dependabot[bot]
80580d78f2
chore(deps): bump pypdf from 6.6.2 to 6.7.1 ( #37279 )
...
Bumps [pypdf](https://github.com/py-pdf/pypdf ) from 6.6.2 to 6.7.1.
- [Release notes](https://github.com/py-pdf/pypdf/releases )
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md )
- [Commits](https://github.com/py-pdf/pypdf/compare/6.6.2...6.7.1 )
---
updated-dependencies:
- dependency-name: pypdf
dependency-version: 6.7.1
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-20 10:04:51 +05:30
Ankush Menat
55aca7654d
build: Bump pillow ( #37047 )
2026-02-16 06:27:20 +00:00
Akhil Narang
95fbf02ed7
build(deps): move faker out of dev dependencies ( #36747 )
...
`frappe.mock()` uses it. Although that's used only in tests, its defined under frappe namespace, so should be accessible without development dependencies.
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2026-02-05 16:46:38 +05:30
Akhil Narang
76253eba00
build(deps): bump oauthlib and google stack ( #36509 )
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2026-01-30 10:13:49 +00:00
Akhil Narang
fb56fbcab8
Merge pull request #34740 from alexleach/bleach-to-nh3
...
refactor!: Replace bleach HTML sanitiser for nh3
2026-01-27 17:09:53 +05:30
dependabot[bot]
90403adfcd
build(deps): bump pypdf from 6.6.0 to 6.6.2
...
Bumps [pypdf](https://github.com/py-pdf/pypdf ) from 6.6.0 to 6.6.2.
- [Release notes](https://github.com/py-pdf/pypdf/releases )
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md )
- [Commits](https://github.com/py-pdf/pypdf/compare/6.6.0...6.6.2 )
---
updated-dependencies:
- dependency-name: pypdf
dependency-version: 6.6.2
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-01-27 00:01:09 +00:00
Sagar Vora
bb9c565a08
build: remove option types-bleach dependency
2026-01-23 15:19:28 +05:30
Sagar Vora
ca10a3af7a
build: improve nh3 dependency specification
2026-01-23 15:05:24 +05:30
Sagar Vora
125bd67ead
revert: undo manual pinning for tinycss2
2026-01-23 14:39:08 +05:30
ALB.Leach
e4376fc067
Merge branch 'develop' into bleach-to-nh3
2026-01-23 15:29:44 +07:00
Sagar Vora
b66e899d35
build: pin tinycss2 dependency manually
2026-01-23 13:23:28 +05:30
sokumon
9f9a7cf66b
chore: bump weasyprint
2026-01-23 13:22:23 +05:30
Ankush Menat
ee56afade5
refactor!: Remove UUID Utils library ( #36216 )
...
potentially minor breaking change - removal of a default dependency.
Use inbuilt `uuid` library instead of relying on third party lib.
py3.14 adds support for uuidv7, so we no longer need third party lib.
2026-01-22 11:40:11 +00:00
Markus Lobedann
740b65ff32
fix: update pyngrok dependency version to 7.5.0
...
6.0.0 doesn't work with unpaid accounts anymore
2026-01-15 09:19:29 +01:00
dependabot[bot]
fd715c3338
build(deps): bump pypdf from 6.5.0 to 6.6.0
...
Bumps [pypdf](https://github.com/py-pdf/pypdf ) from 6.5.0 to 6.6.0.
- [Release notes](https://github.com/py-pdf/pypdf/releases )
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md )
- [Commits](https://github.com/py-pdf/pypdf/compare/6.5.0...6.6.0 )
---
updated-dependencies:
- dependency-name: pypdf
dependency-version: 6.6.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
2026-01-09 20:09:39 +00:00
dependabot[bot]
469c5fb2ec
build(deps): bump werkzeug from 3.1.4 to 3.1.5 ( #35783 )
...
Bumps [werkzeug](https://github.com/pallets/werkzeug ) from 3.1.4 to 3.1.5.
- [Release notes](https://github.com/pallets/werkzeug/releases )
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/werkzeug/compare/3.1.4...3.1.5 )
---
updated-dependencies:
- dependency-name: werkzeug
dependency-version: 3.1.5
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-09 11:52:23 +05:30
Alex Leach
4ad934719b
chore: Replace bleach HTML sanitiser for nh3
2026-01-04 00:52:07 +00:00
Akhil Narang
8cb7e4b0b7
build(deps): bump freezegun
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-12-30 18:36:58 +05:30
Akhil Narang
e859b1d312
fix: disable UP040, revert some instances to TypeAlias
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-12-23 13:12:04 +05:30
Akhil Narang
e0cad22cdd
chore(ruff): ignore UP037
...
