Bump the pip-dependencies group with 4 updates

[dependabot]

Bumps the pip-dependencies group with 4 updates: chardet, google-auth-oauthlib, pymupdf and pandas.

Updates chardet from 5.2.0 to 6.0.0.post1

Release notes

Sourced from chardet's releases.

6.0.0.post1

• Fixed version number in chardet/version.py still being set to 6.0.0dev0. Otherwise identical to 6.0.0.

6.0.0

Features

• Unified single-byte charset detection: Instead of only having trained language models for a handful of languages (Bulgarian, Greek, Hebrew, Hungarian, Russian, Thai, Turkish) and relying on special-case Latin1Prober and MacRomanProber heuristics for Western encodings, chardet now treats all single-byte charsets the same way: every encoding gets proper language-specific bigram models trained on CulturaX corpus data. This means chardet can now accurately detect both the encoding and the language for all supported single-byte encodings.
• 38 new languages: Arabic, Belarusian, Breton, Croatian, Czech, Danish, Dutch, English, Esperanto, Estonian, Farsi, Finnish, French, German, Icelandic, Indonesian, Irish, Italian, Kazakh, Latvian, Lithuanian, Macedonian, Malay, Maltese, Norwegian, Polish, Portuguese, Romanian, Scottish Gaelic, Serbian, Slovak, Slovene, Spanish, Swedish, Tajik, Ukrainian, Vietnamese, and Welsh. Existing models for Bulgarian, Greek, Hebrew, Hungarian, Russian, Thai, and Turkish were also retrained with the new pipeline.
• EncodingEra filtering: New encoding_era parameter to detect allows filtering by an EncodingEra flag enum (MODERN_WEB, LEGACY_ISO, LEGACY_MAC, LEGACY_REGIONAL, DOS, MAINFRAME, ALL) allows callers to restrict detection to encodings from a specific era. detect() and detect_all() default to MODERN_WEB. The new MODERN_WEB default should drastically improve accuracy for users who are not working with legacy data. The tiers are:
  • MODERN_WEB: UTF-8/16/32, Windows-125x, CP874, CJK multi-byte (widely used on the web)
  • LEGACY_ISO: ISO-8859-x, KOI8-R/U (legacy but well-known standards)
  • LEGACY_MAC: Mac-specific encodings (MacRoman, MacCyrillic, etc.)
  • LEGACY_REGIONAL: Uncommon regional/national encodings (KOI8-T, KZ1048, CP1006, etc.)
  • DOS: DOS/OEM code pages (CP437, CP850, CP866, etc.)
  • MAINFRAME: EBCDIC variants (CP037, CP500, etc.)
• --encoding-era CLI flag: The chardetect CLI now accepts -e/--encoding-era to control which encoding eras are considered during detection.
• max_bytes and chunk_size parameters: detect(), detect_all(), and UniversalDetector now accept max_bytes (default 200KB) and chunk_size (default 64KB) parameters for controlling how much data is examined. (#314, @​bysiber)
• Encoding era preference tie-breaking: When multiple encodings have very close confidence scores, the detector now prefers more modern/Unicode encodings over legacy ones.
• Charset metadata registry: New chardet.metadata.charsets module provides structured metadata about all supported encodings, including their era classification and language filter.
• should_rename_legacy now defaults intelligently: When set to None (the new default), legacy renaming is automatically enabled when encoding_era is MODERN_WEB.
• Direct GB18030 support: Replaced the redundant GB2312 prober with a proper GB18030 prober.
• EBCDIC detection: Added CP037 and CP500 EBCDIC model registrations for mainframe encoding detection.
• Binary file detection: Added basic binary file detection to abort analysis earlier on non-text files.
• Python 3.12, 3.13, and 3.14 support (#283, @​hugovk; #311)
• GitHub Codespace support (#312, @​oxygen-dioxide)

Fixes

• Fix CP949 state machine: Corrected the state machine for Korean CP949 encoding detection. (#268, @​nenw)
• Fix SJIS distribution analysis: Fixed SJISDistributionAnalysis discarding valid second-byte range >= 0x80. (#315, @​bysiber)
• Fix UTF-16/32 detection for non-ASCII-heavy text: Improved detection of UTF-16/32 encoded CJK and other non-ASCII text by adding a MIN_RATIO threshold alongside the existing EXPECTED_RATIO.
• Fix get_charset crash: Resolved a crash when looking up unknown charset names.
• Fix GB18030 char_len_table: Corrected the character length table for GB18030 multi-byte sequences.
• Fix UTF-8 state machine: Updated to be more spec-compliant.
• Fix detect_all() returning inactive probers: Results from probers that determined "definitely not this encoding" are now excluded.
• Fix early cutoff bug: Resolved an issue where detection could terminate prematurely.
• Default UTF-8 fallback: If UTF-8 has not been ruled out and nothing else is above the minimum threshold, UTF-8 is now returned as the default.

Breaking changes

• Dropped Python 3.7, 3.8, and 3.9 support: Now requires Python 3.10+. (#283, @​hugovk)
• Removed Latin1Prober and MacRomanProber: These special-case probers have been replaced by the unified model-based approach described above. Latin-1, MacRoman, and all other single-byte encodings are now detected by SingleByteCharSetProber with trained language models, giving better accuracy and language identification.
• Removed EUC-TW support: EUC-TW encoding detection has been removed as it is extremely rare in practice.
• LanguageFilter.NONE removed: Use specific language filters or LanguageFilter.ALL instead.
• Enum types changed: InputState, ProbingState, MachineState, SequenceLikelihood, and CharacterCategory are now IntEnum (previously plain classes or Enum). LanguageFilter values changed from hardcoded hex to auto().
• detect() default behavior change: detect() now defaults to encoding_era=EncodingEra.MODERN_WEB and should_rename_legacy=None (auto-enabled for MODERN_WEB), whereas previously it defaulted to considering all encodings with no legacy renaming.

Misc changes

• Switched from Poetry/setuptools to uv + hatchling: Build system modernized with hatch-vcs for version management.

... (truncated)

Commits

• 2fa72d8 Update version to 6.0.0.post1
• 8a4636b docs: modernize usage examples and reorganize table of contents
• 20da71e docs: fix copyright start year and remove first-person reference
• b45ae91 docs: update copyright to 2015-2026 chardet contributors
• 3f9910d Add .readthedocs.yaml to fix RTD builds
• 7ef7cd0 Fix pyright type errors in chardetect.py and test.py
• 4025dfa Update documentation for 6.0.0 release
• 1170829 Add LEGACY_REGIONAL encoding era and reclassify misplaced encodings
• 19379ac Add --encoding-era CLI flag and improve heuristic selection
• 61308e2 Pre-release fixes: bump to 6.0.0, fix get_charset crash, cleanup
• Additional commits viewable in compare view

Updates google-auth-oauthlib from 1.2.4 to 1.3.0

Release notes

Sourced from google-auth-oauthlib's releases.

google-auth-oauthlib: v1.3.0

v1.3.0 (2026-02-26)

Features

• Log the flow.run_local_server redirect URL (#362) (84599aa0)

Bug Fixes

• Raise meaningful exception when oauth callback times out (#363) (adc3ee60)

Changelog

Sourced from google-auth-oauthlib's changelog.

1.3.0 (2022-03-05)

Features

• add symbols field, and auto-format comments (#277) (ca016dd)
• add api key support (#267) (061eb45)
• add question_id field in ReviewDocumentOperationMetadata (#269) (1c61b73)
• add question_id field in ReviewDocumentOperationMetadata (#273) (530f2ba)

Bug Fixes

• deps: require google-api-core>=1.31.5, >=2.3.2 (#285) (573deee)
• deps: require proto-plus>=1.15.0 (573deee)
• remove libcst from setup_requires (#276) (56c96e4)
• resolve DuplicateCredentialArgs error when using credentials_file (530f2ba)

1.2.1 (2022-01-17)

Bug Fixes

• deps: drop packaging dependency (038a736)
• deps: require google-api-core >= 1.28.0 (038a736)

1.2.0 (2021-10-14)

Features

• add support for python 3.10 (#228) (86d7cd6)

1.1.0 (2021-10-08)

Features

• add context manager support in client (#224) (8b65652)

Bug Fixes

• add 'dict' annotation type to 'request' (a95fac8)
• improper types in pagers generation (fd5dd70)
• v1beta2: enable self signed jwt for grpc (#191) (14e7765)
• v1beta2: Update DocumentUnderstandingService default_host from a regional endpoint to non-regional (#195) (090bcc5)

1.0.0 (2021-07-26)

... (truncated)

Commits

• 2c66d48 chore: librarian release pull request: 20260226T081244Z (#15616)
• fd4da88 chore(migration): Migrate code from googleapis/python-logging into packages/g...
• 717c158 tests: add system test dependencies
• 7597cca tests: enable system tests
• e0426dc chore(multiple): format handwritten code (#15617)
• ff062e4 Merge branch 'main' into migration.python-logging.migration.2026-02-20_16-32-...
• 72db795 chore: run librarian generate
• 80a8480 chore: run librarian generate
• 2a35c6a chore: run librarian generate
• 6f2ce04 chore: format using ruff
• Additional commits viewable in compare view

Updates pymupdf from 1.26.7 to 1.27.1

Release notes

Sourced from pymupdf's releases.

PyMuPDF-1.27.1 released

Wheels for Windows, Linux and MacOS, and the sdist, are available on https://pypi.org and can be installed in the usual way, for example:

python -m pip install --upgrade pymupdf

[Linux-aarch64 wheels will be built and uploaded later.]

Changes in version 1.27.1 (2026-02-11)

• Use MuPDF-1.27.1.

• Fixed issues:

  • Fixed #4599
  • Fixed #4751
  • Fixed #4762
  • Fixed #4790
  • Fixed #4857
  • Fixed #4886

• Other:

  • Added pymupdf.TEXT_CLIP.
  • Removed support for mupdf < 1.26.
  • New arg raise_on_repair in Document.save().
  • New method Document.repair().

Changelog

Sourced from pymupdf's changelog.

Change Log

Changes in version 1.27.1 (2026-02-11)

• Use MuPDF-1.27.1.

• Fixed issues:

  • Fixed 4599 <https://github.com/pymupdf/PyMuPDF/issues/4599>_: page.cluster_drawings extract a lot of small clusters once upgraded to 1.26
  • Fixed 4751 <https://github.com/pymupdf/PyMuPDF/issues/4751>_: Memory leaking in page.widgets()
  • Fixed 4762 <https://github.com/pymupdf/PyMuPDF/issues/4762>_: Importing pymupdf make pillow segmentation fault for converting jp2 file on ArchLinux
  • Fixed 4790 <https://github.com/pymupdf/PyMuPDF/issues/4790>_: Problem to delete pages on PDF
  • Fixed 4857 <https://github.com/pymupdf/PyMuPDF/issues/4857>_: Package is missing py.typed file required for type checking
  • Fixed 4886 <https://github.com/pymupdf/PyMuPDF/issues/4886>_: width attribute behaviour seems wrong

• Other:

  • Added pymupdf.TEXT_CLIP.
  • Removed support for mupdf < 1.26.
  • New arg raise_on_repair in Document.save().
  • New method Document.repair().

Changes in version 1.26.7 (2025-12-11)

• Use MuPDF-1.26.12.

  • Fixed 4801 <https://github.com/pymupdf/PyMuPDF/issues/4801>_: Build failure dumping all environment variables

Other:

• Retrospectively mark 4756 <https://github.com/pymupdf/PyMuPDF/issues/4756>_ as fixed in 1.26.6.
• Improved safety of pymupdf embed-extract. This now refuses to write to an existing file or outside current directory, unless -output or new flag -unsafe is specified.

Changes in version 1.26.6 (2025-11-05)

• Use MuPDF-1.26.11.

• Supported Python versions are now 3.10-3.14.

• Fixed issues:

  • Fixed 4699 <https://github.com/pymupdf/PyMuPDF/issues/4699>_: cannot find ExtGState resource
  • Fixed 4712 <https://github.com/pymupdf/PyMuPDF/issues/4712>_: Crash with "corrupted double-linked list"
  • Fixed 4720 <https://github.com/pymupdf/PyMuPDF/issues/4720>_: Memory leaking in rewrite_images?

... (truncated)

Commits

• 40b5524 changes.txt: minor updates for release.
• 2a770da src/: fix new warnings from recent pylint.
• 9bc6000 setup.py: added a clean fn for pipcl to call.
• 9422b74 pipcl.py: minor change to logging when cleaning.
• 1d59d99 Update for release 1.27.1.
• ccdefb3 tests/: added test_4599().
• 17c18fa setup.py: avoid modifying mupdf's config.h on Windows.
• be11a12 src/init.py: add <raise_on_repair> arg to Document.write().
• 9b43610 Docs: Updates Python version to the default for ReadTheDocs
• 521342f Updates Sphinx version to 8.1.3
• Additional commits viewable in compare view

Updates pandas from 3.0.0 to 3.0.1

Release notes

Sourced from pandas's releases.

pandas 3.0.1

We are pleased to announce the release of pandas 3.0.1. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• e04b26f RLS: 3.0.1 (#64206)
• 47909e6 [backport 3.0.x] ENH: Add item() method to ExtensionArray class (#64134) (#64...
• a061bfd Backport PR #64199 on branch 3.0.x (DOC: cleanup 3.0.1 whatsnew) (#64201)
• 085a385 [backport 3.0.x] BUG: Fix read_hdf failing on generic datetime64 dtype (#6400...
• 5f17047 [backport 3.0.x] BUG: use fill_null fallback for bug in pyarrow 21 on Windows...
• 0d3a8cb Backport PR #64122 on branch 3.0.x (REG: Allow RE2 syntax in str.contains and...
• 78e1917 Backport PR #64185 on branch 3.0.x (TST: remove fixed xfail for PyArrow 23.0....
• 75a42ca Backport PR #64168 on branch 3.0.x (TST: add legacy file generation and tests...
• 46d443f Backport PR #64092 on branch 3.0.x (BUG: DataFrame.loc fills b'' instead of N...
• 9d67932 Backport PR #64068 on branch 3.0.x (BUG: fixed to_timedelta with list of int ...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions