Skip to content

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates - #69

Open
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/memberportal/minor-and-patch-5c35243f92
Open

chore(deps): bump the minor-and-patch group across 1 directory with 7 updates#69
dependabot[bot] wants to merge 1 commit into
devfrom
dependabot/uv/memberportal/minor-and-patch-5c35243f92

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the minor-and-patch group with 7 updates in the /memberportal directory:

Package From To
djangorestframework 3.18.1 3.18.3
sentry-sdk 2.70.0 2.72.0
cbor2 6.1.4 6.1.5
twilio 9.11.2 9.12.0
phonenumberslite 9.0.40 9.0.41
django-import-export 4.4.1 4.4.2
pre-commit 4.6.2 4.7.0

Updates djangorestframework from 3.18.1 to 3.18.3

Release notes

Sourced from djangorestframework's releases.

3.18.3

What's Changed

Bug fixes

Full Changelog: encode/django-rest-framework@3.18.2...3.18.3

3.18.2

What's Changed

Security

Features

Bug fixes

New Contributors

Full Changelog: encode/django-rest-framework@3.18.1...3.18.2

Commits

Updates sentry-sdk from 2.70.0 to 2.72.0

Release notes

Sourced from sentry-sdk's releases.

2.72.0

New Features ✨

Asgi

Boto3

Wsgi

Other

Bug Fixes 🐛

Boto3

Other

Internal Changes 🔧

Deps

Openai Agents

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.72.0

New Features ✨

Asgi

Boto3

Wsgi

Other

Bug Fixes 🐛

Boto3

Other

Internal Changes 🔧

Deps

Openai Agents

... (truncated)

Commits
  • 9d24514 release: 2.72.0
  • 4dc1d72 fix: Fix span, metrics, log client reports (#7933)
  • 5780399 feat(types): Export DataCollectionUserOptions from sentry_sdk.types (#7957)
  • 1ca0326 chore(deps): lock file maintenance (#7848)
  • f5bf69b ci(mypy): Bump version to 2.4.0 (#7937)
  • 02210fa ci(openai-agents): Bump version for type checking to 0.23.1 (#7935)
  • fcccb7b ci(strawberry-graphql): Bump version for type checking to 0.332.0 (#7936)
  • 7cb8094 chore: Deprecate ai.monitoring.record_token_usage() (#7918)
  • 1f4ba26 chore: Deprecate send_default_pii (#7694)
  • 4b9d329 refactor: move FastAPI active thread tracking into Starlette (#7825)
  • Additional commits viewable in compare view

Updates cbor2 from 6.1.4 to 6.1.5

Release notes

Sourced from cbor2's releases.

6.1.5

  • Fixed CBORSimpleValue hashing inconsistently with the integer it compares equal to (#334; PR by @​sahvx655-wq)
  • Fixed canonical encoding with value sharing enabled emitting shared references to container keys that were never written to the stream, because the throwaway encoding used to sort the keys registered them as shared values; the output then failed to decode, or decoded with the wrong keys substituted in (#339; PR by @​sahvx655-wq)
  • Fixed shared references (tag 29) to a map or an unhandled tag resolving to the raw dict or CBORTag instead of the value returned by object_hook or tag_hook, a regression from 5.x (#343; PR by @​sahvx655-wq)
  • Fixed the encoder not giving a nested stringref namespace (tag 256) its own index space (#335; PR by @​dylanpulver)
  • Fixed the decoder returning its internal break marker as a value when a break stop code appeared where a data item was expected (#305; PR by @​sahvx655-wq)
  • Fixed a PanicException when trying to decode an epoch-form date (tag 100) with a payload near i32::MAX which then overflowed the addition instead of raising a clean decode error (#340; PR by @​sahvx655-wq)
  • Fixed the decoder accepting a string-form datetime (tag 0) without a UTC offset and returning a naive ~datetime.datetime instead of rejecting it (#347; PR by @​sahvx655-wq)
  • Fixed a reused CBOREncoder no longer flushing its output or resetting its shared container and string reference tracking after an encode() call had raised an exception (#348; PR by @​sahvx655-wq)
Commits
  • cf5b8c5 Fixed flaky datetime comparison
  • 4a20060 Bumped up the version
  • c895351 Reset encoder state after a failed encode (#348)
  • c562883 Bump the github-actions group with 2 updates (#349)
  • 2774413 Reject string-form datetime (tag 0) without a UTC offset (#347)
  • ab3a865 Fixed integer overflow when decoding epoch-form dates (tag 100) (#340)
  • 96c5b15 reject misplaced break stop code instead of leaking break marker (#341)
  • bb301da Give a nested stringref namespace its own index space (#335)
  • 7f84e3d Make shared references honour object_hook and tag_hook results (#343)
  • e480550 Disable value sharing while computing canonical sort keys (#339)
  • Additional commits viewable in compare view

Updates twilio from 9.11.2 to 9.12.0

Release notes

Sourced from twilio's releases.

