Upgrade: Bump the dependencies group across 1 directory with 20 updates #505

dependabot · 2025-05-01T14:14:06Z

Bumps the dependencies group with 20 updates in the / directory:

Package	From	To
aioauth-client	`0.29.0`	`0.30.1`
aiohappyeyeballs	`2.4.6`	`2.6.1`
aiohttp	`3.11.12`	`3.11.18`
anyio	`4.8.0`	`4.9.0`
attrs	`25.1.0`	`25.3.0`
boto3	`1.36.21`	`1.38.6`
botocore	`1.36.21`	`1.38.6`
certifi	`2025.1.31`	`2025.4.26`
cryptography	`44.0.1`	`44.0.2`
frozenlist	`1.5.0`	`1.6.0`
h11	`0.14.0`	`0.16.0`
httpcore	`1.0.7`	`1.0.9`
marshmallow	`3.26.1`	`4.0.0`
multidict	`6.1.0`	`6.4.3`
packaging	`24.2`	`25.0`
propcache	`0.2.1`	`0.3.1`
s3transfer	`0.11.2`	`0.12.0`
sentry-sdk	`2.21.0`	`2.27.0`
typing-extensions	`4.12.2`	`4.13.2`
yarl	`1.18.3`	`1.20.0`

Updates aioauth-client from 0.29.0 to 0.30.1

Commits

6b4c3d6 Bump version 0.30.0 → 0.30.1
492e23e build: remove notifies
91dc381 build: wip
8b08ba2 build: tune notify
b8405c8 Bump version 0.29.0 → 0.30.0
7c6a2bb feat: client.joinurl
See full diff in compare view

Updates aiohappyeyeballs from 2.4.6 to 2.6.1

Release notes

Sourced from aiohappyeyeballs's releases.

v2.6.1 (2025-03-12)

Bug Fixes

Resolve TypeError on import for Python < 3.9.2 (#151, 2042c82)

Detailed Changes: v2.6.0...v2.6.1

v2.6.0 (2025-03-11)

Features

docs: Publish documentation (#149, 4235273)

Creates an api_reference.rst file to expose the existing documentation for the few functions that have docstrings, as well as add documentation for AddrInfoType and SocketFactoryType. Now, these can be properly pointed to by other projects' documentation.

Detailed Changes: v2.5.0...v2.6.0

v2.5.0 (2025-03-06)

Features

Add callback for users to customize socket creation (#147, 8e1bc6a)

Co-authored-by: Kieren

Detailed Changes: v2.4.8...v2.5.0

v2.4.8 (2025-03-04)

Bug Fixes

Close runner up sockets in the event there are multiple winners (#143, 476a05b)

The first attempt to fix this was to use the cpython staggered race updates in #142 but there is still a race there where there can be multiple winners. Instead we now accept that we will not be able to cancel all coros in time and there will always be a risk of multiple winners. We store all sockets in a set that were not already cleaned up and we close all but the first winner after the staggered race finishes.

Detailed Changes: v2.4.7...v2.4.8

v2.4.7 (2025-03-04)

Bug Fixes

... (truncated)

Changelog

Sourced from aiohappyeyeballs's changelog.

v2.6.1 (2025-03-12)

Bug fixes

Resolve typeerror on import for python < 3.9.2 (#151) (2042c82)

v2.6.0 (2025-03-11)

Features

Publish documentation (#149) (4235273)

v2.5.0 (2025-03-06)

Features

Add callback for users to customize socket creation (#147) (8e1bc6a)

v2.4.8 (2025-03-04)

Bug fixes

Close runner up sockets in the event there are multiple winners (#143) (476a05b)

v2.4.7 (2025-03-04)

Bug fixes

Resolve warnings when running tests (#144) (e96264a)

Commits

e3bd5bd 2.6.1
2042c82 fix: resolve TypeError on import for Python < 3.9.2 (#151)
b23d919 chore: remove unused CI exclude for Python 3.8.0 (#153)
36149e7 2.6.0
4235273 feat(docs): publish documentation (#149)
17d5e48 chore(pre-commit.ci): pre-commit autoupdate (#148)
3fed443 2.5.0
8e1bc6a feat: add callback for users to customize socket creation (#147)
c4ab1e5 2.4.8
476a05b fix: close runner up sockets in the event there are multiple winners (#143)
Additional commits viewable in compare view

Updates aiohttp from 3.11.12 to 3.11.18

Release notes

Sourced from aiohttp's releases.

3.11.18

Bug fixes

Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt.

