build(deps): bump the production-dependencies group with 4 updates by dependabot[bot] · Pull Request #3269 · mozilla-services/tecken

dependabot · 2026-02-01T02:43:03Z

Bumps the production-dependencies group with 4 updates: dockerflow, gunicorn, sentry-sdk and sphinx.

Updates dockerflow from 2024.4.2 to 2026.1.26

Release notes

2026.01.26

What's Changed

Add MozlogHandler that integrates renamed formatter by @grahamalama in mozilla-services/python-dockerflow#112

chore: fix a typo by @AlphaWong in mozilla-services/python-dockerflow#118

Fix CI and expand test matrix to Django 5.2 and Python 3.13 by @janbrasna in mozilla-services/python-dockerflow#120

Pin test dependencies to fix CI, drop EOL and add Django 6.0 by @janbrasna in mozilla-services/python-dockerflow#122

New Contributors

@AlphaWong made their first contribution in mozilla-services/python-dockerflow#118

@janbrasna made their first contribution in mozilla-services/python-dockerflow#120

Full Changelog: mozilla-services/python-dockerflow@2024.04.2...2026.01.26

Sanic >= 20.3 support and added flask.g.request_id

No release notes provided.

Commits

7297801 Pin test dependencies to fix CI, drop EOL and add Django 6.0 (#122)
3221444 Fix CI and expand test matrix to Django 5.2 and Python 3.13 (#120)
276ff50 chore: fix a typo (#118)
ba6936b Add MozlogHandler that integrates renamed formatter (#112)
See full diff in compare view

Updates gunicorn from 24.0.0 to 24.1.1

Release notes

Sourced from gunicorn's releases.

24.1.1

Bug Fixes

Fix forwarded_allow_ips and proxy_allow_ips to remain as strings for backward compatibility with external tools like uvicorn. Network validation now uses strict mode to detect invalid CIDR notation (e.g., 192.168.1.1/24 where host bits are set) (#3458, [PR #3459](benoitc/gunicorn#3459))

Full Changelog: benoitc/gunicorn@24.1.0...24.1.1

Gunicorn 24.1.0

New Features

Official Docker Image: Gunicorn now publishes official Docker images to GitHub Container Registry ([PR #3454](benoitc/gunicorn#3454))

Available at ghcr.io/benoitc/gunicorn

Based on Python 3.12 slim image

Uses recommended worker formula (2 × CPU + 1)

Configurable via environment variables

PROXY Protocol v2 Support: Extended PROXY protocol implementation to support the binary v2 format in addition to the existing text-based v1 format ([PR #3451](benoitc/gunicorn#3451))

New --proxy-protocol modes: off, v1, v2, auto

auto mode (default when enabled) detects v1 or v2 automatically

v2 binary format is more efficient and supports additional metadata

Works with HAProxy, AWS NLB/ALB, and other PROXY protocol v2 sources

CIDR Network Support: --forwarded-allow-ips and --proxy-allow-from now accept CIDR notation (e.g., 192.168.0.0/16) for specifying trusted networks ([PR #3449](benoitc/gunicorn#3449))

Socket Backlog Metric: New gunicorn.socket.backlog gauge metric reports the current socket backlog size on Linux systems ([PR #3450](benoitc/gunicorn#3450))

InotifyReloader Enhancement: The inotify-based reloader now watches newly imported modules, not just those loaded at startup ([PR #3447](benoitc/gunicorn#3447))

Bug Fixes

Fix signal handling regression where SIGCLD alias caused "Unhandled signal: cld" errors on Linux when workers fail during boot (#3453)

Fix socket blocking mode on keepalive connections preventing SSL handshake failures with async workers ([PR #3452](benoitc/gunicorn#3452))

Use smaller buffer size in finish_body() for faster timeout detection on slow or abandoned connections ([PR #3453](benoitc/gunicorn#3453))

Handle SSLWantReadError in finish_body() to prevent worker hangs during SSL renegotiation ([PR #3448](benoitc/gunicorn#3448))

Log SIGTERM as info level instead of warning to reduce noise in orchestrated environments ([PR #3446](benoitc/gunicorn#3446))

Print exception details to stderr when worker fails to boot ([PR #3443](benoitc/gunicorn#3443))

Fix unreader.unread() to prepend data to buffer instead of appending ([PR #3442](benoitc/gunicorn#3442))

Prevent RecursionError when pickling Config objects ([PR #3441](benoitc/gunicorn#3441))

Use proper exception chaining with raise from in glogging.py ([PR #3440](benoitc/gunicorn#3440))

Installation
pip install gunicorn==24.1.0
</tr></table> 

... (truncated)

Commits

375e79e release: bump version to 24.1.1
ad0c12d docs: add sponsors section to README
70200ee chore: add GitHub Sponsors funding configuration
6841804 docs: remove incorrect PR reference from Docker changelog entry
abce0ca docs: add 24.1.1 changelog entry for forwarded_allow_ips fix
e9a3f30 fix: keep forwarded_allow_ips as strings for backward compatibility (#3459)
d73ff4b docs: update main changelog with 24.1.0
53f2c31 ci: allow docs deploy on workflow_dispatch
eab5f0b ci: trigger Docker publish on tags with or without v prefix
a20d3fb docs: add Docker image to 24.1.0 changelog
Additional commits viewable in compare view

Updates sentry-sdk from 2.50.0 to 2.51.0

Release notes

Sourced from sentry-sdk's releases.

2.51.0

New Features ✨

Openai

feat(openai): Set system instruction attribute for Responses API by @alexander-alderman-webb in #5376

feat(openai): Set system instruction attribute for Completions API by @alexander-alderman-webb in #5358

feat(integrations): OpenAI/OpenAI Agents detect and report the time to first token metric (TTFT) as gen_ai.response.time_to_first_token by @constantinius in #5348

Openai Agents

feat(openai-agents): Set system instruction attribute on gen_ai.chat spans by @alexander-alderman-webb in #5370

feat(openai-agents): Set system instruction attribute by @alexander-alderman-webb in #5355

feat(integrations): openai-agents streaming support by @constantinius in #5291

Other

feat(ai): Add original input length meta attribute by @alexander-alderman-webb in #5375

feat(anthropic): Set system instruction attribute by @alexander-alderman-webb in #5353

feat(asyncio): Allow to turn task spans off by @sentrivana in #5367

feat(gen_ai): add function set_conversation_id and managing functions on the Scope and apply it on the Span on .finish() by @constantinius in #5362

feat(google-genai): Set system instruction attribute by @alexander-alderman-webb in #5354

feat(langchain): Set system instruction attribute by @alexander-alderman-webb in #5357

feat(pydantic-ai): Set system instruction attribute by @alexander-alderman-webb in #5356

feat(transport): Report 413 responses for oversized envelopes by @alexander-alderman-webb in #5380

Bug Fixes 🐛

fix(ai): Keep single content input message by @alexander-alderman-webb in #5345

Internal Changes 🔧

ci(release): Fix changelog-preview permissions by @BYK in #5368

ref: Replace set_data_normalized() with Span.set_data() for system instructions by @alexander-alderman-webb in #5374

ci: Fix path in AI integration tests by @alexander-alderman-webb in #5347

2.51.0a1

New Features ✨

Integrations

feat(integrations): OpenAI/OpenAI Agents detect and report the time to first token metric (TTFT) as gen_ai.response.time_to_first_token by @constantinius in #5348

feat(integrations): openai-agents streaming support by @constantinius in #5291

Other

feat(anthropic): Set system instruction attribute by @alexander-alderman-webb in #5353

feat(asyncio): Allow to turn task spans off by @sentrivana in #5367

feat(gen_ai): add function set_conversation_id and managing functions on the Scope and apply it on the Span on .finish() by @constantinius in #5362

feat(google-genai): Set system instruction attribute by @alexander-alderman-webb in #5354

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.51.0

New Features ✨

Openai

feat(openai): Set system instruction attribute for Responses API by @alexander-alderman-webb in #5376

feat(openai): Set system instruction attribute for Completions API by @alexander-alderman-webb in #5358

feat(integrations): OpenAI/OpenAI Agents detect and report the time to first token metric (TTFT) as gen_ai.response.time_to_first_token by @constantinius in #5348

Openai Agents

feat(openai-agents): Set system instruction attribute on gen_ai.chat spans by @alexander-alderman-webb in #5370

feat(openai-agents): Set system instruction attribute by @alexander-alderman-webb in #5355

feat(integrations): openai-agents streaming support by @constantinius in #5291

Other

feat(ai): Add original input length meta attribute by @alexander-alderman-webb in #5375

feat(anthropic): Set system instruction attribute by @alexander-alderman-webb in #5353

feat(asyncio): Allow to turn task spans off by @sentrivana in #5367

feat(gen_ai): add function set_conversation_id and managing functions on the Scope and apply it on the Span on .finish() by @constantinius in #5362

feat(google-genai): Set system instruction attribute by @alexander-alderman-webb in #5354

feat(langchain): Set system instruction attribute by @alexander-alderman-webb in #5357

feat(pydantic-ai): Set system instruction attribute by @alexander-alderman-webb in #5356

feat(transport): Report 413 responses for oversized envelopes by @alexander-alderman-webb in #5380

Bug Fixes 🐛

fix(ai): Keep single content input message by @alexander-alderman-webb in #5345

Internal Changes 🔧

ci(release): Fix changelog-preview permissions by @BYK in #5368

ref: Replace set_data_normalized() with Span.set_data() for system instructions by @alexander-alderman-webb in #5374

ci: Fix path in AI integration tests by @alexander-alderman-webb in #5347

Commits

8517eb0 Update CHANGELOG.md
93e89e4 release: 2.51.0
003cb73 feat(ai): Add original input length meta attribute (#5375)
d4db6d3 fix(ai): Keep single content input message (#5345)
dafd62f ref: Replace set_data_normalized() with Span.set_data() for system instru...
b3aa033 feat(openai-agents): Set system instruction attribute on gen_ai.chat spans ...
a6b4f2e feat(openai): Set system instruction attribute for Responses API (#5376)
6611957 feat(openai): Set system instruction attribute for Completions API (#5358)
0d42476 feat(transport): Report 413 responses for oversized envelopes (#5380)
0c81d3a feat(integrations): OpenAI/OpenAI Agents detect and report the time to first ...
Additional commits viewable in compare view

Updates sphinx from 8.2.3 to 9.0.4

Release notes

Sourced from sphinx's releases.

Sphinx 9.0.4

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Bugs fixed

#14143: Fix spurious build warnings when translators reorder references in strings, or use translated display text in references. Patch by Matt Wang.

Sphinx 9.0.3

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Bugs fixed

#14142: autodoc: Restore some missing exports in sphinx.ext.autodoc. Patch by Adam Turner.

Sphinx 9.0.2

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Bugs fixed

#14142: autodoc: Restore sphinx.ext.autodoc.mock. Patch by Adam Turner.

Sphinx 9.0.1

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Bugs fixed

#13942: autodoc: Restore the mapping interface for options objects. Patch by Adam Turner.

#13942: autodoc: Deprecate the mapping interface for options objects. Patch by Adam Turner.

#13387: Update translations.

Sphinx 9.0.0

Changelog: https://www.sphinx-doc.org/en/master/changes/9.0.html

Dependencies

#13786: Support Docutils 0.22. Patch by Adam Turner.

Incompatible changes

... (truncated)

Changelog

Sourced from sphinx's changelog.

Release 9.0.4 (released Dec 04, 2025)

Bugs fixed

#14143: Fix spurious build warnings when translators reorder references in strings, or use translated display text in references. Patch by Matt Wang.

Release 9.0.3 (released Dec 04, 2025)

Bugs fixed

#14142: autodoc: Restore some missing exports in :mod:!sphinx.ext.autodoc. Patch by Adam Turner.

Release 9.0.2 (released Dec 03, 2025)

Bugs fixed

#14142: autodoc: Restore :mod:!sphinx.ext.autodoc.mock. Patch by Adam Turner.

Release 9.0.1 (released Dec 01, 2025)

Bugs fixed

#13942: autodoc: Restore the mapping interface for options objects. Patch by Adam Turner.

#13942: autodoc: Deprecate the mapping interface for options objects. Patch by Adam Turner.

#13387: Update translations.

Release 9.0.0 (released Nov 30, 2025)

Dependencies

#13786: Support Docutils 0.22_. Patch by Adam Turner.

.. _Docutils 0.22: https://docutils.sourceforge.io/RELEASE-NOTES.html#release-0-22-2026-07-29

... (truncated)

Commits

8ddba7e Bump to 9.0.4 final
6959633 [bot]: Update message catalogues (#14155)
88a4a97 Allow reordered refs and translated display text in pending_xref (#14144)
f666208 Bump version
df8a9e7 Bump to 9.0.3 final
bd89f96 Import names from defining module
7d05936 autodoc: Restore some missing exports
b745a11 Bump version
1ac581c Bump to 9.0.2 final
1281a83 autodoc: Restore mock module for compatibility (#14152)
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 4 updates: [dockerflow](https://github.com/mozilla-services/python-dockerflow), [gunicorn](https://github.com/benoitc/gunicorn), [sentry-sdk](https://github.com/getsentry/sentry-python) and [sphinx](https://github.com/sphinx-doc/sphinx). Updates `dockerflow` from 2024.4.2 to 2026.1.26 - [Release notes](https://github.com/mozilla-services/python-dockerflow/releases) - [Changelog](https://github.com/mozilla-services/python-dockerflow/blob/main/docs/changelog.rst) - [Commits](mozilla-services/python-dockerflow@2024.04.2...2026.01.26) Updates `gunicorn` from 24.0.0 to 24.1.1 - [Release notes](https://github.com/benoitc/gunicorn/releases) - [Commits](benoitc/gunicorn@24.0.0...24.1.1) Updates `sentry-sdk` from 2.50.0 to 2.51.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.50.0...2.51.0) Updates `sphinx` from 8.2.3 to 9.0.4 - [Release notes](https://github.com/sphinx-doc/sphinx/releases) - [Changelog](https://github.com/sphinx-doc/sphinx/blob/v9.0.4/CHANGES.rst) - [Commits](sphinx-doc/sphinx@v8.2.3...v9.0.4) --- updated-dependencies: - dependency-name: dockerflow dependency-version: 2026.1.26 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies - dependency-name: gunicorn dependency-version: 24.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: sentry-sdk dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: sphinx dependency-version: 9.0.4 dependency-type: direct:production update-type: version-update:semver-major dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 1, 2026

dependabot bot requested a review from a team as a code owner February 1, 2026 02:43

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Feb 1, 2026

Use new formatter name in logging config.

17aa450

smarnach approved these changes Feb 4, 2026

View reviewed changes

smarnach added this pull request to the merge queue Feb 4, 2026

Merged via the queue into main with commit 7d49cb2 Feb 4, 2026
1 check passed

smarnach deleted the dependabot/pip/production-dependencies-d762040789 branch February 4, 2026 13:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the production-dependencies group with 4 updates#3269

build(deps): bump the production-dependencies group with 4 updates#3269
smarnach merged 2 commits intomainfrom
dependabot/pip/production-dependencies-d762040789

dependabot bot commented on behalf of github Feb 1, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Feb 1, 2026

2026.01.26

What's Changed

New Contributors

Sanic >= 20.3 support and added flask.g.request_id

24.1.1

Bug Fixes

Gunicorn 24.1.0

New Features

Bug Fixes

Installation

2.51.0

New Features ✨

Openai

Openai Agents

Other

Bug Fixes 🐛

Internal Changes 🔧

2.51.0a1

New Features ✨

Integrations

Other

2.51.0

New Features ✨

Openai

Openai Agents

Other

Bug Fixes 🐛

Internal Changes 🔧

Sphinx 9.0.4

Bugs fixed

Sphinx 9.0.3

Bugs fixed

Sphinx 9.0.2

Bugs fixed

Sphinx 9.0.1

Bugs fixed

Sphinx 9.0.0

Dependencies

Release 9.0.4 (released Dec 04, 2025)

Bugs fixed

Release 9.0.3 (released Dec 04, 2025)

Bugs fixed

Release 9.0.2 (released Dec 03, 2025)

Bugs fixed

Release 9.0.1 (released Dec 01, 2025)

Bugs fixed

Release 9.0.0 (released Nov 30, 2025)

Dependencies

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant