Skip to content

Bump the production-dependencies group across 1 directory with 20 updates#1760

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/main/production-dependencies-77a97f368e
Closed

Bump the production-dependencies group across 1 directory with 20 updates#1760
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/main/production-dependencies-77a97f368e

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 3, 2025 •
edited
Loading

Bumps the production-dependencies group with 20 updates in the / directory:

Package From To
flask 3.1.1 3.1.2
google-cloud-datastore 2.20.2 2.21.0
grpcio 1.71.0 1.75.1
pyyaml 6.0.2 6.0.3
requests 2.32.3 2.32.5
structlog 25.2.0 25.4.0
boto3 1.37.23 1.40.44
humanize 4.12.2 4.13.0
marshmallow 3.26.1 4.0.1
google-cloud-storage 3.1.0 3.4.0
redis 5.2.1 6.4.0
flask-compress 1.17 1.18
uwsgi 2.0.28 2.0.30
email-validator 2.2.0 2.3.0
google-cloud-pubsub 2.29.0 2.31.1
google-cloud-tasks 2.19.2 2.19.3
simplejson 3.20.1 3.20.2
markupsafe 3.0.2 3.0.3
cachetools 5.5.2 6.2.0
gevent 24.11.1 25.9.1

Updates flask from 3.1.1 to 3.1.2

Release notes

Sourced from flask's releases.

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776
Changelog

Sourced from flask's changelog.

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776
Commits
  • 2c1b30d release version 3.1.2
  • 1292419 Update GitHub Actions workflow for artifact handling (#5795)
  • 4dd52ca Update GitHub Actions workflow for artifact handling
  • 55c6255 update dev dependencies
  • d8259eb use Jinja name consistently
  • 38b4c1e refactor stream_with_context for async views (#5799)
  • 9822a03 refactor stream_with_context for async views
  • 49b7e7b security docs for TRUSTED_HOSTS (#5798)
  • b228ca3 security docs for TRUSTED_HOSTS
  • ff64079 update flask-talisman link
  • Additional commits viewable in compare view

Updates google-cloud-datastore from 2.20.2 to 2.21.0

Release notes

Sourced from google-cloud-datastore's releases.

v2.21.0

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Changelog

Sourced from google-cloud-datastore's changelog.

2.21.0 (2025-04-10)

Features

  • Add REST Interceptors which support reading metadata (7be9c4c)
  • Add support for opt-in debug logging (7be9c4c)

Bug Fixes

  • Allow protobuf 6.x (#598) (7c1171b)
  • Backwards-compatibility for previous meaning format (#603) (ed92e8e)
  • Fix typing issue with gRPC metadata when key ends in -bin (7be9c4c)
Commits
  • 1dafc68 chore(main): release 2.21.0 (#595)
  • d391911 chore(python): remove CONTRIBUTING.rst from templates (#605)
  • 16b9c73 chore(python): fix incorrect import statement in README (#604)
  • ed92e8e fix: backwards-compatibility for previous meaning format (#603)
  • a7df080 chore: Update gapic-generator-python to 1.23.6 (#602)
  • 7c1171b fix: Allow protobuf 6.x (#598)
  • 7be9c4c chore: Update gapic-generator-python to v1.23.2 (#569)
  • 9f83d17 chore(python): conditionally load credentials in .kokoro/build.sh (#594)
  • 14a0f96 chore: update protoplus for python 3.13 (#579)
  • 59bf5f9 chore(python): Update the python version in docs presubmit to use 3.10 (#584)
  • See full diff in compare view

Updates grpcio from 1.71.0 to 1.75.1

Release notes

Sourced from grpcio's releases.

Release v1.75.1

This is release gRPC Core 1.75.1 (gemini).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

  • Release grpcio wheels with Python 3.14 support (#40403)
  • Asyncio: fixes grpc shutdown race condition occurring during python interpreter finalizations. (#40447)
    • This also addresses previously reported issues with empty error message on Python interpreter exit (Error in sys.excepthook:/Original exception was: empty): #36655, #38679, #33342
  • Python 3.14: preserve current behavior when using grpc.aio async methods outside of a running event loop. (#40750)
    • Note: using async methods outside of a running event loop is discouraged by Python, and will be deprecated in future gRPC releases. Please use the asyncio.run() function (or asyncio.Runner for custom loop factories). For interactive mode, use dedicated asyncio REPL: python -m asyncio.

Full Changelog: grpc/grpc@v1.75.0...v1.75.1

Release v1.75.0

This is release 1.75.0 (gemini) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

  • [Security] Cherry Pick Spiffe Verification. (#40515)
  • [Python][Typeguard] Part 3 - Add Typeguard to AIO stack in tests. (#40217)
  • [c-ares] update version to 1.34.5. (#39508)
  • [pick_first] fix bug that caused us to stop attempting to connect. (#40162)

C++

  • [OTel C++] Implement retry metrics. (#39195)

Objective-C

  • Fix data race by adding custom getter for state property with @synchronized locking. (#40146)

Python

  • gRPC Python (grpcio) now depends on typing-extensions~=4.13. (#40137)
  • Update musllinux wheels from musllinux_1_1 to musllinux_1_2. (#40317)
    • Dropping musllinux_1_1 because it reached EOL in November 2024

... (truncated)

Commits
  • 9b63ce0 [Backport][v1.75.x][Fix] PHP macOS build: composer sha sum update, harden ins...
  • 3ab7404 [Release] Bump version to 1.75.1 (on v1.75.x branch) (#40773)
  • 876e1d1 [Backport][v1.75.x][Python] Handle python3.14 get_event_loop behavior changes...
  • 74ec067 [Backport][v1.75.x][Python][Support 3.14] Enable 3.14 supported wheels (#40726)
  • ff24d38 [Backport][v1.75.x][Python] aio: skip grpc/aio shutdown if py interpreter is ...
  • 093085c [build] Fix objc boringssl build backport (#40689)
  • 8c45613 [release] Bump release version on v1.75.x branch to v1.75.0 (#40644)
  • d382f40 [Backport][v1.75.x][Python][Support 3.14] Enable Python 3.14 interpreters for...
  • e6db475 [Backport][v1.75.x][Python] Build manylinux aarch64 without cross-compilation...
  • 77dc9c8 [Backport][v1.75.x][Python] Updating rules_python to 1.5.4 (#40607)
  • Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates requests from 2.32.3 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates structlog from 25.2.0 to 25.4.0

Release notes

Sourced from structlog's releases.

25.4.0

Highlights

The main feature is support for exception groups we stole adapted from Rich, however the main reason for this release at this point in time are backwards-incompatible changes in the upcoming Python 3.13.4. Update structlog before updating Python, if you use structlog.stdlib.filter_by_level().

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Klaviyo (@klaviyo), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Doist (@Doist), nate nowack (@zzstoatzz), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Moving Content AG (@moving-content), ProteinQure (@ProteinQure), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Not to forget 14 more amazing humans who chose to be generous but anonymous!

Full Changelog

Added

  • Support for Python 3.14 and Python 3.13.4.

    Python 3.14 has an backwards-incompatible change to logging.Logger.isEnabledFor() (it now always returns False if a log entry is in flight) that has been backported to 3.13.4 (expected on 2025-06-03). It mainly affects structlog.stdlib.filter_by_level(). #723

  • structlog.tracebacks now handles exception groups. structlog.tracebacks.Stack has two new fields, is_group: bool and exceptions: list[Trace]. This works similarly to what Rich v14.0.0 does. #720

Fixed

  • structlog.processors.ExceptionPrettyPrinter now respects the exception_formatter arguments instead of always using the default formatter. #724

This release contains contributions from @​anujdas, @​hynek, and @​sscherfke.

Artifact Attestations

You can verify this release's artifact attestions using GitHub's CLI tool by downloading the sdist and wheel from PyPI and running:

$ gh attestation verify --owner hynek structlog-25.4.0.tar.gz
</tr></table>

... (truncated)

Changelog

Sourced from structlog's changelog.

25.4.0 - 2025-06-02

Added

  • Support for Python 3.14 and Python 3.13.4.

    Python 3.14 has an backwards-incompatible change to logging.Logger.isEnabledFor() (it now always returns False if a log entry is in flight) that has been backported to 3.13.4 (expected on 2025-06-03). It mainly affects structlog.stdlib.filter_by_level(). #723

  • structlog.tracebacks now handles exception groups. structlog.tracebacks.Stack has two new fields, is_group: bool and exceptions: list[Trace]. This works similarly to what Rich v14.0.0 does. #720

Fixed

  • structlog.processors.ExceptionPrettyPrinter now respects the exception_formatter arguments instead of always using the default formatter. #724

25.3.0 - 2025-04-25

Fixed

  • structlog.processors.TimeStamper now again uses timestamps using UTC for custom format strings when utc=True. #713
Commits

Updates boto3 from 1.37.23 to 1.40.44

Commits
  • 61ee934 Merge branch 'release-1.40.44'
  • 01553e7 Bumping version to 1.40.44
  • 1b47e9e Add changelog entries from botocore
  • a295071 Merge branch 'release-1.40.43'
  • a349ff9 Merge branch 'release-1.40.43' into develop
  • 86bb6e1 Bumping version to 1.40.43
  • 9f52c6f Add changelog entries from botocore
  • fe09306 Merge branch 'release-1.40.42'
  • 3d3a44d Merge branch 'release-1.40.42' into develop
  • d433126 Bumping version to 1.40.42
  • Additional commits viewable in compare view

Updates humanize from 4.12.2 to 4.13.0

Release notes

Sourced from humanize's releases.

4.13.0

Changed

Fixed

4.12.3

Fixed

Commits

Updates marshmallow from 3.26.1 to 4.0.1

Changelog

Sourced from marshmallow's changelog.

4.0.1 (2025-08-28) ++++++++++++++++++

Bug fixes:

  • Fix wildcard import of from marshmallow import * (:pr:2823). Thanks :user:Florian-Laport for the PR.

4.0.0 (2025-04-16)

See :ref:upgrading_4_0 for a guide on updating your code.

Features:

  • Typing: Add types to all Field <marshmallow.fields.Field> constructor kwargs (:issue:2285). Thanks :user:navignaw for the suggestion.
  • DateTime <marshmallow.fields.DateTime>, Date <marshmallow.fields.Date>, Time <marshmallow.fields.Time>, TimeDelta <marshmallow.fields.TimeDelta>, and Enum <marshmallow.fields.Enum> accept their internal value types as valid input (:issue:1415). Thanks :user:bitdancer for the suggestion.
  • @validates <marshmallow.validates> accepts multiple field names (:issue:1960). Backwards-incompatible: Decorated methods now receive data_key as a keyword argument. Thanks :user:dpriskorn for the suggestion and :user:dharani7998 for the PR.

Other changes:

  • Typing: Field <marshmallow.fields.Field> is now a generic type with a type argument for the internal value type.

  • marshmallow.fields.UUID no longer subclasses marshmallow.fields.String.

  • marshmallow.Schema.load no longer silently fails to call schema validators when a generator is passed (:issue:1898). The typing of data is also updated to be more accurate. Thanks :user:ziplokk1 for reporting.

  • Backwards-incompatible: Use datetime.date.fromisoformat, datetime.time.fromisoformat, and datetime.datetime.fromisoformat from the standard library to deserialize dates, times and datetimes (:pr:2078). As a consequence of this change:

    • Time with time offsets are now supported.
    • YYYY-MM-DD is now accepted as a datetime and deserialized as naive 00:00 AM.
    • from_iso_date, from_iso_time and from_iso_datetime are removed from marshmallow.utils.

  • Remove isoformat, to_iso_time and to_iso_datetime from marshmallow.utils (:pr:2766).

  • Remove from_rfc, and rfcformat from marshmallow.utils (:pr:2767).

  • Remove is_keyed_tuple from marshmallow.utils (:pr:2768).

  • Remove get_fixed_timezone from marshmallow.utils (:pr:2773).

  • Backwards-incompatible: marshmallow.fields.Boolean no longer serializes non-boolean values (:pr:2725).

  • Backwards-incompatible: Rename schema parameter to parent in marshmallow.fields.Field._bind_to_schema (:issue:1360).

  • Backwards-incompatible: Rename pass_many parameter to pass_collection in pre/post processing methods (:issue:1369).

  • Backwards-incompatible: marshmallow.fields.TimeDelta no longer truncates float values when deserializing (:pr:2654). This allows microseconds to be preserved, e.g.

.. code-block:: python

... (truncated)

Commits

Updates google-cloud-storage from 3.1.0 to 3.4.0

Release notes

Sourced from google-cloud-storage's releases.

v3.4.0

3.4.0 (2025-09-15)

Features

Bug Fixes

  • GAPIC generation failed with 'Directory not empty' (#1542) (c80d820)

v3.3.1

3.3.1 (2025-08-25)

Bug Fixes

  • Provide option to user to set entire object checksum at "initiate a resumable upload session" and send the same.(#1525) (a8109e0)
  • Send part's checksum for XML MPU part upload (#1529) (2ad77c7)

v3.3.0

3.3.0 (2025-08-05)

Features

Bug Fixes

Documentation

  • Update the documentation of move_blob function (#1507) (72252e9)

v3.2.0

3.2.0 (2025-07-04)

Features

v3.1.1

... (truncated)

Changelog

Sourced from google-cloud-storage's changelog.

3.4.0 (2025-09-15)

Features

Bug Fixes

  • GAPIC generation failed with 'Directory not empty' (#1542) (c80d820)

3.3.1 (2025-08-25)

Bug Fixes

  • Provide option to user to set entire object checksum at "initiate a resumable upload session" and send the same (#1525) (a8109e0)
  • Send part's checksum for XML MPU part upload (#1529) (2ad77c7)

3.3.0 (2025-08-05)

Features

Bug Fixes

Documentation

  • Update the documentation of move_blob function (#1507) (72252e9)

3.2.0 (2025-07-04)

Features

3.1.1 (2025-06-13)

Bug Fixes

... (truncated)

Commits

Updates redis from 5.2.1 to 6.4.0

Release notes

Sourced from redis's releases.

6.4.0

Changes

🚀 New Features

  • Added epsilon property to the vsim command (#3723)

🧰 Maintenance

  • Updating the latest Redis image for github pipeline testing (#3726)

We'd like to thank all the contributors who worked on this release! @​htemelski-redis @​elena-kolevska @​petyaslavova @​vladvildanov

6.3.0

Changes

🚀 New Features

  • Add support for new BITOP operations: DIFF, DIFF1, ANDOR, ONE (#3690)
  • Support new VAMANA vector index type (#3702)
  • Add new stream commands (#3711)
  • add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)

🐛 Bug Fixes

  • Fixing sentinel command execution to allow returning of actual responses when meaningful - behaviour controlled by 'return_responses' argument. (#3191)
  • Annotate deprecated_args decorator to preserve wrapped function type signature (#3701)
  • Fix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)
  • add async Retry eq and hash & fix ExponentialWithJitterBackoff eq (#3668)
  • SentinelManagedConnection searches for new master upon connection failure (#3560) (#3601)

🧰 Maintenance

  • fix: avoid instantiating a connection on repr_ (#3653)
  • Fixing the return type hint for the transaction method in the standalone client. (#3660)
  • Bump rojopolis/spellcheck-github-actions from 0.48.0 to 0.49.0 (#3665)
  • Dropping integration tests with Redis 6.2 from pipeline actions. (#3659)
  • Remove deprecated arg from call to ClusterPipeline (#3670)
  • TransactionStrategy reset: UNWATCH only when status is watching (#3671)
  • KeyT for set operations (#3190)
  • Removing references to old docs site 'https://redis-py.readthedocs.io/' replaced by 'https://redis.readthedocs.io/' (#3674)
  • Removing unnecessary check for tests using AsyncMock (#3432)
  • Updating test images for github pipeline execution (#3678)
  • Updating the latest Redis image for pipeline testing (#3695)
  • Bump rojopolis/spellcheck-github-actions from 0.49.0 to 0.51.0 (#3689)
  • DOC-5225 testable probabilistic dt examples (#3691)
  • Update README.md (#3699)
  • Convert the value to int type only if it exists in CLIENT INFO (#3688)
  • Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)
  • DOC-5424 time series examples (#3705)
  • Adding information in connection pool class doc string for available SSLConnection class, that can be used for SSL connections (#3710)

... (truncated)

Commits
  • fff669d Updated package version
  • 43ce2a4 Updating the latest Redis image for github pipeline testing (#3726)
  • 64426cb Added epsilon property to the vsim command (#3723)
  • 67ab74d Add new stream commands (#3711)
  • 4c9512b Adding information in connection pool class doc string for available SSLConne...
  • 31399ed SentinelManagedConnection searches for new master upon connection failure (#3...
  • 7291deb add async Retry __eq__ and __hash__ & fix ExponentialWithJitterBackof...
  • 4cf094f Fix ConnectionPool to raise MaxConnectionsError instead of Connection… (#3698)
  • a001416 DOC-5424 time series examples (#3705)
  • 2b1ff53 Fix compatibility with latest pytest-asyncio version(1.1.0) (#3708)
  • Additional commits viewable in compare view

Updates flask-compress from 1.17 to 1.18

Changelog

Sourced from flask-compress's changelog.

1.18 (2025-07-11)

  • Support, and test against, Python 3.14, see #61 by @​kurtmckee
  • Migrate from zstandard to pyzstd, which is now included in the Python 3.14 standar...

    Description has been truncated

    Note
    Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 3, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 3, 2025 07:12
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 3, 2025
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Oct 3, 2025

Benchmark Results

Percentile Averages:
50th: 81ms
90th: 265ms
95th: 414ms
99th: 826ms
99.9th: 1559ms
GETs (99th): 998ms
POSTs (99th): 627ms

PDF: 10000ms
Session: 9100ms

Total Requests: 65,544
Total Failures: 0
Error Percentage: 0.0%

@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-77a97f368e branch from eabce95 to 803e3bb Compare October 3, 2025 14:17
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Oct 4, 2025

Benchmark Results

Percentile Averages:
50th: 81ms
90th: 265ms
95th: 448ms
99th: 813ms
99.9th: 1397ms
GETs (99th): 1002ms
POSTs (99th): 596ms

PDF: 9500ms
Session: 8900ms

Total Requests: 65,509
Total Failures: 0
Error Percentage: 0.0%

@ons-eq-team
Copy link
Contributor

ons-eq-team commented Oct 13, 2025

Benchmark Results

Percentile Averages:
50th: 76ms
90th: 380ms
95th: 433ms
99th: 778ms
99.9th: 3216ms
GETs (99th): 1104ms
POSTs (99th): 404ms

PDF: 7700ms
Session: 30000ms

Total Requests: 32,342
Total Failures: 6
Error Percentage: 0.02%

@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-77a97f368e branch from 803e3bb to fab5a49 Compare October 17, 2025 07:12
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Oct 17, 2025

Benchmark Results

Percentile Averages:
50th: 79ms
90th: 245ms
95th: 411ms
99th: 867ms
99.9th: 1651ms
GETs (99th): 1115ms
POSTs (99th): 581ms

PDF: 9800ms
Session: 8400ms

Total Requests: 65,612
Total Failures: 0
Error Percentage: 0.0%

@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-77a97f368e branch from fab5a49 to b9ccb65 Compare October 31, 2025 08:08
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Oct 31, 2025

Benchmark Results

Percentile Averages:
50th: 78ms
90th: 234ms
95th: 404ms
99th: 883ms
99.9th: 1530ms
GETs (99th): 1082ms
POSTs (99th): 654ms

PDF: 10000ms
Session: 10000ms

Total Requests: 65,806
Total Failures: 0
Error Percentage: 0.0%

@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-77a97f368e branch from b9ccb65 to 05744d9 Compare November 14, 2025 08:14
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Nov 14, 2025

Benchmark Results

Percentile Averages:
50th: 97ms
90th: 360ms
95th: 574ms
99th: 1042ms
99.9th: 1623ms
GETs (99th): 1247ms
POSTs (99th): 805ms

PDF: 11000ms
Session: 10000ms

Total Requests: 63,064
Total Failures: 0
Error Percentage: 0.0%

@dependabot
Bump the production-dependencies group across 1 directory with 20 upd…
d69b444 
…ates

Bumps the production-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [flask](https://github.com/pallets/flask) | `3.1.1` | `3.1.2` |
| [google-cloud-datastore](https://github.com/googleapis/python-datastore) | `2.20.2` | `2.21.0` |
| [grpcio](https://github.com/grpc/grpc) | `1.71.0` | `1.75.1` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.5` |
| [structlog](https://github.com/hynek/structlog) | `25.2.0` | `25.4.0` |
| [boto3](https://github.com/boto/boto3) | `1.37.23` | `1.40.44` |
| [humanize](https://github.com/python-humanize/humanize) | `4.12.2` | `4.13.0` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.26.1` | `4.0.1` |
| [google-cloud-storage](https://github.com/googleapis/python-storage) | `3.1.0` | `3.4.0` |
| [redis](https://github.com/redis/redis-py) | `5.2.1` | `6.4.0` |
| [flask-compress](https://github.com/colour-science/flask-compress) | `1.17` | `1.18` |
| [uwsgi](https://uwsgi-docs.readthedocs.io/en/latest/) | `2.0.28` | `2.0.30` |
| [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` |
| [google-cloud-pubsub](https://github.com/googleapis/python-pubsub) | `2.29.0` | `2.31.1` |
| [google-cloud-tasks](https://github.com/googleapis/google-cloud-python) | `2.19.2` | `2.19.3` |
| [simplejson](https://github.com/simplejson/simplejson) | `3.20.1` | `3.20.2` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [cachetools](https://github.com/tkem/cachetools) | `5.5.2` | `6.2.0` |
| [gevent](https://github.com/gevent/gevent) | `24.11.1` | `25.9.1` |



Updates `flask` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.1...3.1.2)

Updates `google-cloud-datastore` from 2.20.2 to 2.21.0
- [Release notes](https://github.com/googleapis/python-datastore/releases)
- [Changelog](https://github.com/googleapis/python-datastore/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-datastore@v2.20.2...v2.21.0)

Updates `grpcio` from 1.71.0 to 1.75.1
- [Release notes](https://github.com/grpc/grpc/releases)
- [Changelog](https://github.com/grpc/grpc/blob/master/doc/grpc_release_schedule.md)
- [Commits](grpc/grpc@v1.71.0...v1.75.1)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `requests` from 2.32.3 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.5)

Updates `structlog` from 25.2.0 to 25.4.0
- [Release notes](https://github.com/hynek/structlog/releases)
- [Changelog](https://github.com/hynek/structlog/blob/main/CHANGELOG.md)
- [Commits](hynek/structlog@25.2.0...25.4.0)

Updates `boto3` from 1.37.23 to 1.40.44
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.37.23...1.40.44)

Updates `humanize` from 4.12.2 to 4.13.0
- [Release notes](https://github.com/python-humanize/humanize/releases)
- [Commits](python-humanize/humanize@4.12.2...4.13.0)

Updates `marshmallow` from 3.26.1 to 4.0.1
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@3.26.1...4.0.1)

Updates `google-cloud-storage` from 3.1.0 to 3.4.0
- [Release notes](https://github.com/googleapis/python-storage/releases)
- [Changelog](https://github.com/googleapis/python-storage/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-storage@v3.1.0...v3.4.0)

Updates `redis` from 5.2.1 to 6.4.0
- [Release notes](https://github.com/redis/redis-py/releases)
- [Changelog](https://github.com/redis/redis-py/blob/master/CHANGES)
- [Commits](redis/redis-py@v5.2.1...v6.4.0)

Updates `flask-compress` from 1.17 to 1.18
- [Changelog](https://github.com/colour-science/flask-compress/blob/master/CHANGELOG.md)
- [Commits](colour-science/flask-compress@v1.17...v1.18)

Updates `uwsgi` from 2.0.28 to 2.0.30

Updates `email-validator` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/JoshData/python-email-validator/releases)
- [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md)
- [Commits](JoshData/python-email-validator@v2.2.0...v2.3.0)

Updates `google-cloud-pubsub` from 2.29.0 to 2.31.1
- [Release notes](https://github.com/googleapis/python-pubsub/releases)
- [Changelog](https://github.com/googleapis/python-pubsub/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-pubsub@v2.29.0...v2.31.1)

Updates `google-cloud-tasks` from 2.19.2 to 2.19.3
- [Release notes](https://github.com/googleapis/google-cloud-python/releases)
- [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md)
- [Commits](googleapis/google-cloud-python@google-cloud-tasks-v2.19.2...google-cloud-tasks-v2.19.3)

Updates `simplejson` from 3.20.1 to 3.20.2
- [Release notes](https://github.com/simplejson/simplejson/releases)
- [Changelog](https://github.com/simplejson/simplejson/blob/master/CHANGES.txt)
- [Commits](simplejson/simplejson@v3.20.1...v3.20.2)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `cachetools` from 5.5.2 to 6.2.0
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v5.5.2...v6.2.0)

Updates `gevent` from 24.11.1 to 25.9.1
- [Release notes](https://github.com/gevent/gevent/releases)
- [Changelog](https://github.com/gevent/gevent/blob/master/docs/changelog_pre.rst)
- [Commits](gevent/gevent@24.11.1...25.9.1)

---
updated-dependencies:
- dependency-name: flask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: google-cloud-datastore
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: grpcio
  dependency-version: 1.75.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: structlog
  dependency-version: 25.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: boto3
  dependency-version: 1.40.44
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: humanize
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: marshmallow
  dependency-version: 4.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: google-cloud-storage
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: redis
  dependency-version: 6.4.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: flask-compress
  dependency-version: '1.18'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: uwsgi
  dependency-version: 2.0.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: email-validator
  dependency-version: 2.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-pubsub
  dependency-version: 2.31.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google-cloud-tasks
  dependency-version: 2.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: simplejson
  dependency-version: 3.20.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: cachetools
  dependency-version: 6.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
- dependency-name: gevent
  dependency-version: 25.9.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/pip/main/production-dependencies-77a97f368e branch from 05744d9 to d69b444 Compare November 28, 2025 08:13
@ons-eq-team
Copy link
Contributor

ons-eq-team commented Nov 28, 2025

Benchmark Results

Percentile Averages:
50th: 73ms
90th: 232ms
95th: 407ms
99th: 952ms
99.9th: 2027ms
GETs (99th): 1127ms
POSTs (99th): 750ms

PDF: 8200ms
Session: 8100ms

Total Requests: 65,946
Total Failures: 0
Error Percentage: 0.0%

@rmccar rmccar mentioned this pull request Dec 3, 2025
Open
2 tasks
@rmccar
Copy link
Contributor

rmccar commented Dec 3, 2025

Closing as it is superseded and split out into #1787 and #1786

@rmccar rmccar closed this Dec 3, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 3, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/pip/main/production-dependencies-77a97f368e branch December 3, 2025 12:45
@rmccar rmccar mentioned this pull request Dec 3, 2025
Closed
2 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@ons-eq-team @rmccar