9.12.0

Release Notes

Audiences

  • 2026-10-06

  • Minor updates (formatting, metadata)

  • 2026-10-05

  • Minor updates (formatting, metadata)

  • 2026-10-02

  • Added 1 new path(s):
  • /preview/Cohorts/{cohortId}/Operations (AdminListCohortOperations)

  • 2026-10-01

  • Content updates:
  • Updated description for AdminListSnapshotOperations

  • 2026-09-28

  • Content updates:
  • Updated description for AdminListCohortSnapshots
  • Updated description for AdminFetchCohortSnapshot
  • Updated schema description for Criteria
  • Added properties to OperationPayload: cohortId
  • Removed properties from OperationPayload: audienceId
  • Updated schema description for OperationResult
  • Added properties to OperationResult: cohortId
  • Removed properties from OperationResult: audienceId
  • Updated schema description for Record
  • Updated schema description for Cohort
  • ...and 3 more changes

  • 2026-10-01

  • Minor updates (formatting, metadata)

  • 2026-09-28

  • Content updates:
  • Updated schema description for CohortOperationResult
  • Updated schema description for PartitionCount

Conversations

  • Add PATCH /v2/Imports/{id} to cancel an import, and the CANCELED import status (dev-us1 and stage-us1)
  • Add Imports endpoints for 1console (private visibility, dev-us1 and stage-us1)
  • Add traitExtractionStrategyIds and observationExtractionStrategyIds to the Conversations v2 Admin Configuration schema.
  • Align the Conversations v2 Capabilities list and create contracts with the backend domainId field.

Data-ingress

  • 2026-10-01

  • Minor updates (formatting, metadata)

  • 2026-09-17

  • Add support for Hubspot connector

  • 2026-10-01

  • Minor updates (formatting, metadata)

  • 2026-09-17

  • Add support for Hubspot connector

... (truncated)

Changelog

Sourced from twilio's changelog.

[2026-10-12] Version 9.12.0

Audiences

  • 2026-10-06

  • Minor updates (formatting, metadata)

  • 2026-10-05

  • Minor updates (formatting, metadata)

  • 2026-10-02

  • Added 1 new path(s):
  • /preview/Cohorts/{cohortId}/Operations (AdminListCohortOperations)

  • 2026-10-01

  • Content updates:
  • Updated description for AdminListSnapshotOperations

  • 2026-09-28

  • Content updates:
  • Updated description for AdminListCohortSnapshots
  • Updated description for AdminFetchCohortSnapshot
  • Updated schema description for Criteria
  • Added properties to OperationPayload: cohortId
  • Removed properties from OperationPayload: audienceId
  • Updated schema description for OperationResult
  • Added properties to OperationResult: cohortId
  • Removed properties from OperationResult: audienceId
  • Updated schema description for Record
  • Updated schema description for Cohort
  • ...and 3 more changes

  • 2026-10-01

  • Minor updates (formatting, metadata)

  • 2026-09-28

  • Content updates:
  • Updated schema description for CohortOperationResult
  • Updated schema description for PartitionCount

Conversations

  • Add PATCH /v2/Imports/{id} to cancel an import, and the CANCELED import status (dev-us1 and stage-us1)
  • Add Imports endpoints for 1console (private visibility, dev-us1 and stage-us1)
  • Add traitExtractionStrategyIds and observationExtractionStrategyIds to the Conversations v2 Admin Configuration schema.
  • Align the Conversations v2 Capabilities list and create contracts with the backend domainId field.

Data-ingress

  • 2026-10-01

  • Minor updates (formatting, metadata)

  • 2026-09-17

  • Add support for Hubspot connector

  • 2026-10-01

  • Minor updates (formatting, metadata)

  • 2026-09-17

  • Add support for Hubspot connector

Events

... (truncated)

Commits

Updates phonenumberslite from 9.0.40 to 9.0.41

Commits

Updates django-import-export from 4.4.1 to 4.4.2

Release notes

Sourced from django-import-export's releases.

4.4.2

This release contains a security and data integrity patch. Users are encouraged to update as soon as possible.

Changelog

Changelog

Sourced from django-import-export's changelog.

4.4.2 (2026-10-15)

  • Fixed a security and data integrity issue where an import row classified as "new" could silently overwrite an existing database row. See :ref:release notes <release_notes_force_insert_on_create> for details and mitigations. (GHSA-8xvj-4m4r-g62h <https://github.com/django-import-export/django-import-export/security/advisories/GHSA-8xvj-4m4r-g62h>_)
Commits
  • 6c991f2 corrected text
  • e0935a3 Clarify affected configurations in 4.4.2 release note
  • a6bcb88 updated changelog and release notes
  • 255acd6 Fix import row classified as "new" overwriting an existing database row
  • b1e2ad1 updated changelog
  • See full diff in compare view

Updates pre-commit from 4.6.2 to 4.7.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.7.0

Fixes

Changelog

Sourced from pre-commit's changelog.

4.7.0 - 2026-10-12

Fixes

Commits
  • 65bb884 v4.7.0
  • 73926c1 Merge pull request #3774 from cbirkhold/node-no-git-env-npm-install
  • 860d07d don't leak GIT_* env into npm install for language: node
  • 9ad8a0a Merge pull request #3775 from pre-commit/contextlib-chdir
  • 9905e88 use contextlib.chdir
  • 59cb792 Merge pull request #3771 from pre-commit/all-repos_autofix_py311-plus
  • 2be1701 remove triple-nested withs for 3.14 coverage
  • 4c8d22a py311+
  • c429238 Merge pull request #3770 from pre-commit/pre-commit-ci-update-config
  • f49e251 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the minor-and-patch group across 1 directory with 7…
4a381a4 
… updates

Bumps the minor-and-patch group with 7 updates in the /memberportal directory:

| Package | From | To |
| --- | --- | --- |
| [djangorestframework](https://github.com/encode/django-rest-framework) | `3.18.1` | `3.18.3` |
| [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.70.0` | `2.72.0` |
| [cbor2](https://github.com/agronholm/cbor2) | `6.1.4` | `6.1.5` |
| [twilio](https://github.com/twilio/twilio-python) | `9.11.2` | `9.12.0` |
| [phonenumberslite](https://github.com/daviddrysdale/python-phonenumbers) | `9.0.40` | `9.0.41` |
| [django-import-export](https://github.com/django-import-export/django-import-export) | `4.4.1` | `4.4.2` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.2` | `4.7.0` |



Updates `djangorestframework` from 3.18.1 to 3.18.3
- [Release notes](https://github.com/encode/django-rest-framework/releases)
- [Commits](encode/django-rest-framework@3.18.1...3.18.3)

Updates `sentry-sdk` from 2.70.0 to 2.72.0
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.70.0...2.72.0)

Updates `cbor2` from 6.1.4 to 6.1.5
- [Release notes](https://github.com/agronholm/cbor2/releases)
- [Commits](agronholm/cbor2@6.1.4...6.1.5)

Updates `twilio` from 9.11.2 to 9.12.0
- [Release notes](https://github.com/twilio/twilio-python/releases)
- [Changelog](https://github.com/twilio/twilio-python/blob/main/CHANGES.md)
- [Commits](twilio/twilio-python@9.11.2...9.12.0)

Updates `phonenumberslite` from 9.0.40 to 9.0.41
- [Commits](daviddrysdale/python-phonenumbers@v9.0.40...v9.0.41)

Updates `django-import-export` from 4.4.1 to 4.4.2
- [Release notes](https://github.com/django-import-export/django-import-export/releases)
- [Changelog](https://github.com/django-import-export/django-import-export/blob/main/docs/changelog.rst)
- [Commits](django-import-export/django-import-export@4.4.1...4.4.2)

Updates `pre-commit` from 4.6.2 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.2...v4.7.0)

---
updated-dependencies:
- dependency-name: djangorestframework
  dependency-version: 3.18.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: sentry-sdk
  dependency-version: 2.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: cbor2
  dependency-version: 6.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: twilio
  dependency-version: 9.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: phonenumberslite
  dependency-version: 9.0.41
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: django-import-export
  dependency-version: 4.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code labels Oct 22, 2026
@sonarqubecloud

sonarqubecloud Bot commented Oct 22, 2026

Copy link
Copy Markdown

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python:uv Pull requests that update python:uv code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants