Bump the pip-minor-patch group across 1 directory with 5 updates by dependabot[bot] · Pull Request #80 · BuczynskiRafal/catchments_simulation

dependabot · 2026-02-23T06:30:31Z

Bumps the pip-minor-patch group with 5 updates in the / directory:

Package	From	To
werkzeug	`3.1.5`	`3.1.6`
python-dotenv	`1.0.0`	`1.2.1`
django-crispy-forms	`2.0`	`2.5`
django-storages	`1.13.2`	`1.14.6`
whitenoise	`6.4.0`	`6.11.0`

Updates werkzeug from 3.1.5 to 3.1.6

Release notes

Sourced from werkzeug's releases.

3.1.6

This is the Werkzeug 3.1.6 security fix release, which fixes a security issue but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Werkzeug/3.1.6/ Changes: https://werkzeug.palletsprojects.com/page/changes/#version-3-1-6

safe_join on Windows does not allow special devices names in multi-segment paths. GHSA-29vq-49wr-vm6x

Changelog

Sourced from werkzeug's changelog.

Version 3.1.6

Released 2026-02-19

safe_join on Windows does not allow special devices names in multi-segment paths. :ghsa:29vq-49wr-vm6x

Commits

04da1b5 release version 3.1.6
f407712 Merge commit from fork
f54fe98 safe_join prevents Windows special device names in multi-segment paths
d005985 start version 3.1.6
8565c2c document rule priority (#3102)
3febc7e document rule priority
2525b82 remove state machine docs
4abfbd5 rewrite build docstring (#3097)
161c18b rewrite build docstring
86e11c2 release version 3.1.5 (#3085)
See full diff in compare view

Updates python-dotenv from 1.0.0 to 1.2.1

Release notes

Sourced from python-dotenv's releases.

v1.2.1

What's Changed

Support reading .env from FIFOs (Unix) by @sidharth-sudhir in theskumar/python-dotenv#586

Update CI to use trusted publishing on PyPI

New Contributors

@sidharth-sudhir made their first contribution in theskumar/python-dotenv#586

Full Changelog: theskumar/python-dotenv@v1.2.0...v1.2.1

v1.2.0

What's Changed

style: upgrade to use ruff by @theskumar in theskumar/python-dotenv#567

Use sys.exit() instead of exit() by @theskumar in theskumar/python-dotenv#568

feat: add PYTHON_DOTENV_DISABLED flag to disable load_dotenv (fixes #510) by @matthewfranglen in theskumar/python-dotenv#569

Added Python@3.14: Github CI & tox.ini by @23f3001135 in theskumar/python-dotenv#579

ocs: clarify what load_dotenv() does in README by @cybercoded in theskumar/python-dotenv#575

Bump the github-actions group across 1 directory with 2 updates by @dependabot[bot] in theskumar/python-dotenv#577

Move project metadata and config to pyproject.toml by @EpicWink in theskumar/python-dotenv#583

New Contributors

@matthewfranglen made their first contribution in theskumar/python-dotenv#569

@23f3001135 made their first contribution in theskumar/python-dotenv#579

@cybercoded made their first contribution in theskumar/python-dotenv#575

@EpicWink made their first contribution in theskumar/python-dotenv#583

Full Changelog: theskumar/python-dotenv@v1.1.1...v1.2.0

v1.1.1

What's Changed

fix: ensure find_dotenv work reliably on python 3.13 by @theskumar in theskumar/python-dotenv#563

fix(cli): issue with execvpe on Windows by @wrongontheinternet in theskumar/python-dotenv#566

New Contributors

@wrongontheinternet made their first contribution in theskumar/python-dotenv#566

Full Changelog: theskumar/python-dotenv@v1.1.0...v1.1.1

v1.1.0

What's Changed

Add a security policy by @bbc2 in theskumar/python-dotenv#512

Keep GitHub Actions up to date with GitHub's Dependabot by @cclauss in theskumar/python-dotenv#506

ci: fix multiline string in test.yml & use fail-fast strategy by @cclauss in theskumar/python-dotenv#514

Enhance dotenv run: Switch to execvpe for better resource management and signal handling by @eekstunt in theskumar/python-dotenv#523

ci: add py3.13 to test.yml by @waketzheng in theskumar/python-dotenv#527

Add Python 3.13 trove classifier by @edgarrmondragon in theskumar/python-dotenv#535

Bump the github-actions group with 2 updates by @dependabot in theskumar/python-dotenv#529

Add support for python 3.13 and drop 3.8 by @theskumar in theskumar/python-dotenv#551

docs: Update README.md by @chapeupreto in theskumar/python-dotenv#516

Some more s/Python-dotenv/python-dotenv/ by @theskumar in theskumar/python-dotenv#552

... (truncated)

Changelog

Sourced from python-dotenv's changelog.

[1.2.1] - 2025-10-26

Move more config to pyproject.toml, removed setup.cfg

Add support for reading .env from FIFOs (Unix) by [@sidharth-sudhir] in #586

[1.2.0] - 2025-10-26

Upgrade build system to use PEP 517 & PEP 518 to use build and pyproject.toml by [@EpicWink] in #583

Add support for Python 3.14 by [@23f3001135] in #579

Add support for disabling of load_dotenv() using PYTHON_DOTENV_DISABLED env var. by [@matthewfranglen] in #569

[1.1.1] - 2025-06-24

Fixed

CLI: Ensure find_dotenv work reliably on python 3.13 by [@theskumar] in #563

CLI: revert the use of execvpe on Windows by [@wrongontheinternet] in #566

[1.1.0] - 2025-03-25

Feature

Add support for python 3.13

Enhance dotenv run, switch to execvpe for better resource management and signal handling (#523) by [@eekstunt]

Fixed

find_dotenv and load_dotenv now correctly looks up at the current directory when running in debugger or pdb (#553 by [@randomseed42])

Misc

Drop support for Python 3.8

[1.0.1] - 2024-01-23

Fixed

Gracefully handle code which has been imported from a zipfile (#456 by [@samwyma])

Allow modules using load_dotenv to be reloaded when launched in a separate thread (#497 by [@freddyaboulton])

Fix file not closed after deletion, handle error in the rewrite function (#469 by [@Qwerty-133])

Misc

Use pathlib.Path in tests (#466 by [@eumiro])

Fix year in release date in changelog.md (#454 by [@jankislinger])

Use https in README links (#474 by [@Nicals])

Commits

eaf2a91 Do not remove .coverage file
8716196 Bump version: 1.2.0 → 1.2.1
b87807f Update changelog
3af77d3 Support reading .env from FIFOs (Unix) (#586)
467ee22 Fix test failures after moving config to pyproject.toml
76999e7 Move more config pyproject.toml
222ce2c Update to use trusted publisher on pypi
8ed4f79 Update docs requirements
5bf8822 Bump version: 1.1.1 → 1.2.0
1fe11cc upadate changelog
Additional commits viewable in compare view

Updates django-crispy-forms from 2.0 to 2.5

Release notes

Sourced from django-crispy-forms's releases.

2.5

Confirmed support for Python 3.14.

Confirmed support for Django 6.0.

Dropped support for Python 3.8.

2.4

Added support for Python 3.13.

Confirmed support for Django 5.2.

2.3

What's Changed

Fixed unexpected addition the 'active' css_class to AccordionGroup

2.2

Added support for Django 5.1.

Allowed pass through of context when rendering a Fieldset layout object.

Full Changelog: django-crispy-forms/django-crispy-forms@2.1...2.2

2.1

What's Changed

Added support for Django 5.0.

Dropped support for Django 3.2, 4.0 and 4.1.

Added support for Python 3.12.

Dropped support for Python 3.7.

New Contributors

@DanielSwain made their first contribution in django-crispy-forms/django-crispy-forms#1340

@sankarebarri made their first contribution in django-crispy-forms/django-crispy-forms#1342

@foarsitter made their first contribution in django-crispy-forms/django-crispy-forms#1353

Full Changelog: django-crispy-forms/django-crispy-forms@2.0...2.1

Changelog

Sourced from django-crispy-forms's changelog.

2.5 (2025-11-06)

Confirmed support for Python 3.14.

Confirmed support for Django 6.0.

Dropped support for Python 3.8.

2.4 (2025-04-13)

Added support for Python 3.13.

Confirmed support for Django 5.2.

2.3 (2024-07-19)

Fixed a bug in AccordionGroup rendering then it gets an unexpected css class active.

2.2 (2024-06-15)

Added support for Django 5.1.

Allowed pass through of context when rendering a Fieldset layout object.

2.1 (2023-10-15)

Added support for Django 5.0.

Dropped support for Django 3.2, 4.0 and 4.1.

Added support for Python 3.12.

Dropped support for Python 3.7.

See the 2.1 Milestone for the full change list.

Commits

65fa8ae 2.5 Release. (#1424)
ca4ca14 PEP 639 licenses (#1413)
aaabe68 Updated pre-commit hook versions.
125dd16 Pyupgrade 3.9+
1f9c8ec Confirmed support for Python 3.14, Django. Drop support for Python 3.8.
93cb8c8 Correct names in special thanks section (#1421)
e327548 Added security policy. (#1419)
6481342 Enabled GitHub code of conduct (#1416)
dabd719 Add Project Logo. (#1415)
b3f1d22 2.4 Release. (#1412)
Additional commits viewable in compare view

Updates django-storages from 1.13.2 to 1.14.6

Changelog

Sourced from django-storages's changelog.

1.14.6 (2025-04-01)

Google Cloud

Add option to sign URLs via IAM Blob API ([#1427](https://github.com/jschneier/django-storages/issues/1427)_)

S3

Fix exists calls when using SSE-C ([#1451](https://github.com/jschneier/django-storages/issues/1451)_)

Default url_protocol to https: if set to None ([#1483](https://github.com/jschneier/django-storages/issues/1483)_)

.. _#1427: jschneier/django-storages#1427 .. _#1451: jschneier/django-storages#1451 .. _#1483: jschneier/django-storages#1483

1.14.5 (2025-02-15)

General

Revert exists() behavior to pre-1.14.4 semantics with additional hardening for Django versions < 4.2 to fix CVE-2024-39330. This change matches the eventual behavior Django itself shipped with. ([#1484](https://github.com/jschneier/django-storages/issues/1484), [#1486](https://github.com/jschneier/django-storages/issues/1486))

Add support for Django 5.1 ([#1444](https://github.com/jschneier/django-storages/issues/1444)_)

Azure

Deprecated: The setting AZURE_API_VERSION/api_version setting is deprecated in favor of the new AZURE_CLIENT_OPTIONS setting. A future version will remove support for this setting.

Add AZURE_CLIENT_OPTIONS settings to enable customization of all BlobServiceClient parameters such as api_version and all retry* options. ([#1432](https://github.com/jschneier/django-storages/issues/1432)_)

Dropbox

As part of the above hardening fix a bug was uncovered whereby a root_path setting would be applied multiple times during save() ([#1484](https://github.com/jschneier/django-storages/issues/1484)_)

Fix setting OAuth2 access token via env var ([#1452](https://github.com/jschneier/django-storages/issues/1452)_)

FTP

Fix incorrect exists() results due to an errant appended slash ([#1438](https://github.com/jschneier/django-storages/issues/1438)_)

Google Cloud

... (truncated)

Commits

3658c3d Bump version for release (#1497)
d51b0bf Release version 1.14.6 (#1496)
6ef553d [s3] Default url_protocol to https: if set to None (#1483)
80031d3 [docs/azure] Fix broken link (#1492)
8363be3 [s3] Pass object parameters to head_object in exists (#1451)
aa8a82e [docs/gcloud] Clean-up querystring auth language (#1489)
758ad6f [gcloud] Add option to sign URLs via IAM Blob API (#1427)
03566dc Add missing CHANGELOG entry for Dropbox fix (#1488)
3c0fe9f Release version 1.14.5 (#1487)
5db357a Apply additional validation in overwrite path (#1486)
Additional commits viewable in compare view

Updates whitenoise from 6.4.0 to 6.11.0

Changelog

Sourced from whitenoise's changelog.

6.11.0 (2025-09-18)

Support Django 6.0.

6.10.0 (2025-09-09)

Support Python 3.14.

6.9.0 (2025-02-06)

Support Django 5.2.

6.8.2 (2024-10-29)

Fix compression speed gains for the thread pool when running Django’s collectstatic. The thread pool had no effect due to use of a generator for the results, a refactoring introduced when reviewing the initial PR.

Thanks to Petr Přikryl for the investigation and fix in PR [#616](https://github.com/evansd/whitenoise/issues/616) <https://github.com/evansd/whitenoise/pull/616>__.

6.8.1 (2024-10-28)

Raise any errors from threads in the whitenoise.compress command.

Regression in 6.8.0. Thanks to Tom Grainger for the spotting this with a comment on PR [#484](https://github.com/evansd/whitenoise/issues/484) <https://github.com/evansd/whitenoise/pull/484#discussion_r1818989096>__.

6.8.0 (2024-10-28)

Drop Django 3.2 to 4.1 support.

Drop Python 3.8 support.

Support Python 3.13.

Fix a bug introduced in version 6.0.0 where Range requests could lead to database connection errors in other requests.

Thanks to Per Myren for the detailed investigation and fix in PR [#612](https://github.com/evansd/whitenoise/issues/612) <https://github.com/evansd/whitenoise/pull/612>__.

Use Django’s |FORCE_SCRIPT_NAME|__ setting correctly. This reverts a change from version 5.3.0 that added a call to Django’s |get_script_prefix() method|__ outside of the request-response cycle.

.. |FORCE_SCRIPT_NAME| replace:: FORCE_SCRIPT_NAME __ https://docs.djangoproject.com/en/stable/ref/settings/#std:setting-FORCE_SCRIPT_NAME

... (truncated)

Commits

c9c06e9 Version 6.11.0
051c4e9 Support Django 6.0 (#665)
c903cc1 Version 6.10.0
a81bcb0 docs(django): use the stable version in URLs (#626)
67b4f32 Support Python 3.14 (#664)
da8d333 [pre-commit.ci] pre-commit autoupdate (#663)
8000724 Bump the github-actions group with 2 updates (#662)
8fb339f Upgrade dependencies (#661)
adf64dd Use uvx to run tox on GitHub Actions (#660)
ad6eb20 [pre-commit.ci] pre-commit autoupdate (#659)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the pip-minor-patch group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [werkzeug](https://github.com/pallets/werkzeug) | `3.1.5` | `3.1.6` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.0.0` | `1.2.1` | | [django-crispy-forms](https://github.com/django-crispy-forms/django-crispy-forms) | `2.0` | `2.5` | | [django-storages](https://github.com/jschneier/django-storages) | `1.13.2` | `1.14.6` | | [whitenoise](https://github.com/evansd/whitenoise) | `6.4.0` | `6.11.0` | Updates `werkzeug` from 3.1.5 to 3.1.6 - [Release notes](https://github.com/pallets/werkzeug/releases) - [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst) - [Commits](pallets/werkzeug@3.1.5...3.1.6) Updates `python-dotenv` from 1.0.0 to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.0.0...v1.2.1) Updates `django-crispy-forms` from 2.0 to 2.5 - [Release notes](https://github.com/django-crispy-forms/django-crispy-forms/releases) - [Changelog](https://github.com/django-crispy-forms/django-crispy-forms/blob/main/CHANGELOG.md) - [Commits](django-crispy-forms/django-crispy-forms@2.0...2.5) Updates `django-storages` from 1.13.2 to 1.14.6 - [Changelog](https://github.com/jschneier/django-storages/blob/master/CHANGELOG.rst) - [Commits](jschneier/django-storages@1.13.2...1.14.6) Updates `whitenoise` from 6.4.0 to 6.11.0 - [Changelog](https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst) - [Commits](evansd/whitenoise@6.4.0...6.11.0) --- updated-dependencies: - dependency-name: werkzeug dependency-version: 3.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip-minor-patch - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-minor-patch - dependency-name: django-crispy-forms dependency-version: '2.5' dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-minor-patch - dependency-name: django-storages dependency-version: 1.14.6 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-minor-patch - dependency-name: whitenoise dependency-version: 6.11.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-03-30T06:18:45Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 23, 2026

dependabot Bot force-pushed the dependabot/pip/pip-minor-patch-d3f7751d15 branch from 4ec76a5 to 62b618c Compare February 25, 2026 13:13

dependabot Bot force-pushed the dependabot/pip/pip-minor-patch-d3f7751d15 branch from 62b618c to 8b138aa Compare March 2, 2026 06:24

dependabot Bot closed this Mar 30, 2026

dependabot Bot deleted the dependabot/pip/pip-minor-patch-d3f7751d15 branch March 30, 2026 06:18

Navigation Menu

Repository navigation

Bump the pip-minor-patch group across 1 directory with 5 updates - #80

Bump the pip-minor-patch group across 1 directory with 5 updates#80
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-minor-patch-d3f7751d15

dependabot Bot commented on behalf of github Feb 23, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Mar 30, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Feb 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

3.1.6

Version 3.1.6

v1.2.1

What's Changed

New Contributors

v1.2.0

What's Changed

New Contributors

v1.1.1

What's Changed

New Contributors

v1.1.0

What's Changed

[1.2.1] - 2025-10-26

[1.2.0] - 2025-10-26

[1.1.1] - 2025-06-24

Fixed

[1.1.0] - 2025-03-25

[1.0.1] - 2024-01-23

2.5

2.4

2.3

What's Changed

2.2

2.1

What's Changed

New Contributors

2.5 (2025-11-06)

2.4 (2025-04-13)

2.3 (2024-07-19)

2.2 (2024-06-15)

2.1 (2023-10-15)

Google Cloud

S3

General

Azure

Dropbox

FTP

Google Cloud

6.11.0 (2025-09-18)

6.10.0 (2025-09-09)

6.9.0 (2025-02-06)

6.8.2 (2024-10-29)

6.8.1 (2024-10-28)

6.8.0 (2024-10-28)

Uh oh!

dependabot Bot commented on behalf of github Mar 30, 2026

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Feb 23, 2026 •

edited

Loading