Skip to content

chore(deps): bump the weekly-batch group with 43 updates - #226

Merged
douglowe merged 4 commits into
developfrom
dependabot/pip/weekly-batch-27d97fb880
Sep 22, 2026
Merged

chore(deps): bump the weekly-batch group with 43 updates#226
douglowe merged 4 commits into
developfrom
dependabot/pip/weekly-batch-27d97fb880

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •
edited by douglowe
Loading

Copy link
Copy Markdown
Contributor

Bumps the weekly-batch group with 43 updates:

Package From To
boto3 1.43.29 1.43.97
python-dotenv 1.2.2 1.2.3
apiflask 3.1.0 3.1.2
annotated-types 0.7.0 0.8.0
apispec 6.8.2 6.10.0
billiard 4.2.4 4.3.0
cattrs 25.1.1 26.2.0
charset-normalizer 3.4.2 3.5.1
click 8.2.1 8.5.0
click-repl 0.3.0 0.4.0
enum-tools 0.12.0 not updated
idna 3.15 3.20
importlib-metadata 9.0.0 9.0.1
markdown-it-py 3.0.0 4.2.0
marshmallow 4.1.2 4.3.1
owlrl 7.1.4 7.6.2
packaging 26.2 26.3
platformdirs 4.3.8 4.11.10
prettytable 3.16.0 3.18.0
pydantic 2.12.4 2.13.5
pydantic-core 2.41.5 2.46.5
pygments 2.20.0 2.21.0
pyparsing 3.2.3 3.3.2
pyshacl 0.30.1 0.40.1
rdflib 7.1.4 7.6.0
rich 13.9.4 not updated
rich-click 1.8.9 1.9.9
s3transfer 0.18.0 0.19.2
typing-extensions 4.14.1 4.16.0
typing-inspection 0.4.2 0.4.4
tzdata 2025.2 2026.4
tzlocal 5.3.1 5.4.4
url-normalize 2.2.1 3.0.0
wcwidth 0.2.13 0.8.4
webargs 8.7.0 8.7.1
cffi 2.1.0 2.1.1
cryptography 50.0.0 50.0.1
moto 5.2.2 5.2.3
pyproject-hooks 1.2.0 1.3.3
pytest 9.1.0 9.1.1
responses 0.26.2 0.26.3
ruff 0.15.17 0.16.8
wheel 0.47.0 0.48.0

Updates boto3 from 1.43.29 to 1.43.97

Commits
  • ed7de96 Merge branch 'release-1.43.97'
  • 275709c Bumping version to 1.43.97
  • a5c0088 Add changelog entries from botocore
  • 2be9967 Merge branch 'release-1.43.96'
  • bc62489 Merge branch 'release-1.43.96' into develop
  • 6e1774a Bumping version to 1.43.96
  • ef6f957 Add changelog entries from botocore
  • 238d6ec Update PyPI package summary to add Boto3 (#4846)
  • 2d18ca8 Add root workspace folder to gitignore (#4847)
  • 3061d22 Merge branch 'release-1.43.95'
  • Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates apiflask from 3.1.0 to 3.1.2

Release notes

Sourced from apiflask's releases.

3.1.2

What's Changed

New Contributors

Full Changelog: apiflask/apiflask@3.1.1...3.1.2

3.1.1

What's Changed

Full Changelog: apiflask/apiflask@3.1.0...3.1.1

Commits
  • e67e816 Release 3.1.2 (#770)
  • 6da77d1 Support response headers in @​app.doc(responses={...}) (#761)
  • ec68d99 Register nested Pydantic schemas used in parameter locations (#760)
  • f84d063 Add AGENTS.md for AI-assisted development guidance (#754)
  • 209c640 fix: replace default response with factory method (#759)
  • aa36952 fix: recognize list[UploadFile] as a multiple file field (#756)
  • 9b68315 Release 3.1.1
  • 2d2bbbb perf: normalize header names in OpenAPI
  • d29fd6d Merge pull request #749 from FarmerChillax/http-error-patch
  • 2834ba0 feat(exceptions): add str and repr to HTTPError
  • Additional commits viewable in compare view

Updates annotated-types from 0.7.0 to 0.8.0

Release notes

Sourced from annotated-types's releases.

v0.8.0

What's Changed

New Contributors

Full Changelog: annotated-types/annotated-types@v0.7.0...v0.8.0

Commits

Updates apispec from 6.8.2 to 6.10.0

Changelog

Sourced from apispec's changelog.

