Skip to content

⬆️(dependencies) update python dependencies#1007

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/python-dependencies
Open

⬆️(dependencies) update python dependencies#1007
renovate[bot] wants to merge 1 commit intomainfrom
renovate/python-dependencies

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 23, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
boto3 ==1.42.49==1.42.54 age confidence
brevo-python ==1.2.0==4.0.5 age confidence
celery (source, changelog) ==5.5.3==5.6.2 age confidence
dj-database-url (changelog) ==3.1.0==3.1.2 age confidence
langfuse ==3.10.6==3.14.4 age confidence
livekit-agents ==1.3.10==1.4.2 age confidence
livekit-plugins-deepgram ==1.3.10==1.4.2 age confidence
livekit-plugins-silero ==1.3.10==1.4.2 age confidence
minio ==7.2.18==7.2.20 age confidence
openai ==2.7.1==2.21.0 age confidence
posthog ==6.9.1==7.9.3 age confidence
psycopg (changelog) ==3.3.2==3.3.3 age confidence
pyfakefs (changelog) ==6.1.1==6.1.2 age confidence
responses (changelog) ==0.25.8==0.26.0 age confidence
ruff (source, changelog) ==0.14.4==0.15.2 age confidence
ruff (source, changelog) ==0.15.1==0.15.2 age confidence
sentry-sdk (changelog) ==2.43.0==2.53.0 age confidence

Release Notes

boto/boto3 (boto3)

v1.42.54

Compare Source

=======

  • api-change:appstream: [botocore] Adding new attribute to disable IMDS v1 APIs for fleet, Image Builder and AppBlockBuilder instances.
  • api-change:ecs: [botocore] Migrated to Smithy. No functional changes
  • api-change:endpoint-rules: [botocore] Update endpoint-rules client to latest version
  • api-change:sagemaker-runtime: [botocore] Added support for S3OutputPathExtension and Filename parameters to the InvokeEndpointAsync API to allow users to customize the S3 output path and file name for async inference response payloads.
  • api-change:signer-data: [botocore] This release introduces AWS Signer Data Plane SDK client supporting GetRevocationStatus API. The new client enables AWS PrivateLink connectivity with both private DNS and VPC endpoint URLs.
  • api-change:ssm: [botocore] Add support for AssociationDispatchAssumeRole in AWS SSM State Manager.
  • api-change:trustedadvisor: [botocore] Adding a new enum attribute(statusReason) to TrustedAdvisorAPI response. This attribute explains reasoning behind check status for certain specific scenarios.

v1.42.53

Compare Source

=======

  • api-change:bcm-dashboards: [botocore] The Billing and Cost Management GetDashboard API now returns identifier for each widget, enabling users to uniquely identify widgets within their dashboards.
  • api-change:ecr: [botocore] Adds multiple artifact types filter support in ListImageReferrers API.
  • api-change:pca-connector-scep: [botocore] AWS Private CA Connector for SCEP now supports AWS PrivateLink, allowing your clients to request certificates from within your Amazon Virtual Private Cloud (VPC) without traversing the public internet. With this launch, you can create VPC endpoints to connect to your SCEP connector privately.
  • enhancement:checksums: [botocore] Added support for the SHA512 checksum algorithm. When the optional AWS CRT (awscrt) dependency is installed, support is also enabled for the XXHASH64, XXHASH3, and XXHASH128 checksum algorithms. Also added pass-through support for customer-provided MD5 checksum headers (without SDK-side MD5 calculation or validation).

v1.42.52

Compare Source

=======

  • api-change:cleanrooms: [botocore] This release adds support for federated catalogs in Athena-sourced configured tables.
  • api-change:connect: [botocore] Correcting in-app notifications API documentation.

v1.42.51

Compare Source

=======

  • api-change:ec2: [botocore] Add Operator field to CreatePlacementGroup and DescribePlacementGroup APIs.
  • api-change:evidently: [botocore] The evidently client has been removed following the deprecation of the service.
  • api-change:grafana: [botocore] This release updates Amazon Managed Grafana's APIs to support customer managed KMS keys.
  • api-change:iotanalytics: [botocore] The iotanalytics client has been removed following the deprecation of the service.
  • api-change:rds: [botocore] Adds support for the StorageEncryptionType field to specify encryption type for DB clusters, DB instances, snapshots, automated backups, and global clusters.
  • api-change:workspaces-web: [botocore] Adds support for branding customization without requiring a custom wallpaper.

v1.42.50

Compare Source

=======

  • api-change:arc-region-switch: [botocore] Clarify documentation on ARC Region Switch start-plan-execution operation
  • api-change:ec2: [botocore] Documentation updates for EC2 Secondary Networks
  • api-change:ecr: [botocore] Adds support for enabling blob mounting, and removes support for Clair based image scanning
  • api-change:kafka: [botocore] Amazon MSK now supports dual-stack connectivity (IPv4 and IPv6) for existing MSK clusters. You can enable dual-stack on existing clusters by specifying the NetworkType parameter in updateConnectivity API.
  • api-change:kms: [botocore] Added support for Decrypt and ReEncrypt API's to use dry run feature without ciphertext for authorization validation
  • api-change:qconnect: [botocore] Update MessageType enum to include missing types.
celery/celery (celery)

v5.6.2

Compare Source

=====

:release-date: 2026-01-04
:release-by: Tomer Nosrati

What's Changed


- Fix recursive WorkController instantiation in DjangoWorkerFixup + AttributeError when pool_cls is a string (#​10045)
- Bugfix: Revoked tasks now immediately update backend status to REVOKED (#​9869)
- Prepare for release: v5.6.2 (#​10049)

.. _version-5.6.1:

5.6.1
=====

:release-date: 2025-12-29
:release-by: Tomer Nosrati

What's Changed
  • Fix Redis Sentinel ACL authentication support (#​10013)
  • Fix: Broker heartbeats not sent during graceful shutdown (#​9986)
  • docs #​5410 -- Document confirm_publish broker transport option (#​10016)
  • close DB pools only in prefork mode (#​10020)
  • Fix: Avoid unnecessary Django database connection creation during cleanup (#​10015)
  • reliable prefork detection (#​10023)
  • better coverage (#​10029)
  • Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example (#​10030)
  • Stop importing pytest_subtests (#​10032)
  • Only use exceptiongroup backport for Python < 3.11 (#​10033)
  • Prepare for release: v5.6.1 (#​10037)

.. _version-5.6.0:

v5.6.1

Compare Source

=====

:release-date: 2025-12-29
:release-by: Tomer Nosrati

What's Changed


- Fix Redis Sentinel ACL authentication support (#&#8203;10013)
- Fix: Broker heartbeats not sent during graceful shutdown (#&#8203;9986)
- docs #&#8203;5410 -- Document confirm_publish broker transport option (#&#8203;10016)
- close DB pools only in prefork mode (#&#8203;10020)
- Fix: Avoid unnecessary Django database connection creation during cleanup (#&#8203;10015)
- reliable prefork detection (#&#8203;10023)
- better coverage (#&#8203;10029)
- Docs: clarify `result_extended` vs periodic task metadata and show `headers["periodic_task_name"]` example (#&#8203;10030)
- Stop importing pytest_subtests (#&#8203;10032)
- Only use exceptiongroup backport for Python < 3.11 (#&#8203;10033)
- Prepare for release: v5.6.1 (#&#8203;10037)

.. _version-5.6.0:

5.6.0
=====

:release-date: 2025-11-30
:release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights

See :ref:whatsnew-5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python
version is now 3.9. Users still on Python 3.8 must upgrade their Python version
before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in
Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS
users:

  • Processing throughput dropped from ~100 tasks/sec to ~3/sec in some environments
  • UnknownOperationException errors causing container crash loops
  • Silent message processing failures with no error logs

Users of the SQS transport must ensure pycurl is installed. If you removed
pycurl after upgrading to Celery 5.5.0, you will need to reinstall it.

Contributed by @auvipy <https://github.com/auvipy>_ in
#&#8203;9620 <https://github.com/celery/celery/pull/9620>_.

Security Fix: Broker Credential Leak Prevention

Fixed a security issue where broker URLs containing passwords were being logged
in plaintext by the delayed delivery mechanism. Broker credentials are now
properly sanitized in all log output.

Contributed by @giancarloromeo <https://github.com/giancarloromeo>_ in
#&#8203;9997 <https://github.com/celery/celery/pull/9997>_.

Memory Leak Fixes

Two significant memory leaks have been fixed in this release:

Exception Handling Memory Leak: Fixed a critical memory leak in task exception
handling that was particularly severe on Python 3.11+ due to enhanced traceback
data. The fix properly breaks reference cycles in tracebacks to allow garbage
collection.

Contributed by @jaiganeshs21 <https://github.com/jaiganeshs21>_ in
#&#8203;9799 <https://github.com/celery/celery/pull/9799>_.

Pending Result Memory Leak: Fixed a memory leak where AsyncResult
subscriptions were not being cleaned up when results were forgotten.

Contributed by @tsoos99dev <https://github.com/tsoos99dev>_ in
#&#8203;9806 <https://github.com/celery/celery/pull/9806>_.

ETA Task Memory Limit

New configuration option :setting:worker_eta_task_limit to prevent out-of-memory
crashes when workers fetch large numbers of ETA or countdown tasks. Previously,
workers could exhaust available memory when the broker contained many scheduled tasks.

Example usage:

.. code-block:: python

app.conf.worker_eta_task_limit = 1000

Contributed by @sashu2310 <https://github.com/sashu2310>_ in
#&#8203;9853 <https://github.com/celery/celery/pull/9853>_.

Queue Type Selection for Auto-created Queues

New configuration options allow specifying the queue type and exchange type when
Celery auto-creates missing queues. This is particularly useful for RabbitMQ users
who want to use quorum queues with auto-created queues.

Configuration options:

  • :setting:task_create_missing_queue_type: Sets the queue type for auto-created
    queues (e.g., quorum, classic)
  • :setting:task_create_missing_queue_exchange_type: Sets the exchange type for
    auto-created queues

Example usage:

.. code-block:: python

app.conf.task_create_missing_queue_type = 'quorum'

Contributed by @ghirailghiro <https://github.com/ghirailghiro>_ in
#&#8203;9815 <https://github.com/celery/celery/pull/9815>_.

What's Changed


- Prepare for release: v5.6.0 (#&#8203;10010)

.. _version-5.6.0rc2:

5.6.0rc2
========

:release-date: 2025-11-22
:release-by: Tomer Nosrati

Celery v5.6.0 Release Candidate 2 is now available for testing.
Please help us test this version and report any issues.

What's Changed
  • Remove Python 4.0 version condition for pytest dependencies (#​9993)
  • Sanitize broker URL in delayed delivery logs (avoid leaking credentials) (#​9997)
  • Don't fail task on timeout during cold shutdown (#​9678)
  • Add Py39-314t to CI (#​9999)
  • asynpool: Don't return from inside a finally block (#​10000)
  • Prepare for (pre) release: v5.6.0rc2 (#​10005)

.. _version-5.6.0rc1:

v5.6.0

Compare Source

=====

:release-date: 2025-11-30
:release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights


See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below.

Python 3.9 Minimum Version
--------------------------

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python
version is now 3.9. Users still on Python 3.8 must upgrade their Python version
before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to ``pycurl`` from ``urllib3``
--------------------------------------------

The switch from ``pycurl`` to ``urllib3`` for the SQS transport (introduced in
Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS
users:

- Processing throughput dropped from ~100 tasks/sec to ~3/sec in some environments
- ``UnknownOperationException`` errors causing container crash loops
- Silent message processing failures with no error logs

Users of the SQS transport must ensure ``pycurl`` is installed. If you removed
``pycurl`` after upgrading to Celery 5.5.0, you will need to reinstall it.

Contributed by `@auvipy <https://github.com/auvipy>`_ in
`#&#8203;9620 <https://github.com/celery/celery/pull/9620>`_.

Security Fix: Broker Credential Leak Prevention
------------------------------------------------

Fixed a security issue where broker URLs containing passwords were being logged
in plaintext by the delayed delivery mechanism. Broker credentials are now
properly sanitized in all log output.

Contributed by `@giancarloromeo <https://github.com/giancarloromeo>`_ in
`#&#8203;9997 <https://github.com/celery/celery/pull/9997>`_.

Memory Leak Fixes
-----------------

Two significant memory leaks have been fixed in this release:

**Exception Handling Memory Leak**: Fixed a critical memory leak in task exception
handling that was particularly severe on Python 3.11+ due to enhanced traceback
data. The fix properly breaks reference cycles in tracebacks to allow garbage
collection.

Contributed by `@jaiganeshs21 <https://github.com/jaiganeshs21>`_ in
`#&#8203;9799 <https://github.com/celery/celery/pull/9799>`_.

**Pending Result Memory Leak**: Fixed a memory leak where ``AsyncResult``
subscriptions were not being cleaned up when results were forgotten.

Contributed by `@tsoos99dev <https://github.com/tsoos99dev>`_ in
`#&#8203;9806 <https://github.com/celery/celery/pull/9806>`_.

ETA Task Memory Limit
---------------------

New configuration option :setting:`worker_eta_task_limit` to prevent out-of-memory
crashes when workers fetch large numbers of ETA or countdown tasks. Previously,
workers could exhaust available memory when the broker contained many scheduled tasks.

Example usage:

.. code-block:: python

    app.conf.worker_eta_task_limit = 1000

Contributed by `@sashu2310 <https://github.com/sashu2310>`_ in
`#&#8203;9853 <https://github.com/celery/celery/pull/9853>`_.

Queue Type Selection for Auto-created Queues
--------------------------------------------

New configuration options allow specifying the queue type and exchange type when
Celery auto-creates missing queues. This is particularly useful for RabbitMQ users
who want to use quorum queues with auto-created queues.

Configuration options:

- :setting:`task_create_missing_queue_type`: Sets the queue type for auto-created
  queues (e.g., ``quorum``, ``classic``)
- :setting:`task_create_missing_queue_exchange_type`: Sets the exchange type for
  auto-created queues

Example usage:

.. code-block:: python

    app.conf.task_create_missing_queue_type = 'quorum'

Contributed by `@ghirailghiro <https://github.com/ghirailghiro>`_ in
`#&#8203;9815 <https://github.com/celery/celery/pull/9815>`_.

What's Changed

.. _version-5.6.0rc2:

jazzband/dj-database-url (dj-database-url)

v3.1.2

Compare Source

What's Changed

New Contributors

Full Changelog: jazzband/dj-database-url@v3.1.1...v3.1.2

v3.1.1

Compare Source

What's Changed

New Contributors

Full Changelog: jazzband/dj-database-url@v3.1.0...v3.1.1

livekit/agents (livekit-agents)

v1.4.2

Stability-focused release with significant reliability improvements. Fixes multiple memory leaks in the process pool — job counter leaks on cancellation, pending assignment leaks on timeout, socket leaks on startup failure, and orphaned executors on send failure. IPC pipeline reliability has been improved, and several edge-case hangs have been resolved (participant never joining, Ctrl+C propagation to child processes). STT/TTS fallback behavior is now more robust: STT fallback correctly skips the main stream during recovery, and TTS fallback no longer shares resamplers across streams. Other fixes include ChatContext.truncate no longer dropping developer messages, correct cgroups v2 CPU quota parsing, proper on_session_end callback ordering, and log uploads even when sessions fail to start. Workers now automatically reject jobs when draining or full, and the proc pool correctly spawns processes under high load.

New RecordingOptions API

The record parameter on AgentSession.start() now accepts granular options in addition to bool. All keys default to True when omitted.

# record everything (default)
await session.start(agent, record=True)

# record nothing
await session.start(agent, record=False)

# granular: record audio but disable traces, logs, and transcript
await session.start(agent, record={"audio": True, "traces": False, "logs": False, "transcript": False})

What's Changed

New Contributors

Full Changelog: https://github.com/livekit/agents/compare/livekit-agents@1.4.0...livekit-agents@1.4.2

v1.4.0

Compare Source

Python 3.14 Support & Python 3.9 Dropped

This release adds Python 3.14 support and drops Python 3.9. The minimum supported version is now Python 3.10.

Tool Improvements

Tools and toolsets now have stable unique IDs, making it possible to reference and filter tools programmatically. Changes to agent configuration (instructions, tools) are now tracked in conversation history via AgentConfigUpdate.

LLMStream.collect() API

A new LLMStream.collect() API makes it significantly easier to use LLMs outside of AgentSession. You can now call an LLM, collect the full response, and execute tool calls with a straightforward API — useful for background tasks, pre-processing, or any workflow where you need LLM capabilities without the full voice agent pipeline.

from livekit.agents import llm

response = await my_llm.chat(chat_ctx=ctx, tools=tools).collect()

for tc in response.tool_calls:
    result = await llm.execute_function_call(tc, tool_ctx)
    ctx.insert(result.fnc_call)
    if result.fnc_call_out:
        ctx.insert(result.fnc_call_out)

Manual Turn Detection for Realtime Models

Realtime models now support commit_user_turn, enabling turn_detection="manual" mode. This gives you full control over when user turns are committed — useful for push-to-talk interfaces or scenarios where automatic VAD-based turn detection isn't ideal.

@&#8203;ctx.room.local_participant.register_rpc_method("end_turn")
async def end_turn(data: rtc.RpcInvocationData):
    session.input.set_audio_enabled(False)
    session.commit_user_turn(
        transcript_timeout=10.0,
        stt_flush_duration=2.0,
    )

Job Migration on Reconnection

When the agent server temporarily loses connection and reconnects, active jobs are now automatically migrated rather than being dropped. This significantly improves reliability during transient network issues.

False Interruption Fix

Fixed a bug where late end-of-speech events could trigger duplicate false interruption timers, causing the agent to incorrectly stop speaking. The agent now properly deduplicates these events and tracks STT completion state more reliably.

New Providers & Plugins
  • xAI Responses LLM — Use xAI's Responses API via xai.responses.LLM()
  • Azure OpenAI Responses — Azure-hosted Responses API via azure.responses.LLM(), with support for deployments and Azure auth
  • Camb.ai TTS — New TTS plugin powered by the MARS model family (mars-flash, mars-pro, mars-instruct), with voice selection, language control, and style instructions
  • Avatario Avatar — Virtual avatar plugin with session management and API client

What's Changed


Configuration

📅 Schedule: Branch creation - "on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added dependencies Pull requests that update a dependency file noChangelog labels Feb 23, 2026
@renovate renovate bot force-pushed the renovate/python-dependencies branch 3 times, most recently from b1f4b82 to c94e89c Compare March 1, 2026 01:41
@renovate renovate bot force-pushed the renovate/python-dependencies branch from c94e89c to 9251ca2 Compare March 1, 2026 21:02
@sonarqubecloud
Copy link

sonarqubecloud bot commented Mar 1, 2026

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file noChangelog

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants