Skip to content

chore(deps): bump the major-updates group across 1 directory with 3 updates#141

Open
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/major-updates-64e7a81ef6
Open

chore(deps): bump the major-updates group across 1 directory with 3 updates#141
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/pip/major-updates-64e7a81ef6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 4, 2026

Bumps the major-updates group with 3 updates in the / directory: gunicorn, black and django-debug-toolbar.

Updates gunicorn from 23.0.0 to 25.0.1

Release notes

Sourced from gunicorn's releases.

25.0.1

Bug Fixes

  • Fix ASGI streaming responses (SSE) hanging: add chunked transfer encoding for HTTP/1.1 responses without Content-Length header. Without chunked encoding, clients wait for connection close to determine end-of-response.

Changes

  • Update celery_alternative example to use FastAPI with native ASGI worker and uvloop for async task execution

Testing

  • Add ASGI compliance test suite with Docker-based integration tests covering HTTP, WebSocket, streaming, lifespan, framework integration (Starlette, FastAPI), HTTP/2, and concurrency scenarios

Gunicorn 25.0.0

New Features

  • Dirty Arbiters: Separate process pool for executing long-running, blocking operations (AI model loading, heavy computation) without blocking HTTP workers ([PR #3460](benoitc/gunicorn#3460))

    • Inspired by Erlang's dirty schedulers
    • Asyncio-based with Unix socket IPC
    • Stateful workers that persist loaded resources
    • New settings: --dirty-app, --dirty-workers, --dirty-timeout, --dirty-threads, --dirty-graceful-timeout
    • Lifecycle hooks: on_dirty_starting, dirty_post_fork, dirty_worker_init, dirty_worker_exit

  • Per-App Worker Allocation for Dirty Arbiters: Control how many dirty workers load each app for memory optimization with heavy models ([PR #3473](benoitc/gunicorn#3473))

    • Set workers class attribute on DirtyApp (e.g., workers = 2)
    • Or use config format module:class:N (e.g., myapp:HeavyModel:2)
    • Requests automatically routed to workers with the target app
    • New exception DirtyNoWorkersAvailableError for graceful error handling
    • Example: 8 workers × 10GB model = 80GB → with workers=2: 20GB (75% savings)

  • HTTP/2 Support (Beta): Native HTTP/2 (RFC 7540) support for improved performance with modern clients ([PR #3468](benoitc/gunicorn#3468))

    • Multiplexed streams over a single connection
    • Header compression (HPACK)
    • Flow control and stream prioritization
    • Works with gthread, gevent, and ASGI workers
    • New settings: --http-protocols, --http2-max-concurrent-streams, --http2-initial-window-size, --http2-max-frame-size, --http2-max-header-list-size
    • Requires SSL/TLS and h2 library: pip install gunicorn[http2]

... (truncated)

Commits
  • 3bf529f docs: sync news.md with 2026-news.md
  • 1f4f245 Merge pull request #3478 from benoitc/feature/asgi-compliance-testbed
  • e1519c0 docs: add ASGI compliance test suite to changelog
  • 0885005 fix(tests): correct assertions in ASGI compliance tests
  • 658924c docs: update changelog for 25.0.1
  • c5b6e82 chore: bump version to 25.0.1
  • ce352dc fix(asgi): add chunked transfer encoding for streaming responses
  • 29b8a3a Merge pull request #3476 from benoitc/dependabot/github_actions/actions/check...
  • 791ab46 chore(deps): bump actions/checkout from 4 to 6
  • 9235b72 Merge pull request #3475 from benoitc/dependabot/github_actions/actions/uploa...
  • Additional commits viewable in compare view

Updates black from 25.12.0 to 26.1.0

Release notes

Sourced from black's releases.

26.1.0

Highlights

Introduces the 2026 stable style (#4892), stabilizing the following changes:

  • always_one_newline_after_import: Always force one blank line after import statements, except when the line after the import is a comment or an import statement (#4489)
  • fix_fmt_skip_in_one_liners: Fix # fmt: skip behavior on one-liner declarations, such as def foo(): return "mock" # fmt: skip, where previously the declaration would have been incorrectly collapsed (#4800)
  • fix_module_docstring_detection: Fix module docstrings being treated as normal strings if preceded by comments (#4764)
  • fix_type_expansion_split: Fix type expansions split in generic functions (#4777)
  • multiline_string_handling: Make expressions involving multiline strings more compact (#1879)
  • normalize_cr_newlines: Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)
  • remove_parens_around_except_types: Remove parentheses around multiple exception types in except and except* without as (#4720)
  • remove_parens_from_assignment_lhs: Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)
  • standardize_type_comments: Format type comments which have zero or more spaces between # and type: or between type: and value to # type: (value) (#4645)

The following change was not in any previous stable release:

  • Regenerated the _width_table.py and added tests for the Khmer language (#4253)

This release alo bumps pathspec to v1 and fixes inconsistencies with Git's .gitignore logic (#4958). Now, files will be ignored if a pattern matches them, even if the parent directory is directly unignored. For example, Black would previously format exclude/not_this/foo.py with this .gitignore:

exclude/
!exclude/not_this/

Now, exclude/not_this/foo.py will remain ignored. To ensure exclude/not_this/ and all of it's children are included in formatting (and in Git), use this .gitignore:

*/exclude/*
!*/exclude/not_this/

This new behavior matches Git. The leading */ are only necessary if you wish to ignore matching subdirectories (like the previous behavior did), and not just matching root

... (truncated)

Changelog

Sourced from black's changelog.

26.1.0

Highlights

Introduces the 2026 stable style (#4892), stabilizing the following changes:

  • always_one_newline_after_import: Always force one blank line after import statements, except when the line after the import is a comment or an import statement (#4489)
  • fix_fmt_skip_in_one_liners: Fix # fmt: skip behavior on one-liner declarations, such as def foo(): return "mock" # fmt: skip, where previously the declaration would have been incorrectly collapsed (#4800)
  • fix_module_docstring_detection: Fix module docstrings being treated as normal strings if preceded by comments (#4764)
  • fix_type_expansion_split: Fix type expansions split in generic functions (#4777)
  • multiline_string_handling: Make expressions involving multiline strings more compact (#1879)
  • normalize_cr_newlines: Add \r style newlines to the potential newlines to normalize file newlines both from and to (#4710)
  • remove_parens_around_except_types: Remove parentheses around multiple exception types in except and except* without as (#4720)
  • remove_parens_from_assignment_lhs: Remove unnecessary parentheses from the left-hand side of assignments while preserving magic trailing commas and intentional multiline formatting (#4865)
  • standardize_type_comments: Format type comments which have zero or more spaces between # and type: or between type: and value to # type: (value) (#4645)

The following change was not in any previous stable release:

  • Regenerated the _width_table.py and added tests for the Khmer language (#4253)

This release alo bumps pathspec to v1 and fixes inconsistencies with Git's .gitignore logic (#4958). Now, files will be ignored if a pattern matches them, even if the parent directory is directly unignored. For example, Black would previously format exclude/not_this/foo.py with this .gitignore:

exclude/
!exclude/not_this/

Now, exclude/not_this/foo.py will remain ignored. To ensure exclude/not_this/ and all of it's children are included in formatting (and in Git), use this .gitignore:

*/exclude/*
!*/exclude/not_this/

This new behavior matches Git. The leading */ are only necessary if you wish to ignore

... (truncated)

Commits

Updates django-debug-toolbar from 5.2.0 to 6.2.0

Release notes

Sourced from django-debug-toolbar's releases.

6.2.0

What's Changed

New Contributors

Full Changelog: django-commons/django-debug-toolbar@6.1.0...6.2.0

6.1.0

What's Changed

See change log here

Commits:

... (truncated)

Changelog

Sourced from django-debug-toolbar's changelog.

6.2.0 (2026-01-20)

  • Deprecated RedirectsPanel in favor of HistoryPanel for viewing toolbar data from redirected requests.
  • Fixed support for generating code coverage comments in PRs.
  • Added Django 6.0 to the testing matrix. Removed Django 5.0 to save CI resources.
  • Show the cache backend alias and cache backend class name instead of the cache instance in the cache panel.
  • Dropped support for the Python 3.9, it has reached its end of life date.
  • Toggle tracking the toolbar's queries when using debug_toolbar.store.DatabaseStore with SKIP_TOOLBAR_QUERIES.
  • Fixed font family for code blocks and stack traces in the toolbar.
  • Added test to confirm Django's TestCase.assertNumQueries works.
  • Fixed string representation of values in settings panel.
  • Declared support for Django 6.0.

6.1.0 (2025-10-30)

  • Added support for async to timer panel.
  • Added a note about the default password in make example.
  • Removed logging about the toolbar failing to serialize a value into JSON.
  • Moved the the import statement of debug_toolbar.urls to within the if statement's scope on the installation documentation.
  • Changed StoredDebugToolbar.from_store to always create a panel key and class instance, regardless if any data was generated.
  • Fixed selenium tests for CI by using psycopg for Python 3.13 runs.
  • Added CommunityPanel containing links to documentation and resources.
  • Upgraded CI postgis version to 17-3.5.
  • Added how to generate the documentation locally to the contributing documentation.
  • Updated logic that forces values to strings (force_str) to render "Django Debug Toolbar was unable to parse value." when there's a decoding error.
  • Updated docs to show incompatibility with Django Channels.
  • Hide the toolbar's migrations unless debug_toolbar.store.DatabaseStore is being used. This may change in the future.
  • Hide debug_toolbar.HistoryEntry as a model unless debug_toolbar.store.DatabaseStore is being used. This may change in the future.

6.0.0 (2025-07-22)

  • Added support for checking if pytest as the test runner when determining if tests are running.
  • Added show_toolbar_with_docker function to check Docker host IP address when running inside Docker containers.

... (truncated)

Commits
  • 0b7c8d8 Version 6.2.0 (#2298)
  • 33ecfd1 [pre-commit.ci] pre-commit autoupdate (#2282)
  • 03edf77 Add LLM usage checkbox to PR template (#2294)
  • 8ebab3d Cancel in-progress runs on new pushes (#2287)
  • c0d457b Refactor type hints and imports in history panel and views
  • ac02a69 Remove comment for clarity in middleware call method (#2283)
  • 0136ff9 Exclude dependabot and pre-commit bot commits from GitHub release notes (#2278)
  • 3ea11f2 [pre-commit.ci] pre-commit autoupdate
  • 2fc3ef5 Declare support for Django 6.0 (#2272)
  • 2542c06 Bump the github-actions group across 1 directory with 3 updates
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the major-updates group across 1 directory with 3 u…
4405cee 
…pdates

Bumps the major-updates group with 3 updates in the / directory: [gunicorn](https://github.com/benoitc/gunicorn), [black](https://github.com/psf/black) and [django-debug-toolbar](https://github.com/django-commons/django-debug-toolbar).


Updates `gunicorn` from 23.0.0 to 25.0.1
- [Release notes](https://github.com/benoitc/gunicorn/releases)
- [Commits](benoitc/gunicorn@23.0.0...25.0.1)

Updates `black` from 25.12.0 to 26.1.0
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](psf/black@25.12.0...26.1.0)

Updates `django-debug-toolbar` from 5.2.0 to 6.2.0
- [Release notes](https://github.com/django-commons/django-debug-toolbar/releases)
- [Changelog](https://github.com/django-commons/django-debug-toolbar/blob/main/docs/changes.rst)
- [Commits](django-commons/django-debug-toolbar@5.2.0...6.2.0)

---
updated-dependencies:
- dependency-name: gunicorn
  dependency-version: 25.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: black
  dependency-version: 26.1.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
- dependency-name: django-debug-toolbar
  dependency-version: 6.2.0
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: major-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 4, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants