Skip to content

Update dependencies - #473

Open
Mariatta wants to merge 1 commit into
python:mainfrom
Mariatta:update-deps
Open

Mariatta wants to merge 1 commit into
python:mainfrom
Mariatta:update-deps

Conversation

@Mariatta

Copy link
Copy Markdown
Member

Manual round of the monthly Dependabot group, so the pins match what is on PyPI today.

  • aiohttp 3.14.4 to 3.14.5
  • gidgethub 5.4.0 to 6.0.0
  • sentry-sdk 2.70.0 to 2.72.0
  • coverage 7.16.1 to 7.16.2
  • pytest-mock 3.15.1 to 3.17.0

None of the behaviour changes in gidgethub 6.0.0 affect this app: it
catches BadRequest, which the new ValidationError subclasses, it only
calls the default base_url with leading-slash paths, and it uses the
aiohttp backend rather than httpx.

The test suite passes on Python 3.14 and 3.15 with these pins.

- aiohttp 3.14.4 to 3.14.5
- gidgethub 5.4.0 to 6.0.0
- sentry-sdk 2.70.0 to 2.72.0
- coverage 7.16.1 to 7.16.2
- pytest-mock 3.15.1 to 3.17.0

None of the behaviour changes in gidgethub 6.0.0 affect this app: it
catches BadRequest, which the new ValidationError subclasses, it only
calls the default base_url with leading-slash paths, and it uses the
aiohttp backend rather than httpx.
@Mariatta
Mariatta marked this pull request as ready for review October 21, 2026 04:46
@hugovk

hugovk commented Oct 21, 2026

Copy link
Copy Markdown
Member

Any particular need to upgrade right now and bypass the cooldowns? Can we wait until the next Dependabot run?

https://blog.yossarian.net/2025/11/21/We-should-all-be-using-dependency-cooldowns

@Mariatta

Copy link
Copy Markdown
Member Author

Except the aiohttp dependency, most of these are outdated.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants