Skip to content

Python 3.14.10 security release and dependency updates - #413

Merged
irvingpop merged 1 commit into
mainfrom
python-3.14.10
Oct 27, 2026
Merged

irvingpop merged 1 commit into
mainfrom
python-3.14.10

Conversation

@irvingpop

Copy link
Copy Markdown
Member

Summary

  • Docker base image python:3.14.9-slim-trixie -> python:3.14.10-slim-trixie (security fixes). CI uses floating 3.14, no change needed.
  • ruff ^0.15 -> ^0.17. Ruff 0.17 formats Python code blocks in Markdown, which would mangle the illustrative fragments in docs/, so *.md is now excluded.
  • In-range updates: boto3/botocore 1.43.120, django-allauth 65.21.0, pytest 9.2.0, pytest-env 1.8.3, wcwidth 0.9.4.

Held back

  • python-dateutil 3.0: only used by botocore, which pins <3.0.0.
  • Django 6, django-health-check 4, django-debug-toolbar 8, django-anymail 15, bcrypt 5: major versions, separate PRs.

Testing

  • make ci passes locally on Python 3.14.10 (ruff, 84 tests, bandit).

🤖 Generated with Claude Code

- Docker base image python:3.14.9 -> 3.14.10 (security fixes)
- ruff ^0.15 -> ^0.17; exclude Markdown from ruff, since 0.17 formats
  code blocks in .md and would mangle the snippet fragments in docs/
- In-range updates: boto3/botocore 1.43.120, django-allauth 65.21.0,
  pytest 9.2.0, pytest-env 1.8.3, wcwidth 0.9.4

python-dateutil 3.0 is held back: botocore pins <3.0.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@irvingpop
irvingpop merged commit 19efaef into main Oct 27, 2026
5 checks passed
@irvingpop
irvingpop deleted the python-3.14.10 branch October 27, 2026 21:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant