Update python dependencies

[renovate]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
crispy-bootstrap5 (changelog)	<2025.0,>=2024.2 → <2026.4,>=2026.3
django (changelog)	<6.0,>=5.1 → <6.1,>=6.0.4
django-autocomplete-light (source)	<4.0.0,>=3.11.0 → <4.0.0,>=3.12.1
django-bootstrap-datepicker-plus	<6.0.0,>=5.0.5 → <6.0.1,>=6.0.0
django-extensions (changelog)	==3.2.3 → ==4.1
django-filter (changelog)	==24.3 → ==25.2
django-stubs-ext (changelog)	<6.0.0,>=5.1.2 → <6.0.4,>=6.0.3
mozilla-django-oidc (changelog)	==4.0.1 → ==5.0.2
python-dotenv	<2.0.0,>=1.0.1 → <2.0.0,>=1.2.2
python-keycloak (changelog)	<6.0.0,>=5.1.1 → <7.1.2,>=7.1.1
pyyaml (source)	<7.0.0,>=6.0.2 → <7.0.0,>=6.0.3
ruff (source, changelog)	<1.0.0,>=0.9.3 → <1.0.0,>=0.15.11
sentry-sdk (changelog)	<3.0.0,>=2.20.0 → <3.0.0,>=2.58.0
uvicorn (changelog)	==0.29 → ==0.45.0
whitenoise (changelog)	>=6.9.0 → >=6.12.0

---

Release Notes

django-crispy-forms/crispy-bootstrap5 (crispy-bootstrap5)

v2026.3

Compare Source

• Confirmed support for Django 6.0.
• Dropped support for Django 4.2, 5.0 and 5.1.
• Added support for Python 3.14.
• Dropped support for Python 3.8 and 3.9.

v2025.6

Compare Source

• <legend> elements now have fs-6 class so they are the same font size as <labels>.

v2025.4

Compare Source

• Added Python 3.13 support.
• Added support for Django 5.2. This required the following template changes:
  • Added aria-describedby to <fieldset> elements.
  • Added a parent <div> for errors to allow them to be referenced by aria-describedby. This means error messages can now be read by screen reader users.

django/django (django)

v6.0.4

Compare Source

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

v6.0

Compare Source

v5.2.13

Compare Source

v5.2.12

Compare Source

v5.2.11

Compare Source

v5.2.10

Compare Source

v5.2.9

Compare Source

v5.2.8

Compare Source

v5.2.7

Compare Source

v5.2.6

Compare Source

monim67/django-bootstrap-datepicker-plus (django-bootstrap-datepicker-plus)

v6.0.0

Compare Source

Add support for django 6 & python 3.14

• Drop python<3.10 support
• Drop pydantic v1 support
• Drop support for deprecated start_of/end_of
• And bugfixes

Full Changelog: monim67/django-bootstrap-datepicker-plus@5.0.6...6.0.0

v5.0.6

Compare Source

django-extensions/django-extensions (django-extensions)

v4.1

Compare Source

Changes:

• Add: show_permissions command (#​1920)
• Improvement: graph_models, style per app (#​1848)
• Fix: JSONField, bulk_update's (#​1924)

v4.0

Compare Source

Changes:

• Improvement: Support for Python 3.12 and 3.13
• Improvement: Support for Django 5.x
• Improvement: Switch from setup.{cfg,py} to pyproject.toml
• Improvement: graph_models, Add option to display field choices in graph_models (#​1854)
• Improvement: graph_models, Add webp support (#​1857)
• Improvement: graph_models, Support for ordering edges on pydot/dot/graphviz (#​1914)
• Improvement: mail_debug, Update mail_debug command to use aiosmtpd (#​1880)
• Improvement: shell_plus, Improve error message for missing import (#​1898)
• Improvement: reset_db, Add reset_db support for django_tenants (#​1855)
• Improvement: docs, various improvements (#​1852, #​1888, #​1882, #​1901, #​1912, #​1913)
• Improvement: jobs, Handle non-package modules when looking for job definitions (#​1887)
• Improvement: Add django-prometheus DB backends support (#​1800)
• Improvement: Call post_command when the command raises an unhandled exception (#​1837)
• Fix: sqldiff, do not consider ('serial', 'integer') nor ('bigserial', 'bigint') as a field-type-differ (#​1867)
• Fix: shell_plus, Fix start up order and add history (#​1869)
• Remove pipchecker and associated tests (#​1906)
• Following Django's release numbering style more closely (see https://docs.djangoproject.com/en/5.2/internals/release-process/ )

carltongibson/django-filter (django-filter)

v25.2

Compare Source

• Added testing for Django 6.0.

• Dropped support for Django <5.2 LTS

• Dropped support for Python 3.9.

v25.1

Compare Source

• Removed the in-built API schema generation methods, which have been
  deprecated since v23.2.

  You should use drf-spectacular <https://drf-spectacular.readthedocs.io/en/latest/>_
  for generating OpenAPI schemas with DRF.

• Dropped support for EOL Python 3.8.

• Added testing against Python 3.13.

• Added official support for Django 5.2.

typeddjango/django-stubs (django-stubs-ext)

v6.0.3

Compare Source

What's Changed

• Remove patching of reveal_type() and reveal_locals() by @​ngnpope in #​3255
• Resolve .values_list() field types on annotated querysets by @​federicobond in #​3253
• Add __eq__ to CaseInsensitiveMapping by @​hauntsaninja in #​3256
• Add an AI policy by @​UnknownPlatypus in #​3247
• Preserve NamedTuple row type when annotating values_list(named=True) querysets by @​federicobond in #​3261
• Use TypedDictType directly when merging typeddict by @​UnknownPlatypus in #​3262
• Prefetch related queryset incompatible type by @​steele in #​3263
• Fix databases type in SimpleTestCase to use Literal["__all__"] by @​ahmedasar00 in #​3264
• typing: Node methods return an instance of the subclass by @​noamkush in #​3265
• Fix row type lost when using .annotate(...) on custom bound QuerySet by @​UnknownPlatypus in #​3271
• Refine types in html.pyi: Remove Incomplete and Any by @​01xnikhil in #​3270
• Improve type precision in template backends by @​emmanuel-ferdman in #​3276
• Update dependency django to v6.0.4 [SECURITY] by @​renovate[bot] in #​3278
• Cache apt packages for GDAL in CI by @​UnknownPlatypus in #​3268
• Loosen ListFilter.choices() return type to allow custom filter templates by @​alessio-b2c2 in #​3180
• Use ignoreDeps to prevent Renovate from updating Python versions by @​UnknownPlatypus in #​3280
• Propagate WithAnnotations through custom QuerySet methods by @​UnknownPlatypus in #​3266
• Add debugging tip for yml tests in contributing guide by @​UnknownPlatypus in #​3284
• Widen build_q_object_from_lookup_parameters parameter type by @​alessio-b2c2 in #​3277
• Fix ListFilter.used_parameters and params types in admin filter stubs by @​alessio-b2c2 in #​3187
• Make LazyObject generic to improve __deepcopy__ return type by @​ahmedasar00 in #​3275
• Widen names arg to Query.names_to_path to Sequence[str] by @​joshuadavidthomas in #​3285
• Improve type precision and add missing attrs across utils stubs by @​emmanuel-ferdman in #​3290
• Improve types in contrib.auth.views by @​01xnikhil in #​3294
• Propagate Subquery output field type through generics by @​federicobond in #​3297
• Type-check (a)get_or_create and (a)update_or_create kwargs by @​federicobond in #​3309
• Make Func generic over output_field by @​federicobond in #​3311
• Update mypy to 1.20.1 by @​sobolevn in #​3316
• Fix attname column by @​UnknownPlatypus in #​3318

New Contributors

• @​steele made their first contribution in #​3263
• @​alessio-b2c2 made their first contribution in #​3180

Full Changelog: typeddjango/django-stubs@6.0.2...6.0.3

v6.0.2

Compare Source

What's Changed

We now officially support mypy@1.20.
Since this release we run ty over our test cases.

• Add missing swappable parameter to ForeignKey and OneToOneField by @​emmanuel-ferdman in #​3204
• Support WithAnnotations TypedDict fields in queryset validation by @​emmanuel-ferdman in #​3208
• Add backend attribute stub for authenticated users by @​emmanuel-ferdman in #​3210
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in #​3214
• chore(deps): update dependency uv_build to >=0.11.0,<0.12.0 by @​renovate[bot] in #​3216
• Reparametrize implicit generic QuerySet subclasses by @​federicobond in #​3217
• Fix in operator false positive with union types by @​emmanuel-ferdman in #​3206
• Refactor auto reparametrize to reduce code duplication by @​UnknownPlatypus in #​3219
• Allow missing config section when DJANGO_SETTINGS_MODULE is set by @​emmanuel-ferdman in #​3223
• Fix NestedObjects.nested return type to list[Any] by @​emmanuel-ferdman in #​3226
• Update HttpRequest path methods to match Django 5.x defaults by @​01xnikhil in #​3227
• Resolve queryset annotate types for expressions with static ClassVar by @​federicobond in #​3221
• Use Model instead of Self in parms and add AltersData inheritance by @​emmanuel-ferdman in #​3228
• Expose django admin fieldset types in django_stubs_ext by @​UnknownPlatypus in #​3237
• Migrate more typecheck tests to assert_type by @​UnknownPlatypus in #​3234
• Include django and django-stubs versions in plugin config data by @​UnknownPlatypus in #​3236
• Make Lookup type argument optional by defaulting _T to Any by @​UnknownPlatypus in #​3235
• Fix mypy crash on QuerySet subclass with forward-referenced TypeVar by @​UnknownPlatypus in #​3241
• Disallow mutually exclusive arguments boolean and empty_value in admin display decorator by @​UnknownPlatypus in #​3242
• Use getattr for field.attname with fallback to field.name by @​UnknownPlatypus in #​3248
• Resolve .values() field types on annotated querysets by @​federicobond in #​3232
• Use newer syntax and enable more mypy configuration options by @​ngnpope in #​3203

New Contributors

• @​01xnikhil made their first contribution in #​3227

Full Changelog: typeddjango/django-stubs@6.0.1...6.0.2

v6.0.1

Compare Source

What's Changed

• Fix serve() return type to include HttpResponse by @​emmanuel-ferdman in #​3199
• Add missing Meta class stubs for auth and session models by @​emmanuel-ferdman in #​3200
• Fix crash in .order_by validation for abstract models by @​UnknownPlatypus in #​3197

Full Changelog: typeddjango/django-stubs@6.0.0...6.0.1

v6.0.0

Compare Source

This version add stubs coverage to all known Django 6.0 functionality. If you find anything missing, please open an issue.

Besides Django 6.0 updates, there is an even larger number of other improvements.

Many thanks to everyone who helped out, the amount of contributions has been amazing!

⚠️ Known issues

There is a crash bug in the mypy plugin, when checking code that uses QuerySet.order_by() with abstract models. Please follow #​3184

Django 6.0 stubs updates

• Add Model.NotUpdated & ObjectNotUpdated exceptions by @​intgr in #​2940
• Add stubs for built-in CSP support by @​federicobond in #​2931
• Add databases= parameter to check_generic_foreign_keys, check_model_name_lengths by @​Tosinibikunle in #​2951
• Add stubs for django.db.models.StringAgg and Aggregate order_by fields by @​federicobond in #​2960
• Add stubs for django.contrib.postgres.search.Lexeme and CombinedLexeme by @​federicobond in #​2961
• Update ADMINS and MANAGERS setting type by @​federicobond in #​2965
• Require kwargs for optional parameters in mail functions by @​federicobond in #​2966
• Add hints support to postgres extension classes by @​federicobond in #​2972
• Fix missing stubs for __del__ methods by @​UnknownPlatypus in #​2974
• Require kwargs for optional parameters in EmailMessage by @​federicobond in #​2975
• Support passing MIMEPart object to EmailMessage.attach by @​federicobond in #​2976
• Add Django Tasks framework by @​federicobond in #​2967
• Add SetPasswordMixin.__class_getitem__ by @​sobolevn in #​2985
• Remove useless decorators from main/django/contrib/auth/admin.py by @​sobolevn in #​2986
• Remove default value from check functions by @​brianhelba in #​2993
• Allow plain Form in DeleteView type parameters by @​emmanuel-ferdman in #​2996
• Fix FileField and ImageField instance access return types by @​emmanuel-ferdman in #​2997
• Fix window function parameter types by @​emmanuel-ferdman in #​2999
• Add support for AnyValue aggregate by @​federicobond in #​3002
• Add missing database backend feature flags by @​emmanuel-ferdman in #​3005
• Add TASKS setting by @​federicobond in #​3006
• Add async pagination support by @​emmanuel-ferdman in #​3009
• Add template partials support by @​emmanuel-ferdman in #​3010
• Update deprecation module by @​emmanuel-ferdman in #​3013
• Add missing migration serializers by @​emmanuel-ferdman in #​3016
• Add system checks support by @​emmanuel-ferdman in #​3019
• Add missing mail module signatures by @​emmanuel-ferdman in #​3023
• Add auth module stubs by @​emmanuel-ferdman in #​3024
• Add http utilities support by @​emmanuel-ferdman in #​3025
• Add form constraint validation support by @​emmanuel-ferdman in #​3026
• Add test module stubs by @​emmanuel-ferdman in #​3027
• Add contenttypes module stubs by @​emmanuel-ferdman in #​3029
• Add missing migration operation stubs by @​emmanuel-ferdman in #​3032
• Add postgres module stubs by @​emmanuel-ferdman in #​3037
• Add utils module stubs by @​emmanuel-ferdman in #​3043
• Update conf settings stubs by @​emmanuel-ferdman in #​3045
• Add tasks module stubs by @​emmanuel-ferdman in #​3044
• Update admin module stubs by @​emmanuel-ferdman in #​3048
• Update constraint, index, and migration stubs by @​emmanuel-ferdman in #​3051
• Update GIS module stubs by @​emmanuel-ferdman in #​3054
• Update PostgreSQL backend stubs by @​emmanuel-ferdman in #​3070
• Update Oracle utils stubs by @​emmanuel-ferdman in #​3066
• Update SQLite backend stubs by @​emmanuel-ferdman in #​3072
• Update base database backend stubs by @​emmanuel-ferdman in #​3075
• Update MySQL and Oracle backend stubs by @​emmanuel-ferdman in #​3078
• Update compiler stubs by @​emmanuel-ferdman in #​3079
• Remove deprecated stubs and add referenced_fields by @​emmanuel-ferdman in #​3081
• Add missing JSON lookup method stubs by @​emmanuel-ferdman in #​3082
• Add types for BaseBinaryDumper in postgis base by @​ahmedasar00 in #​3099
• Add missing Model base class stubs by @​emmanuel-ferdman in #​3101
• Add model expressions stubs by @​emmanuel-ferdman in #​3096

Other stubs improvements

• Fix SessionBase dict method signatures by @​emmanuel-ferdman in #​3020
• Fix WSGI LimitedStream stub signatures by @​emmanuel-ferdman in #​3022
• Replaced IO[bytes] with _PostDataProtocol to fix HttpRequest compatibility by @​Skyiesac in #​3167
• ResponseHeaders can take any mapping, not just dict by @​sobolevn in #​3014
• Allow formfield_callback to return None by @​emmanuel-ferdman in #​3021
• Add overloads to Library.inclusion_tag for proper type inference by @​rgant in #​3039
• Add missing items across contrib module stubs by @​emmanuel-ferdman in #​3049
• Add missing items across core module stubs by @​emmanuel-ferdman in #​3058
• Fix lower bound for response_gone_class by @​UnknownPlatypus in #​3061
• Add admin helper and autocomplete stubs by @​emmanuel-ferdman in #​3063
• Fix auth and contenttypes stub signatures by @​emmanuel-ferdman in #​3069
• Allow get_violation_error_message to return dictionaries by @​meunomemauricio in #​3065
• Fix database router type hints by @​emmanuel-ferdman in #​3074
• Allow UserAdmin with custom user models by @​emmanuel-ferdman in #​3076
• Fix conflated decorator and decorator factory return types by @​emmanuel-ferdman in #​3080
• Add form_class stubs on auth views by @​emmanuel-ferdman in #​3083
• Fix password hasher stubs and add missing members by @​emmanuel-ferdman in #​3084
• Allow TransactionTestCase.assertQuerySetEqual to take values=Iterable by @​cjwatson in #​3087
• Update min/max/step parameters of IntegerField to accept Callables by @​LincolnPuzey in #​3093
• Fix login_required overloads and auth model stubs by @​emmanuel-ferdman in #​3090
• Add migration autodetector and questioner stubs by @​emmanuel-ferdman in #​3095
• Add types BaseTextDumper in postgis base by @​ahmedasar00 in #​3100
• Add missing GIS geometry and measure stubs by @​emmanuel-ferdman in #​3102
• Fix Subquery and Exists to accept subquery inputs by @​emmanuel-ferdman in #​3103
• Add missing GDAL geometry and SRS stubs by @​emmanuel-ferdman in #​3104
• Fix encoding functions returning Any instead of str/bytes by @​emmanuel-ferdman in #​3106
• Add GIS management command stubs by @​emmanuel-ferdman in #​3107
• Add missing GeoModelAdminMixin and fix GISModelAdmin types by @​emmanuel-ferdman in #​3108
• Add missing GeographyType stub in postgis base.pyi by @​ahmedasar00 in #​3113
• Add types for register_geometry_adapters in postgis base by @​DeXtAr47-oss in #​3105
• Improve template module stubs by @​emmanuel-ferdman in #​3114
• Add missing aggregate and lookup attributes by @​emmanuel-ferdman in #​3118
• Add stubs for AdminSeleniumTestCase.assertCountSeleniumElements by @​DeXtAr47-oss in #​3117
• Fix test runner stubs by @​emmanuel-ferdman in #​3119
• Allow expressions in ordering types by @​emmanuel-ferdman in #​3121
• Add missing database function stubs by @​emmanuel-ferdman in #​3122
• Fix MySQL backend feature stubs by @​emmanuel-ferdman in #​3124
• 5.2: Add Field.has_db_default method by @​JaeHyuckSa in #​3125
• Fix lazy function return types by @​emmanuel-ferdman in #​3133
• 5.2: Add BaseDatabaseFeatures.rounds_to_even by @​JaeHyuckSa in #​3128
• 5.2: Add django.db.models.fields.tuple_lookups module by @​JaeHyuckSa in #​3131
• 5.2: Fix Oracle backend feature stubs by @​emmanuel-ferdman in #​3136
• 5.2: Add ForeignKey.cast_db_type method by @​JaeHyuckSa in #​3126
• 5.2: Add BaseDatabaseFeatures.supports_tuple_lookups by @​JaeHyuckSa in #​3129
• 5.2: Add Q.identity cached_property by @​JaeHyuckSa in #​3127
• 5.2: Add BaseDatabaseSchemaEditor.sql_pk_constraint by @​JaeHyuckSa in #​3130
• Fix SQL query module type stubs by @​emmanuel-ferdman in #​3138
• 5.2: Remove MySQLGISSchemaEditor.__init__ by @​JaeHyuckSa in #​3139
• Add stubs for SeleniumTestCaseBase and SeleniumTestCase by @​DeXtAr47-oss in #​3135
• Fix query and query_utils module stubs by @​emmanuel-ferdman in #​3140
• Fix testcases module stubs by @​emmanuel-ferdman in #​3143
• Type the view parameter of conf.urls.static.static by @​rgant in #​3145
• Add DB and GIS backends module stubs by @​emmanuel-ferdman in #​3144
• Add missing FileField and ImageField class attributes by @​emmanuel-ferdman in #​3147
• Add missing methods and fix inheritance in forms stubs by @​emmanuel-ferdman in #​3153
• Improve stubs for django.utils.datastructures.ImmutableList by @​ngnpope in #​3155
• Fix selenium test case stubs by @​emmanuel-ferdman in #​3159
• Fix URL module stubs by @​emmanuel-ferdman in #​3160
• Fix password and auth helper stub annotations by @​emmanuel-ferdman in #​3161
• Add missing field stub members and fix type annotations by @​emmanuel-ferdman in #​3164
• Add GIS function and contenttypes stub annotations by @​emmanuel-ferdman in #​3169
• Remove stale stub attributes that no longer exist at runtime by @​emmanuel-ferdman in #​3175
• Improve types fo LazyObject dunder method by @​UnknownPlatypus in #​3166
• Fix stubs for django.db.models.expressions.Window by @​ngnpope in #​3170
• Fix value_to_string return types for JSONField and RangeField by @​emmanuel-ferdman in #​3188
• Fix stubs for allowed_default in expression classes by @​ahmedasar00 in #​3186
• Add stub for register_combinable_fields in expressions by @​ahmedasar00 in #​3189
• Improve forms module type annotations by @​emmanuel-ferdman in #​3191

Plugin updates

• Add plugin support for NotUpdated exception by @​ngnpope in #​3046
• Handle lookups in Annotated fields by @​gg-mmill in #​3097
• Fix edge case with Prefetch + to_attr and multiple levels by @​UnknownPlatypus in #​3151
• Validate the update_fields and unique_fields of bulk_create by @​UnknownPlatypus in #​3150
• Validate earliest / latest / orderby by @​UnknownPlatypus in #​3158
• Validate only / defer by @​UnknownPlatypus in #​3165
• Fix order_by false positives with field transforms by @​federicobond in #​3178
• Fix order_by false positive with values() expression aliases by @​federicobond in #​3185

Housekeeping

• Tests: Update to Django 6.0; fall back to 5.2 on Python <3.12 by @​intgr in #​2939
• Django 6.0.1 by @​sobolevn in #​2984
• Run tests with Python 3.14 (except stubtest) by @​sobolevn in #​2866
• Docs: Update versions table & Django/Python version by @​intgr in #​3008
• Add Django 6.0 allowlist to contributing guide by @​emmanuel-ferdman in #​3073
• Add tests for _PropertyDescriptor usage in response.pyi by @​sobolevn in #​3086
• Expand reverse fk lookup tests by @​UnknownPlatypus in #​3141
• Fix django.utils.inspect stubtest errors on Python 3.14+ by @​ngnpope in #​3152
• Enable explicit-override and --disallow-subclassing-any by @​ngnpope in #​3172
• Bump pyright target from Python 3.8 to 3.10 by @​emmanuel-ferdman in #​3176
• Fix Django 5.2 stubtest allowlist: resolve and clean up todo entries by @​ahmedasar00 in #​3179
• Remove references to stale stubtest allowlists by @​ngnpope in #​3182
• Add django-modern-rest to the README by @​sobolevn in #​3183
• Update docs.djangoproject.com links to current stable version by @​intgr in #​3194

New Contributors

• @​Tosinibikunle made their first contribution in #​2951
• @​rgant made their first contribution in #​3039
• @​meunomemauricio made their first contribution in #​3065
• @​ahmedasar00 made their first contribution in #​3099
• @​DeXtAr47-oss made their first contribution in #​3105
• @​Skyiesac made their first contribution in [#