From 93a17f8eda69ec829caa72433fed3f3d1f25eccc Mon Sep 17 00:00:00 2001
From: Stan Ulbrych <stan@python.org>
Date: Fri, 6 Nov 2026 08:47:19 +0000
Subject: [PATCH 1/3] Add a `dependabot.yml` and bump deps

---
 .github/dependabot.yml  | 24 ++++++++++++++++++++++++
 deploy-requirements.txt |  6 ++++--
 requirements.txt        |  4 +++-
 3 files changed, 31 insertions(+), 3 deletions(-)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 00000000..7fdf2f8a
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,24 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "quarterly"
+    groups:
+      actions:
+        patterns:
+          - "*"
+    cooldown:
+      default-days: 14
+
+  # Covers requirements.txt, requirements-dev.txt, deploy-requirements.txt,
+  # setup.py and setup.cfg.
+  - package-ecosystem: "pip"
+    directory: "/"
+    schedule:
+      interval: "quarterly"
+    groups:
+      pip:
+        patterns: ["*"]
+    cooldown:
+      default-days: 14
diff --git a/deploy-requirements.txt b/deploy-requirements.txt
index 711c7577..3c392484 100644
--- a/deploy-requirements.txt
+++ b/deploy-requirements.txt
@@ -1,3 +1,5 @@
+# The production server runs Python 3.10.12, so pins must stay installable
+# there.
 -r requirements.txt
-psycopg2-binary==2.9.9
-gunicorn==21.2.0
+psycopg2-binary==2.9.13
+gunicorn==26.2.0
diff --git a/requirements.txt b/requirements.txt
index ea4a6b19..032ef73b 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,3 +1,5 @@
+# The production server runs Python 3.10.12, so pins must stay installable
+# there.
 django>=5.2,<7
-isodate==0.6.1
+isodate==0.7.2
 matplotlib

From 93b06903ce8572b36176b04b4dc45b337abe7091 Mon Sep 17 00:00:00 2001
From: Stan Ulbrych <stan@python.org>
Date: Fri, 6 Nov 2026 08:49:04 +0000
Subject: [PATCH 2/3] Also test on 3.10

---
 .github/workflows/test.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index f203f847..11145e8f 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -25,7 +25,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.12", "3.13", "3.14"]
+        python-version: ["3.10", "3.12", "3.13", "3.14"]
         django: ["5.2", "6.1"]
     name: Python ${{ matrix.python-version }} / Django ${{ matrix.django }}
     env:

From c5fa3c3bad6c389326e1cb95aaeadae0f1f3fa23 Mon Sep 17 00:00:00 2001
From: Stan Ulbrych <stan@python.org>
Date: Fri, 6 Nov 2026 08:51:06 +0000
Subject: [PATCH 3/3] Fix tests

---
 .github/workflows/test.yml | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 11145e8f..6004e82d 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -25,8 +25,13 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        python-version: ["3.10", "3.12", "3.13", "3.14"]
+        python-version: ["3.12", "3.13", "3.14"]
         django: ["5.2", "6.1"]
+        include:
+          # The production server runs Python 3.10, which Django 6 does
+          # not support, so only test it with Django 5.2.
+          - python-version: "3.10"
+            django: "5.2"
     name: Python ${{ matrix.python-version }} / Django ${{ matrix.django }}
     env:
       DJANGO_SETTINGS_MODULE: codespeed.tests.settings