Bump the pip group with 4 updates by dependabot[bot] · Pull Request #744 · python/miss-islington

dependabot · 2026-09-01T14:01:18Z

Bumps the pip group with 4 updates: cachetools, click, redis and sentry-sdk.

Updates cachetools from 7.1.6 to 7.1.7

Changelog

v7.1.7 (2026-08-01)

Improve Cache.__setitem__ behavior when replacing an existing cache item with a larger value.

Update CI environment.

Commits

01af8e5 Release v7.1.7.
ccaa8c8 Minor stylistic improvements.
c65b625 Prepare v7.1.7.
89a5928 Bump actions/setup-python from 6.3.0 to 7.0.0 (#411)
39b31bc Fix #405: Fix Cache.setitem over-evicting when growing an existing key
16e8889 Bump actions/checkout from 7.0.0 to 7.0.1 (#410)
See full diff in compare view

Updates click from 8.4.2 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). #3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653

Fix test failures when using pytest >= 9.1. {pr}3656

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). {pr}3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641

{func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695

The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits

8b19813 Release version 8.5.0
2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
131c86a Add FAQ entry about UnicodeEncodeError on Windows
e1fd594 Add support of pathlib.Path to edit (#3781)
a1d8785 Add support of pathlib.Path to edit
2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
a6256bf Forwards all user's parameters set in PAGER
61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
9835b0f Resolve the pager command once, in _pager_contextmanager
f36d58b Refactor pager stream handling (#3767)
Additional commits viewable in compare view

Updates redis from 8.0.1 to 8.1.0

Release notes

Sourced from redis's releases.

8.1.0

Changes

✨ Highlights

Async maintenance notifications

redis-py now supports server-pushed maintenance notifications in the asyncio stack for both standalone and cluster clients, bringing the async client to parity with the sync implementation. When a Redis deployment signals maintenance events (such as node migration or failover windows), the async client reacts through the maintenance-notifications handler (redis/maint_notifications.py and its async integration under redis/asyncio/), allowing applications to adapt connection handling during maintenance without downtime. (#4177)

Expanded command coverage

This release adds a batch of new command surfaces across core data types and modules:

Lists — LMOVEM / BLMOVEM for moving multiple elements between lists (#4174).

Sets — SDIFFCARD and SUNIONCARD cardinality commands (#4171).

Streams — MAXCOUNT / MAXSIZE options for XREAD and XREADGROUP (#4173).

Time Series — TS.READ (#4170), TS.QUERYLABELS (#4197), TS.NRANGE / TS.NREVRANGE (#4163), and an exclude_empty (EXCLUDEEMPTY) option for TS.MRANGE / TS.MREVRANGE (#4188).

Search — FT.ALIASLIST (#4198) and a COLLECT reducer for aggregations (#4179).

Sentinel — replica sentinel aliases (#4127).

🚀 New Features

Add replica sentinel aliases (#4127)

Add TS.NRANGE and TS.NREVRANGE support to the timeseries command surface (#4163)

feat: add TS.READ command support to the timeseries module (#4170)

feat: add SDIFFCARD and SUNIONCARD command support (#4171)

feat: add MAXCOUNT/MAXSIZE support to XREAD and XREADGROUP (#4173)

feat: add LMOVEM and BLMOVEM commands for moving multiple list elements (#4174)

feat: add async maintenance-notifications support for standalone and cluster clients (#4177)

feat: add COLLECT reducer support to search aggregations (#4179)

feat: add exclude_empty (EXCLUDEEMPTY) option to TS.MRANGE and TS.MREVRANGE (#4188)

feat: add TS.QUERYLABELS support to the timeseries command surface (#4197)

feat: add FT.ALIASLIST support (#4198)

⚠️ Experimental

feat: add client-side HIMPORT fieldset support for standalone and cluster clients (#4205)

The feature considered unstable and public API might be changed in the future minor version

🐛 Bug Fixes

fix: detect closed pooled connection without consuming pending push data (RESP3 + hiredis) (#4156)

Fix Sentinel pool capacity loss after failover (#4193)

... (truncated)

Commits

e013126 Testing with 8.10 GA (#4227)
059d1e9 Fixed TS.NRANGE commands to correctly apply aggregators (#4225)
d486a0a Fix FIELDNAME alias dropping first character of un-prefixed fields (#4224)
fb93104 feat: add client-side HIMPORT fieldset support for standalone and cluster cli...
9197609 Fix lat/lon swap in search querystring geo() helper (#4223)
14714a0 fix: Fixed double decoding issue with unquote() (#4222)
227280a Update lib version to 8.1.0
88d16d0 Decode ACL LOG string values on the default RESP3 legacy callback (#4201)
599fd75 feat: add FT.ALIASLIST support (#4198)
71e275e test: add VectorField RERANK serialization tests for sync and async search (#...
Additional commits viewable in compare view

Updates sentry-sdk from 2.66.1 to 2.68.1

Release notes

Sourced from sentry-sdk's releases.

2.68.1

enable_logs
(logs) Don't stop sending auto-collected logs when enable_logs=True by @sentrivana in #7237

If you have enable_logs set to True, our logging integrations for the standard library logging module as well as Loguru will auto-collect logs and send them to Sentry as Sentry logs by default, preserving old behavior. Turning automatic collection off for a specific integration can still be achieved using the capture_sentry_logs integration option.
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration
sentry_sdk.init(
enable_logs=True,
integrations=[
LoggingIntegration(capture_sentry_logs=True),
LoguruIntegration(capture_sentry_logs=False),
],
)
Please note that the enable_logs option is deprecated and will be removed in the next major release. The sentry_sdk.logger.X API now works regardless of it, and auto-collection can be opted into via the capture_sentry_logs integration-level options, which are False by default, unless you have enable_logs=True. We've added this compatibility layer to make the transition to a enable_logs-free world easier.
Bug Fixes 🐛

(django) Add failed_request_status_codes by @mgaligniana in #7140

(anthropic) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7207

(google_genai) Gate streaming gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7210

(langchain) Use gen_ai.tool.definitions attribute when data collection is enabled by @ericapisani in #7204

(langgraph,huggingface_hub) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7208

(openai) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7205

(openai_agents) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7209

2.68.0

Important
We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

Action Needed

If you had enable_logs set to True:

If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.

If you were auto-collecting logs from either LoggingIntegration or LoguruIntegration, the auto-collection will be turned off in this release. You can switch auto-collection on explicitly with:
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.68.1

enable_logs
(logs) Don't stop sending auto-collected logs when enable_logs=True by @sentrivana in #7237

If you have enable_logs set to True, our logging integrations for the standard library logging module as well as Loguru will auto-collect logs and send them to Sentry as Sentry logs by default, preserving old behavior. Turning automatic collection off for a specific integration can still be achieved using the capture_sentry_logs integration option.
import sentry_sdk
from sentry_sdk.integrations.logging import LoggingIntegration
from sentry_sdk.integrations.loguru import LoguruIntegration
sentry_sdk.init(
enable_logs=True,
integrations=[
LoggingIntegration(capture_sentry_logs=True),
LoguruIntegration(capture_sentry_logs=False),
],
)
Please note that the enable_logs option is deprecated and will be removed in the next major release. The sentry_sdk.logger.X API now works regardless of it, and auto-collection can be opted into via the capture_sentry_logs integration-level options, which are False by default, unless you have enable_logs=True. We've added this compatibility layer to make the transition to a enable_logs-free world easier.
Bug Fixes 🐛

(django) Add failed_request_status_codes by @mgaligniana in #7140

(anthropic) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7207

(google_genai) Gate streaming gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7210

(langchain) Use gen_ai.tool.definitions attribute when data collection is enabled by @ericapisani in #7204

(langgraph,huggingface_hub) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7208

(openai) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7205

(openai_agents) Gate gen_ai.response.tool_calls on outputs, not inputs by @ericapisani in #7209

2.68.0

Important
We're making enable_logs and enable_metrics no-op with this release (#7177), and they'll be dropped in the next major.

Previously, enable_logs also controlled automatic logs collection from the logging and Loguru integrations. These integrations now get an integration-level capture_sentry_logs boolean option to allow for more control over the auto-collection. These options are False by default, i.e., nothing is auto-collected without your explicit opt-in.

Action Needed

If you had enable_logs set to True:

If you were using the sentry_sdk.logger.X API, no action necessary, the API will just work.

If you were auto-collecting logs from either LoggingIntegration or LoguruIntegration, the auto-collection will be turned off in this release. You can switch auto-collection on explicitly with:

... (truncated)

Commits

98f7d91 Update changelog
8f886ff release: 2.68.1
df4ec02 fix(logs): Don't stop sending auto-collected logs when enable_logs=True (#7...
e320318 test(pyramid): Add tests for data_collection gating of request body (#7218)
7b8a385 test(bottle): Add tests for data_collection gating of request body (#7217)
cbcadc9 test(sanic): Add tests for data_collection gating of request body (#7216)
e42c798 feat(tornado): Gate request body collection on data_collection option (#7215)
d05bb60 test(django): Add tests for data_collection gating of request body (#7213)
bcce67b feat(wsgi): Gate request body collection on data_collection option (#7212)
41220c4 fix(google_genai): Gate streaming gen_ai.response.tool_calls on outputs, no...
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip group with 4 updates: [cachetools](https://github.com/tkem/cachetools), [click](https://github.com/pallets/click), [redis](https://github.com/redis/redis-py) and [sentry-sdk](https://github.com/getsentry/sentry-python). Updates `cachetools` from 7.1.6 to 7.1.7 - [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst) - [Commits](tkem/cachetools@v7.1.6...v7.1.7) Updates `click` from 8.4.2 to 8.5.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.4.2...8.5.0) Updates `redis` from 8.0.1 to 8.1.0 - [Release notes](https://github.com/redis/redis-py/releases) - [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES) - [Commits](redis/redis-py@v8.0.1...v8.1.0) Updates `sentry-sdk` from 2.66.1 to 2.68.1 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.66.1...2.68.1) --- updated-dependencies: - dependency-name: cachetools dependency-version: 7.1.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip - dependency-name: click dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: redis dependency-version: 8.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip - dependency-name: sentry-sdk dependency-version: 2.68.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip ... Signed-off-by: dependabot[bot] <support@github.com>

codecov · 2026-09-01T14:02:39Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (b48a92a) to head (f0c58f6).
⚠️ Report is 1 commits behind head on main.

@@            Coverage Diff            @@
##              main      #744   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files            7         7           
  Lines          356       356           
  Branches        12        12           
=========================================
  Hits           356       356

Flag	Coverage Δ
Python_3.11	`100.00% <ø> (ø)`
Python_3.12	`100.00% <ø> (ø)`
Python_3.13	`100.00% <ø> (ø)`

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

dependabot Bot assigned ezio-melotti Sep 1, 2026

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 1, 2026

ezio-melotti approved these changes Sep 1, 2026

View reviewed changes

ezio-melotti merged commit d98aecc into main Sep 1, 2026
11 checks passed

ezio-melotti deleted the dependabot/pip/pip-027276d57f branch September 1, 2026 14:02

Navigation Menu

Uh oh!

Bump the pip group with 4 updates - #744

Bump the pip group with 4 updates#744
ezio-melotti merged 1 commit into
mainfrom
dependabot/pip/pip-027276d57f

dependabot Bot commented on behalf of github Sep 1, 2026

Action Needed

Action Needed

Uh oh!

Uh oh!

codecov Bot commented Sep 1, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 1, 2026

v7.1.7 (2026-08-01)

8.5.0

Version 8.5.0

8.1.0

Changes

✨ Highlights

Async maintenance notifications

Expanded command coverage

🚀 New Features

⚠️ Experimental

🐛 Bug Fixes

2.68.1

enable_logs

Bug Fixes 🐛

2.68.0

Important

Action Needed

2.68.1

enable_logs

Bug Fixes 🐛

2.68.0

Important

Action Needed

Uh oh!

Uh oh!

codecov Bot commented Sep 1, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

`enable_logs`

`enable_logs`

codecov Bot commented Sep 1, 2026 •

edited

Loading