⬆️(dependencies) update python dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
django-storages (changelog)	==1.14.5 -> ==1.14.6
ipython	==9.0.2 -> ==9.2.0
lxml (source, changelog)	==5.3.1 -> ==5.4.0
pytest-cov (changelog)	==6.0.0 -> ==6.1.1
pytest-django (changelog)	==4.10.0 -> ==4.11.1
sentry-sdk (changelog)	==2.24.1 -> ==2.27.0

---

Release Notes

jschneier/django-storages (django-storages)

v1.14.6

Compare Source

ipython/ipython (ipython)

v9.2.0

Compare Source

v9.1.0

Compare Source

lxml/lxml (lxml)

v5.4.0

Compare Source

==================

Bugs fixed

• LP#2107279: Binary wheels use libxml2 2.13.8 and libxslt 1.1.43 to resolve several CVEs.
  (Binary wheels for Windows continue to use a patched libxml2 2.11.9 and libxslt 1.1.39.)
  Issue found by Anatoly Katyushin.

v5.3.2

Compare Source

==================

This release resolves CVE-2025-24928 as described in
https://gitlab.gnome.org/GNOME/libxml2/-/issues/847

Bugs fixed

• Binary wheels use libxml2 2.12.10 and libxslt 1.1.42.

• Binary wheels for Windows use a patched libxml2 2.11.9 and libxslt 1.1.39.

pytest-dev/pytest-cov (pytest-cov)

v6.1.1

Compare Source

• Fixed breakage that occurs when --cov-context and the no_cover marker are used together.

v6.1.0

Compare Source

• Change terminal output to use full width lines for the coverage header.
  Contributed by Tsvika Shapira in #&#8203;678 <https://github.com/pytest-dev/pytest-cov/pull/678>_.
• Removed unnecessary CovFailUnderWarning. Fixes #&#8203;675 <https://github.com/pytest-dev/pytest-cov/issues/675>_.
• Fixed the term report not using the precision specified via --cov-precision.

pytest-dev/pytest-django (pytest-django)

v4.11.1

Compare Source

https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4111-2025-04-03

v4.11.0

Compare Source

https://github.com/pytest-dev/pytest-django/blob/main/docs/changelog.rst#v4110-2025-04-01

getsentry/sentry-python (sentry-sdk)

v2.27.0

Compare Source

Various fixes & improvements

• fix: Make sure to use the default decimal context in our code (#​4231) by @​antonpirker
• fix(integrations): ASGI integration not capture transactions in Websocket (#​4293) by @​guodong000
• feat(typing): Make all relevant types public (#​4315) by @​antonpirker
• feat(spans): Record flag evaluations as span attributes (#​4280) by @​cmanallen
• test(logs): Avoid failure when running with integrations enabled (#​4316) by @​rominf
• tests: Remove unused code and rerun (#​4313) by @​sentrivana
• tests: Add cohere to toxgen (#​4304) by @​sentrivana
• tests: Migrate fastapi to toxgen (#​4302) by @​sentrivana
• tests: Add huggingface_hub to toxgen (#​4299) by @​sentrivana
• tests: Add huey to toxgen (#​4298) by @​sentrivana
• tests: Update tox.ini (#​4297) by @​sentrivana
• tests: Move aiohttp under toxgen (#​4319) by @​sentrivana
• tests: Fix version picking in toxgen (#​4323) by @​sentrivana
• build(deps): bump codecov/codecov-action from 5.4.0 to 5.4.2 (#​4318) by @​dependabot

v2.26.1

Compare Source

Various fixes & improvements

• fix(threading): Data leak in ThreadingIntegration between threads (#​4281) by @​antonpirker
• fix(logging): Clarify separate warnings case is for Python <3.11 (#​4296) by @​szokeasaurusrex
• fix(logging): Add formatted message to log events (#​4292) by @​szokeasaurusrex
• fix(logging): Send raw logging parameters (#​4291) by @​szokeasaurusrex
• fix: Revert "chore: Deprecate same_process_as_parent (#​4244)" (#​4290) by @​sentrivana

v2.26.0

Compare Source

Various fixes & improvements

• fix(debug): Do not consider parent loggers for debug logging (#​4286) by @​szokeasaurusrex
• test(tracing): Simplify static/classmethod tracing tests (#​4278) by @​szokeasaurusrex
• feat(transport): Add a timeout (#​4252) by @​sentrivana
• meta: Change CODEOWNERS back to Python SDK owners (#​4269) by @​sentrivana
• feat(logs): Add sdk name and version as log attributes (#​4262) by @​AbhiPrasad
• feat(logs): Add server.address to logs (#​4257) by @​AbhiPrasad
• chore: Deprecate same_process_as_parent (#​4244) by @​sentrivana
• feat(logs): Add sentry.origin attribute for log handler (#​4250) by @​AbhiPrasad
• feat(tests): Add optional cutoff to toxgen (#​4243) by @​sentrivana
• toxgen: Retry & fail if we fail to fetch PyPI data (#​4251) by @​sentrivana
• build(deps): bump actions/create-github-app-token from 1.12.0 to 2.0.2 (#​4248) by @​dependabot
• Trying to prevent the grpc setup from being flaky (#​4233) by @​antonpirker
• feat(breadcrumbs): add _meta information for truncation of breadcrumbs (#​4007) by @​shellmayr
• tests: Move django under toxgen (#​4238) by @​sentrivana
• fix: Handle JSONDecodeError gracefully in StarletteRequestExtractor (#​4226) by @​moodix
• fix(asyncio): Remove shutdown handler (#​4237) by @​sentrivana

v2.25.1

Compare Source

Various fixes & improvements

• fix(logs): Add a class which batches groups of logs together. (#​4229) by @​colin-sentry
• fix(logs): Use repr instead of json for message and arguments (#​4227) by @​colin-sentry
• fix(logs): Debug output from Sentry logs should always be debug level. (#​4224) by @​antonpirker
• fix(ai): Do not consume anthropic streaming stop (#​4232) by @​colin-sentry
• fix(spotlight): Do not spam sentry_sdk.warnings logger w/ Spotlight (#​4219) by @​BYK
• fix(docs): fixed code snippet (#​4218) by @​antonpirker
• build(deps): bump actions/create-github-app-token from 1.11.7 to 1.12.0 (#​4214) by @​dependabot

v2.25.0

Compare Source

Various fixes & improvements

• New Beta Feature Enable Sentry logs in logging Integration (#​4143) by @​colin-sentry

  You can now send existing log messages to the new Sentry Logs feature.

  For more information see: https://github.com/getsentry/sentry/discussions/86804

  This is how you can use it (Sentry Logs is in beta right now so the API can still change):

  import logging
  
  import sentry_sdk
  from sentry_sdk.integrations.logging import LoggingIntegration

---

Configuration

📅 Schedule: Branch creation - "before 7am on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.