Related issues and pull requests on GitHub: #7686.

Fixed reading fragmented WebSocket messages when the payload was masked -- by :user:bdraco.

The problem first appeared in 3.11.17

Related issues and pull requests on GitHub: #10764.

3.11.17

Miscellaneous internal changes

Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco.

Related issues and pull requests on GitHub: #10713.

Improved web server performance when connection can be reused -- by :user:bdraco.

Related issues and pull requests on GitHub: #10714.

Improved performance of the WebSocket reader -- by :user:bdraco.

Related issues and pull requests on GitHub: #10740.

... (truncated)

Changelog

Sourced from aiohttp's changelog.

3.11.18 (2025-04-20)

Bug fixes

Disabled TLS in TLS warning (when using HTTPS proxies) for uvloop and newer Python versions -- by :user:lezgomatt.

Related issues and pull requests on GitHub: :issue:7686.

Fixed reading fragmented WebSocket messages when the payload was masked -- by :user:bdraco.

The problem first appeared in 3.11.17

Related issues and pull requests on GitHub: :issue:10764.

3.11.17 (2025-04-19)

Miscellaneous internal changes

Optimized web server performance when access logging is disabled by reducing time syscalls -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:10713.

Improved web server performance when connection can be reused -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:10714.

... (truncated)

Commits

2be611a Release 3.11.18 (#10773)
58b512c [PR #10770/a88a2436 backport][3.11] Increase benchmark timeout to 9 minutes i...
a003df3 [PR #10726/feff48d backport][3.11] Disable TLS in TLS warning for uvloop (#10...
f69333d [PR #10764/e0cc020 backport][3.11] Fix WebSocket reader with fragmented maske...
83690e5 Increment version to 3.11.18.dev0 (#10758)
11be7e2 Release 3.11.17 (#10756)
0615314 [PR #10752/07590cd2 backport][3.11] Add a test to the WebSocket parser for se...
8b9888d [PR #10749/d702fb30 backport][3.11] Add compressed binary WebSocket roundtrip...
1d00bd2 [PR #10744/23d3ee06 backport][3.11] Refactor WebSocket reader to avoid freque...
099cc0c [PR #10740/0d21d8d backport][3.11] Refactor WebSocket reader to avoid creatin...
Additional commits viewable in compare view

Updates anyio from 4.8.0 to 4.9.0

Release notes

Sourced from anyio's releases.

4.9.0

Added async support for temporary file handling (#344; PR by @11kkw)

Added 4 new fixtures for the AnyIO pytest plugin:

free_tcp_port_factory: session scoped fixture returning a callable that generates unused TCP port numbers

free_udp_port_factory: session scoped fixture returning a callable that generates unused UDP port numbers

free_tcp_port: function scoped fixture that invokes the free_tcp_port_factory fixture to generate a free TCP port number

free_udp_port: function scoped fixture that invokes the free_udp_port_factory fixture to generate a free UDP port number

Added stdin argument to anyio.run_process() akin to what anyio.open_process(), asyncio.create_subprocess(), trio.run_process(), and subprocess.run() already accept (PR by @jmehnle)

Added the info property to anyio.Path on Python 3.14

Changed anyio.getaddrinfo() to ignore (invalid) IPv6 name resolution results when IPv6 support is disabled in Python

Changed EndOfStream raised from MemoryObjectReceiveStream.receive() to leave out the AttributeError from the exception chain which was merely an implementation detail and caused some confusion

Fixed traceback formatting growing quadratically with level of TaskGroup nesting on asyncio due to exception chaining when raising ExceptionGroups in TaskGroup.__aexit__ (#863; PR by @tapetersen)

Fixed anyio.Path.iterdir() making a blocking call in Python 3.13 (#873; PR by @cbornet and @agronholm)

Fixed connect_tcp() producing cyclic references in tracebacks when raising exceptions (#809; PR by @graingert)

Fixed anyio.to_thread.run_sync() needlessly holding on to references of the context, function, arguments and others until the next work item on asyncio (PR by @Wankupi)

Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups ([#905](https://github.com/agronholm/anyio/issues/905) <https://github.com/agronholm/anyio/pull/905>_; PR by by @agronholm and @tapetersen)

Added the ability to specify the thread name in start_blocking_portal() ([#818](https://github.com/agronholm/anyio/issues/818) <https://github.com/agronholm/anyio/issues/818>_; PR by @davidbrochart)

Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. ([#896](https://github.com/agronholm/anyio/issues/896) <https://github.com/agronholm/anyio/pull/896>_; PR by @graingert)

Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7

Fixed return annotation of __aexit__ on async context managers. CMs which can suppress exceptions should return bool, or None otherwise. ([#913](https://github.com/agronholm/anyio/issues/913) <https://github.com/agronholm/anyio/pull/913>_; PR by @Enegg)

Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size ([#915](https://github.com/agronholm/anyio/issues/915) <https://github.com/agronholm/anyio/pull/915>_; PR by @11kkw)

4.9.0

Added async support for temporary file handling ([#344](https://github.com/agronholm/anyio/issues/344) <https://github.com/agronholm/anyio/issues/344>_; PR by @11kkw)

Added 4 new fixtures for the AnyIO pytest plugin:

free_tcp_port_factory: session scoped fixture returning a callable that generates unused TCP port numbers

free_udp_port_factory: session scoped fixture returning a callable that generates unused UDP port numbers

free_tcp_port: function scoped fixture that invokes the free_tcp_port_factory fixture to generate a free TCP port number

free_udp_port: function scoped fixture that invokes the free_udp_port_factory fixture to generate a free UDP port number

Added stdin argument to anyio.run_process() akin to what anyio.open_process(), asyncio.create_subprocess_…(), trio.run_process(), and subprocess.run() already accept (PR by @jmehnle)

Added the info property to anyio.Path on Python 3.14

Changed anyio.getaddrinfo() to ignore (invalid) IPv6 name resolution results when IPv6 support is disabled in Python

Changed EndOfStream raised from MemoryObjectReceiveStream.receive() to leave out the AttributeError from the exception chain which was merely an implementation detail and caused some confusion

Fixed traceback formatting growing quadratically with level of TaskGroup

... (truncated)

Commits

a6e9ebb Bumped up the version
9b9520d Fixed cyclic references in to_thread.run_sync() on asyncio (#887)
1f04d6b Added a note about asyncio cancellation semantics
e14b172 Upgraded to a newer Sphinx version
7e13c49 Avoid refcycles in tracebacks from happy eyeballs exceptions (#809)
d134da7 Raise EndOfStream from None in MemoryObjectReceiveStream.receive() (#889)
2840e06 Added cheaper implementation for no_other_refs() on Python 3.14 (#886)
31ce0a5 Added fixtures for generating bindable TCP/UDP ports (#856)
cd85e47 Test on PyPy 3.11 on CI (#876)
d228020 Detect blocking calls in coroutines using BlockBuster (#875)
Additional commits viewable in compare view

Updates attrs from 25.1.0 to 25.3.0

Commits

See full diff in compare view

Updates boto3 from 1.36.21 to 1.38.6

Commits

98de1f1 Merge branch 'release-1.38.6'
daa52f1 Bumping version to 1.38.6
8757888 Add changelog entries from botocore
68c66a7 Merge branch 'release-1.38.5'
db9b093 Merge branch 'release-1.38.5' into develop
6c0fe03 Bumping version to 1.38.5
4356228 Add changelog entries from botocore
83eed03 Merge branch 'release-1.38.4'
96b492e Merge branch 'release-1.38.4' into develop
7f0c87f Bumping version to 1.38.4
Additional commits viewable in compare view

Updates botocore from 1.36.21 to 1.38.6

Commits

abcecfa Merge branch 'release-1.38.6'
0f5b2e4 Bumping version to 1.38.6
20f94c5 Update endpoints model
00feda0 Update to latest models
74f22bb Merge branch 'release-1.38.5'
a748cc0 Merge branch 'release-1.38.5' into develop
997c90f Bumping version to 1.38.5
be684d8 Update endpoints model
24f906d Update to latest models
2129f3f Merge branch 'release-1.38.4'
Additional commits viewable in compare view

Updates certifi from 2025.1.31 to 2025.4.26

Commits

275c9eb 2025.04.26 (#347)
3788331 Bump actions/setup-python from 5.4.0 to 5.5.0 (#346)
9d1f1b7 Bump actions/download-artifact from 4.1.9 to 4.2.1 (#344)
96b97a5 Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#343)
c054ed3 Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (#342)
44547fc Bump actions/download-artifact from 4.1.8 to 4.1.9 (#341)
5ea5124 Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#340)
2f142b7 Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (#339)
80d2ebd Bump actions/setup-python from 5.3.0 to 5.4.0 (#337)
See full diff in compare view

Updates cryptography from 44.0.1 to 44.0.2

Changelog

Sourced from cryptography's changelog.

44.0.2 - 2025-03-01

* We now build wheels for PyPy 3.11.

.. _v44-0-1:

Commits

56cfce6 44.0.2 release (#12537)
7b4cc26 Backport PyPy3.11 support (#12536)
See full diff in compare view

Updates frozenlist from 1.5.0 to 1.6.0

Release notes

Sourced from frozenlist's releases.

1.6.0

Bug fixes

Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

Related commits on GitHub: :commit:41591f2.

Features

Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

Related issues and pull requests on GitHub: #618.

Started building armv7l wheels -- by :user:bdraco.

Related issues and pull requests on GitHub: #642.

Packaging updates and notes for downstreams

Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

Related commits on GitHub: :commit:41591f2.

Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

Related issues and pull requests on GitHub: #618.

The packaging metadata switched to including an SPDX license identifier introduced in :pep:639 -- by :user:cdce8p.

Related issues and pull requests on GitHub: #639.

Contributor-facing changes

... (truncated)

Changelog

Sourced from frozenlist's changelog.

v1.6.0

(2025-04-17)

Bug fixes

Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

Related commits on GitHub: :commit:41591f2.

Features

Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

Related issues and pull requests on GitHub: :issue:618.

Started building armv7l wheels -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:642.

Packaging updates and notes for downstreams

Stopped implicitly allowing the use of Cython pre-release versions when building the distribution package -- by :user:ajsanchezsanz and :user:markgreene74.

Related commits on GitHub: :commit:41591f2.

Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

Related issues and pull requests on GitHub: :issue:618.

The packaging metadata switched to including an SPDX license identifier introduced in :pep:639 -- by :user:cdce8p.

Related issues and pull requests on GitHub: :issue:639.

... (truncated)

Commits

9f4253c Fix towncrier head_line missing the leading v (#645)
4c8207a Release 1.6.0 (#643)
58aef99 Start building wheels on armv7l (#642)
d8e4a82 Use SPDX license expression (#639)
57ce238 [pre-commit.ci] pre-commit autoupdate (#641)
f545c23 Implement support for the free-threaded build of CPython 3.13 (#618)
4ee4583 Build(deps): Bump pypa/cibuildwheel from 2.23.1 to 2.23.2 (#640)
c28f32d Better organize lint and test dependencies (#636)
a611cc2 Build(deps): Bump pypa/cibuildwheel from 2.23.0 to 2.23.1 (#638)
bfa0cb1 Reduce number of coverage uploads needed (#637)
Additional commits viewable in compare view

Updates h11 from 0.14.0 to 0.16.0

Commits

1c5b075 this time for surer
d9c3699 this time for sure...
d91b9dd blacken
5a4683c Soothe mypy
9c9567f Bump version to 0.16.0
114803a Merge commit from fork
9462006 Bump version to 0.15.0
70a96be Merge pull request #181 from Julien00859/Julien00859/get_int_max_str_digits
60782ad Reject Content-Length longer 1 billion TB
dff7cc3 Validate Chunked-Encoding chunk footer
Additional commits viewable in compare view

Updates httpcore from 1.0.7 to 1.0.9

Release notes

Sourced from httpcore's releases.

Version 1.0.9 (April 24th, 2025)

Resolve GHSA-vqfr-h8mv-ghfj with h11 dependency update. (#1008)

Version 1.0.8 (April 11th, 2025)

Fix AttributeError when importing on Python 3.14. (#1005)

Changelog

Sourced from httpcore's changelog.

Version 1.0.9 (April 24th, 2025)

Resolve GHSA-vqfr-h8mv-ghfj with h11 dependency update. (#1008)

Version 1.0.8 (April 11th, 2025)

Fix AttributeError when importing on Python 3.14. (#1005)

Commits

9820975 Version 1.0.9 (#1011)
d1e17c5 Update h11 dependency, resolving security fix. (#1008)
ae46dfb Version 1.0.8 (#1006)
b2a796c Fix AttributeError when importing on Python 3.14 (#1005)
38f277c Revert "Use AnyIO fast_acquire (#953)" (#1002)
973cbdd Use AnyIO fast_acquire (#953)
8b8ab18 fix ci (#999)
See full diff in compare view

Updates marshmallow from 3.26.1 to 4.0.0

Changelog

Sourced from marshmallow's changelog.

4.0.0 (2025-04-16)

See :ref:upgrading_4_0 for a guide on updating your code.

Features:

Typing: Add types to all Field <marshmallow.fields.Field> constructor kwargs (:issue:2285). Thanks :user:navignaw for the suggestion.

DateTime <marshmallow.fields.DateTime>, Date <marshmallow.fields.Date>, Time <marshmallow.fields.Time>, TimeDelta <marshmallow.fields.TimeDelta>, and Enum <marshmallow.fields.Enum> accept their internal value types as valid input (:issue:1415). Thanks :user:bitdancer for the suggestion.

@validates <marshmallow.validates> accepts multiple field names (:issue:1960). Backwards-incompatible: Decorated methods now receive data_key as a keyword argument. Thanks :user:dpriskorn for the suggestion and :user:dharani7998 for the PR.

Other changes:

Typing: Field <marshmallow.fields.Field> is now a generic type with a type argument for the internal value type.

marshmallow.fields.UUID no longer subclasses marshmallow.fields.String.

marshmallow.Schema.load no longer silently fails to call schema validators when a generator is passed (:issue:1898). The typing of data is also updated to be more accurate. Thanks :user:ziplokk1 for reporting.

Backwards-incompatible: Use datetime.date.fromisoformat, datetime.time.fromisoformat, and datetime.datetime.fromisoformat from the standard library to deserialize dates, times and datetimes (:pr:2078). As a consequence of this change:

Time with time offsets are now supported.

YYYY-MM-DD is now accepted as a datetime and deserialized as naive 00:00 AM.

from_iso_date, from_iso_time and from_iso_datetime are removed from marshmallow.utils.

Remove isoformat, to_iso_time and to_iso_datetime from marshmallow.utils (:pr:2766).

Remove from_rfc, and rfcformat from marshmallow.utils (:pr:2767).

Remove is_keyed_tuple from marshmallow.utils (:pr:2768).

Remove get_fixed_timezone from marshmallow.utils (:pr:2773).

Backwards-incompatible: marshmallow.fields.Boolean no longer serializes non-boolean values (:pr:2725).

Backwards-incompatible: Rename schema parameter to parent in marshmallow.fields.Field._bind_to_schema (:issue:1360).

Backwards-incompatible: Rename pass_many parameter to pass_collection in pre/post processing methods (:issue:1369).

Backwards-incompatible: marshmallow.fields.TimeDelta no longer truncates float values when deserializing (:pr:2654). This allows microseconds to be preserved, e.g.

.. code-block:: python
from marshmallow import fields
field = fields.TimeDelta()
Before
field.deserialize(12.9)
datetime.timedelta(seconds=12)
datetime.timedelta(seconds=12)

... (truncated)

Commits

84b1596 Bump version and update changelog
a715b9e Bump sphinx-issues from 5.0.0 to 5.0.1 (#2819)
5c136b1 [pre-commit.ci] pre-commit autoupdate (#2817)
df1daf0 Bump sphinxext-opengraph from 0.9.1 to 0.10.0 (#2818)
2fc8207 @validates accepts multiple field names (#1965)
b7026f3 Bump sphinx from 8.1.3 to 8.2.3
c495e52 [pre-commit.ci] pre-commit autoupdate
f0c6afb Add missing fields to all (#2809)
ef06fbe [pre-commit.ci] pre-commit autoupdate (#2808)
ffedbfe Merge branch '3.x-line' into dev
Additional commits viewable in compare view

Updates multidict from 6.1.0 to 6.4.3

Release notes

Sourced from multidict's releases.

6.4.3

Bug fixes

Fixed building the library in debug mode.

Related issues and pull requests on GitHub: #1144.

Fixed custom PyType_GetModuleByDef() when non-heap type object was passed.

Related issues and pull requests on GitHub: #1147.

Packaging updates and notes for downstreams

Added the ability to build in debug mode by setting :envvar:MULTIDICT_DEBUG_BUILD in the environment -- by :user:bdraco.

Related issues and pull requests on GitHub: #1145.

6.4.2

Bug fixes

Fixed a segmentation fault when creating subclassed :py:class:~multidict.MultiDict objects on Python < 3.11 -- by :user:bdraco.

The problem first appeared in 6.4.0

Related issues and pull requests on GitHub: #1141.

6.4.1

No change release of 6.4.0 since the attestations failed to upload to GitHub

6.4.0

Bug fixes

... (truncated)

Changelog

Sourced from multidict's changelog.

6.4.3

(2025-04-10)

Bug fixes

Fixed building the library in debug mode.

Related issues and pull requests on GitHub: :issue:1144.

Fixed custom PyType_GetModuleByDef() when non-heap type object was passed.

Related issues and pull requests on GitHub: :issue:1147.

Packaging updates and notes for downstreams

Added the ability to build in debug mode by setting :envvar:MULTIDICT_DEBUG_BUILD in the environment -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:1145.

6.4.2

(2025-04-09)

Bug fixes

Fixed a segmentation fault when creating subclassed :py:class:~multidict.MultiDict objects on Python < 3.11 -- by :user:bdraco.

The problem first appeared in 6.4.0

Related issues and pull requests on GitHub: :issue:1141.

... (truncated)

Commits

5f64e68 Release 6.4.3 (#1148)
28b7b4b Run tests in debug mode as well (#1146)
cf690d5 Fix custom PyType_GetModuleByDef when non-heap type object was passed (#1147)
57c09c0 Fix the library building in debug mode (#1144)
fe79f97 Release 6.4.2 (#1142)
21a6e93 Fix segfault in PyType_GetModuleByDef for Python < 3.11 (#1141)
2c0d458 Release 6.4.1 (#1139)
caf98ba Increase deploy timeout to 15 minutes (#1138)
c707925 Release 6.4.0 (#1137)
78761cf Fix memory leak creating new istr objects (#1133)
Additional commits viewable in compare view

Updates packaging from 24.2 to 25.0

Release notes

Sourced from packaging's releases.

25.0

What's Changed

Re-add a test for Unicode file name parsing by @Siddhesh-Agarwal in pypa/packaging#863

Upgrade to ruff 0.9.1 by @DimitriPapadopoulos in pypa/packaging#865

Add support for PEP 738 Android tags by @mhsmith in pypa/packaging#880

feat(markers): support 'extras' and 'dependency_groups' markers by @frostming in pypa/packaging#888

New Contributors

@Siddhesh-Agarwal made their first contribution in pypa/packaging#863

@mhsmith made their first contribution in pypa/packaging#880

@frostming made their first contribution in pypa/packaging#888

Full Changelog: pypa/packaging@24.2...25.0

Changelog

Sourced from packaging's changelog.

25.0 - 2025-04-19


* PEP 751: Add support for ``extras`` and ``dependency_groups`` markers. (:issue:`885`)
* PEP 738: Add support for Android platform tags. (:issue:`880`)

Commits

f585376 Bump for release
600ecea Add changelog entries
3910129 support 'extras' and 'dependency_groups' markers (#888)
8e49b43 Add support for PEP 738 Android tags (#880)
e624d8e Bump the github-actions group with 3 updates (#886)
71f38d8 Bump the github-actions group with 2 updates (#878)
9b4922d Bump the github-actions group with 3 updates (#870)
8510bd9 Upgrade to ruff 0.9.1 (#865)
9375ec2 Re-add tests for Unicode file name parsing (#863)
2256ed4 Bump the github-actions group across 1 directory with 2 updates (#864)
Additional commits viewable in compare view

Updates propcache from 0.2.1 to 0.3.1

Release notes

Sourced from propcache's releases.

0.3.1

Bug fixes

Improved typing annotations, fixing some type errors under correct usage and improving typing robustness generally -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub: #103.

0.3.0

Features

Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

Related issues and pull requests on GitHub: #84.

Packaging updates and notes for downstreams

Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

Related issues and pull requests on GitHub: #84.

Contributor-facing changes

GitHub Actions CI/CD is now configured to manage caching pip-ecosystem dependencies using re-actors/cache-python-deps_ -- an action by :user:webknjaz that takes into account ABI stability and the exact version of Python runtime.

.. _re-actors/cache-python-deps: https://github.com/marketplace/actions/cache-python-deps

Related issues and pull requests on GitHub: #93.

Changelog

Sourced from propcache's changelog.

0.3.1

(2025-03-25)

Bug fixes

Improved typing annotations, fixing some type errors under correct usage and improving typing robustness generally -- by :user:Dreamsorcerer.

Related issues and pull requests on GitHub: :issue:103.

0.3.0

(2025-02-20)

Features

Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

Related issues and pull requests on GitHub: :issue:84.

Packaging updates and notes for downstreams

Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

Related issues and pull requests on GitHub: :issue:84.

Contributor-facing changes

GitHub Actions CI/CD is now configured to manage caching pip-ecosystem dependencies using re-act... Description has been truncated

Bumps the dependencies group with 20 updates in the / directory: | Package | From | To | | --- | --- | --- | | [aioauth-client](https://github.com/klen/aioauth-client) | `0.29.0` | `0.30.1` | | [aiohappyeyeballs](https://github.com/aio-libs/aiohappyeyeballs) | `2.4.6` | `2.6.1` | | [aiohttp](https://github.com/aio-libs/aiohttp) | `3.11.12` | `3.11.18` | | [anyio](https://github.com/agronholm/anyio) | `4.8.0` | `4.9.0` | | [attrs](https://github.com/sponsors/hynek) | `25.1.0` | `25.3.0` | | [boto3](https://github.com/boto/boto3) | `1.36.21` | `1.38.6` | | [botocore](https://github.com/boto/botocore) | `1.36.21` | `1.38.6` | | [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2025.4.26` | | [cryptography](https://github.com/pyca/cryptography) | `44.0.1` | `44.0.2` | | [frozenlist](https://github.com/aio-libs/frozenlist) | `1.5.0` | `1.6.0` | | [h11](https://github.com/python-hyper/h11) | `0.14.0` | `0.16.0` | | [httpcore](https://github.com/encode/httpcore) | `1.0.7` | `1.0.9` | | [marshmallow](https://github.com/marshmallow-code/marshmallow) | `3.26.1` | `4.0.0` | | [multidict](https://github.com/aio-libs/multidict) | `6.1.0` | `6.4.3` | | [packaging](https://github.com/pypa/packaging) | `24.2` | `25.0` | | [propcache](https://github.com/aio-libs/propcache) | `0.2.1` | `0.3.1` | | [s3transfer](https://github.com/boto/s3transfer) | `0.11.2` | `0.12.0` | | [sentry-sdk](https://github.com/getsentry/sentry-python) | `2.21.0` | `2.27.0` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.12.2` | `4.13.2` | | [yarl](https://github.com/aio-libs/yarl) | `1.18.3` | `1.20.0` | Updates `aioauth-client` from 0.29.0 to 0.30.1 - [Changelog](https://github.com/klen/aioauth-client/blob/develop/Changelog) - [Commits](klen/aioauth-client@0.29.0...0.30.1) Updates `aiohappyeyeballs` from 2.4.6 to 2.6.1 - [Release notes](https://github.com/aio-libs/aiohappyeyeballs/releases) - [Changelog](https://github.com/aio-libs/aiohappyeyeballs/blob/main/CHANGELOG.md) - [Commits](aio-libs/aiohappyeyeballs@v2.4.6...v2.6.1) Updates `aiohttp` from 3.11.12 to 3.11.18 - [Release notes](https://github.com/aio-libs/aiohttp/releases) - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.11.12...v3.11.18) Updates `anyio` from 4.8.0 to 4.9.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst) - [Commits](agronholm/anyio@4.8.0...4.9.0) Updates `attrs` from 25.1.0 to 25.3.0 - [Commits](https://github.com/sponsors/hynek/commits) Updates `boto3` from 1.36.21 to 1.38.6 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.36.21...1.38.6) Updates `botocore` from 1.36.21 to 1.38.6 - [Commits](boto/botocore@1.36.21...1.38.6) Updates `certifi` from 2025.1.31 to 2025.4.26 - [Commits](certifi/python-certifi@2025.01.31...2025.04.26) Updates `cryptography` from 44.0.1 to 44.0.2 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@44.0.1...44.0.2) Updates `frozenlist` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/aio-libs/frozenlist/releases) - [Changelog](https://github.com/aio-libs/frozenlist/blob/master/CHANGES.rst) - [Commits](aio-libs/frozenlist@v1.5.0...v1.6.0) Updates `h11` from 0.14.0 to 0.16.0 - [Commits](python-hyper/h11@v0.14.0...v0.16.0) Updates `httpcore` from 1.0.7 to 1.0.9 - [Release notes](https://github.com/encode/httpcore/releases) - [Changelog](https://github.com/encode/httpcore/blob/master/CHANGELOG.md) - [Commits](encode/httpcore@1.0.7...1.0.9) Updates `marshmallow` from 3.26.1 to 4.0.0 - [Changelog](https://github.com/marshmallow-code/marshmallow/blob/dev/CHANGELOG.rst) - [Commits](marshmallow-code/marshmallow@3.26.1...4.0.0) Updates `multidict` from 6.1.0 to 6.4.3 - [Release notes](https://github.com/aio-libs/multidict/releases) - [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst) - [Commits](aio-libs/multidict@v6.1.0...v6.4.3) Updates `packaging` from 24.2 to 25.0 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@24.2...25.0) Updates `propcache` from 0.2.1 to 0.3.1 - [Release notes](https://github.com/aio-libs/propcache/releases) - [Changelog](https://github.com/aio-libs/propcache/blob/master/CHANGES.rst) - [Commits](aio-libs/propcache@v0.2.1...v0.3.1) Updates `s3transfer` from 0.11.2 to 0.12.0 - [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst) - [Commits](boto/s3transfer@0.11.2...0.12.0) Updates `sentry-sdk` from 2.21.0 to 2.27.0 - [Release notes](https://github.com/getsentry/sentry-python/releases) - [Changelog](https://github.com/getsentry/sentry-python/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-python@2.21.0...2.27.0) Updates `typing-extensions` from 4.12.2 to 4.13.2 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.12.2...4.13.2) Updates `yarl` from 1.18.3 to 1.20.0 - [Release notes](https://github.com/aio-libs/yarl/releases) - [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst) - [Commits](aio-libs/yarl@v1.18.3...v1.20.0) --- updated-dependencies: - dependency-name: aioauth-client dependency-version: 0.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: aiohappyeyeballs dependency-version: 2.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: aiohttp dependency-version: 3.11.18 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: anyio dependency-version: 4.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: attrs dependency-version: 25.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: boto3 dependency-version: 1.38.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: botocore dependency-version: 1.38.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: certifi dependency-version: 2025.4.26 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: cryptography dependency-version: 44.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: frozenlist dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: h11 dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: httpcore dependency-version: 1.0.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: marshmallow dependency-version: 4.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: multidict dependency-version: 6.4.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: packaging dependency-version: '25.0' dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: propcache dependency-version: 0.3.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: s3transfer dependency-version: 0.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sentry-sdk dependency-version: 2.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: typing-extensions dependency-version: 4.13.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: yarl dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2025-06-17T17:47:26Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 1, 2025

dependabot bot closed this Jun 17, 2025

dependabot bot deleted the dependabot/pip/dependencies-49370852b7 branch June 17, 2025 17:47

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Upgrade: Bump the dependencies group across 1 directory with 20 updates #505

Upgrade: Bump the dependencies group across 1 directory with 20 updates #505

Uh oh!

dependabot bot commented on behalf of github May 1, 2025 •

edited

Loading

Before

datetime.timedelta(seconds=12)

Uh oh!

dependabot bot commented on behalf of github Jun 17, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Upgrade: Bump the dependencies group across 1 directory with 20 updates #505

Upgrade: Bump the dependencies group across 1 directory with 20 updates #505

Uh oh!

Conversation

dependabot bot commented on behalf of github May 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v2.6.1 (2025-03-12)

Bug Fixes

v2.6.0 (2025-03-11)

Features

v2.5.0 (2025-03-06)

Features

v2.4.8 (2025-03-04)

Bug Fixes

v2.4.7 (2025-03-04)

Bug Fixes

v2.6.1 (2025-03-12)

Bug fixes

v2.6.0 (2025-03-11)

Features

v2.5.0 (2025-03-06)

Features

v2.4.8 (2025-03-04)

Bug fixes

v2.4.7 (2025-03-04)

Bug fixes

3.11.18

Bug fixes

3.11.17

Miscellaneous internal changes

3.11.18 (2025-04-20)

Bug fixes

3.11.17 (2025-04-19)

Miscellaneous internal changes

4.9.0

Version history

1.6.0

Bug fixes

Features

Packaging updates and notes for downstreams

Contributor-facing changes

v1.6.0

Bug fixes

Features

Packaging updates and notes for downstreams

Version 1.0.9 (April 24th, 2025)

Version 1.0.8 (April 11th, 2025)

Version 1.0.9 (April 24th, 2025)

Version 1.0.8 (April 11th, 2025)

Before

datetime.timedelta(seconds=12)

6.4.3

Bug fixes

Packaging updates and notes for downstreams

6.4.2

Bug fixes

6.4.1

6.4.0

Bug fixes

6.4.3

Bug fixes

Packaging updates and notes for downstreams

6.4.2

Bug fixes

25.0

What's Changed

New Contributors

0.3.1

Bug fixes

0.3.0

Features

Packaging updates and notes for downstreams

Contributor-facing changes

0.3.1

Bug fixes

0.3.0

Features

Packaging updates and notes for downstreams

Contributor-facing changes

Uh oh!

dependabot bot commented on behalf of github May 1, 2025 •

edited

Loading