Skip to content

Bump 93 Python dependencies (patch/minor/major, verified compatible)#339

Merged
cigamit merged 5 commits into
ctrliq:mainfrom
blaipr:upgrade/aiohttp-retry-2.9.1
May 15, 2026
Merged

Bump 93 Python dependencies (patch/minor/major, verified compatible)#339
cigamit merged 5 commits into
ctrliq:mainfrom
blaipr:upgrade/aiohttp-retry-2.9.1

Conversation

@blaipr
Copy link
Copy Markdown
Contributor

@blaipr blaipr commented May 12, 2026

SUMMARY

Routine version bumps across 93 Python dependencies.
No AWX code changes; all are lockfile pin updates in `requirements/requirements.txt`.
LGPL-licensed packages (psycopg, pygithub) have their embedded source tarballs
updated in `licenses/` to match the new pinned versions, as required by the
license compliance test.

Packages updated:

```
aiohttp-retry 2.8.3 -> 2.9.1
annotated-types 0.6.0 -> 0.7.0
asgiref 3.11.0 -> 3.11.1
asn1 2.7.0 -> 3.2.0
asyncpg 0.30.0 -> 0.31.0
attrs 23.2.0 -> 26.1.0
autobahn 24.4.2 -> 25.12.2
automat 24.8.1 -> 25.4.16
azure-core 1.38.0 -> 1.41.0
azure-identity 1.25.2 -> 1.25.3
azure-keyvault-certificates 4.7.0 -> 4.11.1
azure-keyvault-keys 4.8.0 -> 4.11.0
azure-keyvault-secrets 4.7.0 -> 4.11.0
boto3 1.39.1 -> 1.43.6
botocore 1.39.1 -> 1.43.6
cachetools 5.3.2 -> 7.1.1
charset-normalizer 3.3.2 -> 3.4.7
click 8.1.7 -> 8.3.3
cryptography 46.0.7 -> 48.0.0
daphne 4.1.2 -> 4.2.1
django-auth-ldap 5.2.0 -> 5.3.0
django-polymorphic 4.1.0 -> 4.11.3
django-solo 2.4.0 -> 2.5.1
django-valkey 0.3.2 -> 0.4.1
djangorestframework 3.15.2 -> 3.17.1
docutils 0.20.1 -> 0.22.4
filelock 3.20.3 -> 3.29.0
frozenlist 1.4.1 -> 1.8.0
gitdb 4.0.11 -> 4.0.12
google-auth 2.28.1 -> 2.52.0
idna 3.8 -> 3.15
incremental 24.7.2 -> 24.11.0
inflect 7.0.0 -> 7.5.0
irc 20.3.1 -> 20.5.0
isodate 0.6.1 -> 0.7.2
jaraco-collections 5.0.0 -> 5.2.1
jaraco-context 4.3.0 -> 6.1.2
jaraco-functools 4.1.0 -> 4.4.0
jaraco-logging 3.3.0 -> 3.4.0
jaraco-stream 3.0.3 -> 3.0.4
jaraco-text 3.12.0 -> 4.2.0
jmespath 1.0.1 -> 1.1.0
json-log-formatter 0.5.2 -> 1.1.1
jsonschema 4.25.1 -> 4.26.0
jsonschema-specifications 2023.12.1 -> 2025.9.1
kubernetes 29.0.0 -> 35.0.0
markupsafe 2.1.5 -> 3.0.3
more-itertools 10.2.0 -> 11.0.2
msal 1.34.0 -> 1.36.0
msrestazure 0.6.4 -> 0.6.4.post1
multidict 6.0.5 -> 6.7.1
netaddr 1.2.1 -> 1.3.0
oauthlib 3.2.2 -> 3.3.1
pip 26.1 -> 26.1.1
pkgconfig 1.5.5 -> 1.6.0
prometheus-client 0.20.0 -> 0.25.0
propcache 0.2.1 -> 0.5.2
psutil 5.9.8 -> 7.2.2
psycopg 3.1.18 -> 3.3.4
pycparser 2.21 -> 3.0
pydantic 2.6.1 -> 2.13.4
pydantic-core 2.16.2 -> 2.46.4
pygithub 2.8.1 -> 2.9.1
pyopenssl 26.0.0 -> 26.2.0
pyrad 2.4 -> 2.5.4
python-daemon 3.0.1 -> 3.1.2
python-dateutil 2.8.2 -> 2.9.0.post0
python-tss-sdk 1.2.2 -> 2.0.1
pytz 2024.1 -> 2026.2
pyyaml 6.0.1 -> 6.0.3
receptorctl 1.6.2 -> 1.6.5
referencing 0.33.0 -> 0.37.0
requests 2.33.0 -> 2.34.0
requests-oauthlib 1.3.1 -> 2.0.0
rpds-py 0.18.0 -> 0.30.0
rsa 4.9 -> 4.9.1
s3transfer 0.13.0 -> 0.17.0
service-identity 24.1.0 -> 24.2.0
setuptools-rust 1.8.1 -> 1.12.1
six 1.16.0 -> 1.17.0
slack-sdk 3.27.0 -> 3.41.0
smmap 5.0.1 -> 5.0.3
social-auth-app-django 5.6.0 -> 5.9.0
sqlparse 0.5.4 -> 0.5.5
tempora 5.5.1 -> 5.9.0
twilio 8.13.0 -> 9.10.9
txaio 23.1.1 -> 25.12.2
typing-extensions 4.12.2 -> 4.15.0
websocket-client 1.7.0 -> 1.9.0
wheel 0.46.3 -> 0.47.0
yarl 1.18.3 -> 1.23.0
zipp 3.23.0 -> 3.23.1
zope-interface 7.0.3 -> 8.4
```

ISSUE TYPE

  • Bug, Docs Fix or other nominal change

COMPONENT NAME

Other

ASCENDER VERSION

25.3.7.dev33+gae306c6.d20260512

ADDITIONAL INFORMATION

Full Python test suite: 3438 passed, 6 skipped (all pre-existing hardcoded skips).

blaipr added 3 commits May 13, 2026 01:30
asyncpg 0.30.0 -> 0.31.0
azure-identity 1.25.2 -> 1.25.3
daphne 4.1.2 -> 4.2.1
django-auth-ldap 5.2.0 -> 5.3.0
django-polymorphic 4.1.0 -> 4.11.3
django-solo 2.4.0 -> 2.5.1
django-valkey 0.3.2 -> 0.4.1
djangorestframework 3.15.2 -> 3.17.1
docutils 0.20.1 -> 0.22.4
filelock 3.20.3 -> 3.29.0
idna 3.8 -> 3.15
irc 20.3.1 -> 20.5.0
jaraco-functools 4.1.0 -> 4.4.0
jsonschema 4.25.1 -> 4.26.0
msrestazure 0.6.4 -> 0.6.4.post1
netaddr 1.2.1 -> 1.3.0
pkgconfig 1.5.5 -> 1.6.0
prometheus-client 0.20.0 -> 0.25.0
psycopg 3.1.18 -> 3.3.4
pydantic 2.6.1 -> 2.13.4
pydantic-core 2.16.2 -> 2.46.4
pygithub 2.8.1 -> 2.9.1
pyopenssl 26.0.0 -> 26.2.0
pyrad 2.4 -> 2.5.4
python-daemon 3.0.1 -> 3.1.2
python-dateutil 2.8.2 -> 2.9.0.post0
pyyaml 6.0.1 -> 6.0.3
receptorctl 1.6.2 -> 1.6.5
requests 2.33.0 -> 2.34.0
setuptools-rust 1.8.1 -> 1.12.1
slack-sdk 3.27.0 -> 3.41.0
social-auth-app-django 5.6.0 -> 5.9.0
sqlparse 0.5.4 -> 0.5.5
websocket-client 1.7.0 -> 1.9.0
wheel 0.46.3 -> 0.47.0
pip 26.1 -> 26.1.1

Update LGPL embedded source tarballs for psycopg and pygithub to
match the new pinned versions (required by test_python_and_js_licenses).
aiohttp-retry 2.8.3 -> 2.9.1
annotated-types 0.6.0 -> 0.7.0
asgiref 3.11.0 -> 3.11.1
attrs 23.2.0 -> 26.1.0
azure-core 1.38.0 -> 1.41.0
azure-keyvault-certificates 4.7.0 -> 4.11.1
azure-keyvault-keys 4.8.0 -> 4.11.0
azure-keyvault-secrets 4.7.0 -> 4.11.0
boto3 1.39.1 -> 1.43.6
botocore 1.39.1 -> 1.43.6
charset-normalizer 3.3.2 -> 3.4.7
click 8.1.7 -> 8.3.3
frozenlist 1.4.1 -> 1.8.0
gitdb 4.0.11 -> 4.0.12
google-auth 2.28.1 -> 2.52.0
incremental 24.7.2 -> 24.11.0
inflect 7.0.0 -> 7.5.0
isodate 0.6.1 -> 0.7.2
jaraco-collections 5.0.0 -> 5.2.1
jaraco-logging 3.3.0 -> 3.4.0
jaraco-stream 3.0.3 -> 3.0.4
jmespath 1.0.1 -> 1.1.0
jsonschema-specifications 2023.12.1 -> 2025.9.1
msal 1.34.0 -> 1.36.0
multidict 6.0.5 -> 6.7.1
oauthlib 3.2.2 -> 3.3.1
propcache 0.2.1 -> 0.5.2
pytz 2024.1 -> 2026.2
referencing 0.33.0 -> 0.37.0
rpds-py 0.18.0 -> 0.30.0
rsa 4.9 -> 4.9.1
s3transfer 0.13.0 -> 0.17.0
service-identity 24.1.0 -> 24.2.0
smmap 5.0.1 -> 5.0.3
tempora 5.5.1 -> 5.9.0
typing-extensions 4.12.2 -> 4.15.0
yarl 1.18.3 -> 1.23.0
zipp 3.23.0 -> 3.23.1
@blaipr blaipr force-pushed the upgrade/aiohttp-retry-2.9.1 branch from dc87e19 to 8c7978b Compare May 12, 2026 23:52
@blaipr blaipr changed the title Bump transitive Python dependencies (minor/patch) Bump 75 Python dependencies (patch/minor, no breaking changes) May 12, 2026
autobahn 24.4.2 -> 25.12.2
automat 24.8.1 -> 25.4.16
cryptography 46.0.7 -> 48.0.0
jaraco-context 4.3.0 -> 6.1.2
jaraco-text 3.12.0 -> 4.2.0
json-log-formatter 0.5.2 -> 1.1.1
kubernetes 29.0.0 -> 35.0.0
markupsafe 2.1.5 -> 3.0.3
more-itertools 10.2.0 -> 11.0.2
psutil 5.9.8 -> 7.2.2
pycparser 2.21 -> 3.0
requests-oauthlib 1.3.1 -> 2.0.0
txaio 23.1.1 -> 25.12.2
zope-interface 7.0.3 -> 8.4
@blaipr blaipr changed the title Bump 75 Python dependencies (patch/minor, no breaking changes) Bump 89 Python dependencies (patch/minor/major, verified compatible) May 13, 2026
asn1 2.7.0 -> 3.2.0
cachetools 5.3.2 -> 7.1.1
python-tss-sdk 1.2.2 -> 2.0.1
twilio 8.13.0 -> 9.10.9
@blaipr blaipr changed the title Bump 89 Python dependencies (patch/minor/major, verified compatible) Bump 93 Python dependencies (patch/minor/major, verified compatible) May 13, 2026
@cigamit cigamit self-requested a review May 13, 2026 02:09
@cigamit cigamit self-assigned this May 13, 2026
@cigamit cigamit added dependencies Pull requests that update a dependency file python Pull requests that update python code labels May 13, 2026
@cigamit
Copy link
Copy Markdown
Contributor

cigamit commented May 13, 2026

Thanks!
Just note, I have reviewed this, and I don't see anything major that would cause an issue. But with recent supply chain attacks and the sheer number of dependency changes, I will let it soak a few days just to be sure before committing.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Development

Successfully merging this pull request may close these issues.

3 participants