chore(deps): update all non-major dependencies by renovate[bot] · Pull Request #627 · canonical/github-runner-operator

renovate · 2025-09-01T06:05:17Z

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	`v4.2.2` -> `v4.3.1`
aquasecurity/trivy-action	action	minor	`0.32.0` -> `0.33.1`
click (changelog)		minor	`==8.2.1` -> `==8.3.1`
cosl		minor	`==1.0.0` -> `==1.4.0`
cryptography (changelog)		patch	`==45.0.5` -> `==45.0.7`
factory-boy		patch	`==3.3.1` -> `==3.3.3`
flask (changelog)		patch	`==3.1.1` -> `==3.1.2`
github/codeql-action	action	minor	`v3.29.6` -> `v3.31.5`
jubilant		minor	`==1.1.` -> `==1.6.`
kombu (source)		minor	`==5.5.3` -> `==5.6.1`
openstacksdk		minor	`==4.5.0` -> `==4.8.0`
prometheus-client		minor	`==0.22.1` -> `==0.23.1`
pyOpenSSL (source)		minor	`==25.1.0` -> `==25.3.0`
pydantic (changelog)		patch	`==1.10.22` -> `==1.10.24`
pymongo		minor	`==4.13.0` -> `==4.15.4`

Release Notes

actions/checkout (actions/checkout)

`v4.3.1`

Compare Source

What's Changed

Port v6 cleanup to v4 by @ericsciple in #2305

Full Changelog: actions/checkout@v4...v4.3.1

`v4.3.0`

Compare Source

What's Changed

docs: update README.md by @motss in #1971
Add internal repos for checking out multiple repositories by @mouismail in #1977
Documentation update - add recommended permissions to Readme by @benwells in #2043
Adjust positioning of user email note and permissions heading by @joshmgross in #2044
Update README.md by @nebuk89 in #2194
Update CODEOWNERS for actions by @TingluoHuang in #2224
Update package dependencies by @salmanmkc in #2236
Prepare release v4.3.0 by @salmanmkc in #2237

New Contributors

@motss made their first contribution in #1971
@mouismail made their first contribution in #1977
@benwells made their first contribution in #2043
@nebuk89 made their first contribution in #2194
@salmanmkc made their first contribution in #2236

Full Changelog: actions/checkout@v4...v4.3.0

aquasecurity/trivy-action (aquasecurity/trivy-action)

`v0.33.1`

Compare Source

What's Changed

Update setup-trivy action to version v0.2.4 by @martincostello in #486

Full Changelog: aquasecurity/trivy-action@0.33.0...0.33.1

`v0.33.0`

Compare Source

What's Changed

Update dependencies in README by @ibakshay in #378
doc: correct sbom fs scan by @yxtay in #458
Pin actions/cache by SHA by @martincostello in #480
chore(ci): Add oras to correctly setup sync jobs by @simar7 in #482
chore(deps): Update trivy to v0.65.0 by @aqua-bot in #481

New Contributors

@ibakshay made their first contribution in #378
@yxtay made their first contribution in #458
@martincostello made their first contribution in #480

Full Changelog: aquasecurity/trivy-action@0.32.0...0.33.0

pallets/click (click)

`v8.3.1`

Compare Source

Released 2025-11-15

Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039
:pr:3055
Replace Sentinel.UNSET default values by None as they're passed through
the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
Fix conversion of Sentinel.UNSET happening too early, which caused incorrect
behavior for multiple parameters using the same name. :issue:3071 :pr:3079
Hide Sentinel.UNSET values as None when looking up for other parameters
through the context inside parameter callbacks. :issue:3136 :pr:3137
Fix rendering when prompt and confirm parameter prompt_suffix is
empty. :issue:3019 :pr:3021
When Sentinel.UNSET is found during parsing, it will skip calls to
type_cast_value. :issue:3069 :pr:3090

`v8.3.0`

Compare Source

Released 2025-09-17

Improved flag option handling: Reworked the relationship between flag_value
and default parameters for better consistency:
- The default parameter value is now preserved as-is and passed directly
  to CLI functions (no more unexpected transformations)
- Exception: flag options with default=True maintain backward compatibility
  by defaulting to their flag_value
- The default parameter can now be any type (bool, None, etc.)
- Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610
  :issue:3024 :pr:3030
Allow default to be set on Argument for nargs = -1. :issue:2164
:pr:3030
Show correct auto complete value for nargs option in combination with flag
option :issue:2813
Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013
Lazily import shutil. :pr:3023
Properly forward exception information to resources registered with
click.core.Context.with_resource(). :issue:2447 :pr:3058
Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

`v8.2.2`

Compare Source

Released 2025-07-31

Fix reconciliation of default, flag_value and type parameters for
flag options, as well as parsing and normalization of environment variables.
:issue:2952 :pr:2956
Fix typing issue in BadParameter and MissingParameter exceptions for the
parameter param_hint that did not allow for a sequence of string where the
underlying function _join_param_hints allows for it. :issue:2777 :pr:2990
Use the value of Enum choices to render their default value in help
screen. Refs :issue:2911 :pr:3004
Fix completion for the Z shell (zsh) for completion items containing
colons. :issue:2703 :pr:2846
Don't include envvar in error hint when not configured. :issue:2971 :pr:2972
Fix a rare race in click.testing.StreamMixer's finalization that manifested
as a ValueError on close in a multi-threaded test session.
:issue:2993 :pr:2991

canonical/cos-lib (cosl)

`v1.4.0`

Compare Source

What's Changed

feat: add aggregator metrics missing rule by @sinapah in #169

Full Changelog: canonical/cos-lib@1.3.2...1.4.0

`v1.3.2`

Compare Source

What's Changed

fix: change DashboardPath40UID.generate signature by @Abuelodelanada in #163
fix: make generic alert rules more detailed by @sinapah in #162

Full Changelog: canonical/cos-lib@1.3.1...1.3.2

`v1.3.1`

Compare Source

What's Changed

fix: Adds type_convert_stored to init by @Gmerold in #158

New Contributors

@Gmerold made their first contribution in #158

Full Changelog: canonical/cos-lib@1.3.0...1.3.1

`v1.3.0`

Compare Source

What's Changed

feat: Cosl owns type_convert_stored by @MichaelThamm in #155
chore: Version bump by @MichaelThamm in #157

Full Changelog: canonical/cos-lib@1.2.0...1.3.0

`v1.2.0`

Compare Source

What's Changed

feat: add time validation module by @sinapah in #154

Full Changelog: canonical/cos-lib@1.1.0...1.2.0

`v1.1.0`: add reconciler

Compare Source

😭

pyca/cryptography (cryptography)

`v45.0.7`

Compare Source

`v45.0.6`

Compare Source

FactoryBoy/factory_boy (factory-boy)

`v3.3.3`

Compare Source

`v3.3.2`

Compare Source

pallets/flask (flask)

`v3.1.2`

Compare Source

Released 2025-08-19

stream_with_context does not fail inside async views. :issue:5774
When using follow_redirects in the test client, the final state
of session is correct. :issue:5786
Relax type hint for passing bytes IO to send_file. :issue:5776

github/codeql-action (github/codeql-action)

`v3.31.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.5 - 24 Nov 2025

Update default CodeQL bundle version to 2.23.6. #3321

See the full CHANGELOG.md for more information.

`v3.31.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.4 - 18 Nov 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.31.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.3 - 13 Nov 2025

CodeQL Action v3 will be deprecated in December 2026. The Action now logs a warning for customers who are running v3 but could be running v4. For more information, see Upcoming deprecation of CodeQL Action v3.
Update default CodeQL bundle version to 2.23.5. #3288

See the full CHANGELOG.md for more information.

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.31.0 - 24 Oct 2025

Bump minimum CodeQL bundle version to 2.17.6. #3223
When SARIF files are uploaded by the analyze or upload-sarif actions, the CodeQL Action automatically performs post-processing steps to prepare the data for the upload. Previously, these post-processing steps were only performed before an upload took place. We are now changing this so that the post-processing steps will always be performed, even when the SARIF files are not uploaded. This does not change anything for the upload-sarif action. For analyze, this may affect Advanced Setup for CodeQL users who specify a value other than always for the upload input. #3222

See the full CHANGELOG.md for more information.

`v3.30.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.9 - 17 Oct 2025

Update default CodeQL bundle version to 2.23.3. #3205
Experimental: A new setup-codeql action has been added which is similar to init, except it only installs the CodeQL CLI and does not initialize a database. Do not use this in production as it is part of an internal experiment and subject to change at any time. #3204

See the full CHANGELOG.md for more information.

`v3.30.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.8 - 10 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.30.7`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.7 - 06 Oct 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.30.6`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.6 - 02 Oct 2025

Update default CodeQL bundle version to 2.23.2. #3168

See the full CHANGELOG.md for more information.

`v3.30.5`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.5 - 26 Sep 2025

We fixed a bug that was introduced in 3.30.4 with upload-sarif which resulted in files without a .sarif extension not getting uploaded. #3160

See the full CHANGELOG.md for more information.

`v3.30.4`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.4 - 25 Sep 2025

We have improved the CodeQL Action's ability to validate that the workflow it is used in does not use different versions of the CodeQL Action for different workflow steps. Mixing different versions of the CodeQL Action in the same workflow is unsupported and can lead to unpredictable results. A warning will now be emitted from the codeql-action/init step if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of the codeql-action/init step. #3099 and #3100
We added support for reducing the size of dependency caches for Java analyses, which will reduce cache usage and speed up workflows. This will be enabled automatically at a later time. #3107
You can now run the latest CodeQL nightly bundle by passing tools: nightly to the init action. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130
Update default CodeQL bundle version to 2.23.1. #3118

See the full CHANGELOG.md for more information.

`v3.30.3`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.3 - 10 Sep 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.30.2`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.2 - 09 Sep 2025

Fixed a bug which could cause language autodetection to fail. #3084
Experimental: The quality-queries input that was added in 3.29.2 as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a new analysis-kinds input, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064

See the full CHANGELOG.md for more information.

`v3.30.1`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.1 - 05 Sep 2025

Update default CodeQL bundle version to 2.23.0. #3077

See the full CHANGELOG.md for more information.

`v3.30.0`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.30.0 - 01 Sep 2025

Reduce the size of the CodeQL Action, speeding up workflows by approximately 4 seconds. #3054

See the full CHANGELOG.md for more information.

`v3.29.11`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.11 - 21 Aug 2025

Update default CodeQL bundle version to 2.22.4. #3044

See the full CHANGELOG.md for more information.

`v3.29.10`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.10 - 18 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.29.9`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.9 - 12 Aug 2025

No user facing changes.

See the full CHANGELOG.md for more information.

`v3.29.8`

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.8 - 08 Aug 2025

Fix an issue where the Action would autodetect unsupported languages such as HTML. #3015

See the full CHANGELOG.md for more information.

`v3.29.7`

Compare Source

This is a re-release of v3.29.5 to mitigate an issue that was discovered with v3.29.6.

canonical/jubilant (jubilant)

`v1.6.1`: : version, show_model, add_credential, *_ssh_key; auto copy files for snap

Compare Source

Note: v1.6.0 was an invalid release, not published to PyPI. The v1.6.1 release fixes that.

This release adds several additional Juju commands as Juju methods:

version (#219)
show_model (#218)
add_credential (#221)
add_ssh_key, remove_ssh_key (#228)

In addition, it includes several minor features and fixes:

Automatically copy files to a Juju-accessible place for deploy, refresh, and scp when Juju is installed as a snap (#207)
Adds SecretURI.__repr__ to make the type obvious in error messages (#213)
Fix the app/leader unit syntax for run and exec (#216)
Various minor docs improvements

Full Changelog: canonical/jubilant@v1.5.0...v1.6.0

`v1.5.0`: : temp_model destroy-model timeout, secret checksum fix

Compare Source

This release includes two minor fixes:

Add a 10-minute timeout to temp_model's call to juju destroy-model to fix an issue with integration tests when microk8s hangs during teardown (#188).
Allow revealed secrets without a checksum field, which was added in Juju 3.6.0 (#204).

In addition, there are several minor docs improvements.

New Contributors

@PietroPasotti made their first contribution in #190
@dimaqq made their first contribution in #204

Full Changelog: canonical/jubilant@v1.4.0...v1.5.0

`v1.4.0`: : bootstrap command

Compare Source

This release adds the bootstrap command and several documentation improvements.

What's Changed

feat: add bootstrap command by @IronCore864 in #180
docs: Add a security explanation doc in #173
docs: update links and config for switch to documentation.ubuntu.com/jubilant in #174
docs: be more confident about no breaking changes after 1.0 in #175
docs: add sitemap.xml, add new spelling check, remove markdown lint in #177
docs: add Google Analyics integration and cookie consent banner in #181

Full Changelog: canonical/jubilant@v1.3.0...v1.4.0

`v1.3.0`: : secrets commands, consume, and more

Compare Source

This release adds a number of secret management commands and the consume command. In addition, it adds several minor new features: the overlays parameter for deploy, support for multiple controllers, and additional add_model args for temp_model.

What's Changed

feat: add "overlays" parameter to Juju.deploy in #160
feat: add consume command in #164
feat: support multiple controllers in #165
feat: have temp_model forward "cloud" and other args to add_model in #168
feat: secret management in #135
ci: move TIOBE workflow to self-hosted runners in #167 and #169
docs: add an example of temp_model, including how to set attributes in #162

New Contributors

@crypticC0der made their first contribution in #168
@kayra1 made their first contribution in #135

Full Changelog: canonical/jubilant@v1.2.0...v1.3.0

`v1.2.0`: : Status.get_units, include subordinates in all_* and any_*

Compare Source

This release adds the Status.get_units() method to get an app's units (including units of subordinate apps), and changes the all_* and any_* helpers (like jubilant.all_active) to include subordinate units.

Important note: We're considering the all_* and any_* change a bug fix, as they were documented to include "all" units previously, but didn't actually include units from subordinate apps (due to the incidental structure of the juju status --format json response). We think this fix likely this won't break anyone's tests, and if it does, it should simplify them.

What's Changed

ci: add reporting to TIOBE in #149
feat: add Status.get_units, include subordinates in all_* and any_* in #150

Full Changelog: canonical/jubilant@v1.1.1...v1.2.0

celery/kombu (kombu)

`v5.6.1`

Compare Source

=====
:release-date: 25 November, 2025
:release-by: Tomer Nosrati

What's Changed


- fix: ensure hub close does also remove global event loop reference (#&#8203;2404)
- fix: default value for SQS's receive message (#&#8203;2405)
- Feat: add support for credential_provider to redis broker (#&#8203;2408)
- Prepare for release: v5.6.1 (#&#8203;2416)

.. _version-5.6.0:

5.6.0
=====
:release-date: 1 November, 2025
:release-by: Tomer Nosrati

Key Highlights

QoS Max Prefetch Limit

PR #2348 <https://github.com/celery/kombu/pull/2348>_

Prevent Out Of Memory crashes when queues flood with ETA/countdown tasks. The new optional max_prefetch parameter caps how many messages workers hold in memory. Defaults to unlimited (None) to preserve existing behavior.

.. code-block:: python

from kombu.common import QoS

Limit prefetch to maximum 100 messages

qos = QoS(callback=consumer.qos, initial_value=10, max_prefetch=100)

Redis Polling Interval Support

PR #2346 <https://github.com/celery/kombu/pull/2346>_

Fix Redis transport to properly propagate polling_interval and brpop_timeout from transport_options to the Channel's _brpop_start timeout.

.. code-block:: python

app.conf.broker_transport_options = {"polling_interval": 10}

Leave it unset to keep the familiar 1-second default, or raise it to slow down idle polling.

Pidbox RabbitMQ 4.x Compatibility

PR #2338 <https://github.com/celery/kombu/pull/2338>_

Let pidbox queues work on RabbitMQ 4.x brokers that reject transient, non-exclusive queues.

MongoDB Transport Improvements

PR #2347 <https://github.com/celery/kombu/pull/2347>_

URI options now come through lowercase and flattened again, so settings like replicaSet=test_rs show up as options['replicaset'].

Resource Pool Gevent Compatibility

PR #2314 <https://github.com/celery/kombu/pull/2314>_

Restore compatibility with recent gevent releases that monkey-patch the standard library queue.

Timezone-aware UTC Timestamps

PR #2355 <https://github.com/celery/kombu/pull/2355>_

Replace every usage of datetime.utcnow() with datetime.now(timezone.utc) to return timezone-aware UTC datetimes.

Redis Client Name Support

PR #2367 <https://github.com/celery/kombu/pull/2367>_

Support for propagating the client_name connection parameter through the Redis transport (including Sentinel) so that connections appear with meaningful names in monitoring tools.

What's Changed


Since v5.6.0rc2:
- Test on Python 3.14 (#&#8203;2361)
- Revert "Revert "Bump pymongo from 4.10.1 to 4.15.3"" (#&#8203;2401)
- Prepare for release: v5.6.0 (#&#8203;2402)

