Combined PRs (#18870)

* chore(deps): bump node from 24.9.0-bookworm to 24.10.0-bookworm

Bumps node from 24.9.0-bookworm to 24.10.0-bookworm.

---
updated-dependencies:
- dependency-name: node
  dependency-version: 24.10.0-bookworm
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump msgpack from 1.1.1 to 1.1.2

Bumps [msgpack](https://github.com/msgpack/msgpack-python) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst)
- [Commits](msgpack/msgpack-python@v1.1.1...v1.1.2)

---
updated-dependencies:
- dependency-name: msgpack
  dependency-version: 1.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump github/codeql-action from 3.30.5 to 4.30.8

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3.30.5 to 4.30.8.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@3599b3b...f443b60)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.30.8
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump actions/setup-node from 5.0.0 to 6.0.0

Bumps [actions/setup-node](https://github.com/actions/setup-node) from 5.0.0 to 6.0.0.
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](actions/setup-node@a0853c2...2028fbc)

---
updated-dependencies:
- dependency-name: actions/setup-node
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump webtest from 3.0.6 to 3.0.7

Bumps [webtest](https://github.com/Pylons/webtest) from 3.0.6 to 3.0.7.
- [Commits](Pylons/webtest@3.0.6...3.0.7)

---
updated-dependencies:
- dependency-name: webtest
  dependency-version: 3.0.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump pyupgrade from 3.20.0 to 3.21.0

Bumps [pyupgrade](https://github.com/asottile/pyupgrade) from 3.20.0 to 3.21.0.
- [Commits](asottile/pyupgrade@v3.20.0...v3.21.0)

---
updated-dependencies:
- dependency-name: pyupgrade
  dependency-version: 3.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump types-awscrt from 0.27.6 to 0.28.1

Bumps [types-awscrt](https://github.com/youtype/types-awscrt) from 0.27.6 to 0.28.1.
- [Release notes](https://github.com/youtype/types-awscrt/releases)
- [Commits](youtype/types-awscrt@0.27.6...0.28.1)

---
updated-dependencies:
- dependency-name: types-awscrt
  dependency-version: 0.28.1
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump google-cloud-storage from 3.4.0 to 3.4.1

Bumps [google-cloud-storage](https://github.com/googleapis/python-storage) from 3.4.0 to 3.4.1.
- [Release notes](https://github.com/googleapis/python-storage/releases)
- [Changelog](https://github.com/googleapis/python-storage/blob/main/CHANGELOG.md)
- [Commits](googleapis/python-storage@v3.4.0...v3.4.1)

---
updated-dependencies:
- dependency-name: google-cloud-storage
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump alembic from 1.16.5 to 1.17.0

Bumps [alembic](https://github.com/sqlalchemy/alembic) from 1.16.5 to 1.17.0.
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

---
updated-dependencies:
- dependency-name: alembic
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump faker from 37.8.0 to 37.11.0

Bumps [faker](https://github.com/joke2k/faker) from 37.8.0 to 37.11.0.
- [Release notes](https://github.com/joke2k/faker/releases)
- [Changelog](https://github.com/joke2k/faker/blob/master/CHANGELOG.md)
- [Commits](joke2k/faker@v37.8.0...v37.11.0)

---
updated-dependencies:
- dependency-name: faker
  dependency-version: 37.11.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump rich from 14.1.0 to 14.2.0

Bumps [rich](https://github.com/Textualize/rich) from 14.1.0 to 14.2.0.
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md)
- [Commits](Textualize/rich@v14.1.0...v14.2.0)

---
updated-dependencies:
- dependency-name: rich
  dependency-version: 14.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump nh3 from 0.3.0 to 0.3.1

Bumps nh3 from 0.3.0 to 0.3.1.

---
updated-dependencies:
- dependency-name: nh3
  dependency-version: 0.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump disposable-email-domains from 0.0.137 to 0.0.139

Bumps [disposable-email-domains](https://github.com/disposable-email-domains/disposable-email-domains) from 0.0.137 to 0.0.139.
- [Commits](https://github.com/disposable-email-domains/disposable-email-domains/commits)

---
updated-dependencies:
- dependency-name: disposable-email-domains
  dependency-version: 0.0.139
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump platformdirs from 4.4.0 to 4.5.0

Bumps [platformdirs](https://github.com/tox-dev/platformdirs) from 4.4.0 to 4.5.0.
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst)
- [Commits](tox-dev/platformdirs@4.4.0...4.5.0)

---
updated-dependencies:
- dependency-name: platformdirs
  dependency-version: 4.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump attrs from 25.3.0 to 25.4.0

Bumps [attrs](https://github.com/sponsors/hynek) from 25.3.0 to 25.4.0.
- [Commits](https://github.com/sponsors/hynek/commits)

---
updated-dependencies:
- dependency-name: attrs
  dependency-version: 25.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump sigstore from 3.6.5 to 3.6.6

Bumps [sigstore](https://github.com/sigstore/sigstore-python) from 3.6.5 to 3.6.6.
- [Release notes](https://github.com/sigstore/sigstore-python/releases)
- [Changelog](https://github.com/sigstore/sigstore-python/blob/v3.6.6/CHANGELOG.md)
- [Commits](sigstore/sigstore-python@v3.6.5...v3.6.6)

---
updated-dependencies:
- dependency-name: sigstore
  dependency-version: 3.6.6
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump filelock from 3.19.1 to 3.20.0

Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.19.1 to 3.20.0.
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.19.1...3.20.0)

---
updated-dependencies:
- dependency-name: filelock
  dependency-version: 3.20.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump multidict from 6.6.4 to 6.7.0

Bumps [multidict](https://github.com/aio-libs/multidict) from 6.6.4 to 6.7.0.
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.6.4...v6.7.0)

---
updated-dependencies:
- dependency-name: multidict
  dependency-version: 6.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump certifi from 2025.8.3 to 2025.10.5

Bumps [certifi](https://github.com/certifi/python-certifi) from 2025.8.3 to 2025.10.5.
- [Commits](certifi/python-certifi@2025.08.03...2025.10.05)

---
updated-dependencies:
- dependency-name: certifi
  dependency-version: 2025.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump idna from 3.10 to 3.11

Bumps [idna](https://github.com/kjd/idna) from 3.10 to 3.11.
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.10...v3.11)

---
updated-dependencies:
- dependency-name: idna
  dependency-version: '3.11'
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump cachetools from 5.5.2 to 6.2.1

Bumps [cachetools](https://github.com/tkem/cachetools) from 5.5.2 to 6.2.1.
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v5.5.2...v6.2.1)

---
updated-dependencies:
- dependency-name: cachetools
  dependency-version: 6.2.1
  dependency-type: indirect
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump isort from 6.0.1 to 7.0.0

Bumps [isort](https://github.com/PyCQA/isort) from 6.0.1 to 7.0.0.
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](PyCQA/isort@6.0.1...7.0.0)

---
updated-dependencies:
- dependency-name: isort
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump charset-normalizer from 3.4.2 to 3.4.4

Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer) from 3.4.2 to 3.4.4.
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.2...3.4.4)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.4.4
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump ddtrace from 3.15.0 to 3.16.0

Bumps [ddtrace](https://github.com/DataDog/dd-trace-py) from 3.15.0 to 3.16.0.
- [Release notes](https://github.com/DataDog/dd-trace-py/releases)
- [Changelog](https://github.com/DataDog/dd-trace-py/blob/main/CHANGELOG.md)
- [Commits](DataDog/dd-trace-py@v3.15.0...v3.16.0)

---
updated-dependencies:
- dependency-name: ddtrace
  dependency-version: 3.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump types-s3transfer from 0.13.1 to 0.14.0

Bumps [types-s3transfer](https://github.com/youtype/types-s3transfer) from 0.13.1 to 0.14.0.
- [Release notes](https://github.com/youtype/types-s3transfer/releases)
- [Commits](https://github.com/youtype/types-s3transfer/commits)

---
updated-dependencies:
- dependency-name: types-s3transfer
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps-dev): bump pip-tools from 7.5.0 to 7.5.1

Bumps [pip-tools](https://github.com/jazzband/pip-tools) from 7.5.0 to 7.5.1.
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md)
- [Commits](jazzband/pip-tools@v7.5.0...v7.5.1)

---
updated-dependencies:
- dependency-name: pip-tools
  dependency-version: 7.5.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump click from 8.2.1 to 8.3.0

Bumps [click](https://github.com/pallets/click) from 8.2.1 to 8.3.0.
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.2.1...8.3.0)

---
updated-dependencies:
- dependency-name: click
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump cattrs from 25.2.0 to 25.3.0

Bumps [cattrs](https://github.com/python-attrs/cattrs) from 25.2.0 to 25.3.0.
- [Release notes](https://github.com/python-attrs/cattrs/releases)
- [Changelog](https://github.com/python-attrs/cattrs/blob/main/HISTORY.md)
- [Commits](python-attrs/cattrs@v25.2.0...v25.3.0)

---
updated-dependencies:
- dependency-name: cattrs
  dependency-version: 25.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump sentry-sdk from 2.39.0 to 2.42.0

Bumps [sentry-sdk](https://github.com/getsentry/sentry-python) from 2.39.0 to 2.42.0.
- [Release notes](https://github.com/getsentry/sentry-python/releases)
- [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-python@2.39.0...2.42.0)

---
updated-dependencies:
- dependency-name: sentry-sdk
  dependency-version: 2.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump types-html5lib from 1.1.11.20250917 to 1.1.11.20251014

Bumps [types-html5lib](https://github.com/typeshed-internal/stub_uploader) from 1.1.11.20250917 to 1.1.11.20251014.
- [Commits](https://github.com/typeshed-internal/stub_uploader/commits)

---
updated-dependencies:
- dependency-name: types-html5lib
  dependency-version: 1.1.11.20251014
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump sqlalchemy[asyncio] from 2.0.43 to 2.0.44

Bumps [sqlalchemy[asyncio]](https://github.com/sqlalchemy/sqlalchemy) from 2.0.43 to 2.0.44.
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

---
updated-dependencies:
- dependency-name: sqlalchemy[asyncio]
  dependency-version: 2.0.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump watchfiles from 1.1.0 to 1.1.1

Bumps [watchfiles](https://github.com/samuelcolvin/watchfiles) from 1.1.0 to 1.1.1.
- [Release notes](https://github.com/samuelcolvin/watchfiles/releases)
- [Commits](samuelcolvin/watchfiles@v1.1.0...v1.1.1)

---
updated-dependencies:
- dependency-name: watchfiles
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

* chore(deps): bump pytokens from 0.1.10 to 0.2.0

Bumps [pytokens](https://github.com/tusharsadhwani/pytokens) from 0.1.10 to 0.2.0.
- [Commits](tusharsadhwani/pytokens@0.1.10...0.2.0)

---
updated-dependencies:
- dependency-name: pytokens
  dependency-version: 0.2.0
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: pypi-combine-prs[bot] <144945619+pypi-combine-prs[bot]@users.noreply.github.com>

Author: pypi-combine-prs[bot]

.github/workflows/codeql-analysis.yml

@@ -54,7 +54,7 @@ jobs:
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
+      uses: github/codeql-action/init@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5
       with:
         languages: ${{ matrix.language }}
         # If you wish to specify custom queries, you can do so here or in a config file.
@@ -68,7 +68,7 @@ jobs:
     # Autobuild attempts to build any compiled languages  (C/C++, C#, or Java).
     # If this step fails, then you should remove it and run the build manually (see below)
     - name: Autobuild
-      uses: github/codeql-action/autobuild@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
+      uses: github/codeql-action/autobuild@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5
 
     # ℹ️ Command-line programs to run using the OS shell.
     # 📚 See https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#jobsjob_idstepsrun
@@ -81,6 +81,6 @@ jobs:
     #   ./location_of_script_within_repo/buildscript.sh
 
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
+      uses: github/codeql-action/analyze@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5
       with:
         category: "/language:${{matrix.language}}"

.github/workflows/node-ci.yml

@@ -30,7 +30,7 @@ jobs:
         uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
         with:
             persist-credentials: false
-      - uses: actions/setup-node@a0853c24544627f65ddf259abe73b1d18a591444 # v5.0.0
+      - uses: actions/setup-node@2028fbc5c25fe9cf00d9f06a71cc4710d4507903 # v6.0.0
         with:
           node-version: 24.8.0
           cache: 'npm'

.github/workflows/zizmor.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Run zizmor
         run: pipx run zizmor --format sarif . > results.sarif
       - name: Upload SARIF file
-        uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3.29.5
+        uses: github/codeql-action/upload-sarif@f443b600d91635bebf5b0d9ebc620189c0d6fba5 # v3.29.5
         with:
           # Path to SARIF file relative to the root of the repository
           sarif_file: results.sarif

Dockerfile

@@ -3,7 +3,7 @@ ARG PYTHON_IMAGE_VERSION=3.13.8-slim-bookworm
 
 # First things first, we build an image which is where we're going to compile
 # our static assets with. We use this stage in development.
-FROM node:24.9.0-bookworm AS static-deps
+FROM node:24.10.0-bookworm AS static-deps
 
 WORKDIR /opt/warehouse/src/
 

requirements/deploy.in

@@ -1,2 +1,2 @@
 gunicorn==23.0.0
-ddtrace==3.15.0
+ddtrace==3.16.0

requirements/deploy.txt

@@ -8,73 +8,82 @@ bytecode==0.17.0 \
     --hash=sha256:0c37efa5bd158b1b873f530cceea2c645611d55bd2dc2a4758b09f185749b6fd \
     --hash=sha256:64fb10cde1db7ef5cc39bd414ecebd54ba3b40e1c4cf8121ca5e72f170916ff8
     # via ddtrace
-ddtrace==3.15.0 \
-    --hash=sha256:019e2e27c434387eab1680f25c3ad38cab3903c792ac6026ffe2c3aaf4817f87 \
-    --hash=sha256:04c535c004d90f8356c91116ba738959d591934d8f0ab88291aa845b5138c541 \
-    --hash=sha256:07586da65b00a4332cc63078615919187dc4c6b1dd8662363479c450e67397ab \
-    --hash=sha256:0b8684ca8c20192c9fbc65b311d920d33e7c685b436b0027a2f6529802c40723 \
-    --hash=sha256:1100f1a06bd58da9ecef98e34096436fc93dcdc2ad34adf252d76a45079ee841 \
-    --hash=sha256:12f74269bb4c3397bdbcee3ace5069dfc962084328bfdfe542cfc02e26b0e5ae \
-    --hash=sha256:209eda9d5fdd5f9fdebd6c03f6ed59d4f0b8707fdefef463593a2095116bd086 \
-    --hash=sha256:32acde5b8394e71728385b87d266c20a5f0b8061bbfc420f592df91301216b8b \
-    --hash=sha256:33add489db723b4e7ee130173ad3cebbda5bee24fa400604e3b1d423aebe966c \
-    --hash=sha256:38ff5a52306309e5254c2e00f7540ac22922713cec408f55903398bc817f7ebb \
-    --hash=sha256:392182c4e571ae91172cb742e787ef11031877fbfff0f42bb71f8eb7621ee4cd \
-    --hash=sha256:3bb6bb7722ebcbc42df5df05f14ab4f13561260a23562ad808b116f4e7f64069 \
-    --hash=sha256:3c684efe655a26e7effb309e04656d71256f731f803b4dba4afa0c3954073158 \
-    --hash=sha256:4106187186162f44a41d443eb7b021b71d502193b18ce715acefc090a4baf10c \
-    --hash=sha256:412d327fc4ea59086144a1c7d01738d7bad31d5db6d299d9caa24e5659a0625c \
-    --hash=sha256:4a2c8b3f768626ba551e35eeb3102d99a746177cdf7beee277f05cbc232d7e56 \
-    --hash=sha256:53ad8354dff89196a59effdb50437c6a67ad51e953ac786d7d9185181076a2dc \
-    --hash=sha256:5a0c44bf5c3e4b6abb7145ecd69883b10744859483ea9fb7c69f821f1c35a1cb \
-    --hash=sha256:5f3f75d4361e9ca5775e675d7ec0d4390eaf8c9aa272eb64e28daa645ed98487 \
-    --hash=sha256:663bc7e0a7ddaec1a2d5cdab3ece30c65dbeaf573040f844f1411db5bda12784 \
-    --hash=sha256:67e683c06e68d41d2d4cfd759ce76d90de71566d78fd93c415b8ba83e91d057e \
-    --hash=sha256:6c22b5c6c6e46a3eedf688d3cf07bcad70b1c218b6ba2908e7979bf62dac219f \
-    --hash=sha256:6c38e5098b9bce89bf78dded4bf5f07096e9ccb44cb1af0433c373bc5c268472 \
-    --hash=sha256:6f9df8cd22180c8521ab226f0b5ffc3ef2579484aa0daef879d4af3f3109d7a0 \
-    --hash=sha256:765204cf089c02f5f9e2605c009bb18f7ea45f9e2c6e84a06d33e65971eba105 \
-    --hash=sha256:76f7d0e3b1ba700220d497e2fcb251b6d076826b27a86afe7a900c2a01dfe8b2 \
-    --hash=sha256:7c8fa4afcd10a229af0b051ca49592011c9ca6893d22d83d101cb6b59d0f6608 \
-    --hash=sha256:7ce191de10acc99a9b40a9b954c18f0882242fdfc704dc7cd52e4d7b66bc4281 \
-    --hash=sha256:7e5c2e99840f613720b4d1ccb6075fd3b7a871fa00a0991b32380e49fed1b2ac \
-    --hash=sha256:869672afef77f8296ef3305300db1713cebeaf506a7e67e7a4e5c3e0b7f28408 \
-    --hash=sha256:8aae74c529733e5868eedba2439751c5e6f728655b1ca05bffdf97e7d23094ad \
-    --hash=sha256:8c42b1d7fc1835ffdb1b129fe5da1bdc1ff352869a5357d738d4270270668111 \
-    --hash=sha256:9724afc2fb5145ea9ac8ef055986ae6bf02feb5f6fed9aa004d369a078dea67a \
-    --hash=sha256:9819767ecd0d7e58cd693de114182dadc43a9f2910028de5f3fee8c3cf226384 \
-    --hash=sha256:a306113bd97ebd8c9ebbff8ee235777bae8c9cb2efc570157427ad743bdfa3ac \
-    --hash=sha256:a31783b37043cab977f4b23cca55dcbe146c05538b3d40f338b23f96be2343b1 \
-    --hash=sha256:a6bd4297fcd52bb7194f53445ceb5d41a2c363b9fd4fa2955acdb12468ee0f58 \
-    --hash=sha256:b0ad8ad126d351b8ee68a572ec6e18596cc536f64ba2c9f76cb4c8cefcf33f25 \
-    --hash=sha256:b112dd868f45ada3122ec8645ec388972e6ecc360da62f87efe6e78b0a7e136e \
-    --hash=sha256:b464c245d190cef9fa4afda43bbfde25277ad52d23ca3d63085f2487c484a6dc \
-    --hash=sha256:b5d4fa988c20c7002ff70f56200601f5bde6ab4e4db8dfba498ff70c2db6078f \
-    --hash=sha256:b825a5e2d056a3e7fab7ae5cf796462d5404bb25eaea32e517b34b89ab016819 \
-    --hash=sha256:baa551c47f33a4927a9bed63b98f4be25ae5918cb86fa2c24d1ac1ed1d7f2b2b \
-    --hash=sha256:bc2477e2dbf9d294032be79bb888a5f497ce2ecf2d876d63f507744d7bd9fc2b \
-    --hash=sha256:bc77c2e6e9e1b5708b1c4d3f8b37d9cb65f479cbc4f9221b5b7dd22de68e2dfc \
-    --hash=sha256:c5b0bf336aca9ac3783c19bf2b2c26f406bcf5a3b18ca3190d7b033607f46f70 \
-    --hash=sha256:c9375cdcf022c6320ac2853971c39de5d3e1393650d634ab2ddf02f222ab8a44 \
-    --hash=sha256:ca8808dfcac8c35aeec971e661c72a8b5ca444f71ed22e7625be1c85bc086909 \
-    --hash=sha256:cbe8748058d2050d67101102e0c31767f6c9556a22dd865764b78a0adca458f5 \
-    --hash=sha256:cce36579a17e0c143df0693ead550ed3a2a410fb5289cc4d5c815e47f8345800 \
-    --hash=sha256:ce617464433cff3b3aa9b66e1e0eb7da64ad6d321468b13bb8e9f5421857e319 \
-    --hash=sha256:ce903d79837aae5cc47284c0d49b8b910e985375bfcb19a7c7184582a8d09bfe \
-    --hash=sha256:d277e40cba98f3bea3029de082915bdb687f7095da23fe8c8ad5a35f13f70650 \
-    --hash=sha256:d3c6bbc885414e2691a5afdf8c957e841bdd38ff9444ea21ccec94807e3c240f \
-    --hash=sha256:d471cacf16a6cc7bc80e2abb837e3f21713a0dda39f6f2c97f92a9edcfad2b2d \
-    --hash=sha256:d58560f91632723028c400ca597977e6675bf7d992072490dab3427b15c39cf2 \
-    --hash=sha256:d98a62f1dd21bb49e7f41856b08a2bcefa1e1ad28f63138e0a03dc26f91bfb83 \
-    --hash=sha256:da7a090dead082ac6b8cc8c9b915b6456f84a98d3091ecdd73412ba37348e734 \
-    --hash=sha256:db5bae8d18d790bccce7a95e2c5b5afff73e5bf8d828880b50dbbcacde054b00 \
-    --hash=sha256:ded45a06ef0efe565f6e9c28d9cb33a4979a9be570f79cba3af7ba00d702d255 \
-    --hash=sha256:e5ee14d48756ce76f0e640fb71ab6aca2d1cca4a3ea217c2d35eab05cc9a4e07 \
-    --hash=sha256:e6b75aa9b0b792ac6dcece4b47a769513deeac6ee59de94cca43bc969441196f \
-    --hash=sha256:e9e83b8bccfc96e9c41a89dcf3b0485b79d22e3350ffeddff9a1e925548d280a \
-    --hash=sha256:ef04c4928bd0e4b59521d6abd229e9d608ef064b51adb977442dc86c0252db97 \
-    --hash=sha256:ef49f4bda92c1505e1ea369ca8fe1c6b9fdc16eedbe57a082e82d60393da59bf \
-    --hash=sha256:ff4cafa3a4fc9000c12c752646feee357b9e82e35b220c8ecc7b893ca471df90
+ddtrace==3.16.0 \
+    --hash=sha256:016af666f116af360aca816bbc05706156b7340a7715eecbc381055d6484309b \
+    --hash=sha256:01bd0414a8935da4b9a42213ef6f6b85ff0da87ed87b1856e037d9a9b2adc796 \
+    --hash=sha256:02e8a83d0fad9f935110b67e14ccd0b5db276d042167f311533e9cb4b3621677 \
+    --hash=sha256:063fc00ebec059a6ce6b53c31749bfdb46416007c442b13d283a88b041dc5e08 \
+    --hash=sha256:0699f1aa7cdbe6a891ce07edd6cb0a4983626bf0d28d1263f6235b9de9f7632f \
+    --hash=sha256:0cae203637b9b44bc78e741acefba6c990d048445e7d214928849f54b27a6023 \
+    --hash=sha256:0d24061ff044d979adec51ca638e6343f597937077b1e3d04934603df4b066c2 \
+    --hash=sha256:0f521557c655db05a1f189535bbec1aff0f03221c287fec01098c9e872b82a0f \
+    --hash=sha256:15a4c5e53fc59d9f0963f1f3a05688a18ce69007e7412357173c00c64df63e17 \
+    --hash=sha256:1678699ae42d9727bccc1410c819226da4c9c6c60dc496cb2ca6ae3b11e7cf2c \
+    --hash=sha256:169d808d9eae389ab6cffcd8a79506b25533f98a4356e77186a7fff4f4a94c45 \
+    --hash=sha256:171e06b37d63db7d3b144a07c29df6f1968758355d7fb83902ee52971777df09 \
+    --hash=sha256:1a0bb0e7f92ecc58fb3b031af0928d92b6404192d7882cd53c39dd157ee09f53 \
+    --hash=sha256:215c1cf6f19d18ba44352960aed2dbc307c1bf3e77584baed656e0c9d20829fd \
+    --hash=sha256:25a8ebbd29feea4456e1a30bdd6f9c5d3bf51ca2478186d7c4234db7c54e4ac8 \
+    --hash=sha256:25d5901a9581f21d4329749a79019ae43844ef2a04bc12dfc43a26307782a866 \
+    --hash=sha256:2ad8f210997a27fa7171daeb69dc735b5206bc10ea5cc9ac708127a792912e9e \
+    --hash=sha256:2c467dc886ca2c02aa86b82fcb5aa2765dd628b5416fabf03b2765876c5ccf76 \
+    --hash=sha256:2e4911995616bb0674355d65a9b8476c19155ec0d74d8969c99a049124181797 \
+    --hash=sha256:343d90a065f7a3dbbb8acca9212b00dee4c47065b0e99fe356255d82511f52a3 \
+    --hash=sha256:37b01bf21c7d3ccf7aa3e8da2e0b945fd54a653f0d732231bb07e220a411f213 \
+    --hash=sha256:39cf476a8ecc6123a5b3533ce4a3918fbde6829045923ebe8b59f8caef714b9a \
+    --hash=sha256:3a27f2343cbf9e2d7d25b1cb3d801002939ea47416acfe6aee50651944b732ad \
+    --hash=sha256:3f8ff171c9f624e972726102101be0ddb672404b21749c11c7406f518de728fb \
+    --hash=sha256:439fcb2483365d14e46b1ec200dba0a02b0bbbada7aa4c0caf84319c17017c49 \
+    --hash=sha256:472267c94f53eae2d7cee32a44448f4e74b52cf7950262c1aa2cf8e9545dff07 \
+    --hash=sha256:47fc72d41dfe523e1b0beb0bfd2dbf6665fc36a6aaf8297e18b2548224551a54 \
+    --hash=sha256:4ba580a93552cb9a63541db59bdbdfe5a47e62f10f84afb30eb5ead11300d723 \
+    --hash=sha256:4c4c59aca0de615fe058a488a6fdd767fdaa3a5c19303865105f44ac7c07e7c5 \
+    --hash=sha256:4c7f47dcb4d7ea2d6c88eeb4c9fc6ab437d4169e4430c483525ecc71a7c191f1 \
+    --hash=sha256:4deb6563312f420ee477bb60395517274712931a7435505927d3fb0c88edbd9a \
+    --hash=sha256:55fd4265637c505509de5dafe19080ea2499270d7710397d7eb1974d0a48baa3 \
+    --hash=sha256:564a1a39885d1d255cb3d47f607a73f0b4c0970089ede8ad88f9e6dd67b9fedd \
+    --hash=sha256:571de0358135c242ab58652128c34bac9a5e326e008653c7b635924003a924be \
+    --hash=sha256:589dd300c965d86442825e68acfd7f069088c2d9c7c95cef1dff831e8f9696d6 \
+    --hash=sha256:5a019c3e0e926d57619c1c667b9bf498c9c5a13e98b9e8a1dcf7d47572a79fbd \
+    --hash=sha256:5bd780182492da91d53f56bd5df7067262dea22ec0ccd2f4096256bddb091b34 \
+    --hash=sha256:5f6f262ec2f315880406d2af06472685a98d1ff5f2d57f88089cfe16a91bc82f \
+    --hash=sha256:60da7149c53c92aad696684ca0a492263f67818986482acc0091d0a404469d79 \
+    --hash=sha256:62f28da697afef7ca92e4fd5a153529d8532e0bdf0aa281914cac48a96a5686b \
+    --hash=sha256:65c11e54191b140ac029e7001c7e18f6faf82ace59b8c3166d615a129fea0bb3 \
+    --hash=sha256:74814f0657443e4d5e8325c09e76bc2690e9edaa8267c210d319cbc1ed14d3dc \
+    --hash=sha256:763b29799b37724f1749143a6efe99e34bc7d47c12b310dff08e15c248b1a30f \
+    --hash=sha256:785a155ea3df8309af25b24d5707c8ff44eeaa81b92bb8ca927f6b9fbd198228 \
+    --hash=sha256:7e883a7e436ce9510186f4e587d6a27f5ea869e09a14306578aa09d0b3b72556 \
+    --hash=sha256:81f07be2c0987c89d5dd4bd49437f09eaf387c2d8d7d4d56f8a3ea53de892b71 \
+    --hash=sha256:8262f4791a1c70b875e5947202bc11b273c14090b87f79911aa12635214d4c6e \
+    --hash=sha256:87db8cf330d7f168bef9f204dceb72b8936d21fd573892d62b75214ae0dda2cd \
+    --hash=sha256:88f65ee38597927f16d9b4b38f50d33233f6d0fe8398b3e28863b91c6c1ad864 \
+    --hash=sha256:89594ee8b24f91c877d62f11b76e05dd39adac0241917476b339215ecbc84700 \
+    --hash=sha256:8d8304a04e5a885a5d31ce13621eadc72349aa11ada834d00cf5251f4654fd5d \
+    --hash=sha256:90e41d27a86ed8f9bd8231cfd82c52a0a6bebd6447c59933b8275e421f9e6e58 \
+    --hash=sha256:a152d001760749ce1b331cbb5f002cbd7cbdf7ee02d067afcbb62157b3599e38 \
+    --hash=sha256:a1e4cbf47b367b95f20d25ceaa3e585a7e2e3af267c203cc9850c71c0f110076 \
+    --hash=sha256:a831d5f5b122156ee64e3427e56a59c97b9e3642917f9447337271ea26cbaa6b \
+    --hash=sha256:aa8b64da1090fe2948f4209d387fa698cd60648188e892cd24591b78cd689d30 \
+    --hash=sha256:adf62017d0bd93cc4e7027a9581d55c9e722ee82a798224009fe7ff90d9e0c43 \
+    --hash=sha256:b11c98b590da73a8b74e85914de83ec346d596550aa97f9fe99661aeba296616 \
+    --hash=sha256:b23a2c7f143e46b848e499be6a527f634153337e021d66d9bc038c4bf7aa0e10 \
+    --hash=sha256:b39fee266695c25589f22b14693badda8ffa89583f50f52e327caa4cd159a42b \
+    --hash=sha256:c1fb81580872756c31e1d5ac765a0cca46e957af32d7370dcdc07e1a3b6882aa \
+    --hash=sha256:ce21fd9c9b25cc94c92bef97b33e825b09506e0ab3a6c18c43f5bbfd943fca55 \
+    --hash=sha256:ce4b55b6437b74a133dbb5e68710efb8c28dab98968a639948c0e7cca2b8987a \
+    --hash=sha256:d341336b2bd6ab88ff6bc25563a5cc7494a38bc3aee3b1265b52b3dae7f96ed6 \
+    --hash=sha256:d6ad3d2ff982b17716122acb9d027577f3385a43952669f67cf7677736706ba8 \
+    --hash=sha256:e80df7b13ceb689aca6e4fdb9deac5bccc97e2119f8aced9669589909ebd452b \
+    --hash=sha256:ea97c9017b47c2b394cee85223f4ac9cc0e80d96cd8c73bc75d13d5b5401135e \
+    --hash=sha256:ebd0ad03e49e677451326315722541c73c82e95a233f6d3c0099fa42079dcfea \
+    --hash=sha256:ec6df9b08df5fed7fbeeb8e0b1227adfe0d12d6d146de92835742987c415f918 \
+    --hash=sha256:effb026929d63c2045a5f69fecf71443bd2f1784d050d2166d7044ead4272c59 \
+    --hash=sha256:f13b1d49ab34c0443368e56eefa049621226e1884d37241b951dc024377d7d5e \
+    --hash=sha256:f349442ef1f60e094ea39dc36e7732526c89d733e6c1041bf9cd86b67f1643c7 \
+    --hash=sha256:fa4590b3f3feb8ed7035c3577e6eb03bf2f11ae42d1ae681bc1b66e68c43e83e \
+    --hash=sha256:fa66cd33d290f01462fa5f428cad420619dde4b5de6b57ba23a6b2c41c7ee7cb \
+    --hash=sha256:fe08163cd8d0923a15502e94b7f4a15b376eb6d520d2d03647393995b8506295
     # via -r requirements/deploy.in
 envier==0.6.1 \
     --hash=sha256:3309a01bb3d8850c9e7a31a5166d5a836846db2faecb79b9cb32654dd50ca9f9 \

requirements/dev.txt

@@ -12,9 +12,9 @@ build==1.3.0 \
     --hash=sha256:698edd0ea270bde950f53aed21f3a0135672206f3911e0176261a31e0e07b397 \
     --hash=sha256:7145f0b5061ba90a1500d60bd1b13ca0a8a4cebdd0cc16ed8adf1c0e739f43b4
     # via pip-tools
-click==8.2.1 \
-    --hash=sha256:27c491cc05d968d271d5a1db13e3b5a184636d9d930f148c50b038f0d0646202 \
-    --hash=sha256:61a3265b914e850b85317d0b3109c7f8cd35a670f963866005d6ef1d5175a12b
+click==8.3.0 \
+    --hash=sha256:9b9f285302c6e3064f4330c05f05b81945b2a39544279343e6e7c5f27a9baddc \
+    --hash=sha256:e7b8232224eba16f4ebe410c25ced9f7875cb5f3263ffc93cc3e8da705e229c4
     # via pip-tools
 hupper==1.12.1 \
     --hash=sha256:06bf54170ff4ecf4c84ad5f188dee3901173ab449c2608ad05b9bfd6b13e32eb \
@@ -133,9 +133,9 @@ pip-api==0.0.34 \
     --hash=sha256:8b2d7d7c37f2447373aa2cf8b1f60a2f2b27a84e1e9e0294a3f6ef10eb3ba6bb \
     --hash=sha256:9b75e958f14c5a2614bae415f2adf7eeb54d50a2cfbe7e24fd4826471bac3625
     # via -r requirements/dev.in
-pip-tools==7.5.0 \
-    --hash=sha256:30639f50961bb09f49d22f4389e8d7d990709677c094ce1114186b1f2e9b5821 \
-    --hash=sha256:69758e4e5a65f160e315d74db46246fdbb30d549f1ed0c4236d057122c9b0f18
+pip-tools==7.5.1 \
+    --hash=sha256:a051a94794ba52df9acad2d7c9b0b09ae001617db458a543f8287fea7b89c2cf \
+    --hash=sha256:f5ff803823529edc0e6e40c86b1aa7da7266fb1078093c8beea4e5b77877036a
     # via -r requirements/dev.in
 plaster==1.1.2 \
     --hash=sha256:42992ab1f4865f1278e2ad740e8ad145683bb4022e03534265528f0c23c0df2d \