Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the all-dependencies group with 9 updates in the / directory:

Package From To
pytelegrambotapi 4.29.1 4.30.0
beautifulsoup4 4.14.0 4.14.3
redis 6.4.0 7.1.0
apscheduler 3.11.0 3.11.2
pymongo 4.15.1 4.16.0
tornado 6.5.2 6.5.4
fakeredis 2.31.3 2.33.0
meilisearch 0.33.0 0.40.0
pillow 11.3.0 12.1.0

Updates pytelegrambotapi from 4.29.1 to 4.30.0

Commits
  • ea73339 Merge pull request #2542 from eternnoir/dependabot/pip/aiohttp-3.13.3
  • f7fb9c5 Merge pull request #2546 from Badiboy/master
  • 4d8536b Bump version fix
  • 70d993d Bump version, python and pypy version
  • 1b949cc Merge pull request #2539 from coder2020official/master
  • 32c6567 Fix issues
  • bca4382 Address changes
  • 50b6c32 Merge branch 'eternnoir:master' into master
  • f661b56 Merge pull request #2544 from eternnoir/dependabot/pip/examples/serverless/fl...
  • 1f60590 Bump werkzeug in /examples/serverless/flask_google_cloud_bot
  • Additional commits viewable in compare view

Updates beautifulsoup4 from 4.14.0 to 4.14.3

Updates redis from 6.4.0 to 7.1.0

Release notes

Sourced from redis's releases.

7.1.0

Changes

🚀 New Features

  • Adding MSETEX command support. (#3823)
  • Adding CLAIM option to XREADGROUP command + unit tests (#3825)
  • Apply routing and response aggregation policies in OSS Cluster mode (#3834)

🧪 Experimental Features

  • Adding support for CAS/CAD commands. (#3837)
  • Adding support for HYBRID search. (#3813 #3843)

🔥 Breaking changes (in experimental features)

  • Replace default health check and failure detector with custom (#3822)

🐛 Bug Fixes

  • Add **options to parse functions for sentinel (#3831)
  • Generating unique command cache key (#3765)

🧰 Maintenance

  • Adding Redis 8.4 RC1 image to test matrix. (#3820)
  • Remove Python 3.9 support. Add Python 3.14 support. (#3814)
  • Sync readme with 7.0.1 and update lib version to latest stable released version - 7.0.1 (#3821)
  • Bump rojopolis/spellcheck-github-actions from 0.52.0 to 0.53.0 (#3827)
  • Bump actions/upload-artifact from 4 to 5 (#3828)
  • Bump github/codeql-action from 3 to 4 (#3829)
  • Fixing flaky tests (#3833 #3838)
  • Update 8.4 RC image tag to 8.4-RC1-pre.2 for pipeline test matrix (#3832)
  • Add missing f-string when returning an error. (#3841)
  • Adding latest 8.4 image to test matrix. Updating the Hybrid VSIM query format to be in sync with spec after srv issue was fixed. (#3843)
  • Expand cluster READ_COMMANDS with additional read-only commands and reorganize the list of commands by category (#3845)
  • Update Type Hints for List Command Parameters from str to KeyT (#3848)
  • Changing log level to be debug for failed maintenance notification enablement when enabled='auto' (#3851)
  • Added custom event handler section (#3853)
  • Changing current version to 8.4 as it is already GA (#3854)

We'd like to thank all the contributors who worked on this release! @​ShubhamKaudewar @​matthewwiese @​peperon @​vladvildanov @​petyaslavova

7.0.1

Changes

This release adds small fixes related to documentation.

🧰 Maintenance

  • Add 'multi_database' section to documentation index (313d93f)
  • Revised multi-database client documentation(78df745)
  • Adding info about Multi-database client in README.md (3f7a55e)

... (truncated)

Commits
  • f7c1755 Changing current version to 8.4 as it is already GA (#3854)
  • 2235cc7 Added custom event handler section (#3853)
  • 8cc50a5 Changing log level to be debug for failed maintenance notification enablement...
  • d1769a2 #3612 Generating unique command cache key (#3765)
  • b49dce1 Update Type Hints for List Command Parameters from str to KeyT (#3848)
  • 46ff042 Expand cluster READ_COMMANDS with additional read-only commands and reorganiz...
  • dc47675 Updating lib version to 7.1.0 and added note in README that Python 3.9 suppor...
  • f026c1e Adding latest 8.4 image to test matrix. Updating the Hybrid VSIM query format...
  • a5ab18f Adding support for HYBRID search. (#3813)
  • e6fb505 Adding support for CAS/CAD commands. (#3837)
  • Additional commits viewable in compare view

Updates apscheduler from 3.11.0 to 3.11.2

Release notes

Sourced from apscheduler's releases.

3.11.2

  • Fixed an issue where a job using a CronTrigger scheduled in a repeated time interval during DST transitions could cause the scheduler to get stuck in an infinite loop (#1021; PR by @​soulofakuma)

3.11.1

  • Fixed scheduler.shutdown() not raising SchedulerNotRunning (or raising the wrong exception) for asynchronous schedulers when the scheduler is in fact not running
  • Fixed CronTrigger sticking on a folded datetime during the fall-back DST transition (#1021 <agronholm/apscheduler#1021>_; PR by @​berianjames)`
Commits
  • 0f70950 Added the release version
  • bc404e6 Updated publish actions
  • c3aa155 Updated pre-commit modules
  • ad6b2dc Added fix for get_next_fire_time not advancing through fold with unfolded pre...
  • f4df139 Added the release version
  • 25be7b7 Fixed CronTrigger getting stuck on fallback DST transition (#1079)
  • 1261386 Updated etcd image repository name
  • b1f5636 Fixed shutdown() not raising the correct exception for some schedulers
  • See full diff in compare view

Updates pymongo from 4.15.1 to 4.16.0

Release notes

Sourced from pymongo's releases.

PyMongo 4.16.0

Community notes:

PyMongo 4.15.5

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-5-released/332185

PyMongo 4.15.4

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-4-released/331292

PyMongo 4.15.3

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-3-released/329778

PyMongo 4.15.2

Community notes: https://www.mongodb.com/community/forums/t/pymongo-4-15-2-released/329543

Changelog

Sourced from pymongo's changelog.

Changes in Version 4.16.0 (2026/01/07)

PyMongo 4.16 brings a number of changes including:

  • Removed invalid documents from :class:bson.errors.InvalidDocument error messages as doing so may leak sensitive user data. Instead, invalid documents are stored in :attr:bson.errors.InvalidDocument.document.
  • PyMongo now requires dnspython>=2.6.1, since dnspython 1.0 is no longer maintained. The minimum version is 2.6.1 to account for CVE-2023-29483 <https://www.cve.org/CVERecord?id=CVE-2023-29483>_.
  • Removed support for Eventlet. Eventlet is actively being sunset by its maintainers and has compatibility issues with PyMongo's dnspython dependency.
  • Use Zstandard support from the standard library for Python 3.14+, and use backports.zstd for older versions.
  • Fixed return type annotation for find_one_and_* methods on :class:~pymongo.asynchronous.collection.AsyncCollection and :class:~pymongo.synchronous.collection.Collection to include None.
  • Added support for NumPy 1D-arrays in :class:bson.binary.BinaryVector.
  • Prevented :class:~pymongo.encryption.ClientEncryption from loading the crypt shared library to fix "MongoCryptError: An existing crypt_shared library is loaded by the application" unless the linked library search path is set.

Changes in Version 4.15.5 (2025/12/02)

Version 4.15.5 is a bug fix release.

  • Fixed a bug that could cause AutoReconnect("connection pool paused") errors when cursors fetched more documents from the database after SDAM heartbeat failures.

Changes in Version 4.15.4 (2025/10/21)

Version 4.15.4 is a bug fix release.

  • Relaxed the callback type of :meth:~pymongo.asynchronous.client_session.AsyncClientSession.with_transaction to allow the broader Awaitable type rather than only Coroutine objects.
  • Added the missing Python 3.14 trove classifier to the package metadata.

Issues Resolved ...............

See the PyMongo 4.15.4 release notes in JIRA_ for the list of resolved issues in this release.

.. _PyMongo 4.15.4 release notes in JIRA: https://jira.mongodb.org/secure/ReleaseNote.jspa?projectId=10004&version=47237

Changes in Version 4.15.3 (2025/10/07)

Version 4.15.3 is a bug fix release.

  • Fixed a memory leak when raising :class:bson.errors.InvalidDocument with C extensions.
  • Fixed the return type of the :meth:~pymongo.asynchronous.collection.AsyncCollection.distinct,

... (truncated)

Commits
  • 3290101 Prepare 4.16.0 release (#2672)
  • 1be94d2 PYTHON-5685 Fix unified spec sync metadata for csot and sessions tests (#2669)
  • 6585d9c PYTHON-2442: Refactor: use _asdict() in _options_dict() (#2670)
  • fdb1f7e PYTHON-5677 Prevent ClientEncryption from loading crypt shared library (#2659)
  • 0cd9763 Bump zizmorcore/zizmor-action from cb3d8e846e148d1111d90b03375b9c03deceda37 t...
  • 2f263d4 PYTHON-5680 Fix handling of expectedDocuments in Unified Test Runner (#2665)
  • e9658b2 Add 4.15.5 release date to changelog (#2666)
  • 10dd204 Update coverage[toml] requirement from <=7.10.6,>=5 to >=5,<=7.10.7 (#2662)
  • 1300677 [Spec Resync] 12-22-2025 (#2663)
  • 18c1f14 PYTHON-5529 Introduce optin setting to await for MinPoolSize population (#2664)
  • Additional commits viewable in compare view

Updates tornado from 6.5.2 to 6.5.4

Changelog

Sourced from tornado's changelog.

Release notes

.. toctree:: :maxdepth: 2

releases/v6.5.4 releases/v6.5.3 releases/v6.5.2 releases/v6.5.1 releases/v6.5.0 releases/v6.4.2 releases/v6.4.1 releases/v6.4.0 releases/v6.3.3 releases/v6.3.2 releases/v6.3.1 releases/v6.3.0 releases/v6.2.0 releases/v6.1.0 releases/v6.0.4 releases/v6.0.3 releases/v6.0.2 releases/v6.0.1 releases/v6.0.0 releases/v5.1.1 releases/v5.1.0 releases/v5.0.2 releases/v5.0.1 releases/v5.0.0 releases/v4.5.3 releases/v4.5.2 releases/v4.5.1 releases/v4.5.0 releases/v4.4.3 releases/v4.4.2 releases/v4.4.1 releases/v4.4.0 releases/v4.3.0 releases/v4.2.1 releases/v4.2.0 releases/v4.1.0 releases/v4.0.2 releases/v4.0.1 releases/v4.0.0 releases/v3.2.2 releases/v3.2.1 releases/v3.2.0 releases/v3.1.1 releases/v3.1.0

... (truncated)

Commits
  • 63d4df4 Merge pull request #3564 from bdarnell/release-654
  • eadbf9a Release notes and version bump for 6.5.4
  • bbc2b14 Make sure that the in-operator on HTTPHeaders is case insensitive
  • 38014dd Merge pull request #3558 from bdarnell/relnotes-653
  • 083e2b2 Merge pull request #3557 from bdarnell/perf-counter-65
  • 31431c9 test: Use time.perf_counter instead of time.time for performance tests
  • 07b5924 tox: Pin pycares version 4 due to backwards-incompatible changes
  • a5e50e2 Release notes and version bump for 6.5.3
  • 2976629 Merge pull request #3555 from bdarnell/release-653
  • 9c163ae web: Harden against invalid HTTP reason phrases
  • Additional commits viewable in compare view

Updates fakeredis from 2.31.3 to 2.33.0

Release notes

Sourced from fakeredis's releases.

v2.33.0🌈

🚀 Features

  • Implement MSETEX (From Redis 8.4)

🐛 Bug Fixes

  • fix[FakeAsyncRedis]: FakeAsyncRedis supports protocol=3 #442
  • fix[TcpFakeServer]: TcpFakeServer supports pub/sub #431
  • fix[TcpFakeServer]: preserve whitespace in bulk strings @​oliverhaas #435

🧰 Maintenance

  • Update tests to support redis-py 7.1.0 and Redis 8.4
  • Async tests run on resp3 and resp2

New Contributors

Full Changelog: cunla/fakeredis-py@v2.32.1...v2.33.0

v2.32.1 🌈

v2.32.1 -

🐛 Bug Fixes

  • fix:support for py3.7 #423
  • fix:xpending_range to return all 4 required fields per Redis spec @​zzstoatzz #427
  • fix[TcpFakeServer]: add exception prefix #432

🧰 Maintenance

  • Update tests to support redis-py 7.0.1
  • Update tests to support valkey 9.0.0

Full Changelog: cunla/fakeredis-py@v2.32.0...v2.32.1

v2.32.0 🌈

🐛 Bug Fixes

🚀 Features

🐛 Bug Fixes

  • fix:removing use of self.protocol to support redis-py < 5 #419
  • fix:race condition due to closing socket in TCPFakeRequestHandler:finish #420

... (truncated)

Commits

Updates meilisearch from 0.33.0 to 0.40.0

Release notes

Sourced from meilisearch's releases.

v0.40.0 🐍

🚀 Enhancements

⚙️ Maintenance/misc

Thanks again to @​Strift, @​awais786, @​aznszn, @​jawad-khan and @​orbin123! 🎉

v0.39.0 🐍

🚀 Enhancements

🐛 Bug Fixes

⚙️ Maintenance/misc

Thanks again to @​DhavalGojiya, @​Strift, @​awais786, @​eun2ce, and @​jawad-khan! 🎉

v0.38.0 🐍

🚀 Enhancements

Thanks again to @​Strift, @​awais786 ! 🎉

v0.37.1 🐍

🐛 Bug Fixes

  • Fix: make TaskResults.from_/next_ accept None so get_tasks doesn’t crash on empty pages. 🤗 (#1126) @​ddboline

... (truncated)

Commits

Updates pillow from 11.3.0 to 12.1.0

Release notes

Sourced from pillow's releases.

12.1.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.1.0.html

Deprecations

Documentation

Dependencies

Testing

Type hints

... (truncated)

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [pytelegrambotapi](https://github.com/eternnoir/pyTelegramBotAPI) | `4.29.1` | `4.30.0` |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.14.0` | `4.14.3` |
| [redis](https://github.com/redis/redis-py) | `6.4.0` | `7.1.0` |
| [apscheduler](https://github.com/agronholm/apscheduler) | `3.11.0` | `3.11.2` |
| [pymongo](https://github.com/mongodb/mongo-python-driver) | `4.15.1` | `4.16.0` |
| [tornado](https://github.com/tornadoweb/tornado) | `6.5.2` | `6.5.4` |
| [fakeredis](https://github.com/cunla/fakeredis-py) | `2.31.3` | `2.33.0` |
| [meilisearch](https://github.com/meilisearch/meilisearch-python) | `0.33.0` | `0.40.0` |
| [pillow](https://github.com/python-pillow/Pillow) | `11.3.0` | `12.1.0` |



Updates `pytelegrambotapi` from 4.29.1 to 4.30.0
- [Release notes](https://github.com/eternnoir/pyTelegramBotAPI/releases)
- [Commits](eternnoir/pyTelegramBotAPI@4.29.1...4.30.0)

Updates `beautifulsoup4` from 4.14.0 to 4.14.3

Updates `redis` from 6.4.0 to 7.1.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v6.4.0...v7.1.0)

Updates `apscheduler` from 3.11.0 to 3.11.2
- [Release notes](https://github.com/agronholm/apscheduler/releases)
- [Commits](agronholm/apscheduler@3.11.0...3.11.2)

Updates `pymongo` from 4.15.1 to 4.16.0
- [Release notes](https://github.com/mongodb/mongo-python-driver/releases)
- [Changelog](https://github.com/mongodb/mongo-python-driver/blob/master/doc/changelog.rst)
- [Commits](mongodb/mongo-python-driver@4.15.1...4.16.0)

Updates `tornado` from 6.5.2 to 6.5.4
- [Changelog](https://github.com/tornadoweb/tornado/blob/v6.5.4/docs/releases.rst)
- [Commits](tornadoweb/tornado@v6.5.2...v6.5.4)

Updates `fakeredis` from 2.31.3 to 2.33.0
- [Release notes](https://github.com/cunla/fakeredis-py/releases)
- [Commits](cunla/fakeredis-py@v2.31.3...v2.33.0)

Updates `meilisearch` from 0.33.0 to 0.40.0
- [Release notes](https://github.com/meilisearch/meilisearch-python/releases)
- [Commits](meilisearch/meilisearch-python@v0.33.0...v0.40.0)

Updates `pillow` from 11.3.0 to 12.1.0
- [Release notes](https://github.com/python-pillow/Pillow/releases)
- [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst)
- [Commits](python-pillow/Pillow@11.3.0...12.1.0)

---
updated-dependencies:
- dependency-name: pytelegrambotapi
  dependency-version: 4.30.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: beautifulsoup4
  dependency-version: 4.14.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: redis
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: apscheduler
  dependency-version: 3.11.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: pymongo
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: tornado
  dependency-version: 6.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: fakeredis
  dependency-version: 2.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: meilisearch
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pillow
  dependency-version: 12.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Jan 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant