Merge pull request #3991 from plotly/deps/pip-group-py39-hold-linters

Keep selenium/redis bumps, hold black & pylint for Python 3.9

Author: T4rk1n

.github/dependabot.yml

@@ -217,6 +217,16 @@ updates:
           - "*"
     # jupyterlab is pinned <4.0.0: jupyterlab 4.x ships jlpm as Yarn Berry, which
     # cannot consume @plotly/dash-jupyterlab's Yarn 1 lockfile and breaks the build.
+    #
+    # black >=25.12.0 and pylint >=4.0.0 require Python >=3.10 and cannot install
+    # on the 3.9 CI jobs (Dash still supports Python 3.9). Upgrading either past
+    # its last 3.9-compatible release (black 25.11.0, pylint 3.3.9) also forces a
+    # repo-wide reformat / lint-fix pass, so linter bumps are done deliberately,
+    # not via Dependabot.
     ignore:
       - dependency-name: "jupyterlab"
         versions: [">=4.0.0"]
+      - dependency-name: "black"
+        versions: [">=25.12.0"]
+      - dependency-name: "pylint"
+        versions: [">=4.0.0"]

requirements/redis.txt

@@ -1,4 +1,4 @@
 # Dependency used by RedisSharedStorage.
 # Kept in sync with the redis pin in celery.txt; in Dash 5.0 redis will be
 # removed from the celery extra and live here only.
-redis>=3.5.3,<=5.0.4
+redis>=3.5.3,<=8.1.0

requirements/testing.txt

@@ -5,7 +5,7 @@ lxml>=4.6.2
 percy-python-selenium>=1.0.0
 pytest>=6.0.2
 requests[security]>=2.21.0
-selenium>=4.11.0,<=4.47.0
+selenium>=4.11.0,<=4.48.0
 waitress>=1.4.4
 multiprocess>=0.70.12
 psutil>=5.8.0