6.10.0 (2026-03-06)

Features:

  • Support links (:issue:615). Thanks :user:kingdomOfIT for the PR (:pr:1014).

Bug fixes:

  • MarshmallowPlugin: Handle DateTime fields with the "iso8601" and "rfc822" formats (:issue:970). Thanks :user:matejsp for reporting and karthiksai109 for the PR (:pr:1013).

6.9.0 (2025-11-30)

Features:

  • Support examples property from field metadata (:pr:999). Thanks :user:Flix6x for the PR.

Other changes:

  • Officially support Python 3.14 (:pr:998).
  • Drop support for Python 3.9 (:pr:994).

6.8.4 (2025-09-22)

Bug fixes:

  • Set TimeDelta field type according to serialization_type (:pr:990). Thanks :user:LewisHaley for the PR.

6.8.3 (2025-09-07)

Bug fixes:

  • MarshmallowPlugin: set additionalProperties to False if unknown is not set (:pr:988). Thanks :user:mwgamble for reporting.
  • MarshmallowPlugin: set additionalProperties according to unknown value passed at schema instantiation, not only as Meta attribute (:pr:988).
Commits
  • 450a56c Bump version and update changelog
  • 0f40e7a Merge pull request #1022 from marshmallow-code/tests_utils_get
  • 6784476 Rework test.utils.get_* methods
  • f86aa98 Merge pull request #1014 from kingdomOfIT/feature/openapi-links
  • fd962d9 docs: remove reference to removed validate_spec utility (#1021)
  • 6031276 Bump openapi-spec-validator from 0.8.1 to 0.8.4
  • 7278e0f [pre-commit.ci] pre-commit autoupdate
  • ad467c8 Bump actions/upload-artifact from 6 to 7
  • e7e6c80 Bump actions/download-artifact from 7 to 8
  • cc2c988 Bump openapi-spec-validator from 0.8.0 to 0.8.1
  • Additional commits viewable in compare view

Updates billiard from 4.2.4 to 4.3.0

Release notes

Sourced from billiard's releases.

v4.3.0

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.2.4...v4.3.0

v4.3.0rc1

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.2.4...v4.3.0rc1

Changelog

Sourced from billiard's changelog.

4.3.0 - 2026-09-26

  • Propagate MemoryError from pool callbacks
  • Propagate BaseException raised in pool workers instead of raising WorkerLostError (#427)
  • Bind the closerange-based close_open_fds() on Python 3
  • List the fd directory in close_open_fds() instead of walking the limit (#456)
  • Exit the pool worker after a task raises SystemExit or KeyboardInterrupt (for example the SIGTERM sent by a hard time limit) instead of returning to the shared inqueue, which left the blocking pool stalled once the worker was killed while holding the inqueue lock (regression from #452)

4.3.0rc1 - 2026-02-26

  • Fix pytest deprecation warning (#440)
  • Make einfo compatible with inspect (fixes #176) (#392)
  • Update CI workflow to use Python 3.10 and above (#441)
  • Update tox.ini to remove older Python versions (#442)
  • Fix macOS fork-safety crash: default to spawn on darwin (#443)
  • Prepare for (pre) release: v4.3.0rc1 (#445)
Commits
  • 767b032 Bump version: 4.3.0rc1 → 4.3.0
  • 2ff42e6 added changelog for v4.3.0 release
  • 80a9c70 Update Python version requirement to 3.10
  • b1bb092 Exit the pool worker after a task raises SystemExit or KeyboardInterrupt
  • 8bf6361 List the fd directory in close_open_fds() instead of walking the limit (#456)
  • a7c5fad Bind the closerange-based close_open_fds() on Python 3
  • db4a823 Bump actions/checkout in the github-actions group across 1 directory (#449)
  • a8b968c [pre-commit.ci] pre-commit autoupdate (#450)
  • bd2f803 Propagate BaseException raised in pool workers
  • 001b9f0 Propagate MemoryError from pool callbacks
  • Additional commits viewable in compare view

Updates cattrs from 25.1.1 to 26.2.0

Release notes

Sourced from cattrs's releases.

v26.2.0

What's Changed

  • Fix the msgpack and cbor2 converters unstructuring naive datetimes as local time, which made the serialized value depend on the timezone of the machine doing the unstructuring; naive datetimes are now assumed to be UTC, matching what the structure hooks already read back. (#774 #775)
  • Fix override(rename=...) targets containing a quote (or other characters not safe in a bare string literal) crashing code generation with SyntaxError; the rename key is now embedded with repr. (#771)
  • Fix Counter keys not being unstructured with the key type's own hook; the single-type-arg branch passed the whole type-args tuple to the key hook lookup instead of the key type. (#768)
  • Fix create_default_dis_func (aka create_uniq_field_dis_func) failing to disambiguate valid unions depending on the order of the member classes; unique fields are now resolved iteratively to a fixpoint. (#230 #765)
  • Support more recursive types on 3.14+ with specialized factories for annotationlib.ForwardRef. (#740 #741)
  • Converter now uses specialized hook factories to generate hooks for tuples, increasing speed. (#737)
  • Fix an AttributeError in cattrs internals that could be triggered by using the include_subclasses strategy in a structure_hook_factory (#721, #722)
  • Fix TypedDict codegen when keys contain single quotes. (#769)
  • Add CattrsError exception type: all exceptions raised by cattrs inherit from this. Literal and date-time validation raise this directly, instead of Exception. (#728)
  • Fix the detailed_validation parameter being passed under the wrong name in namedtuple_dict_structure_factory, causing it to be silently ignored. (#723)
  • cattrs is now autoformatted using Ruff. (#732)
  • Support running the test suite without cbor2 installed. (#748)
  • The union passthrough strategy now supports PEP 695 type aliases as union members. (#753)
  • BaseConverter.register_structure_hook_factory and BaseConverter.register_unstructure_hook_factory now properly return the factory when used as decorators. (#724)
  • The msgspec preconf converter now properly handles recursive classes on Python 3.14+. (#757)

New Contributors

Full Changelog: python-attrs/cattrs@v26.1.0...v26.2.0

v26.1.0

  • Add the tomllib preconf converter. See here for details. (#716)
  • Customizing un/structuring of attrs classes, dataclasses, TypedDicts and dict NamedTuples is now possible by using Annotated[T, override()] on fields. See here for more details. (#717)
  • Fix structuring of nested generic classes with stringified annotations. (#688)
  • Python 3.9 is no longer supported, as it is end-of-life. Use previous versions on this Python version. (#698)
  • Apply the attrs converter to the default value before checking if it is equal to the attribute's value, when omit_if_default is true and an attrs converter is specified. (#696)
  • Use the optional _value_ type hint to structure and unstructure enums if present. (#699)
  • Aliases (when in use) now properly generate rename metadata in generated hooks. (#706 #710)
  • cattrs now tracks performance using codspeed. (#703)
  • The tomlkit preconf converter now properly handles native date objects when structuring. (#707 #708)
  • The tomlkit preconf converter now passes date objects directly to tomlkit for unstructuring. (#707 #708)
  • Enum handling has been optimized by switching to hook factories, improving performance especially for plain enums. (#705)
  • Fix cattrs.strategies.include_subclasses when used with cattrs.strategies.configure_tagged_union and classes using diamond inheritance. (#685 #713)
  • Fix cattrs.strategies.configure_tagged_union when used with recursive type aliases. (#678 #714)

New Contributors

... (truncated)

Changelog

Sourced from cattrs's changelog.

26.2.0 (2026-09-08)

  • Fix the msgpack and cbor2 converters unstructuring naive datetimes as local time, which made the serialized value depend on the timezone of the machine doing the unstructuring; naive datetimes are now assumed to be UTC, matching what the structure hooks already read back. (#774 #775)
  • Fix override(rename=...) targets containing a quote (or other characters not safe in a bare string literal) crashing code generation with SyntaxError; the rename key is now embedded with repr. (#771)
  • Fix Counter keys not being unstructured with the key type's own hook; the single-type-arg branch passed the whole type-args tuple to the key hook lookup instead of the key type. (#768)
  • Fix create_default_dis_func <cattrs.disambiguators.create_default_dis_func> (aka create_uniq_field_dis_func) failing to disambiguate valid unions depending on the order of the member classes; unique fields are now resolved iteratively to a fixpoint. (#230 #765)
  • Support more recursive types on 3.14+ with specialized factories for annotationlib.ForwardRef. (#740 #741)
  • Converter <cattrs.Converter> now uses specialized hook factories to generate hooks for tuples, increasing speed. (#737)
  • Fix an AttributeError in cattrs internals that could be triggered by using the include_subclasses strategy in a structure_hook_factory (#721, #722)
  • Fix TypedDict codegen when keys contain single quotes. (#769)
  • Add CattrsError exception type: all exceptions raised by cattrs inherit from this. Literal and date-time validation raise this directly, instead of Exception. (#728)
  • Fix the detailed_validation parameter being passed under the wrong name in {func}namedtuple_dict_structure_factory <cattrs.cols.namedtuple_dict_structure_factory>, causing it to be silently ignored. (#723)
  • cattrs is now autoformatted using Ruff. (#732)
  • Support running the test suite without cbor2 installed. (#748)
  • The union passthrough strategy now supports PEP 695 type aliases as union members. (#753)
  • {meth}BaseConverter.register_structure_hook_factory and {meth}BaseConverter.register_unstructure_hook_factory now properly return the factory when used as decorators. (#724)
  • The {mod}msgspec <cattrs.preconf.msgspec> preconf converter now properly handles recursive classes on Python 3.14+. (#757)

26.1.0 (2026-02-18)

  • Add the {mod}tomllib <cattrs.preconf.tomllib> preconf converter. See here for details. (#716)
  • Customizing un/structuring of attrs classes, dataclasses, TypedDicts and dict NamedTuples is now possible by using Annotated[T, override()] on fields. See here for more details. (#717)
  • Fix structuring of nested generic classes with stringified annotations. (#688)
  • Python 3.9 is no longer supported, as it is end-of-life. Use previous versions on this Python version. (#698)
  • Apply the attrs converter to the default value before checking if it is equal to the attribute's value, when omit_if_default is true and an attrs converter is specified. (#696)
  • Use the optional _value_ type hint to structure and unstructure enums if present. (#699)

... (truncated)

Commits
  • df4e4bb v26.2.0
  • f7cd6b1 Assume naive datetimes are UTC in the msgpack and cbor2 converters
  • d4ff793 Bump pypa/gh-action-pypi-publish to 1.14.2
  • 671f203 Bump hynek/baipp
  • 893351d Parametrize the special-characters rename test
  • 7a37e00 Add HISTORY entry for the rename-key escaping fix
  • 3d57d6b Escape override rename keys when generating structure/unstructure code
  • f2e42f3 Improve TypedDict key quoting
  • 82b02c0 Add HISTORY entry for Counter key unstructure fix (#768)
  • 02c3ead Unpack the single type arg for Counter keys when unstructuring
  • Additional commits viewable in compare view

Updates charset-normalizer from 3.4.2 to 3.5.1

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.1

3.5.1 (2026-08-15)

Changed

  • Raised upper bound of setuptools to v84 (#794)
  • Cache performance access optimization for our CharInfo struct (prebuilt only).

Fixed

  • No longer decoding large content when the noise detector output give a high entropy. Only impacted large content input >1M bytes.

Version 3.5.0

3.5.0 (2026-08-12)

Added

  • Explicit support for Python 3.15

Fixed

  • Comparing a CharsetMatch to a non-alias encoding strings (#773)
  • Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
  • A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
  • iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

  • Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
  • Applied micro-optimization on several utils.
  • CharsetMatches no longer sort on each match insertion.

Misc

  • Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).

Version 3.4.9

3.4.9 (2026-07-07)

Fixed

  • Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

Version 3.4.8

3.4.8 (2026-07-06)

Fixed

... (truncated)

Changelog

Sourced from charset-normalizer's changelog.

3.5.1 (2026-08-15)

Changed

  • Raised upper bound of setuptools to v84 (#794)
  • Cache performance access optimization for our CharInfo struct (prebuilt only).

Fixed

  • No longer decoding large content when the noise detector output give a high entropy. Only impacted large content input >1M bytes.

3.5.0 (2026-08-12)

Added

  • Explicit support for Python 3.15

Fixed

  • Comparing a CharsetMatch to a non-alias encoding strings (#773)
  • Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
  • A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
  • iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

  • Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
  • Applied micro-optimization on several utils.
  • CharsetMatches no longer sort on each match insertion.

Misc

  • Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).

3.4.9 (2026-07-07)

Fixed

  • Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

3.4.8 (2026-07-06)

Fixed

  • Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)
  • Unnecessary json import at runtime (#753)
  • Inverse capitalization not seen by noise detector (#731)

... (truncated)

Commits
  • e239bdc Merge pull request #795 from jawah/release-3.5.1
  • 648ad77 docs: update f...

    Description has been truncated

@dependabot
chore(deps): bump the weekly-batch group with 43 updates
42785fd 
Bumps the weekly-batch group with 43 updates:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.29` | `1.43.97` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [apiflask](https://github.com/apiflask/apiflask) | `3.1.0` | `3.1.2` |
| [annotated-types](https://github.com/annotated-types/annotated-types) | `0.7.0` | `0.8.0` |
| [apispec](https://github.com/marshmallow-code/apispec) | `6.8.2` | `6.10.0` |
| [billiard](https://github.com/celery/billiard) | `4.2.4` | `4.3.0` |
| [cattrs](https://github.com/python-attrs/cattrs) | `25.1.1` | `26.2.0` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.2` | `3.5.1` |
| [click](https://github.com/pallets/click) | `8.2.1` | `8.5.0` |
| [click-repl](https://github.com/click-contrib/click-repl) | `0.3.0` | `0.4.0` |
| [enum-tools](https://github.com/domdfcoding/enum_tools) | `0.12.0` | `0.13.0` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.20` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `9.0.0` | `9.0.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [marshmallow](https://github.com/marshmallow-code/marshmallow) | `4.1.2` | `4.3.1` |
| [owlrl](https://github.com/RDFLib/OWL-RL) | `7.1.4` | `7.6.2` |
| [packaging](https://github.com/pypa/packaging) | `26.2` | `26.3` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.3.8` | `4.11.10` |
| [prettytable](https://github.com/prettytable/prettytable) | `3.16.0` | `3.18.0` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.4` | `2.13.5` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.41.5` | `2.49.0` |
| [pygments](https://github.com/pygments/pygments) | `2.20.0` | `2.21.0` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.2.3` | `3.3.2` |
| [pyshacl](https://github.com/RDFLib/pySHACL) | `0.30.1` | `0.40.1` |
| [rdflib](https://github.com/RDFLib/rdflib) | `7.1.4` | `7.6.0` |
| [rich](https://github.com/Textualize/rich) | `13.9.4` | `15.0.0` |
| [rich-click](https://github.com/ewels/rich-click) | `1.8.9` | `1.9.9` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.18.0` | `0.19.2` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.14.1` | `4.16.0` |
| [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.2` | `0.4.4` |
| [tzdata](https://github.com/python/tzdata) | `2025.2` | `2026.4` |
| [tzlocal](https://github.com/regebro/tzlocal) | `5.3.1` | `5.4.4` |
| [url-normalize](https://github.com/niksite/url-normalize) | `2.2.1` | `3.0.0` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.2.13` | `0.8.4` |
| [webargs](https://github.com/marshmallow-code/webargs) | `8.7.0` | `8.7.1` |
| [cffi](https://github.com/python-cffi/cffi) | `2.1.0` | `2.1.1` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [moto](https://github.com/getmoto/moto) | `5.2.2` | `5.2.3` |
| [pyproject-hooks](https://github.com/pypa/pyproject-hooks) | `1.2.0` | `1.3.3` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.1.0` | `9.1.1` |
| [responses](https://github.com/getsentry/responses) | `0.26.2` | `0.26.3` |
| [ruff](https://github.com/astral-sh/ruff) | `0.15.17` | `0.16.8` |
| [wheel](https://github.com/pypa/wheel) | `0.47.0` | `0.48.0` |


Updates `boto3` from 1.43.29 to 1.43.97
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.29...1.43.97)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `apiflask` from 3.1.0 to 3.1.2
- [Release notes](https://github.com/apiflask/apiflask/releases)
- [Changelog](https://github.com/apiflask/apiflask/blob/main/docs/changelog.md)
- [Commits](apiflask/apiflask@3.1.0...3.1.2)

Updates `annotated-types` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/annotated-types/annotated-types/releases)
- [Commits](annotated-types/annotated-types@v0.7.0...v0.8.0)

Updates `apispec` from 6.8.2 to 6.10.0
- [Changelog](https://github.com/marshmallow-code/apispec/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/apispec@6.8.2...6.10.0)

Updates `billiard` from 4.2.4 to 4.3.0
- [Release notes](https://github.com/celery/billiard/releases)
- [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt)
- [Commits](celery/billiard@v4.2.4...v4.3.0)

Updates `cattrs` from 25.1.1 to 26.2.0
- [Release notes](https://github.com/python-attrs/cattrs/releases)
- [Changelog](https://github.com/python-attrs/cattrs/blob/main/HISTORY.md)
- [Commits](python-attrs/cattrs@v25.1.1...v26.2.0)

Updates `charset-normalizer` from 3.4.2 to 3.5.1
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.2...3.5.1)

Updates `click` from 8.2.1 to 8.5.0
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.2.1...8.5.0)

Updates `click-repl` from 0.3.0 to 0.4.0
- [Release notes](https://github.com/click-contrib/click-repl/releases)
- [Changelog](https://github.com/click-contrib/click-repl/blob/master/Changelog.rst)
- [Commits](click-contrib/click-repl@0.3.0...0.4.0)

Updates `enum-tools` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/domdfcoding/enum_tools/releases)
- [Commits](domdfcoding/enum_tools@v0.12.0...v0.13.0)

Updates `idna` from 3.15 to 3.20
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.15...v3.20)

Updates `importlib-metadata` from 9.0.0 to 9.0.1
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v9.0.0...v9.0.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](executablebooks/markdown-it-py@v3.0.0...v4.2.0)

Updates `marshmallow` from 4.1.2 to 4.3.1
- [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/marshmallow@4.1.2...4.3.1)

Updates `owlrl` from 7.1.4 to 7.6.2
- [Release notes](https://github.com/RDFLib/OWL-RL/releases)
- [Changelog](https://github.com/RDFLib/OWL-RL/blob/master/CHANGELOG.md)
- [Commits](RDFLib/OWL-RL@7.1.4...v7.6.2)

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `platformdirs` from 4.3.8 to 4.11.10
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.3.8...4.11.10)

Updates `prettytable` from 3.16.0 to 3.18.0
- [Release notes](https://github.com/prettytable/prettytable/releases)
- [Changelog](https://github.com/prettytable/prettytable/blob/main/CHANGELOG.md)
- [Commits](prettytable/prettytable@3.16.0...3.18.0)

Updates `pydantic` from 2.12.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.12.4...v2.13.5)

Updates `pydantic-core` from 2.41.5 to 2.49.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `pygments` from 2.20.0 to 2.21.0
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.20.0...2.21.0)

Updates `pyparsing` from 3.2.3 to 3.3.2
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.2.3...3.3.2)

Updates `pyshacl` from 0.30.1 to 0.40.1
- [Release notes](https://github.com/RDFLib/pySHACL/releases)
- [Changelog](https://github.com/RDFLib/pySHACL/blob/master/CHANGELOG.md)
- [Commits](RDFLib/pySHACL@v0.30.1...v0.40.1)

Updates `rdflib` from 7.1.4 to 7.6.0
- [Release notes](https://github.com/RDFLib/rdflib/releases)
- [Changelog](https://github.com/RDFLib/rdflib/blob/main/CHANGELOG.md)
- [Commits](RDFLib/rdflib@7.1.4...7.6.0)

Updates `rich` from 13.9.4 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](Textualize/rich@v13.9.4...v15.0.0)

Updates `rich-click` from 1.8.9 to 1.9.9
- [Release notes](https://github.com/ewels/rich-click/releases)
- [Changelog](https://github.com/ewels/rich-click/blob/main/CHANGELOG.md)
- [Commits](ewels/rich-click@v1.8.9...v1.9.9)

Updates `s3transfer` from 0.18.0 to 0.19.2
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.18.0...0.19.2)

Updates `typing-extensions` from 4.14.1 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.14.1...4.16.0)

Updates `typing-inspection` from 0.4.2 to 0.4.4
- [Release notes](https://github.com/pydantic/typing-inspection/releases)
- [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md)
- [Commits](pydantic/typing-inspection@v0.4.2...v0.4.4)

Updates `tzdata` from 2025.2 to 2026.4
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2025.2...2026.4)

Updates `tzlocal` from 5.3.1 to 5.4.4
- [Changelog](https://github.com/regebro/tzlocal/blob/master/CHANGES.txt)
- [Commits](regebro/tzlocal@5.3.1...5.4.4)

Updates `url-normalize` from 2.2.1 to 3.0.0
- [Release notes](https://github.com/niksite/url-normalize/releases)
- [Changelog](https://github.com/niksite/url-normalize/blob/master/CHANGELOG.md)
- [Commits](niksite/url-normalize@v2.2.1...v3.0.0)

Updates `wcwidth` from 0.2.13 to 0.8.4
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst)
- [Commits](jquast/wcwidth@0.2.13...0.8.4)

Updates `webargs` from 8.7.0 to 8.7.1
- [Changelog](https://github.com/marshmallow-code/webargs/blob/dev/CHANGELOG.rst)
- [Commits](marshmallow-code/webargs@8.7.0...8.7.1)

Updates `cffi` from 2.1.0 to 2.1.1
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.1.0...v2.1.1)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

Updates `moto` from 5.2.2 to 5.2.3
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.2...5.2.3)

Updates `pyproject-hooks` from 1.2.0 to 1.3.3
- [Changelog](https://github.com/pypa/pyproject-hooks/blob/main/docs/changelog.rst)
- [Commits](pypa/pyproject-hooks@v1.2.0...v1.3.3)

Updates `pytest` from 9.1.0 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.1.0...9.1.1)

Updates `responses` from 0.26.2 to 0.26.3
- [Release notes](https://github.com/getsentry/responses/releases)
- [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES)
- [Commits](getsentry/responses@0.26.2...0.26.3)

Updates `ruff` from 0.15.17 to 0.16.8
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.15.17...0.16.8)

Updates `wheel` from 0.47.0 to 0.48.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.47.0...0.48.0)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.97
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: apiflask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: annotated-types
  dependency-version: 0.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: apispec
  dependency-version: 6.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: billiard
  dependency-version: 4.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: cattrs
  dependency-version: 26.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: charset-normalizer
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: click
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: click-repl
  dependency-version: 0.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: enum-tools
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: idna
  dependency-version: '3.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: importlib-metadata
  dependency-version: 9.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: markdown-it-py
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: marshmallow
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: owlrl
  dependency-version: 7.6.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: platformdirs
  dependency-version: 4.11.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: prettytable
  dependency-version: 3.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic-core
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pygments
  dependency-version: 2.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pyparsing
  dependency-version: 3.3.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pyshacl
  dependency-version: 0.40.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: rdflib
  dependency-version: 7.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: rich-click
  dependency-version: 1.9.9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: s3transfer
  dependency-version: 0.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: typing-extensions
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: typing-inspection
  dependency-version: 0.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: tzdata
  dependency-version: '2026.4'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: tzlocal
  dependency-version: 5.4.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: url-normalize
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: wcwidth
  dependency-version: 0.8.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: webargs
  dependency-version: 8.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cffi
  dependency-version: 2.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: moto
  dependency-version: 5.2.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pyproject-hooks
  dependency-version: 1.3.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: responses
  dependency-version: 0.26.3
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: ruff
  dependency-version: 0.16.8
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: wheel
  dependency-version: 0.48.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 21, 2026
@douglowe

douglowe commented Sep 21, 2026

Copy link
Copy Markdown
Collaborator

@dependabot remove pydantic-core update

@douglowe
douglowe requested a lite review from Copilot September 21, 2026 16:00
Copilot AI reviewed Sep 21, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Copilot review overview

🟡 Changes recommended

CI workflows still pin older pytest, boto3, and Ruff versions, so they do not test the updated dependencies.

Get a fresh assessment by requesting another Copilot review.

Review effort: Lite
Findings: 2 Medium severity

Open (2)
What changed in this PR

Updates runtime and development dependency pins across the project.

Changes:

  • Bumps direct dependencies in pyproject.toml.
  • Regenerates runtime and development lockfiles with 43 updates.
  • Refreshes transitive packages and development tooling.
File Description
pyproject.toml Updates direct runtime dependency versions.
requirements.txt Refreshes runtime dependency locks.
requirements-dev.txt Refreshes development dependency locks.

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread requirements-dev.txt
Comment thread requirements-dev.txt
@douglowe
update GH workflows to match reqs
0395758
@douglowe
pip-compile update of requirements
bd0111c 
Changes:
pydantic-core == 2.46.5 not 2.49.0 (to support pydantic package)
rich == 13.9.4 not 15.0.0
enum-tools == 0.12.0 not 0.13.0
async-timeout == 5.0.1 new for redis
@douglowe
remove async-timeout as provided in python 3.11+ now
54758c6
@douglowe
douglowe merged commit e2eff2e into develop Sep 22, 2026
3 checks passed
@dependabot
dependabot Bot deleted the dependabot/pip/weekly-batch-27d97fb880 branch September 22, 2026 14:42
@douglowe douglowe self-assigned this Sep 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort, defaults to Lite
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

Assignees

@douglowe douglowe

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@douglowe