We do rely heavily on quoted types for deferred evaluation of type annotations.
We can slowly migrate to `from __future__ import annotations`, don't want to enforce it here right now.
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-12-22 21:06:48 +05:30
Akhil Narang
4c871f1c09
build(deps): bump
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-12-22 21:06:48 +05:30
Akhil Narang
345f17558a
build(deps): bump to python>=3.14, nodejs>=24
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-12-22 20:33:11 +05:30
Akhil Narang
44e47918b6
build(deps): bump filelock
...
Resolves CVE-2025-68146
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-12-17 12:39:01 +05:30
dependabot[bot]
ccb4afaa11
chore(deps): bump werkzeug from 3.1.3 to 3.1.4 ( #35010 )
...
Bumps [werkzeug](https://github.com/pallets/werkzeug ) from 3.1.3 to 3.1.4.
- [Release notes](https://github.com/pallets/werkzeug/releases )
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst )
- [Commits](https://github.com/pallets/werkzeug/compare/3.1.3...3.1.4 )
---
updated-dependencies:
- dependency-name: werkzeug
dependency-version: 3.1.4
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-02 11:01:37 +05:30
sokumon
8c69f3e542
fix(ci): update pypdf
2025-11-26 12:40:27 +05:30
Akhil Narang
b83ae4d793
build(deps): bump cryptography and openssl
...
This allows us to use 3.14 freethreaded
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-11-14 17:42:47 +05:30
Akhil Narang
0c3be512db
build(deps): bump RestrictedPython version [change to non-alpha before merging]
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-11-14 17:42:47 +05:30
Akhil Narang
c00a06445f
build(deps): bump pydantic version
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-11-14 17:42:47 +05:30
Akhil Narang
9d45a931d1
build(deps): bump orjson
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-11-14 17:42:47 +05:30
Akhil Narang
4ff5297d9e
build(deps): bump pypika
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-11-14 17:42:47 +05:30
Akhil Narang
336e1ea3a5
build: update python version range
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-11-14 17:42:47 +05:30
Akhil Narang
e11785199a
build(deps): bump pypdf ( #34485 )
...
Resolves GHSA-vr63-x8vc-m265 and GHSA-jfx9-29x2-rv3j
2025-10-24 07:50:04 +00:00
Ejaaz Khan
f74671267d
Merge branch 'develop' into chrome-pdf
2025-10-08 15:43:38 +05:30
Akhil Narang
835fcbd849
chore: use our copy of protected_inplacevar
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-10-03 00:13:55 +05:30
Ejaaz Khan
964dd6c034
feat: Chrome PDF generator
...
Co-authored-by: maharshivpatel <maharshivpatel@users.noreply.github.com>
2025-09-29 12:15:51 +05:30
Akhil Narang
def0746806
build(deps): bump weasyprint
...
Fixes an error with pydyf
```
File "env/lib/python3.11/site-packages/weasyprint/document.py", line 399, in write_pdf
pdf = generate_pdf(self, target, zoom, **options)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "env/lib/python3.11/site-packages/weasyprint/pdf/__init__.py", line 120, in generate_pdf
pdf = pydyf.PDF((version or '1.7'), identifier)
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: PDF.__init__() takes 1 positional argument but 3 were given
```
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-09-01 15:11:45 +05:30
Ayush Chaudhari
437483f612
chore(deps): bump coverage
2025-08-14 16:26:16 +05:30
Akhil Narang
c8418e174e
chore(deps): bump pypdf ( #33643 )
...
Resolves GHSA-7hfw-26vp-jp8m
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-08-14 09:46:03 +00:00
Akhil Narang
9a94e73489
feat: add in support for _inplacevar_ ( #31921 )
...
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-08-01 13:50:43 +05:30
Akhil Narang
b607500daf
build(deps): bump pillow ( #33193 )
...
Resolves PYSEC-2025-61
2025-07-02 17:31:30 +05:30
Sagar Vora
b857a4099a
perf: use orjson for faster request processing
2025-06-26 17:37:51 +05:30
Ankush Menat
8fbe452b4d
chore: Drop pdbpp ( #32992 )
...
Breaks console sometimes, don't see as much value TBH
```
Traceback (most recent call last):
File "/Users/mihirkandoi/Developer/frappe-develop/apps/frappe/frappe/utils/bench_helper.py", line 48, in invoke
return super().invoke(ctx)
~~~~~~~~~~~~~~^^^^^
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/click/core.py", line 1697, in invoke
return _process_result(sub_ctx.command.invoke(sub_ctx))
~~~~~~~~~~~~~~~~~~~~~~^^^^^^^^^
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/click/core.py", line 1443, in invoke
return ctx.invoke(self.callback, **ctx.params)
~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/click/core.py", line 788, in invoke
return __callback(*args, **kwargs)
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/click/decorators.py", line 33, in new_func
return f(get_current_context(), *args, **kwargs)
File "/Users/mihirkandoi/Developer/frappe-develop/apps/frappe/frappe/commands/__init__.py", line 28, in _func
ret = f(ctx.obj, *args, **kwargs)
File "/Users/mihirkandoi/Developer/frappe-develop/apps/frappe/frappe/commands/utils.py", line 646, in console
from IPython.terminal.embed import InteractiveShellEmbed
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/IPython/__init__.py", line 53, in <module>
from .core.application import Application
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/IPython/core/application.py", line 26, in <module>
from IPython.core import release, crashhandler
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/IPython/core/crashhandler.py", line 27, in <module>
from IPython.core import ultratb
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/IPython/core/ultratb.py", line 111, in <module>
from IPython.core import debugger
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/IPython/core/debugger.py", line 122, in <module>
from pdb import Pdb as OldPdb
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/_pdbpp_path_hack/pdb.py", line 5, in <module>
exec(compile(f.read(), pdb_path, 'exec'))
~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
File "/Users/mihirkandoi/Developer/frappe-develop/env/lib/python3.13/site-packages/pdb.py", line 28, in <module>
__version__ = fancycompleter.LazyVersion('pdbpp')
^^^^^^^^^^^^^^^^^^^^^^^^^^
AttributeError: module 'fancycompleter' has no attribute 'LazyVersion'
module 'fancycompleter' has no attribute 'LazyVersion'
```
2025-06-18 07:19:35 +00:00
Akhil Narang
865e086bd4
build: bump dependencies ( #32975 )
...
* build(deps): bump babel
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump filelock
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump GitPython
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump Jinja2
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump Pillow
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump PyJWT
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump pypdf
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump pydyf
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump werkzeug
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump bs4
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump bleach
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump chardet
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump croniter
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump cryptography
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump pyopenssl
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump cssutils
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump markdown2
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump markupsafe
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump num2words
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump openpyxl
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump phonenumbers
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump psutil
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump pydantic
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump pyotp
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump dateutil
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump ipython
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump pytz
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump hiredis
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump requests-oauthlib
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump requests
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump rsa
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump sql_metadata
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump tenacity
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump traceback-with-variables
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump tomli
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump uuid-utils
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump xlrd
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump zxcvbn
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump markdownify
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump google libraries
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump posthog
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* build(deps): bump vobject
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
* fix(zxcvbn): set max password length as 128
We allow checking till 128 characters, v4.5.0 has a default max of 72
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
---------
Signed-off-by: Akhil Narang <me@akhilnarang.dev>
2025-06-18 12:33:36 +05:30
Soham Kulkarni
77eda41443
Merge pull request #32351 from sokumon/offsite-backups-removal
...
refactor: separating backup integrations into an app
2025-06-17 23:30:51 +05:30
Ankush Menat
764410761f
build: Bump RQ ( #32969 )
...
https://github.com/rq/rq/compare/v2.3.2...v2.4
2025-06-17 18:48:29 +05:30
sokumon
422995cd45
fix: seperate backup options into app
2025-06-14 23:59:22 +05:30
Ankush Menat
e4bc7f361b
Revert: DocRef ( #32866 )
...
- Hardly used anywhere
- Too many hardcoded `__value__` calls without which it's not usable.
- Another type to worry about
2025-06-10 05:20:56 +00:00
Soham Kulkarni
eb7d597e34
chore: bump sentry-sdk ( #32856 )
2025-06-09 20:15:21 +05:30
sokumon
c645b2dd5e
chore: bump redis
2025-05-30 12:40:58 +05:30
sokumon
22e00c46c9
chore: pin click version
2025-05-12 01:34:39 +05:30