25.8)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2024.7.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: grpcio
  dependency-version: 1.73.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 4.25.8
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: requests
  dependency-version: 2.32.4
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: urllib3
  dependency-version: 2.5.0
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: werkzeug
  dependency-version: 3.0.6
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: setuptools
  dependency-version: 78.1.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: grpcio
  dependency-version: 1.73.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: certifi
  dependency-version: 2025.6.15
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: grpcio
  dependency-version: 1.73.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 6.31.1
  dependency-type: direct:production
  dependency-group: pip
- dependency-name: grpcio
  dependency-version: 1.73.1
  dependency-type: direct:development
  dependency-group: pip
- dependency-name: protobuf
  dependency-version: 6.31.1
  dependency-type: direct:development
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jul 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant