Repository navigation
[Multiple Assignees Possible] Dependency Update Report - August 27, 2026 🤖⬆️ #2371
Copy link
Copy link
Closed
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency filegood first issueGood for newcomersGood for newcomershelp wantedExtra attention is neededExtra attention is needed
Description
Dependency Update Report - August 27, 2026 🤖⬆️
Note
All tests should pass for PRs that are updating dependencies. See the local testing section of the contributing guide for more information on how to run tests before your PR. Please also limit the number of dependencies that are being updated in each PR to make it easy for maintainers to merge.
Warning
Note that the following dependencies have maximum versions set in the dependency_update_check.yaml workflow:
- Frontend: typescript@6.0.3
Please check whether maximum version restrictions can be removed and rerun the workflow without them if they can be.
Available Dependency Updates
| Package Name | Old Version | New Available Version | Type |
|---|---|---|---|
| annotated-doc | 0.0.4 | 0.0.5 | Backend |
| anyio | 4.12.1 | 4.14.2 | Backend |
| asgiref | 3.11.1 | 3.12.1 | Backend |
| ast-serialize | 0.6.0 | 0.8.0 | Backend |
| attrs | 25.4.0 | 26.1.0 | Backend |
| certifi | 2026.2.25 | 2026.7.22 | Backend |
| charset-normalizer | 3.4.4 | 3.5.1 | Backend |
| coverage | 7.13.4 | 7.15.4 | Backend |
| djangorestframework-stubs | 3.18.0 | 3.18.1 | Backend |
| faker | 40.8.0 | 40.37.0 | Backend |
| gunicorn | 26.0.0 | 26.2.0 | Backend |
| icalendar | 7.2.2 | 7.3.0 | Backend |
| idna | 3.15 | 3.19 | Backend |
| imagesize | 2.0.0 | 2.0.1 | Backend |
| librt | 0.13.0 | 0.15.0 | Backend |
| markdown-it-py | 4.0.0 | 4.2.0 | Backend |
| pathspec | 1.0.4 | 1.1.1 | Backend |
| prek | 0.4.13 | 0.5.0 | Backend |
| pygments | 2.20.0 | 2.21.0 | Backend |
| pysentry-rs | 0.4.9 | 0.5.0 | Backend |
| python-dotenv | 1.2.2 | 1.2.3 | Backend |
| rpds-py | 0.30.0 | 2026.6.3 | Backend |
| ruff | 0.16.3 | 0.16.5 | Backend |
| snowballstemmer | 3.0.1 | 3.1.1 | Backend |
| typer | 0.26.3 | 0.27.1 | Backend |
| types-python-dateutil | 2.9.0.20260302 | 2.9.0.20260807 | Backend |
| types-pytz | 2026.1.1.20260304 | 2026.3.1.20260727 | Backend |
| types-pyyaml | 6.0.12.20250915 | 6.0.12.20260815 | Backend |
| typing-extensions | 4.15.0 | 4.16.0 | Backend |
| tzdata | 2025.3 | 2026.3 | Backend |
| @axe-core/playwright | 4.12.1 | 4.13.0 | Frontend |
| @nuxt/devtools | 3.3.1 | 3.4.1 | Frontend |
| @nuxt/eslint | 1.16.0 | 1.17.0 | Frontend |
| @nuxt/eslint-config | 1.16.0 | 1.17.0 | Frontend |
| @nuxt/icon | 2.2.5 | 2.5.0 | Frontend |
| @nuxt/test-utils | 4.0.3 | 4.1.0 | Frontend |
| @nuxtjs/i18n | 10.4.0 | 10.6.0 | Frontend |
| @tailwindcss/vite | 4.3.2 | 4.3.3 | Frontend |
| @tiptap/core | 3.27.1 | 3.30.2 | Frontend |
| @tiptap/extension-link | 3.27.1 | 3.30.2 | Frontend |
| @tiptap/extension-mention | 3.27.1 | 3.30.2 | Frontend |
| @tiptap/extension-placeholder | 3.27.1 | 3.30.2 | Frontend |
| @tiptap/extensions | 3.27.1 | 3.30.2 | Frontend |
| @tiptap/pm | 3.27.1 | 3.30.2 | Frontend |
| @tiptap/starter-kit | 3.27.1 | 3.30.2 | Frontend |
| @tiptap/suggestion | 3.27.1 | 3.30.2 | Frontend |
| @tiptap/vue-3 | 3.27.1 | 3.30.2 | Frontend |
| @types/node | 26.1.1 | 26.2.0 | Frontend |
| @unocss/reset | 66.7.4 | 66.8.0 | Frontend |
| @vitest/coverage-v8 | 4.1.10 | 4.1.11 | Frontend |
| @vueuse/core | 14.3.0 | 14.4.0 | Frontend |
| @vueuse/integrations | 14.3.0 | 14.4.0 | Frontend |
| @vueuse/math | 14.3.0 | 14.4.0 | Frontend |
| @vueuse/nuxt | 14.3.0 | 14.4.0 | Frontend |
| autoprefixer | 10.5.2 | 10.5.4 | Frontend |
| axe-core | 4.12.1 | 4.13.0 | Frontend |
| axios | 1.18.1 | 1.19.0 | Frontend |
| dompurify | 3.4.13 | 3.4.14 | Frontend |
| eslint | 10.6.0 | 10.8.1 | Frontend |
| eslint-plugin-perfectionist | 5.9.1 | 5.10.1 | Frontend |
| eslint-plugin-vue | 10.9.2 | 10.10.0 | Frontend |
| eslint-plugin-vuejs-accessibility | 2.5.0 | 2.6.0 | Frontend |
| happy-dom | 20.10.6 | 20.11.6 | Frontend |
| lint-staged | 17.0.8 | 17.3.0 | Frontend |
| maplibre-gl | 5.24.0 | 6.4.1 | Frontend |
| npm-check-updates | not present | ^23.1.0 | Frontend |
| nuxt-auth-utils | 0.5.29 | 0.5.30 | Frontend |
| postcss | 8.5.23 | 8.5.26 | Frontend |
| prettier | 3.9.5 | 3.9.6 | Frontend |
| prettier-plugin-tailwindcss | 0.8.0 | 0.8.1 | Frontend |
| rollup | 4.62.2 | 4.62.5 | Frontend |
| swiper | 14.0.5 | 14.1.0 | Frontend |
| tailwindcss | 4.3.2 | 4.3.3 | Frontend |
| unocss | 66.7.5 | 66.8.0 | Frontend |
| uuid | 14.0.1 | 14.0.2 | Frontend |
| vite | 8.1.0 | 8.2.2 | Frontend |
| vitest | 4.1.10 | 4.1.11 | Frontend |
| vue | 3.5.39 | 3.5.41 | Frontend |
| vue-i18n | 11.4.6 | 11.4.8 | Frontend |
| vue-tsc | 3.3.6 | 3.3.10 | Frontend |
| wait-on | 9.0.10 | 9.1.0 | Frontend |
| zod | 3.25.76 | 4.4.3 | Frontend |
Backend Tests
Ruff Lint Results
All checks passed!
mypy Results
Success: no issues found in 83 source files
Pytest Results
........................................................................ [ 16%]
........................................................................ [ 32%]
........................................................................ [ 48%]
........................................ssss.s.......................... [ 65%]
........................................................................ [ 81%]
........................................................................ [ 97%]
........... [100%]
================================ tests coverage ================================
_______________ coverage: platform linux, python 3.13.15-final-0 _______________
Name Stmts Miss Cover Missing
------------------------------------------------------------------------------------------------------
authentication/admin.py 75 2 97% 171-172
authentication/apps.py 4 0 100%
authentication/enums.py 11 0 100%
authentication/models.py 89 7 92% 90-92, 134-136, 210
authentication/serializers.py 98 6 94% 110-114, 191-195
authentication/tasks.py 10 0 100%
authentication/urls.py 7 0 100%
authentication/views.py 215 11 95% 66-69, 75-76, 262, 284, 339, 459-463
communities/admin.py 43 0 100%
communities/apps.py 4 0 100%
communities/groups/filters.py 8 0 100%
communities/groups/models.py 60 2 97% 66, 137
communities/groups/serializers.py 120 22 82% 227, 243-277, 319, 339-344
communities/groups/views.py 293 23 92% 78, 102-107, 156, 164-166, 193, 236-237, 253-255, 402, 490, 509, 543, 683, 708
communities/models.py 11 0 100%
communities/organizations/filters.py 20 4 80% 65-71
communities/organizations/models.py 84 2 98% 113, 180
communities/organizations/serializers.py 139 29 79% 66-73, 217, 233-264, 344, 364-371
communities/organizations/views.py 378 44 88% 82, 113-114, 120, 142-155, 197, 222-232, 241-242, 301, 360, 439, 459-467, 490-491, 508-510, 660, 697, 809, 828, 862, 865, 1013, 1038
communities/serializers.py 10 0 100%
communities/urls.py 18 0 100%
communities/views.py 8 0 100%
conftest.py 14 0 100%
content/admin.py 17 0 100%
content/apps.py 4 0 100%
content/models.py 145 6 96% 114-116, 161-162, 331
content/serializers.py 166 20 88% 105, 108-109, 115-125, 270-274, 356-361, 391, 414-415, 430-434
content/urls.py 11 0 100%
content/views.py 234 16 93% 61, 72, 144, 155, 226, 233, 243-244, 317-318, 334-335, 410, 448-452
core/admin.py 4 0 100%
core/custom_settings.py 2 0 100%
core/exception_handler.py 10 0 100%
core/filescan/filescan_client.py 25 5 80% 41, 44, 87-92
core/filescan/scan_helpers.py 20 1 95% 41
core/internal_events.py 75 13 83% 57-58, 89, 108, 114, 122-123, 159, 168-172, 203-205
core/management/commands/clear_dev_images.py 23 4 83% 39, 47-48, 55
core/management/commands/populate_db.py 110 3 97% 143, 324-325
core/management/commands/populate_db_utils/populate_org_events.py 51 7 86% 130-131, 146-150, 165-171
core/management/commands/populate_db_utils/populate_org_group_event.py 49 7 86% 122-123, 137-141, 156-165
core/management/commands/populate_db_utils/populate_org_groups.py 47 7 85% 108-109, 124-128, 143-152
core/management/commands/populate_db_utils/populate_orgs.py 48 7 85% 110-114, 130-134, 150-159
core/management/commands/wait_for_db.py 27 0 100%
core/paginator.py 6 0 100%
core/permissions.py 14 0 100%
core/serializers.py 13 0 100%
core/settings.py 63 2 97% 24-25
core/urls.py 9 0 100%
events/admin.py 36 0 100%
events/apps.py 4 0 100%
events/filters.py 48 8 83% 79-83, 112, 161-162, 165
events/models.py 102 5 95% 109-110, 118, 170, 220
events/serializers.py 211 29 86% 325-339, 345, 350, 358, 365-370, 419, 492, 506, 517, 537-544, 564-569, 620-622
events/urls.py 9 0 100%
events/views.py 336 30 91% 83, 92, 103, 116, 137-138, 159-163, 201, 211-213, 228, 236-238, 265, 273-275, 309-310, 327-331, 477, 620, 639, 673
utils/models.py 1 0 100%
utils/utils.py 12 0 100%
utils/validate_pytest_structure.py 49 49 0% 6-135
------------------------------------------------------------------------------------------------------
TOTAL 3700 371 90%
Required test coverage of 85% reached. Total coverage: 89.97%
438 passed, 5 skipped, 1502 warnings in 365.45s (0:06:05)
Frontend Tests
ESLint Results
Type Check Results
[info] Nuxt Icon server bundle mode is set to `local`
app/components/form/FormSearchLocation.vue(71,7): error TS2769: No overload matches this call.
Overload 1 of 2, '(params?: string | { error?: string | $ZodErrorMap<$ZodIssueInvalidType<unknown>> | undefined; message?: string | undefined; } | undefined): ZodString', gave the following error.
Object literal may only specify known properties, and 'required_error' does not exist in type '{ error?: string | $ZodErrorMap<$ZodIssueInvalidType<unknown>> | undefined; message?: string | undefined; }'.
Overload 2 of 2, '(params?: string | { error?: string | $ZodErrorMap<$ZodIssueInvalidType<unknown>> | undefined; message?: string | undefined; } | undefined): $ZodType<...>', gave the following error.
Object literal may only specify known properties, and 'required_error' does not exist in type '{ error?: string | $ZodErrorMap<$ZodIssueInvalidType<unknown>> | undefined; message?: string | undefined; }'.
app/components/machine/steps/createOrganization/MachineStepsCreateOrganizationsLocation.vue(68,7): error TS2769: No overload matches this call.
Overload 1 of 2, '(params?: string | { error?: string | $ZodErrorMap<$ZodIssueInvalidType<unknown>> | undefined; message?: string | undefined; } | undefined): ZodString', gave the following error.
Object literal may only specify known properties, and 'required_error' does not exist in type '{ error?: string | $ZodErrorMap<$ZodIssueInvalidType<unknown>> | undefined; message?: string | undefined; }'.
Overload 2 of 2, '(params?: string | { error?: string | $ZodErrorMap<$ZodIssueInvalidType<unknown>> | undefined; message?: string | undefined; } | undefined): $ZodType<...>', gave the following error.
Object literal may only specify known properties, and 'required_error' does not exist in type '{ error?: string | $ZodErrorMap<$ZodIssueInvalidType<unknown>> | undefined; message?: string | undefined; }'.
app/composables/map/useClusterMap.ts(6,8): error TS1192: Module '"/home/runner/work/activist/activist/frontend/node_modules/maplibre-gl/dist/maplibre-gl"' has no default export.
app/composables/map/useClusterMap.ts(134,69): error TS7006: Parameter 'leaves' implicitly has an 'any' type.
app/composables/map/useClusterMap.ts(135,32): error TS7006: Parameter 'leaf' implicitly has an 'any' type.
app/composables/map/useMap.ts(2,8): error TS1192: Module '"/home/runner/work/activist/activist/frontend/node_modules/maplibre-gl/dist/maplibre-gl"' has no default export.
app/composables/map/useMap.ts(81,14): error TS7006: Parameter 'image' implicitly has an 'any' type.
app/composables/map/usePointerMap.ts(5,8): error TS1192: Module '"/home/runner/work/activist/activist/frontend/node_modules/maplibre-gl/dist/maplibre-gl"' has no default export.
app/composables/map/useRoutingMap.ts(2,13): error TS1192: Module '"/home/runner/work/activist/activist/frontend/node_modules/maplibre-gl/dist/maplibre-gl"' has no default export.
Vitest Results
RUN v4.1.11 /home/runner/work/activist/activist/frontend
················································································································································································································································································································································································································································································································································································································································································································································································································································································---··················································································································································································································--······························································································-······································································································································································xstderr | test/components/form/FormItem.spec.ts > FormItem component > shows error message when field validation fails
[Vue warn]: Plugin has already been applied to target app.
········stdout | test/components/form/FormItem.spec.ts
<Suspense> is an experimental feature and its API will likely change.
···································································································································································--·····································································xstderr | test/components/form/Form.spec.ts > Form component > shows validation errors when fields are empty
[Vue warn]: Plugin has already been applied to target app.
·xstderr | test/components/form/Form.spec.ts > Form component > shows and clears error for family member after invalid and valid input
[Vue warn]: Plugin has already been applied to target app.
stderr | test/components/form/Form.spec.ts > Form component > shows and clears error for family member after invalid and valid input
Failed to describe path familyMembers[0].name on the schema, returning a default description.
·stdout | test/components/form/Form.spec.ts
<Suspense> is an experimental feature and its API will likely change.
····························································································································--···························································································································································································
⎯⎯⎯⎯⎯⎯⎯ Failed Tests 3 ⎯⎯⎯⎯⎯⎯⎯
FAIL test/components/form/Form.spec.ts > Form component > shows validation errors when fields are empty
AssertionError: expected 'Invalid input: expected string, recei…' to be 'Required' // Object.is equality
Expected: �[32m"�[7mRequir�[27med"�[39m
Received: �[31m"�[7mInvalid input: expected string, received undefin�[27med"�[39m
❯ test/components/form/Form.spec.ts:19:35
17| await fireEvent.click(submitBtn);
18| const nameError = await screen.findByTestId("form-item-name-error"…
19| expect(nameError.textContent).toBe("Required");
| ^
20|
21| // Family Members validation (no members initially—should be valid…
⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯[1/3]⎯
FAIL test/components/form/Form.spec.ts > Form component > shows and clears error for family member after invalid and valid input
AssertionError: expected 'Invalid input: expected string, recei…' to be 'Required' // Object.is equality
Expected: �[32m"�[7mRequir�[27med"�[39m
Received: �[31m"�[7mInvalid input: expected string, received undefin�[27med"�[39m
❯ test/components/form/Form.spec.ts:73:38
71| "form-item-familyMembers.0.name-error"
72| );
73| expect(famNameError.textContent).toBe("Required");
| ^
74|
75| // Correct family member name.
⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯[2/3]⎯
FAIL test/components/form/FormItem.spec.ts > FormItem component > shows error message when field validation fails
AssertionError: expected 'Invalid input: expected string, recei…' to be 'Required' // Object.is equality
Expected: �[32m"�[7mRequir�[27med"�[39m
Received: �[31m"�[7mInvalid input: expected string, received undefin�[27med"�[39m
❯ test/components/form/FormItem.spec.ts:52:35
50|
51| const nameError = await screen.findByTestId("form-item-name-error"…
52| expect(nameError.textContent).toBe("Required");
| ^
53| });
54|
⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯⎯[3/3]⎯
Test Files 2 failed | 173 passed | 2 skipped (177)
Tests 3 failed | 1871 passed | 2 skipped | 8 todo (1884)
Start at 19:36:20
Duration 72.93s (transform 15.97s, setup 18.57s, import 17.34s, tests 91.65s, environment 63.44s)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
dependenciesPull requests that update a dependency filePull requests that update a dependency filegood first issueGood for newcomersGood for newcomershelp wantedExtra attention is neededExtra attention is needed
Type
Projects
- StatusShow more project fieldsDone
Activity
andrewtavis commentedon Aug 27, 2026
CC @Suyoag and @nicki182 😊😊
This is great! Let us know if you'd like to continue on some of these updates, @Suyoag :)
andrewtavis commentedon Aug 27, 2026
And I agree with @nicki182's thinking here that the frontend errors are from Zod. Looks like we could do a general update while keeping those issues in mind :)
eshadesigns commentedon Aug 30, 2026
Hi @andrewtavis I'm a software engineering student looking to make my first open-source contribution for a class assignment. Could I be assigned this issue?
andrewtavis commentedon Aug 31, 2026
Sure thing, @eshadesigns! Feel free to send along a PR that updates some of the dependencies above :)
andrewtavis commentedon Aug 31, 2026
Note that others can also be assigned this issue 😊
andrewtavis commentedon Aug 31, 2026
@sh-ran, @nicki182: Do you think that making it clear that multiple people can be assigned these issues would make sense so people don't not write in? So we could change the title to something like
[Multiple assignees possible] Dependency Update Report - August 27, 2026 🤖⬆️. Does this make sense?nicki182 commentedon Aug 31, 2026
@andrewtavis it doesn't hurt to clarify
andrewtavis commentedon Aug 31, 2026
Updated the issue title given the above :)
[-]Dependency Update Report - August 27, 2026 🤖⬆️[/-][+][Multiple Assignees Possible] Dependency Update Report - August 27, 2026 🤖⬆️[/+]19 remaining items
andrewtavis commentedon Sep 11, 2026
Was correct to send along the PR, @MedhanshUrs :) We'll pick it up in there!
MedhanshUrs commentedon Sep 11, 2026
I have no clue why the PR is throwing errors... It ran fine on my laptop.
nicki182 commentedon Sep 11, 2026
@MedhanshUrs all good, please tell us your node version, yarn version and npm that you are using locally
MedhanshUrs commentedon Sep 11, 2026
Node: v24.20.0
Yarn: 4.18.0
Npm: 11.19.0
andrewtavis commentedon Sep 13, 2026
Quick FYI @MedhanshUrs that @nicki182 and I have a call tomorrow where we'll discuss this a bit and get back to you :)
pinreddysu commentedon Sep 14, 2026
Hi @andrewtavis I'm a software engineer looking to make my first open-source contribution. Could I be assigned this issue? If the issue, is not completed yet. Also, do you know what other dependencies are left that I can work on?
andrewtavis commentedon Sep 14, 2026
Hi @pinreddysu 👋 We're currently working on #2398, and can then revisit this once that's brought in. Feel free to look into dependencies that that PR isn't updating though. I think that we could do a backend dependency update PR as well.
andrewtavis commentedon Sep 14, 2026
@MedhanshUrs and @pinreddysu 👋 I ended up closing #2398 as this PR wasn't working locally and also didn't provide the needed updates to make tiptap work. It'd be great if we got more PRs to work on the dependencies, but @nicki182 and I would ask that there are only a few dependencies being updated for each PR. We can do all the tiptap ones in one PR, but the others should be limited.
pinreddysu commentedon Sep 14, 2026
Sounds Good. Is backend dependencies up for grabs? @andrewtavis
andrewtavis commentedon Sep 14, 2026
Sure thing, @pinreddysu :) Feel free to send along a PR to update some of the ones you see listed above!
MedhanshUrs commentedon Sep 15, 2026
Ok then, I’ll split the dependency updates into smaller PRs and focus on tiptap for a singular update.
andrewtavis commentedon Sep 15, 2026
Nice, @MedhanshUrs! Looking into Maplibre would be the next one to look into, with that finalizing #2404 :)
andrewtavis commentedon Sep 15, 2026
We run this workflow on the 15th of the month normally, so we actually have the newest version in #2406 :) @MedhanshUrs and @pinreddysu (as well as others!), let's maybe pick this up with this new issue. Feel free to write in and I'll assign 😊