Bump the minor group across 1 directory with 4 updates

[dependabot]

Bumps the minor group with 4 updates in the / directory: django, google-cloud-logging, newrelic and uvicorn.

Updates django from 6.0.7 to 6.1

Commits

• fe0a859 [6.1.x] Bumped version for 6.1 release.
• 6277045 [6.1.x] Updated man page for Django 6.1.
• fc78c5c [6.1.x] Finalized release notes for Django 6.1.
• c58d861 [6.1.x] Updated translations from Transifex.
• dc1b8de [6.1.x] Added missing lang override in translation fetching helper for Serbia...
• 1f5bf63 [6.1.x] Refs #36735 -- Added DatabaseFeatures.supports_uuid4_function_in_defa...
• 8099984 [6.1.x] Added CVE-2026-15307, CVE-2026-15337, CVE-2026-15830, and CVE-2026-15...
• 5a260d3 [6.1.x] Fixed CVE-2026-15920 -- Made display_for_field() validate URLs before...
• 9e4a3f1 [6.1.x] Fixed CVE-2026-15830 -- Mitigated potential DoS via nested geometry c...
• 5b3523d [6.1.x] Fixed CVE-2026-15337 -- Mitigated potential DoS in check_for_language().
• Additional commits viewable in compare view

Updates google-cloud-logging from 3.16.1 to 3.16.2

Release notes

Sourced from google-cloud-logging's releases.

google-cloud-logging: v3.16.2

3.16.2 (2026-08-06)

Bug Fixes

• bump grpcio to 1.59.0; require Python 3.10+ (#17351) (a53487a)
• require Protobuf 6.33.5+ (#17743) (d267342)

Commits

• 905bfe3 chore: release main (#17832)
• ad8f93c fix(api-core): use truthiness check in setup_request_id to support proto-plus...
• 06dd2c0 chore: bump google-api-core to 2.28.0 (#18003)
• 08f21a6 fix(proto-plus): add context to TypeErrors during message manipulation (#17682)
• 32fd479 tests(spanner): avoid table name collisions in tests (#18001)
• 2207ca6 feat: add pandas-gbq capability helper (#17957)
• 6167e41 fix: deduplicate x-goog-api-client headers (#17616)
• 71bc622 docs: add connector libraries overview table to package README (#17939)
• 1b5c48b fix(bigframes): fix field name typos for ai.generate* functions (#17983)
• f64ada2 fix: avoid retaining routing parameter instances in cache (#17961)
• Additional commits viewable in compare view

Updates newrelic from 13.3.0 to 13.4.0

Release notes

Sourced from newrelic's releases.

v13.4.0

Notes

This release of the Python agent adds support for Redis commands introduced in Redis v8.10.0 and redis-py v8.1.0. This release also resolves the issue of missing LlmChatCompletion events in LangChain when using MCP tools.

Install the agent using easy_install/pip/distribute via the Python Package Index, using conda via the Conda-Forge Package Index, or download it directly from the New Relic download site.

New Features

• Add Redis commands introduced in Redis v8.10.0 and redis-py v8.1.0

  • The Python agent now supports the following recently added commands in Redis:
    • himport_discard_all
    • himport_discard
    • himport_prepare
    • lmovem
    • nrange
    • nrevrange
    • querylabels
    • read
    • sdiffcard
    • sunioncard
    • aliaslist

Bugs

• Fix missing LlmChatCompletion events in Gemini when using MCP tools

  • Previously, LlmChatCompletionMessages and LlmChatCompletionSummary events were missing in Gemini when using tools in a LangChain agent, if the response format was not the default JSON. This has been resolved.

• Swap to trace cache ID in LangChain and Agent Framework

  • For context propagation purposes, swap the LangChain and Agent Framework instrumentation to only store the trace cache ID rather than the full trace in a reference attribute. This is to prevent these objects from getting serialized unexpectedly in the case of leaks. The ID is a much smaller object while the trace could contain MBs of data.

Support statement

We recommend updating to the latest agent version as soon as it's available. If you can't upgrade to the latest version, update your agents to a version no more than 90 days old. Read more about keeping agents up to date.

See the New Relic Python agent EOL policy for information about agent releases and support dates.

Commits

• 2e612b0 Swap to Trace Cache ID in LangChain and AgentFramework (#1805)
• 9d788db Repair Tests in CI (#1807)
• a689541 Instrument New Redis Commands (#1806)
• b54cd2d Fix Missing ChatCompletion events in LangChain when using MCP (#1800)
• 2778c17 Bump the github_actions group with 3 updates (#1804)
• See full diff in compare view

Updates uvicorn from 0.51.0 to 0.52.1

Release notes

Sourced from uvicorn's releases.

Version 0.52.1

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Changelog

Sourced from uvicorn's changelog.

0.52.1 (August 1, 2026)

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Commits

• ee8e45c Version 0.52.1 (#3056)
• b57926d Remove duplicate content headers from WebSocket denial responses on websocket...
• 49de1b9 chore(deps): bump pymdown-extensions from 10.21.3 to 11.0 (#3042)
• 2f3fa3a Complete server-initiated closes in SansIO WebSocket protocols (#3053)
• 8c59d55 chore(deps): bump the github-actions group with 5 updates (#3054)
• e148451 Handle connection loss during WebSocket write backpressure (#3050)
• e16a69b Add missing write flow control to websockets-sansio (#3048)
• ef1dd44 Fold the zttp-only tests back into the HTTP test suite (#3046)
• 8f1b884 Version 0.52.0 (#3044)
• f6833db Add experimental zttp HTTP/1.1 protocol (#2979)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[brianglass]

Superseded by #188, which rebases this bump onto current main and adds django-ninja 1.6.2→1.6.3 to unblock the django 6.1 upgrade (1.6.2 pins Django<6.1, which is why this PR's build was failing).

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml