chore(deps): update indirect python dependencies #1164
+67
−67
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
renovate
bot
force-pushed
the
renovate/indirect-python-dependencies
branch
from
756dc47 to
260fdbf
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #1164 +/- ##
=======================================
Coverage 94.69% 94.69%
=======================================
Files 41 41
Lines 2622 2622
=======================================
Hits 2483 2483
Misses 139 139 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
renovate
bot
force-pushed
the
renovate/indirect-python-dependencies
branch
14 times, most recently
from
52febfe to
04afeeb
Compare
renovate
bot
force-pushed
the
renovate/indirect-python-dependencies
branch
13 times, most recently
from
392c24b to
846b44e
Compare
renovate
bot
force-pushed
the
renovate/indirect-python-dependencies
branch
18 times, most recently
from
5837659 to
15b94b9
Compare
renovate
bot
force-pushed
the
renovate/indirect-python-dependencies
branch
10 times, most recently
from
5840aa9 to
3a7915b
Compare
renovate
bot
force-pushed
the
renovate/indirect-python-dependencies
branch
from
3a7915b to
5a9d1fb
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==3.12.15->==3.13.2==3.9.2->==3.10.0==25.3.0->==25.4.0==2.8.9->==2.8.10==3.9.1->==3.11.0==1.14.5->==1.14.6==6.2.0->==6.2.1==2025.8.3->==2025.10.5==3.4.3->==3.4.4==6.9.0->==6.10.1==9.10.2->==9.10.3==7.10.7->==7.11.0==46.0.2->==46.0.3==2025.9.1->==2025.10.0==0.21.2->==0.22.2==0.118.0->==0.120.1==0.0.13->==0.0.14==0.3.0->==0.3.1==3.19.1->==3.20.0==1.7.0->==1.8.0==1.70.0->==1.71.0==1.75.1->==1.76.0==3.2.1->==3.3.0==0.6.4->==0.7.1==3.10->==3.11==2.1.0->==2.3.0==3.10.6->==3.10.7==1.1.1->==1.1.2==6.6.4->==6.7.0==2.13.1->==2.14.1==2.2.6->==2.3.4==1.37.0->==1.38.0==1.37.0->==1.38.0==1.37.0->==1.38.0==1.37.0->==1.38.0==1.37.0->==1.38.0==1.37.0->==1.38.0==1.37.0->==1.38.0==3.11.3->==3.11.4==2.28.0->==2.29.0==4.4.0->==4.5.0==0.3.2->==0.4.1==6.32.1->==6.33.0==1.4.0->==1.4.1==2.11.9->==2.12.3==2.10.5->==2.10.6==2.33.2->==2.41.4==1.1.406->==1.1.407==1.1.1->==1.2.1==26.3.0->==26.4.0==0.36.2->==0.37.0==14.1.0->==14.2.0==0.7.0->==0.7.1==0.27.1->==0.28.0==0.18.15->==0.18.16==0.13.3->==0.14.2==2.39.0->==2.42.1==0.48.0->==0.49.1==1.0.0->==1.1.0==0.19.2->==0.20.0==0.37.0->==0.38.0==0.21.0->==0.22.1==20.34.0->==20.35.3==1.1.0->==1.1.1==1.8.0->==1.9.0==2025.9.1->==2025.10.1==1.20.1->==1.22.0Release Notes
aio-libs/aiohttp (aiohttp)
v3.13.2: 3.13.2Compare Source
Bug fixes
Fixed cookie parser to continue parsing subsequent cookies when encountering a malformed cookie that fails regex validation, such as Google's
g_statecookie with unescaped quotes -- by :user:bdraco.Related issues and pull requests on GitHub:
#11632.
Fixed loading netrc credentials from the default :file:
~/.netrc(:file:~/_netrcon Windows) location when the :envvar:NETRCenvironment variable is not set -- by :user:bdraco.Related issues and pull requests on GitHub:
#11713, #11714.
Fixed WebSocket compressed sends to be cancellation safe. Tasks are now shielded during compression to prevent compressor state corruption. This ensures that the stateful compressor remains consistent even when send operations are cancelled -- by :user:
bdraco.Related issues and pull requests on GitHub:
#11725.
v3.13.1Compare Source
===================
Features
Make configuration options in
AppRunneralso available inrun_app()-- by :user:
Cycloctane.Related issues and pull requests on GitHub:
:issue:
11633.Bug fixes
Switched to
backports.zstdfor Python <3.14 and fixed zstd decompression for chunked zstd streams -- by :user:ZhaoMJ.Note: Users who installed
zstandardfor support on Python <3.14 will now need to installbackports.zstdinstead (installingaiohttp[speedups]will do this automatically).Related issues and pull requests on GitHub:
:issue:
11623.Updated
Content-Typeheader parsing to returnapplication/octet-streamwhen header contains invalid syntax.See :rfc:
9110#section-8.3-5.-- by :user:
sgaist.Related issues and pull requests on GitHub:
:issue:
10889.Fixed Python 3.14 support when built without
zstdsupport -- by :user:JacobHenner.Related issues and pull requests on GitHub:
:issue:
11603.Fixed blocking I/O in the event loop when using netrc authentication by moving netrc file lookup to an executor -- by :user:
bdraco.Related issues and pull requests on GitHub:
:issue:
11634.Fixed routing to a sub-application added via
.add_domain()not workingif the same path exists on the parent app. -- by :user:
Dreamsorcerer.Related issues and pull requests on GitHub:
:issue:
11673.Packaging updates and notes for downstreams
Moved core packaging metadata from :file:
setup.cfgto :file:pyproject.tomlper :pep:621-- by :user:
cdce8p.Related issues and pull requests on GitHub:
:issue:
9951.v3.13.0Compare Source
===================
Features
Added support for Python 3.14.
Related issues and pull requests on GitHub:
:issue:
10851, :issue:10872.Added support for free-threading in Python 3.14+ -- by :user:
kumaraditya303.Related issues and pull requests on GitHub:
:issue:
11466, :issue:11464.Added support for Zstandard (aka Zstd) compression
-- by :user:
KGuillaume-chaps.Related issues and pull requests on GitHub:
:issue:
11161.Added
StreamReader.total_raw_bytesto check the number of bytes downloaded-- by :user:
robpats.Related issues and pull requests on GitHub:
:issue:
11483.Bug fixes
Fixed pytest plugin to not use deprecated :py:mod:
asynciopolicy APIs.Related issues and pull requests on GitHub:
:issue:
10851.Updated
Content-Dispositionheader parsing to handle trailing semicolons and empty parts-- by :user:
PLPeeters.Related issues and pull requests on GitHub:
:issue:
11243.Fixed saved
CookieJarfailing to be loaded if cookies havepartitionedflag whenhttp.cookiedoes not have partitioned cookies supports. -- by :user:Cycloctane.Related issues and pull requests on GitHub:
:issue:
11523.Improved documentation
Added
Wireupto third-party libraries -- by :user:maldoinc.Related issues and pull requests on GitHub:
:issue:
11233.Packaging updates and notes for downstreams
The
blockbustertest dependency is now optional; the corresponding test fixture is disabled when it is unavailable-- by :user:
musicinybrain.Related issues and pull requests on GitHub:
:issue:
11363.Added
riscv64build to releases -- by :user:eshattow.Related issues and pull requests on GitHub:
:issue:
11425.Contributor-facing changes
Fixed
test_send_compress_textfailing when alternative zlib implementationis used. (
zlib-ngin python 3.14 windows build) -- by :user:Cycloctane.Related issues and pull requests on GitHub:
:issue:
11546.django/asgiref (asgiref)
v3.10.0Compare Source
invocations use the same thread. (#511)
python-attrs/attrs (attrs)
v25.4.0Compare Source
Backwards-incompatible Changes
Class-level
kw_only=Truebehavior is now consistent withdataclasses.Previously, a class that sets
kw_only=Truemakes all attributes keyword-only, including those from base classes.If an attribute sets
kw_only=False, that setting is ignored, and it is still made keyword-only.Now, only the attributes defined in that class that doesn't explicitly set
kw_only=Falseare made keyword-only.This shouldn't be a problem for most users, unless you have a pattern like this:
Here, we have a
kw_only=Trueattrs class (Base) with an attribute that setskw_only=Falseand has a default (Base.b), and then create a subclass (Subclass) with required arguments (Subclass.c).Previously this would work, since it would make
Base.bkeyword-only, but now this fails sinceBase.bis positional, and we have a required positional argument (Subclass.c) following another argument with defaults.#1457
Changes
Values passed to the
__init__()method ofattrsclasses are now correctly passed to__attrs_pre_init__()instead of their default values (in cases where kw_only was not specified).#1427
Added support for Python 3.14 and PEP 749.
#1446,
#1451
attrs.validators.deep_mapping()now allows to leave out either key_validator xor value_validator.#1448
attrs.validators.deep_iterator()andattrs.validators.deep_mapping()now accept lists and tuples for all validators and wrap them into aattrs.validators.and_().#1449
Added a new experimental way to inspect classes:
attrs.inspect(cls)returns the effective class-wide parameters that were used by attrs to construct the class.The returned class is the same data structure that attrs uses internally to decide how to construct the final class.
#1454
Fixed annotations for
attrs.field(converter=...).Previously, a
tupleof converters was only accepted if it had exactly one element.#1461
The performance of
attrs.asdict()has been improved by 45–260%.#1463
The performance of
attrs.astuple()has been improved by 49–270%.#1469
The type annotation for
attrs.validators.or_()now allows for different types of validators.This was only an issue on Pyright.
#1474
scikit-hep/awkward-1.0 (awkward)
v2.8.10: Version 2.8.10Compare Source
New features
Bug-fixes and performance
EmptyArrays by @ikrommyd in scikit-hep/awkward#3664VirtualNDArray'sshapeversuscountinfrom_buffersif both are known by @ikrommyd in scikit-hep/awkward#3667__setitem__syntax inak.merge_union_of_recordsto make it work with the jax backend by @ikrommyd in scikit-hep/awkward#3596Other
New Contributors
Full Changelog: scikit-hep/awkward@v2.8.9...v2.8.10
Blosc/python-blosc2 (blosc2)
v3.11.0Compare Source
cat2cloud(PR #511)squeezeto return view (rather than modify array in-place) (PR #518)setitemto load general array inputs into NDArrays (PR #517)v3.10.2Compare Source
XXX version-specific blurb XXX
v3.10.1Compare Source
outparameter for regular expressions (and not only for reductions). See PR #506.v3.10.0Compare Source
tanhandtanhbluesky/bluesky (bluesky)
v1.14.6Compare Source
What's Changed
New Contributors
Full Changelog: bluesky/bluesky@v1.14.5...v1.14.6
tkem/cachetools (cachetools)
v6.2.1Compare Source
===================
Add support for Python 3.14.
Improve documentation.
Update CI environment.
certifi/python-certifi (certifi)
v2025.10.5Compare Source
jawah/charset_normalizer (charset-normalizer)
v3.4.4Compare Source
Changed
setuptoolsto a specific constraintsetuptools>=68,<=81.Removed
setuptools-scmas a build dependency.Misc
dev-requirements.txtand createdci-requirements.txtfor security purposes.multiple.intoto.jsonlin GitHub releases in addition to individual attestation file per wheel.borntyping/python-colorlog (colorlog)
v6.10.1Compare Source
What's Changed
Full Changelog: borntyping/python-colorlog@v6.9.0...v6.10.1
copier-org/copier (copier)
v9.10.3Compare Source
Fix
excluded paths
_excludelist in new template version whenupdating
nedbat/coveragepy (coverage)
v7.11.0Compare Source
.. _changes_7-10-7:
pyca/cryptography (cryptography)
v46.0.3Compare Source
fastapi/fastapi (fastapi)
v0.120.1Compare Source
Upgrades
0.50.0. PR #14234 by @YuriiMotov.Internal
licenseandlicense-filestopyproject.toml, removeLicensefromclassifiers. PR #14230 by @YuriiMotov.v0.120.0Compare Source
There are no major nor breaking changes in this release. ☕️
The internal reference documentation now uses
annotated_doc.Docinstead oftyping_extensions.Doc, this adds a new (very small) dependency onannotated-doc, a package made just to provide thatDocdocumentation utility class.I would expect
typing_extensions.Docto be deprecated and then removed at some point fromtyping_extensions, for that reason there's the newannotated-docmicro-package. If you are curious about this, you can read more in the repo forannotated-doc.This new version
0.120.0only contains that transition to the new home package for that utility classDoc.Translations
Internal
typing_extensions.Doctoannotated_doc.Doc. PR #14222 by @tiangolo.v0.119.1Compare Source
Fixes
Docs
starlette.iobystarlette.devanduvicorn.orgbyuvicorn.dev. PR #14176 by @Kludex.Internal
waitinglabel inissue-manager. PR #14156 by @YuriiMotov.v0.119.0Compare Source
FastAPI now (temporarily) supports both Pydantic v2 models and
pydantic.v1models at the same time in the same app, to make it easier for any FastAPI apps still using Pydantic v1 to gradually but quickly migrate to Pydantic v2.Adding this feature was a big effort with the main objective of making it easier for the few applications still stuck in Pydantic v1 to migrate to Pydantic v2.
And with this, support for Pydantic v1 is now deprecated and will be removed from FastAPI in a future version soon.
Note: have in mind that the Pydantic team already stopped supporting Pydantic v1 for recent versions of Python, starting with Python 3.14.
You can read in the docs more about how to Migrate from Pydantic v1 to Pydantic v2.
Features
from pydantic.v1 import BaseModel, mixed Pydantic v1 and v2 models in the same app. PR #14168 by @tiangolo.v0.118.3Compare Source
Upgrades
v0.118.2Compare Source
Fixes
Internal
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.