Bump the uv-dependencies group across 1 directory with 21 updates

[dependabot]

Bumps the uv-dependencies group with 21 updates in the / directory:

Package	From	To
algoliasearch-django	3.0.0	4.0.0
celery[redis]	5.5.3	5.6.1
django-anymail	10.0	14.0
django-crispy-forms	1.13.0	2.5
django-reversion	6.0.0	6.1.0
django	5.2.8	6.0
google-auth	2.43.0	2.45.0
matplotlib	3.10.7	3.10.8
numpy	2.3.4	2.4.0
sentry-sdk	2.44.0	2.48.0
scout-apm	3.5.0	3.5.2
crispy-bootstrap5	0.7	2025.6
playwright	1.56.0	1.57.0
pytest-playwright	0.7.1	0.7.2
pytest	8.4.2	9.0.2
basedpyright	1.33.0	1.36.2
celery-types	0.23.0	0.24.0
djangorestframework-stubs	3.16.5	3.16.6
ipython	9.7.0	9.8.0
prek	0.2.14	0.2.25
ruff	0.14.5	0.14.10

Updates algoliasearch-django from 3.0.0 to 4.0.0

Release notes

Sourced from algoliasearch-django's releases.

4.0.0

⚠ BREAKING CHANGES

• drop support for python <3.8
• drop support for python <4.0
• remove method clear_index in favor of clear_objects

See upgrade guide

Changelog

Sourced from algoliasearch-django's changelog.

2024-12-26 4.0.0

• [MAJOR] drop support for python <3.8 #336
• [MAJOR] drop support for django <4.0 #336
• [MAJOR] remove method clear_index in favor of clear_objects #336

Commits

• cbf5df0 chore: release v4 (#338)
• e869b15 fix: remove highlightResult from response (#337)
• b71984f feat!: support new algoliasearch and django versions (#336)
• 7f23fc2 chore: add release process (#332)
• 2233054 chore: bump to 3.0.0
• See full diff in compare view

Updates celery[redis] from 5.5.3 to 5.6.1

Release notes

Sourced from celery[redis]'s releases.

v5.6.1

What's Changed

• Fix Redis Sentinel ACL authentication support by @​anthonykuzmich7 in celery/celery#10013
• Fix: Broker heartbeats not sent during graceful shutdown by @​weetster in celery/celery#9986
• docs #5410 -- Document confirm_publish broker transport option by @​JaeHyuckSa in celery/celery#10016
• close DB pools only in prefork mode by @​petrprikryl in celery/celery#10020
• Fix: Avoid unnecessary Django database connection creation during cleanup by @​snopoke in celery/celery#10015
• reliable prefork detection by @​petrprikryl in celery/celery#10023
• better coverage by @​petrprikryl in celery/celery#10029
• Docs: clarify result_extended vs periodic task metadata and show headers["periodic_task_name"] example by @​SpaceShaman in celery/celery#10030
• Stop importing pytest_subtests by @​cjwatson in celery/celery#10032
• Only use exceptiongroup backport for Python < 3.11 by @​cjwatson in celery/celery#10033

New Contributors

• @​anthonykuzmich7 made their first contribution in celery/celery#10013
• @​weetster made their first contribution in celery/celery#9986
• @​JaeHyuckSa made their first contribution in celery/celery#10016
• @​snopoke made their first contribution in celery/celery#10015
• @​SpaceShaman made their first contribution in celery/celery#10030

Full Changelog: celery/celery@v5.6.0...v5.6.1

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

Contributed by @​auvipy in celery/celery#9620.

Security Fix: Broker Credential Leak Prevention

Fixed a security issue where broker URLs containing passwords were being logged in plaintext by the delayed delivery mechanism. Broker credentials are now properly sanitized in all log output.

Contributed by @​giancarloromeo in celery/celery#9997.

Memory Leak Fixes

Two significant memory leaks have been fixed in this release:

... (truncated)

Changelog

Sourced from celery[redis]'s changelog.

5.6.1

:release-date: 2025-12-29 :release-by: Tomer Nosrati

What's Changed

- Fix Redis Sentinel ACL authentication support ([#10013](https://github.com/celery/celery/issues/10013))
- Fix: Broker heartbeats not sent during graceful shutdown ([#9986](https://github.com/celery/celery/issues/9986))
- docs [#5410](https://github.com/celery/celery/issues/5410) -- Document confirm_publish broker transport option ([#10016](https://github.com/celery/celery/issues/10016))
- close DB pools only in prefork mode ([#10020](https://github.com/celery/celery/issues/10020))
- Fix: Avoid unnecessary Django database connection creation during cleanup ([#10015](https://github.com/celery/celery/issues/10015))
- reliable prefork detection ([#10023](https://github.com/celery/celery/issues/10023))
- better coverage ([#10029](https://github.com/celery/celery/issues/10029))
- Docs: clarify `result_extended` vs periodic task metadata and show `headers["periodic_task_name"]` example ([#10030](https://github.com/celery/celery/issues/10030))
- Stop importing pytest_subtests ([#10032](https://github.com/celery/celery/issues/10032))
- Only use exceptiongroup backport for Python < 3.11 ([#10033](https://github.com/celery/celery/issues/10033))
- Prepare for release: v5.6.1 ([#10037](https://github.com/celery/celery/issues/10037))
.. _version-5.6.0:
5.6.0
:release-date: 2025-11-30
:release-by: Tomer Nosrati
Celery v5.6.0 is now available.
Key Highlights

See :ref:whatsnew-5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS

... (truncated)

Commits

• 21dbc73 Prepare for release: v5.6.1 (#10037)
• ba20bed Only use exceptiongroup backport for Python < 3.11 (#10033)
• 2167529 Stop importing pytest_subtests
• 0527296 Bump google-cloud-firestore from 2.21.0 to 2.22.0
• 5f8659b Clarify 'result_extended' setting usage in tasks
• f19db70 Bump mypy from 1.19.0 to 1.19.1 (#10028)
• 6da72bd better coverage (#10029)
• 170fe55 [pre-commit.ci] pre-commit autoupdate (#10027)
• cb08d50 reliable prefork detection (#10023)
• cc3350e Fix: Avoid unnecessary Django database connection creation during cleanup (#1...
• Additional commits viewable in compare view

Updates django-anymail from 10.0 to 14.0

Release notes

Sourced from django-anymail's releases.

v14.0

This release improves handling of Unicode characters everywhere email messages allow them, based on extensive testing on all supported ESPs. See International email in the docs for more information. There are several new workarounds for ESP bugs with non-ASCII characters, plus a handful of new errors to help you avoid Unicode bugs Anymail can't work around.

This release also includes support for Django 6.0 and adds the much-requested ESP Mailtrap.

See the Changelog for breaking changes and a full list of other features and fixes.

v13.1

Changelog

v13.0.1

Changelog

v13.0

Changelog

v12.0

Changelog

v11.1

Changelog

v11.0.1

Changelog

(This release is solely to update documentation and metadata. Code is identical to v11.0.)

v11.0

• Breaking changes for Amazon SES; SparkPost (with template_id)
• New merge_headers feature
• And more…

Please check the changelog

v10.3

Changelog

v10.2

Changelog

v10.1

Changelog

Changelog

Sourced from django-anymail's changelog.

v14.0

2025-12-17

This release improves handling of Unicode characters everywhere email messages allow them, based on extensive testing on all supported ESPs. See International email <https://anymail.dev/en/stable/tips/international_email/#idna>_ in the docs for more information. There are several new workarounds for ESP bugs with non-ASCII characters, plus a handful of new errors to help you avoid Unicode bugs Anymail can't work around.

This release also includes support for Django 6.0 (earlier versions worked, but provoked deprecation warnings) and adds the much-requested ESP Mailtrap.

Breaking changes

(These changes don't affect the vast majority of Anymail users.)


International domain names: When sending email to a non-ASCII domain name,

use IDNA 2008 with UTS-46 pre-processing rather than obsolete IDNA 2003

encoding. This ensures email can be sent to newer domains enabled by IDNA 2008.
This change should make no difference for virtually all real-world email

addresses that worked with earlier Anymail releases. But trying to send to

emoji domains or others no longer allowed by IDNA 2008 will now raise an

AnymailInvalidAddress error.
To restore the old behavior or select a different encoding, use the new

IDNA_ENCODER setting. See

Domains (IDNA) <https://anymail.dev/en/stable/tips/international_email/#idna>_

in the docs.
As part of this change, Anymail now has a direct dependency on the idna

package. (It was already being installed as a sub-dependency of requests.)


Brevo: Raise an error if metadata or custom header values include Unicode

characters. This avoids a Brevo API bug that sends unencoded 8-bit headers,

which can cause bounces or dropped messages.


Mailgun: Raise an error if the from_email uses EAI (has a Unicode

local part). This avoids a Mailgun API bug that generates undeliverable

messages.


Resend: Raise an error if an attachment's filename has an extension that

doesn't match its content type. This tries to help you avoid a Resend API bug

that can silently drop sent messages.


Scaleway TEM: Raise an error if any address field uses EAI (has a Unicode

</tr></table>

... (truncated)

Commits

• e0f50c2 Release 14.0
• a575bfc Docs: update some outdated examples
• d6e8374 CI/CD: reduce permissions to GitHub workflows
• 5ee1e0d Thank contributors and sponsors in readme
• 793617c Mailtrap: new ESP
• ee96317 Postmark: Avoid KeyError in tracking webhook for bounce/unsubscribe payload
• ab2e85f Amazon SES (docs): show TenantName and EndpointId examples
• f57bdc7 Exempt webhooks from Django's LoginRequiredMiddleware
• 643f46f Support Django 6.0
• 131b1c1 Improve handling of non-ASCII characters in attachments
• Additional commits viewable in compare view

Updates django-crispy-forms from 1.13.0 to 2.5

Release notes

Sourced from django-crispy-forms's releases.

2.5

• Confirmed support for Python 3.14.
• Confirmed support for Django 6.0.
• Dropped support for Python 3.8.

2.4

• Added support for Python 3.13.
• Confirmed support for Django 5.2.

2.3

What's Changed

• Fixed unexpected addition the 'active' css_class to AccordionGroup

2.2

• Added support for Django 5.1.
• Allowed pass through of context when rendering a Fieldset layout object.

Full Changelog: django-crispy-forms/django-crispy-forms@2.1...2.2

2.1

What's Changed

• Added support for Django 5.0.
• Dropped support for Django 3.2, 4.0 and 4.1.
• Added support for Python 3.12.
• Dropped support for Python 3.7.

New Contributors

• @​DanielSwain made their first contribution in django-crispy-forms/django-crispy-forms#1340
• @​sankarebarri made their first contribution in django-crispy-forms/django-crispy-forms#1342
• @​foarsitter made their first contribution in django-crispy-forms/django-crispy-forms#1353

Full Changelog: django-crispy-forms/django-crispy-forms@2.0...2.1

2.0 (2023-02-13)

Major Changes and Migration Guide

• Removed all Bootstrap template packs. These template packs are now available as standalone packages. To upgrade, install the required template pack and add it to your INSTALLED_APPS setting.

  • Boostrap 2: PyPI -- GitHub
  • Boostrap 3: PyPI -- GitHub
  • Boostrap 4: PyPI -- GitHub

  Also, support for Bootstrap 5 is provided by a 3rd party package under the django-crispy-forms organisation at crispy-bootstrap5.

... (truncated)

Changelog

Sourced from django-crispy-forms's changelog.

2.5 (2025-11-06)

• Confirmed support for Python 3.14.
• Confirmed support for Django 6.0.
• Dropped support for Python 3.8.

2.4 (2025-04-13)

• Added support for Python 3.13.
• Confirmed support for Django 5.2.

2.3 (2024-07-19)

• Fixed a bug in AccordionGroup rendering then it gets an unexpected css class active.

2.2 (2024-06-15)

• Added support for Django 5.1.
• Allowed pass through of context when rendering a Fieldset layout object.

2.1 (2023-10-15)

• Added support for Django 5.0.
• Dropped support for Django 3.2, 4.0 and 4.1.
• Added support for Python 3.12.
• Dropped support for Python 3.7.

See the 2.1 Milestone for the full change list.

2.0 (2023-02-13)

Release of django-crispy-forms 2.0. No changes introduced since 2.0a1.

2.0a1 (2023-01-18)

Major Changes and Migration Guide

• Removed all Bootstrap template packs. These template packs are now available as standalone packages. To upgrade, install the required template pack and add it to your INSTALLED_APPS setting.

  • Boostrap 2: PyPI -- GitHub
  • Boostrap 3: PyPI -- GitHub
  • Boostrap 4: PyPI -- GitHub

  Also, support for Bootstrap 5 is provided by a 3rd party package under the django-crispy-forms organisation at crispy-bootstrap5.

• Removed uni-form template pack. Uni-Form specific classes previously added to every template pack e.g. textInput are now removed. If you require these classes, the previous behaviour can be restored by adding the following to CRISPY_CLASS_CONVERTERS in your settings file.

    converters = {
      "textinput": "textinput textInput",
      "fileinput": "fileinput fileUpload",
      "passwordinput": "textinput textInput",
  

... (truncated)

Commits

• 65fa8ae 2.5 Release. (#1424)
• ca4ca14 PEP 639 licenses (#1413)
• aaabe68 Updated pre-commit hook versions.
• 125dd16 Pyupgrade 3.9+
• 1f9c8ec Confirmed support for Python 3.14, Django. Drop support for Python 3.8.
• 93cb8c8 Correct names in special thanks section (#1421)
• e327548 Added security policy. (#1419)
• 6481342 Enabled GitHub code of conduct (#1416)
• dabd719 Add Project Logo. (#1415)
• b3f1d22 2.4 Release. (#1412)
• Additional commits viewable in compare view

Updates django-reversion from 6.0.0 to 6.1.0

Release notes

Sourced from django-reversion's releases.

v6.1.0

What's Changed

• Implement date-based ordering and custom version sort by @​micmarc in etianen/django-reversion#992

New Contributors

• @​micmarc made their first contribution in etianen/django-reversion#992

Full Changelog: etianen/django-reversion@v6.0.0...v6.1.0

Changelog

Sourced from django-reversion's changelog.

6.1.0 - 2025-12-12

• Added history_order_by_date and get_version_ordering to VersionAdmin (@​micmarc).

Commits

• 98483a3 v6.1.0
• d2e425f Merge pull request #992 from micmarc/custom-version-sort
• 2ae8d84 Implement history_order_by_date and get_version_ordering() hook with defa...
• abe3535 Update CHANGELOG.rst
• ed6ef82 Update CHANGELOG.rst
• See full diff in compare view

Updates django from 5.2.8 to 6.0

Commits

• 36b5f39 [6.0.x] Bumped version for 6.0 release.
• 4f46d1f [6.0.x] Updated man page for Django 6.0.
• a9f5ca5 [6.0.x] Refs #35859 -- Clarified Tasks ref and topics docs regarding availabl...
• 45f9e0e [6.0.x] Finalized release notes for Django 6.0.
• ac44a55 [6.0.x] Made cosmetic edits to docs/releases/6.0.txt.
• 00575b7 [6.0.x] Updated translations from Transifex.
• 8414487 [6.0.x] Refs #35444 -- Fixed typo in PostgreSQL StringAgg deprecation warning.
• 1f8f36e [6.0.x] Added CVE-2025-13372 and CVE-2025-64460 to security archive.
• 224fc79 [6.0.x] Added stub release notes for 5.2.10.
• 1dbd07a [6.0.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation i...
• Additional commits viewable in compare view

Updates google-auth from 2.43.0 to 2.45.0

Release notes

Sourced from google-auth's releases.

google-auth 2.45.0

2.45.0 (2025-12-15)

Features

• Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e)

google-auth 2.44.0

2.44.0 (2025-12-12)

Features

• MDS connections use mTLS (#1856) (0387bb95)

• support Python 3.14 (#1822) (0f7097e7)

• add ecdsa p-384 support (#1872) (39c381a5)

• Add shlex to correctly parse executable commands with spaces (#1855) (cf6fc3cc)

• Implement token revocation in STS client and add revoke() metho… (#1849) (d5638986)

Bug Fixes

• Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#1880) (78de7907)

• Delegate workload cert and key default lookup to helper function (#1877) (b0993c7e)

• Use public refresh method for source credentials in ImpersonatedCredentials (#1884) (e0c3296f)

Changelog

Sourced from google-auth's changelog.

2.45.0 (2025-12-15)

Features

• Adding Agent Identity bound token support and handling certificate mismatches with retries (#1890) (b32c934e6b0d09b94c467cd432a0a635e8b05f5c)

2.44.0 (2025-12-13)

Features

• support Python 3.14 (#1822) (0f7097e78f247665b6ef0287d482033f7be2ed6d)
• add ecdsa p-384 support (#1872) (39c381a5f6881b590025f36d333d12eff8dc60fc)
• MDS connections use mTLS (#1856) (0387bb95713653d47e846cad3a010eb55ef2db4c)
• Implement token revocation in STS client and add revoke() metho… (#1849) (d5638986ca03ee95bfffa9ad821124ed7e903e63)
• Add shlex to correctly parse executable commands with spaces (#1855) (cf6fc3cced78bc1362a7fe596c32ebc9ce03c26b)

Bug Fixes

• Use public refresh method for source credentials in ImpersonatedCredentials (#1884) (e0c3296f471747258f6d98d2d9bfde636358ecde)
• Add temporary patch to workload cert logic to accomodate Cloud Run mis-configuration (#1880) (78de7907b8bdb7b5510e3c6fa8a3f3721e2436d7)
• Delegate workload cert and key default lookup to helper function (#1877) (b0993c7edaba505d0fb0628af28760c43034c959)

Commits

• 08fabf7 chore: librarian release pull request: 20251215T132028Z (#1891)
• b32c934 feat: Adding Agent Identity bound token support and handling certificate mism...
• 262eb9e chore: librarian release pull request: 20251212T161150Z (#1888)
• 0f7097e feat: support Python 3.14 (#1822)
• e0c3296 fix(auth): Use public refresh method for source credentials in ImpersonatedCr...
• 78de790 fix(auth): Add temporary patch to workload cert logic to accomodate Cloud Run...
• 3e8a566 chore(tests): allow expired secret in system tests (#1883)
• b0993c7 fix(auth): Delegate workload cert and key default lookup to helper function (...
• 2c374d3 chore: update secret (#1879)
• 39c381a feat: add ecdsa p-384 support (#1872)
• Additional commits viewable in compare view

Updates matplotlib from 3.10.7 to 3.10.8

Release notes

Sourced from matplotlib's releases.

REL: v3.10.8

This is a bugfix release in the 3.10.x series.

The primary highlights of this release are:

• Properly allow freethreaded mode in the MacOS backend
• Better error handling for MacOS backend

Commits

• 1392cbe REL: v3.10.8
• 0b9ebb3 Doc release prep v3.10.8
• bc7b5c4 Merge branch 'v3.10.7-doc' into v3.10.x
• 86b38d3 Github stats v3.10.8
• 9512188 Merge pull request #30717 from meeseeksmachine/auto-backport-of-pr-30714-on-v...
• d300769 Backport PR #30714: FIX: Gracefully handle numpy arrays as input to check_in_...
• 799bc95 Merge pull request #30711 from ngoldbaum/v3.10.x
• 134000b Merge pull request #30697 from ngoldbaum/fix-plotting-on-worker-threads
• 5b8e219 TST: Run macosx backends in a subprocess
• 878e71a Backport PR #29810: Declare free-threaded support in MacOS backend extension ...
• Additional commits viewable in compare view

Updates numpy from 2.3.4 to 2.4.0

Release notes

Sourced from numpy's releases.

2.4.0 (Dec 20, 2025)

NumPy 2.4.0 Release Notes

The NumPy 2.4.0 release continues the work to improve free threaded Python support, user dtypes implementation, and annotations. There are many expired deprecations and bug fixes as well.

This release supports Python versions 3.11-3.14

Highlights

Apart from annotations and same_value kwarg, the 2.4 highlights are mostly of interest to downstream developers. They should help in implementing new user dtypes.

• Many annotation improvements. In particular, runtime signature introspection.
• New casting kwarg 'same_value' for casting by value.
• New PyUFunc_AddLoopsFromSpec function that can be used to add user sort loops using the ArrayMethod API.
• New __numpy_dtype__ protocol.

Deprecations

Setting the strides attribute is deprecated

Setting the strides attribute is now deprecated since mutating an array is unsafe if an array is shared, especially by multiple threads. As an alternative, you can create a new view (no copy) via:

• np.lib.stride_tricks.strided_window_view if applicable,
• np.lib.stride_tricks.as_strided for the general case,
• or the np.ndarray constructor (buffer is the original array) for a light-weight version.

(gh-28925)

Positional out argument to np.maximum, np.minimum is deprecated

Passing the output array out positionally to numpy.maximum and numpy.minimum is deprecated. For example, np.maximum(a, b, c) will emit a deprecation warning, since c is treated as the output buffer rather than a third input.

Always pass the output with the keyword form, e.g. np.maximum(a, b, out=c). This makes intent clear and simplifies type annotations.

(gh-29052)

align= must be passed as boolean to np.dtype()

... (truncated)

Changelog

Sourced from numpy's changelog.

Update 2.4.0 milestones

Look at the issues/prs with 2.4.0 milestones and either push them off to a later version, or maybe remove the milestone. You may need to add a milestone.

Check the numpy-release repo

The things to check are the cibuildwheel version in .github/workflows/wheels.yml and the openblas versions in openblas_requirements.txt.

Make a release PR

Four documents usually need to be updated or created for the release PR:

• The changelog
• The release notes
• The .mailmap file
• The pyproject.toml file

These changes should be made in an ordinary PR against the maintenance branch. Other small, miscellaneous fixes may be part of this PR. The commit message might be something like::

REL: Prepare for the NumPy 2.4.0 release

Create 2.4.0-changelog.rst.
Update 2.4.0-notes.rst.
Update .mailmap.
Update pyproject.toml

Set the release version

Check the pyproject.toml file and set the release version and update the classifier if needed::

$ gvim pyproject.toml

Check the doc/source/release.rst file

make sure that the release notes have an entry in the release.rst file::

... (truncated)

Commits

• c5ab79c Merge pull request #30487 from charris/prepare-2.4.0.2
• 05e379a REL: Prepare for the NumPy 2.4.0 release (2)
• 485f1c4 REL: Prepare for the NumPy 2.4.0 release (1) (#30486)
• c683481 REL: Prepare for the NumPy 2.4.0 release (#30439)
• 11d9ed2 Merge pull request #30459 from charris/backport-30456
• 2a17ddb TYP: restore generic.__hash__ (#30456)
• d04a429 Merge pull request #30432 from charris/backport-30426
• f94a148 fix more data races in mtrand.pyx (#30426)
• 06a9d42 Merge pull request #30420 from charris/backport-30418
• 30819cd Merge pull request #30419 from charris/backport-30373
• Additional commits viewable in compare view

Updates sentry-sdk from 2.44.0 to 2.48.0

Release notes

Sourced from sentry-sdk's releases.

2.48.0

Middleware spans are now disabled by default in Django, Starlette and FastAPI integrations. Set the middleware_spans integration-level option to capture individual spans per middleware layer. To record Django middleware spans, for example, configure as follows

  import sentry_sdk
  from sentry_sdk.integrations.django import DjangoIntegration
sentry_sdk.init(
dsn="<your-dsn>",
integrations=[
DjangoIntegration(middleware_spans=True),
],
)

New Features ✨

• feat(ai): add single message truncation by @​shellmayr in #5079

• feat(django): Add span around Task.enqueue by @​sentrivana in #5209

• feat(starlette): Set transaction name when middleware spans are disabled by @​alexander-alderman-webb in #5223

• feat: Add "K_REVISION" to environment variable release check (exposed by cloud run) by @​rpradal in #5222

Langgraph

• feat(langgraph): Response model attribute on invocation spans by @​alexander-alderman-webb in #5212
• feat(langgraph): Usage attributes on invocation spans by @​alexander-alderman-webb in #5211

OTLP

• feat(otlp): Optionally capture exceptions from otel's Span.record_exception api by @​sl0thentr0py in #5235
• feat(otlp): Implement new Propagator.inject for OTLPIntegration by @​sl0thentr0py in #5221

Bug Fixes 🐛

Integrations

• fix(django): Set active thread ID when middleware spans are disabled by @​alexander-alderman-webb in #5220

• fix(integrations): openai-agents fixing the input messages structure which was wrapped too much in some cases by @​constantinius in #5203

• fix(integrations): openai-agents fix multi-patching of get_model function by @​constantinius in #5195

• fix(integrations): add values for pydantic-ai and openai-agents to _INTEGRATION_DEACTIVATES to prohibit double span creation by @​constantinius in #5196

• fix(logs): Set span_id instead of sentry.trace.parent_span_id attribute by @​sentrivana in #5241

• fix(logs, metrics): Gate metrics, logs user attributes behind send_default_pii by @​sentrivana in #5240

• fix(pydantic-ai): Stop capturing internal exceptions by @​alexander-alderman-webb in #5237

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.48.0

Middleware spans are now disabled by default in Django, Starlette and FastAPI integrations. Set the middleware_spans integration-level option to capture individual spans per middleware layer. To record Django middleware spans, for example, configure as follows

  import sentry_sdk
  from sentry_sdk.integrations.django import DjangoIntegration
sentry_sdk.init(
dsn="<your-dsn>",
integrations=[
DjangoIntegration(middleware_spans=True),
],
)

New Features ✨

• feat(ai): add single message truncation by @​shellmayr in #5079

• feat(django): Add span around Task.enqueue by @​sentrivana in #5209

• feat(starlette): Set transaction name when middleware spans are disabled by @​alexander-alderman-webb in #5223

• feat: Add "K_REVISION" to environment variable release check (exposed by cloud run) by @​rpradal in #5222

Langgraph

• feat(langgraph): Response model attribute on invocation spans by @​alexander-alderman-webb in #5212
• feat(langgraph): Usage attributes on invocation spans by @​alexander-alderman-webb in #5211

OTLP

• feat(otlp): Optionally capture exceptions from otel's Span.record_exception api by @​sl0thentr0py in #5235
• feat(otlp): Implement new Propagator.inject for OTLPIntegration by @​sl0thentr0py in #5221

Bug Fixes 🐛

Integrations

• fix(django): Set active thread ID when middleware spans are disabled by @​alexander-alderman-webb in #5220

• fix(integrations): openai-agents fixing the input messages structure which was wrapped too much in some cases by @​constantinius in #5203

• fix(integrations): openai-agents fix multi-patching of get_model function by @​constantinius in #5195

• fix(integrations): add values for pydantic-ai and openai-agents to _INTEGRATION_DEACTIVATES to prohibit double span creation by @​constantinius in #5196

• fix(logs): Set span_id instead of sentry.trace.parent_span_id attribute by @​sentrivana in #5241

• fix(logs, metrics): Gate metrics, logs user attributes behind send_default_pii by @​sentrivana in #5240

... (truncated)

Commits

• 32e9cac Phrasing and code formatting in changelog
• bf30403 Call out new default for middleware spans and fix formatting in changelog
• 19e0d1f Fix changelog
• 6516b8b release: 2.48.0
• Description has been truncated

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.59%. Comparing base (1979c1d) to head (6fbf47e).
⚠️ Report is 1 commits behind head on main.

❗ There is a different number of reports uploaded between BASE (1979c1d) and HEAD (6fbf47e). Click for more details.

HEAD has 1 upload less than BASE

Flag	BASE (1979c1d)	HEAD (6fbf47e)
	4	3

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #404      +/-   ##
==========================================
- Coverage   62.70%   54.59%   -8.11%     
==========================================
  Files         115      115              
  Lines        9202     9202              
==========================================
- Hits         5770     5024     -746     
- Misses       3432     4178     +746     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.