Since v5.5.4:
- Revert "Feature: urllib3 instead of curl" (#&#8203;2261)
- Fix #&#8203;2286 : SQS - Enhance support for receiving message attributes. Allow string in msg body. (#&#8203;2300)
- Update gcpubsub.txt for protobuf (#&#8203;2320)
- fix body bytes encoding in curl.py (#&#8203;2322)
- Hotfix(aws_ssl): validate secure connection (#&#8203;2323)
- Update setup.py to remove deprecation warning (#&#8203;2298)
- Update protobuf to 5.29.5 (#&#8203;2199)
- Allow setting `tags` in initial `boto3.sqs.create_queue` call via `transport_options` (#&#8203;2321)
- Add sts_token_buffer_time parameter to transport options (#&#8203;2216)
- Docs: Fix incorrect "added in 5.6.0" note for sts_token_timeout in SQS transport docs (#&#8203;2327)
- SQS: when redelivering a message apply visibility timeout based on wait_time_seconds (long polling time) (#&#8203;2049)
- Bump redis requirement to <6 to support v5.3 (#&#8203;2329)
- Pidbox: support queue_exclusive / queue_durable (RabbitMQ 4.x) (#&#8203;2338)
- Prepare for (pre) release: v5.6.0b1 (#&#8203;2343)
- Normalize mongodb options keys (#&#8203;2347)
- Redis: propagate polling_interval from transport options to _brpop_start timeout (#&#8203;2346)
- Add max_prefetch limit to QoS class and related tests (#&#8203;2348)
- Prepare for (pre) release: v5.6.0b2 (#&#8203;2349)
- Remove custom `LifoQueue` class conflicting with recent gevent (#&#8203;2314)
- Replace deprecated datetime.utcnow() with datetime.now(timezone.utc) (#&#8203;2355)
- Prepare for (pre) release: v5.6.0b3 (#&#8203;2359)
- Bump mypy from 1.14.1 to 1.18.1 AGAIN (#&#8203;2363)
- Remove nested query from sqlalchemy _size (#&#8203;2315)
- Remove misused argument for autoflake (#&#8203;2368)
- Support client_name connection parameter for redis transport (#&#8203;2367)
- Prepare for (pre) release: v5.6.0rc1 (#&#8203;2369)
- Update Redis version constraint to <6.2 (#&#8203;2377)
- remove Python 3.8 from CI as EOL (#&#8203;2241)
- Revert "Bump pymongo from 4.10.1 to 4.15.3" (#&#8203;2384)
- Update requirements to remove backports.zoneinfo (#&#8203;2391)
- Update qpid-python and qpid-tools versions (#&#8203;2392)
- Remove Qpid transport from requirements of func test (#&#8203;2393)
- Fix comment grammar in entity_name test (#&#8203;2394)
- Prepare for (pre) release: v5.6.0rc2 (#&#8203;2396)
- Test on Python 3.14 (#&#8203;2361)
- Revert "Revert "Bump pymongo from 4.10.1 to 4.15.3"" (#&#8203;2401)
- Prepare for release: v5.6.0 (#&#8203;2402)

.. _version-5.6.0rc2:

5.6.0rc2
========
:release-date: 20 October, 2025
:release-by: Tomer Nosrati

Key Highlights

QoS Max Prefetch Limit

PR #2348 <https://github.com/celery/kombu/pull/2348>_

Prevent Out Of Memory crashes when queues flood with ETA/countdown tasks. The new optional max_prefetch parameter caps how many messages workers hold in memory. Defaults to unlimited (None) to preserve existing behavior.

.. code-block:: python

from kombu.common import QoS

Limit prefetch to maximum 100 messages

qos = QoS(callback=consumer.qos, initial_value=10, max_prefetch=100)

Redis Polling Interval Support

PR #2346 <https://github.com/celery/kombu/pull/2346>_

Fix Redis transport to properly propagate polling_interval and brpop_timeout from transport_options to the Channel's _brpop_start timeout.

.. code-block:: python

app.conf.broker_transport_options = {"polling_interval": 10}

Leave it unset to keep the familiar 1-second default, or raise it to slow down idle polling.

Pidbox RabbitMQ 4.x Compatibility

PR #2338 <https://github.com/celery/kombu/pull/2338>_

Let pidbox queues work on RabbitMQ 4.x brokers that reject transient, non-exclusive queues.

MongoDB Transport Improvements

PR #2347 <https://github.com/celery/kombu/pull/2347>_

URI options now come through lowercase and flattened again, so settings like replicaSet=test_rs show up as options['replicaset'].

Resource Pool Gevent Compatibility

PR #2314 <https://github.com/celery/kombu/pull/2314>_

Restore compatibility with recent gevent releases that monkey-patch the standard library queue.

Timezone-aware UTC Timestamps

PR #2355 <https://github.com/celery/kombu/pull/2355>_

Replace every usage of datetime.utcnow() with datetime.now(timezone.utc) to return timezone-aware UTC datetimes.

Redis Client Name Support

PR #2367 <https://github.com/celery/kombu/pull/2367>_

Support for propagating the client_name connection parameter through the Redis transport (including Sentinel) so that connections appear with meaningful names in monitoring tools.

What's Changed


- Update Redis version constraint to <6.2 (#&#8203;2377)
- remove Python 3.8 from CI as EOL (#&#8203;2241)
- Revert "Bump pymongo from 4.10.1 to 4.15.3" (#&#8203;2384)
- Update requirements to remove backports.zoneinfo (#&#8203;2391)
- Update qpid-python and qpid-tools versions (#&#8203;2392)
- Remove Qpid transport from requirements of func test (#&#8203;2393)
- Fix comment grammar in entity_name test (#&#8203;2394)
- Prepare for (pre) release: v5.6.0rc2 (#&#8203;2396)

.. _version-5.6.0rc1:

5.6.0rc1
========
:release-date: 28 September, 2025
:release-by: Tomer Nosrati

Key Highlights

QoS Max Prefetch Limit

PR #2348 <https://github.com/celery/kombu/pull/2348>_

Prevent Out Of Memory crashes when queues flood with ETA/countdown tasks. The new optional max_prefetch parameter caps how many messages workers hold in memory. Defaults to unlimited (None) to preserve existing behavior.

.. code-block:: python

from kombu.common import QoS

Limit prefetch to maximum 100 messages

qos = QoS(callback=consumer.qos, initial_value=10, max_prefetch=100)

Redis Polling Interval Support

PR #2346 <https://github.com/celery/kombu/pull/2346>_

Fix Redis transport to properly propagate polling_interval and brpop_timeout from transport_options to the Channel's _brpop_start timeout.

.. code-block:: python

app.conf.broker_transport_options = {"polling_interval": 10}

Leave it unset to keep the familiar 1-second default, or raise it to slow down idle polling.

Pidbox RabbitMQ 4.x Compatibility

PR #2338 <https://github.com/celery/kombu/pull/2338>_

Let pidbox queues work on RabbitMQ 4.x brokers that reject transient, non-exclusive queues.

MongoDB Transport Improvements

PR #2347 <https://github.com/celery/kombu/pull/2347>_

URI options now come through lowercase and flattened again, so settings like replicaSet=test_rs show up as options['replicaset'].

Resource Pool Gevent Compatibility

PR #2314 <https://github.com/celery/kombu/pull/2314>_

Restore compatibility with recent gevent releases that monkey-patch the standard library queue.

Timezone-aware UTC Timestamps

PR #2355 <https://github.com/celery/kombu/pull/2355>_

Replace every usage of datetime.utcnow() with datetime.now(timezone.utc) to return timezone-aware UTC datetimes.

Redis Client Name Support

PR #2367 <https://github.com/celery/kombu/pull/2367>_

Support for propagating the client_name connection parameter through the Redis transport (including Sentinel) so that connections appear with meaningful names in monitoring tools.

What's Changed


- Bump mypy from 1.14.1 to 1.18.1 AGAIN (#&#8203;2363)
- Remove nested query from sqlalchemy _size (#&#8203;2315)
- Remove misused argument for autoflake (#&#8203;2368)
- Support client_name connection parameter for redis transport (#&#8203;2367)
- Prepare for (pre) release: v5.6.0rc1 (#&#8203;2369)

.. _version-5.6.0b3:

5.6.0b3
=======
:release-date: 15 September, 2025
:release-by: Tomer Nosrati

What's Changed

Remove custom LifoQueue class conflicting with recent gevent (#2314)
Replace deprecated datetime.utcnow() with datetime.now(timezone.utc) (#2355)
Prepare for (pre) release: v5.6.0b3 (#2359)

.. _version-5.6.0b2:

`v5.6.0`

Compare Source

=====
:release-date: 1 November, 2025
:release-by: Tomer Nosrati

Key Highlights


QoS Max Prefetch Limit
----------------------

`PR #&#8203;2348 <https://github.com/celery/kombu/pull/2348>`_

Prevent Out Of Memory crashes when queues flood with ETA/countdown tasks. The new optional ``max_prefetch`` parameter caps how many messages workers hold in memory. Defaults to unlimited (``None``) to preserve existing behavior.

.. code-block:: python

    from kombu.common import QoS

### Limit prefetch to maximum 100 messages
    qos = QoS(callback=consumer.qos, initial_value=10, max_prefetch=100)

Redis Polling Interval Support
------------------------------

`PR #&#8203;2346 <https://github.com/celery/kombu/pull/2346>`_

Fix Redis transport to properly propagate ``polling_interval`` and ``brpop_timeout`` from ``transport_options`` to the Channel's ``_brpop_start`` timeout.

.. code-block:: python

    app.conf.broker_transport_options = {"polling_interval": 10}

Leave it unset to keep the familiar 1-second default, or raise it to slow down idle polling.

Pidbox RabbitMQ 4.x Compatibility
---------------------------------

`PR #&#8203;2338 <https://github.com/celery/kombu/pull/2338>`_

Let pidbox queues work on RabbitMQ 4.x brokers that reject transient, non-exclusive queues.

MongoDB Transport Improvements
------------------------------

`PR #&#8203;2347 <https://github.com/celery/kombu/pull/2347>`_

URI options now come through lowercase and flattened again, so settings like ``replicaSet=test_rs`` show up as ``options['replicaset']``.

Resource Pool Gevent Compatibility
----------------------------------

`PR #&#8203;2314 <https://github.com/celery/kombu/pull/2314>`_

Restore compatibility with recent gevent releases that monkey-patch the standard library queue.

Timezone-aware UTC Timestamps
-----------------------------

`PR #&#8203;2355 <https://github.com/celery/kombu/pull/2355>`_

Replace every usage of ``datetime.utcnow()`` with ``datetime.now(timezone.utc)`` to return timezone-aware UTC datetimes.

Redis Client Name Support
----------------------------------

`PR #&#8203;2367 <https://github.com/celery/kombu/pull/2367>`_

Support for propagating the ``client_name`` connection parameter through the Redis transport (including Sentinel) so that connections appear with meaningful names in monitoring tools.

What's Changed

Since v5.6.0rc2:

Test on Python 3.14 (#2361)
Revert "Revert "Bump pymongo from 4.10.1 to 4.15.3"" (#2401)
Prepare for release: v5.6.0 (#2402)

Since v5.5.4:

Revert "Feature: urllib3 instead of curl" (#2261)
Fix #2286 : SQS - Enhance support for receiving message attributes. Allow string in msg body. (#2300)
Update gcpubsub.txt for protobuf (#2320)
fix body bytes encoding in curl.py (#2322)
Hotfix(aws_ssl): validate secure connection (#2323)
Update setup.py to remove deprecation warning (#2298)
Update protobuf to 5.29.5 (#2199)
Allow setting tags in initial boto3.sqs.create_queue call via transport_options (#2321)
Add sts_token_buffer_time parameter to transport options (#2216)
Docs: Fix incorrect "added in 5.6.0" note for sts_token_timeout in SQS transport docs (#2327)
SQS: when redelivering a message apply visibility timeout based on wait_time_seconds (long polling time) (#2049)
Bump redis requirement to <6 to support

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot requested review from cbartz, javierdelapuente, yanksyoon and yhaliaw as code owners September 1, 2025 06:05

github-actions Bot approved these changes Sep 1, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 580e718 to d053eac Compare September 1, 2025 13:23

github-actions Bot approved these changes Sep 1, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from d053eac to 81d9fd5 Compare September 1, 2025 13:44

github-actions Bot approved these changes Sep 1, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 81d9fd5 to 99f3157 Compare September 3, 2025 18:04

github-actions Bot approved these changes Sep 3, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 99f3157 to 636ef64 Compare September 5, 2025 01:47

github-actions Bot approved these changes Sep 5, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 636ef64 to 3ea6ea8 Compare September 5, 2025 15:02

github-actions Bot approved these changes Sep 5, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 3ea6ea8 to af68652 Compare September 9, 2025 14:58

github-actions Bot approved these changes Sep 9, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from af68652 to aa4edf4 Compare September 10, 2025 17:57

github-actions Bot approved these changes Sep 10, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from aa4edf4 to ad5e5ff Compare September 10, 2025 22:47

github-actions Bot approved these changes Sep 10, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from ad5e5ff to dfb3806 Compare September 11, 2025 15:10

github-actions Bot approved these changes Sep 11, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from dfb3806 to 0d0cc1d Compare September 13, 2025 04:28

github-actions Bot approved these changes Sep 13, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 0d0cc1d to 3d765f4 Compare September 14, 2025 18:38

github-actions Bot approved these changes Sep 14, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 3d765f4 to 2b84f17 Compare September 16, 2025 19:05

github-actions Bot approved these changes Sep 16, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 2b84f17 to 39fe1a3 Compare September 17, 2025 03:14

github-actions Bot approved these changes Nov 17, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 6b5ec1e to d9a0d91 Compare November 18, 2025 01:21

github-actions Bot approved these changes Nov 18, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from d9a0d91 to 57d66c3 Compare November 19, 2025 10:46

github-actions Bot approved these changes Nov 19, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 57d66c3 to 9247c97 Compare November 19, 2025 17:05

github-actions Bot approved these changes Nov 19, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 9247c97 to e17f77e Compare November 20, 2025 22:56

github-actions Bot approved these changes Nov 20, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from e17f77e to af71e28 Compare November 24, 2025 03:14

github-actions Bot approved these changes Nov 24, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from af71e28 to 377ddf7 Compare November 24, 2025 11:27

github-actions Bot approved these changes Nov 24, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 377ddf7 to f16d402 Compare November 25, 2025 12:11

github-actions Bot approved these changes Nov 25, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from f16d402 to b88cfa3 Compare November 25, 2025 19:50

github-actions Bot approved these changes Nov 25, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from b88cfa3 to fb000ef Compare November 26, 2025 22:46

github-actions Bot approved these changes Nov 26, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from fb000ef to 0485509 Compare November 26, 2025 23:41

github-actions Bot approved these changes Nov 26, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 0485509 to 1ff479f Compare November 27, 2025 07:19

github-actions Bot approved these changes Nov 27, 2025

View reviewed changes

renovate Bot force-pushed the renovate/all-minor-patch branch from 1ff479f to 1d12212 Compare November 28, 2025 08:19

github-actions Bot approved these changes Nov 28, 2025

View reviewed changes

chore(deps): update all non-major dependencies

f617a5b

renovate Bot force-pushed the renovate/all-minor-patch branch from 1d12212 to f617a5b Compare November 30, 2025 15:02

github-actions Bot approved these changes Nov 30, 2025

View reviewed changes

cbartz merged commit 932c56e into main Dec 1, 2025
65 of 73 checks passed

cbartz deleted the renovate/all-minor-patch branch December 1, 2025 04:16

Navigation Menu

Repository navigation

chore(deps): update all non-major dependencies - #627

chore(deps): update all non-major dependencies#627
cbartz merged 1 commit into
mainfrom
renovate/all-minor-patch

renovate Bot commented Sep 1, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

renovate Bot commented Sep 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

v1.1.0: add reconciler

CodeQL Action Changelog

3.31.5 - 24 Nov 2025

CodeQL Action Changelog

3.31.4 - 18 Nov 2025

CodeQL Action Changelog

3.31.3 - 13 Nov 2025

CodeQL Action Changelog

3.31.0 - 24 Oct 2025

CodeQL Action Changelog

3.30.9 - 17 Oct 2025

CodeQL Action Changelog

3.30.8 - 10 Oct 2025

CodeQL Action Changelog

3.30.7 - 06 Oct 2025

CodeQL Action Changelog

3.30.6 - 02 Oct 2025

CodeQL Action Changelog

3.30.5 - 26 Sep 2025

CodeQL Action Changelog

3.30.4 - 25 Sep 2025

CodeQL Action Changelog

3.30.3 - 10 Sep 2025

CodeQL Action Changelog

3.30.2 - 09 Sep 2025

CodeQL Action Changelog

3.30.1 - 05 Sep 2025

CodeQL Action Changelog

3.30.0 - 01 Sep 2025

CodeQL Action Changelog

3.29.11 - 21 Aug 2025

CodeQL Action Changelog

3.29.10 - 18 Aug 2025

CodeQL Action Changelog

3.29.9 - 12 Aug 2025

CodeQL Action Changelog

3.29.8 - 08 Aug 2025

v1.6.1: : version, show_model, add_credential, *_ssh_key; auto copy files for snap

v1.5.0: : temp_model destroy-model timeout, secret checksum fix

New Contributors

v1.4.0: : bootstrap command

What's Changed

v1.3.0: : secrets commands, consume, and more

What's Changed

New Contributors

v1.2.0: : Status.get_units, include subordinates in all_* and any_*

What's Changed

QoS Max Prefetch Limit

Limit prefetch to maximum 100 messages

Redis Polling Interval Support

Pidbox RabbitMQ 4.x Compatibility

MongoDB Transport Improvements

Resource Pool Gevent Compatibility

Timezone-aware UTC Timestamps

Redis Client Name Support

QoS Max Prefetch Limit

Limit prefetch to maximum 100 messages

Redis Polling Interval Support

Pidbox RabbitMQ 4.x Compatibility

MongoDB Transport Improvements

Resource Pool Gevent Compatibility

Timezone-aware UTC Timestamps

Redis Client Name Support

QoS Max Prefetch Limit

renovate Bot commented Sep 1, 2025 •

edited

Loading

`v1.1.0`: add reconciler

`v1.6.1`: : version, show_model, add_credential, *_ssh_key; auto copy files for snap

`v1.5.0`: : temp_model destroy-model timeout, secret checksum fix

`v1.4.0`: : bootstrap command

`v1.3.0`: : secrets commands, consume, and more

`v1.2.0`: : Status.get_units, include subordinates in all_* and any_*