Skip to content

deps(backend): bump limits from 3.14.1 to 5.8.0 in /backend#22

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/limits-5.8.0
Open

deps(backend): bump limits from 3.14.1 to 5.8.0 in /backend#22
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/limits-5.8.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown

Bumps limits from 3.14.1 to 5.8.0.

Release notes

Sourced from limits's releases.

5.8.0

Bug Fix

  • Allow explicit keyword arguments for storage options for username & password for storages that support it.
  • Allow explicitly specifying startup_nodes through keyword arguments for all redis cluster storages.
  • Support IPv6 addresses in cluster locators in storage uri

5.7.0

Compatibility

  • Relax extras constraints for redis (<8)

5.6.0

Development

  • Move all project metadata to pyproject
  • Use uv for development
  • Use hatch for package build
  • Remove versioneer for versioning

5.5.0

Compatibility

  • Relax upper bound of packaging requirement
  • Increase upper bound of coredis requirement
  • Increase upper bound of redis requirement

5.4.0

Feature

  • Relax regular expression used in limits.parse and limits.parse_many to capture any granularity instead of just the hardcoded ones so that custom rate limits can also be extracted using the utility functions. Issue 279

Compatibility

  • Add redis 8.0 to CI

5.3.0

Bug Fix

... (truncated)

Changelog

Sourced from limits's changelog.

v5.8.0

Release Date: 2026-02-04

  • Bug Fix

    • Allow explicit keyword arguments for storage options for username & password for storages that support it.
    • Allow explicitly specifying startup_nodes through keyword arguments for all redis cluster storages.
    • Support IPv6 addresses in cluster locators in storage uri

v5.7.0

Release Date: 2026-02-03

  • Compatibility

    • Relax extras constraints for redis (<8)

v5.6.0

Release Date: 2025-09-29

  • Development

    • Move all project metadata to pyproject
    • Use uv for development
    • Use hatch for package build
    • Remove versioneer for versioning

v5.5.0

Release Date: 2025-08-05

  • Compatibility

    • Relax upper bound of packaging requirement
    • Increase upper bound of coredis requirement
    • Increase upper bound of redis requirement

v5.4.0

Release Date: 2025-06-16

  • Feature

    • Relax regular expression used in limits.parse and limits.parse_many to capture any granularity instead of just the hardcoded ones so that custom rate limits can

... (truncated)

Commits
  • cc5eafc Update changelog for 5.8.0
  • d309f43 Add concurrency controls to CI to cancel previous runs
  • 2b88260 Upgrade pytest
  • 917ecf1 Raise url parse error from underlying ValueError
  • a9a257a Update all documentation dependencies
  • 6fe4d83 Support ipv6 in storage schema uri
  • 183403a Centralize storage URI parsing and scheme registry
  • 6fd9909 Update changelog for 5.7.0
  • dd76b8c update tagging script
  • 227c7f0 Update release notes script
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [limits](https://github.com/alisaifee/limits) from 3.14.1 to 5.8.0.
- [Release notes](https://github.com/alisaifee/limits/releases)
- [Changelog](https://github.com/alisaifee/limits/blob/master/HISTORY.rst)
- [Commits](alisaifee/limits@3.14.1...5.8.0)

---
updated-dependencies:
- dependency-name: limits
  dependency-version: 5.8.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Jun 2, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants