build(deps): bump the all-pip-updates group across 3 directories with 53 updates by dependabot[bot] · Pull Request #70243 · saltstack/salt

dependabot · 2026-09-05T21:16:02Z

Updates the requirements on aiohttp, certifi, cffi, charset-normalizer, croniter, cryptography, gitpython, idna, jaraco-functools, jaraco-context, jaraco-text, lxml, msgpack, multidict, opentelemetry-api, opentelemetry-sdk, opentelemetry-exporter-otlp-proto-http, opentelemetry-exporter-prometheus, xxhash, packaging, psutil, requests, tornado, truststore, virtualenv, filelock, zipp, wheel, setuptools-scm, pip, cython, docker, pytest, build, pyzmq, m2crypto, pylint, boto3, botocore, kubernetes, moto, pynacl, sqlparse, vcert, websocket-client, xmldiff, mercurial, pygit2, ansible, twilio, python-telegram-bot, importlib-metadata and pyopenssl to permit the latest version.
Updates aiohttp to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

Related issues and pull requests on GitHub: :issue:13180.

Fixed error message construction in the C HTTP parser -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:13222.

3.14.2 (2026-07-20)

Bug fixes

Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

Related issues and pull requests on GitHub: :issue:5303.

Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

5e392ce Release v3.14.3 (#13225)
49f65d5 [PR #13222/f4866933 backport][3.14] Build C parser error message from bounded...
240099e [PR #13180/ee53d655 backport][3.14] drop every copy of credential headers on ...
d93f30a Bump version (#13202)
c1b9212 Release v3.14.2 (#13201)
380d4b5 [PR #13054/ed8b040c backport][3.14] escape backslashes in digest auth quoted-...
e1e1bee Make llhttp method array size dynamic (#13174) (#13196)
aa4cf29 [PR #13170/2b906869 backport][3.14] Fix StreamResponse.last_modified rounding...
71b57b4 [PR #13172/a57747ed backport][3.14] Fix C parser folding fragment into query_...
64a03fb [PR #13169/1adc0cd7 backport][3.14] Upgrade http:// to https:// in README.rst...
Additional commits viewable in compare view

Updates certifi to 2026.7.22

Commits

f4bc676 2026.07.22 (#428)
4c91f9c Bump actions/setup-python from 6.3.0 to 7.0.0 (#427)
01a66c5 Bump actions/checkout from 7.0.0 to 7.0.1 (#426)
eb355f4 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#425)
474e6fc Include tests in the source distribution (#424)
a31ef39 Bump actions/setup-python from 6.2.0 to 6.3.0 (#420)
98eb2c7 Bump actions/checkout from 6.0.3 to 7.0.0 (#419)
d0ac52f 2026.06.17 (#418)
d46de62 Bump actions/checkout from 6.0.2 to 6.0.3 (#417)
6c183ec fix: update Requests docs link to canonical URL (#415)
Additional commits viewable in compare view

Updates cffi to 2.1.1

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

Commits

fd33e77 New release 2.1.1
56a7876 Use PyGILState_Ensure to avoid accessing CPython internals (#269) (#270)
d9f6f70 New release 2.1.0
02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
1362e5d Move cffi-gen-src release note to 2.1.0 notes
a797055 Make error message when embedding version test fails more friendly
f1f40a8 Update changelog
dc62c93 Delete missed cp39 Windows builds
a341180 Update version numbers to prepare for v2.1 release
9f04d85 Mark test using inet_ntoa as thread-unsafe
Additional commits viewable in compare view

Updates charset-normalizer to 3.5.1

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.1

3.5.1 (2026-08-15)

Changed

Raised upper bound of setuptools to v84 (#794)

Cache performance access optimization for our CharInfo struct (prebuilt only).

Fixed

No longer decoding large content when the noise detector output give a high entropy. Only impacted large content input >1M bytes.

Changelog

Sourced from charset-normalizer's changelog.

3.5.1 (2026-08-15)

Changed

Raised upper bound of setuptools to v84 (#794)

Cache performance access optimization for our CharInfo struct (prebuilt only).

Fixed

No longer decoding large content when the noise detector output give a high entropy. Only impacted large content input >1M bytes.

3.5.0 (2026-08-12)

Added

Explicit support for Python 3.15

Fixed

Comparing a CharsetMatch to a non-alias encoding strings (#773)

Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)

A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.

iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.

Applied micro-optimization on several utils.

CharsetMatches no longer sort on each match insertion.

Misc

Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).

3.4.9 (2026-07-07)

Fixed

Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

3.4.8 (2026-07-06)

Fixed

Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)

Unnecessary json import at runtime (#753)

Inverse capitalization not seen by noise detector (#731)

... (truncated)

Commits

e239bdc Merge pull request #795 from jawah/release-3.5.1
648ad77 docs: update faq
fab2749 docs: write changelog for 3.5.1
7d32774 chore: bump version to 3.5.1
9a69f60 docs: update data/info
5dcc6dd perf: charinfo cache access optimization in cython
ea3b447 fix: do not validate-decode large payload when md says it's noise
a05917f chore: allow setuptools 84 builds (#794)
3325d87 Merge pull request #792 from jawah/update-cibuildwheel-action
77203b1 chore: reformat noxfile.py
Additional commits viewable in compare view

Updates croniter to 6.2.4

Release notes

Sourced from croniter's releases.

6.2.4

croniter 6.2.4

Bugfixes

Fix expand_from_start_time day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (isoweekday() % 7 instead of weekday() + 1). (#239, thanks @alhudz)

Packaging

Bump pinned GitHub Actions via dependabot. (#238, #240)

Install: pip install croniter==6.2.4 · PyPI

Changelog

Sourced from croniter's changelog.

6.2.4 (2026-07-10)

Bugfixes

- Fix ``expand_from_start_time`` day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (``isoweekday() % 7`` instead of ``weekday() + 1``). [44e3090, [#239](https://github.com/pallets-eco/croniter/issues/239), @alhudz]
Packaging

Bump pinned GitHub Actions via dependabot. [fd13d2e, #240; 5cd2e46, #238]

6.2.3 (2026-07-02)

Features and Improvements

- Fix quadratic expansion of comma-separated range lists for a large speed-up on expressions with many ranges. [1d79fc6, [#231](https://github.com/pallets-eco/croniter/issues/231), @alhudz]
Bugfixes
- Reject a zero step (e.g. ``5-5/0``) in equal and reversed cron ranges instead of silently accepting it. [ab27767, [#232](https://github.com/pallets-eco/croniter/issues/232), @alhudz]
- Fix ``expand_from_start_time`` month low-bound off-by-one so stepped month ranges start on the correct month. [f329964, [#235](https://github.com/pallets-eco/croniter/issues/235), @alhudz]
Packaging



Fix zizmor-reported security findings in GitHub Actions workflows. [ed19f94, #230]
Bump pinned build and CI dependencies via dependabot.
Upgrade locked development and build dependencies (uv lock --upgrade).

6.2.2 (2026-03-15)
Packaging
- Switch build backend from ``flit_core`` to ``hatchling`` with pinned dependencies. [4cce160]
- Add PEP 639 license expression (``license = &quot;MIT&quot;``) to project metadata. [4cce160]
- Pin all GitHub Actions to SHA hashes across CI workflows. [4cce160]
- Add dependabot for automated dependency updates. [4cce160]
- Add zizmor workflow for CI security scanning. [4cce160]
6.2.1 (2026-03-15)
Bugfixes
- Fix ``get_prev`` skipping Feb 29 on leap years for day-of-month expressions. [441a0b5, [#203](https://github.com/pallets-eco/croniter/issues/203), @Souls-R]

&amp;lt;/tr&amp;gt;&amp;lt;/table&amp;gt; 
&lt;/code&gt;&lt;/pre&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/58534997eb4634344f00d407fb199d4d1bd057e7&quot;&gt;&lt;code&gt;5853499&lt;/code&gt;&lt;/a&gt; Prepare for release 6.2.4 (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/241&quot;&gt;#241&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/fd13d2ec447efd854806638cb5f71a2a3a90a0b5&quot;&gt;&lt;code&gt;fd13d2e&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/240&quot;&gt;#240&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/44e3090ae47ccf72e4027ed6fabf6a31eca42f85&quot;&gt;&lt;code&gt;44e3090&lt;/code&gt;&lt;/a&gt; wrap sunday in expand_from_start_time day-of-week low bound (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/239&quot;&gt;#239&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/5cd2e4611e8ebea446a9d0edef3f9d8e1f30c0e3&quot;&gt;&lt;code&gt;5cd2e46&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/238&quot;&gt;#238&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/f1eeddd7b9057b66406d162d04879258b29601d5&quot;&gt;&lt;code&gt;f1eeddd&lt;/code&gt;&lt;/a&gt; Prepare for 6.2.4 development (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/237&quot;&gt;#237&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/22b59e05f5ca485c45596b2a9b580fddffbf753f&quot;&gt;&lt;code&gt;22b59e0&lt;/code&gt;&lt;/a&gt; Prepare for release 6.2.3 (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/236&quot;&gt;#236&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/ab277671adc8e446e8dc7f1e939eabf024b6199e&quot;&gt;&lt;code&gt;ab27767&lt;/code&gt;&lt;/a&gt; reject zero step in equal and reversed cron ranges (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/232&quot;&gt;#232&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/f329964223eeb29e7788b1a9d615b525148fec96&quot;&gt;&lt;code&gt;f329964&lt;/code&gt;&lt;/a&gt; fix expand_from_start_time month low bound off-by-one (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/235&quot;&gt;#235&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/9810279c20030954e2f1ed2cf5f1d34b98c6b07f&quot;&gt;&lt;code&gt;9810279&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/233&quot;&gt;#233&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/d051aaf6342fbe9c559b9fcd99e6fb6f3bb63cb7&quot;&gt;&lt;code&gt;d051aaf&lt;/code&gt;&lt;/a&gt; Bump hatchling from 1.29.0 to 1.30.1 in the pip-dependencies group (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/234&quot;&gt;#234&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/pallets-eco/croniter/compare/6.2.2...6.2.4&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;</code></pre>

Updates `cryptography` to 50.0.1
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>50.0.1 - 2026-08-25</p>
<pre><code>
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.
<p>.. _v50-0-0:</p>
<p>50.0.0 - 2026-07-31<br />
</code></pre></p>
<ul>
<li><strong>SECURITY ISSUE</strong>:
:func:<code>~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der</code>
and its PEM and S/MIME variants no longer expose distinguishable errors or
timing when unwrapping a <code>RecipientInfo</code>'s <code>encryptedKey</code>, which could
act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
A random key is now substituted on failure, as described in :rfc:<code>3218</code>.
Credit to <strong><a href="https://github.com/X1AOxiang"><code>@X1AOxiang</code></a></strong> for reporting the issue. <strong>CVE-2026-69247</strong></li>
<li>Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
Everything FFDH is deprecated, including the types in
<code>cryptography.hazmat.primitives.asymmetric.dh</code> and loading FFDH keys or
parameters with the key loading APIs. Users should migrate to a more
modern key exchange algorithm.</li>
<li>Added <code>xof()</code> class methods to
:class:<code>~cryptography.hazmat.primitives.hashes.SHAKE128</code> and
:class:<code>~cryptography.hazmat.primitives.hashes.SHAKE256</code> for constructing
algorithm instances configured for use with
:class:<code>~cryptography.hazmat.primitives.hashes.XOFHash</code>.</li>
<li>The :mod:<code>X.509 verification &lt;cryptography.x509.verification&gt;</code> APIs are now
considered stable and are subject to our API stability policy.</li>
<li>Added the :doc:<code>/cobblestone</code> recipe, an implementation of the
Cobblestone-128 and Cobblestone-256 instantiations of the <code>C2SP chunked-encryption specification &lt;https://c2sp.org/chunked-encryption&gt;</code>_ for streaming authenticated
encryption of large messages.</li>
<li>Parsing a Signed Certificate Timestamp list now rejects encodings that
carry trailing bytes after the list or after an individual SCT, instead of
silently ignoring them.</li>
<li>Added support for using :class:<code>~cryptography.x509.Name</code> as a field type in
the :doc:<code>/hazmat/asn1/index</code> module.</li>
<li>Loading a public key or an EC private key now rejects DER where the
<code>subjectPublicKey</code> (or EC <code>publicKey</code>) <code>BIT STRING</code> declares a non-zero
number of unused bits, instead of silently ignoring it.</li>
<li>Parsing a CRL entry's <code>InvalidityDate</code> extension now rejects a
<code>GeneralizedTime</code> that carries fractional seconds or another non-DER form,
matching the strict encoding already required for every other X.509 time
field.</li>
<li>:func:<code>~cryptography.x509.ocsp.load_der_ocsp_request</code> and
:func:<code>~cryptography.x509.ocsp.load_der_ocsp_response</code> now reject a request
or response whose <code>version</code> field is not <code>v1</code>, the only version defined
by RFC 6960, matching the version validation already performed when loading</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/ffde75a2b594822c740a2e4748b56c00548302bf"><code>ffde75a</code></a> bump for 50.0.1 + changelog (<a href="https://redirect.github.com/pyca/cryptography/issues/15520">#15520</a>)</li>
<li>See full diff in <a href="https://github.com/pyca/cryptography/compare/50.0.0...50.0.1">compare view</a></li>
</ul>
</details>
<br />

Updates `gitpython` to 3.1.61
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/gitpython-developers/GitPython/releases">gitpython's releases</a>.</em></p>
<blockquote>
<h2>3.1.61</h2>
<p>Fix accidental removal of exploitable regex in <code>Actor</code> by bringing it back, and deprecating it.</p>
<h2>What's Changed</h2>
<ul>
<li>Fix repository discovery precedence by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2218">gitpython-developers/GitPython#2218</a></li>
<li>fix: wait for git daemon to listen before connecting by <a href="https://github.com/Vogtinator"><code>@Vogtinator</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2219">gitpython-developers/GitPython#2219</a></li>
<li>fix: restore Actor.name_email_regex by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2221">gitpython-developers/GitPython#2221</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Vogtinator"><code>@Vogtinator</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2219">gitpython-developers/GitPython#2219</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.60...3.1.61">https://github.com/gitpython-developers/GitPython/compare/3.1.60...3.1.61</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/5346d1b587a790bac4dc4f100a28fae9db0fd7c8"><code>5346d1b</code></a> prepare next release</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/d81336bd591814e294d4111cd0fe29885988a976"><code>d81336b</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2221">#2221</a> from gitpython-developers/re-add-regex</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/bc63b027e2fc737e2ec0222bfa764e1aa76a427f"><code>bc63b02</code></a> fix: restore Actor.name_email_regex (<a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2220">#2220</a>)</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/a9fb008c1b02f6c240d45233e886f106f2e74d73"><code>a9fb008</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2219">#2219</a> from Vogtinator/main</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/db1a2cfe2d9b6dd88fe34195badaffd89e24610b"><code>db1a2cf</code></a> fix: wait for git daemon to listen before connecting</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/3481da9618e69063464c94447167d83bd45505a9"><code>3481da9</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2218">#2218</a> from gitpython-developers/fix-repo-open</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/56636c3614aff1555fe716d3804ca59e653934ea"><code>56636c3</code></a> prepare new release</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/c7cf4d13b1ed0a2e70f2a1f3c6b4fc6c2652cf0b"><code>c7cf4d1</code></a> fix: prefer <code>.git</code> during repository discovery</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/d160fb4124a56bd463a542a7bbff623354fb3397"><code>d160fb4</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2217">#2217</a> from gitpython-developers/fix-advisory</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/09f2cf383a992d1af697364569e9f384748c1bd8"><code>09f2cf3</code></a> fix: require opt-in for no-index diffs</li>
<li>Additional commits viewable in <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.59...3.1.61">compare view</a></li>
</ul>
</details>
<br />

Updates `idna` to 3.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/kjd/idna/releases">idna's releases</a>.</em></p>
<blockquote>
<h2>v3.19</h2>
<ul>
<li>Restore the <code>std3_rules</code> option, which had no effect since changes
to UTS <a href="https://redirect.github.com/kjd/idna/issues/46">#46</a> processing in Unicode 16. Note that <code>uts46_remap()</code>
defaults to enabling STD3 rules, so direct callers will see input
containing non-LDH ASCII characters rejected again.</li>
<li>Performance improvements to UTS <a href="https://redirect.github.com/kjd/idna/issues/46">#46</a> mapping, particularly for
ASCII-only domains.</li>
<li>Test on free-threaded CPython with the GIL disabled and document
thread safety.</li>
<li>Expose the Unicode version of the generated tables as
<code>idna.unicode_version</code>, and show it in <code>idna --version</code>.</li>
<li>Add <code>code</code>, <code>text</code>, <code>codepoint</code> and <code>position</code> attributes to
<code>IDNAError</code> so that the failed rule and the offending character can
be identified without parsing the exception message.</li>
<li>The deprecated <code>transitional</code> argument to <code>encode()</code> and
<code>uts46_remap()</code> is now completely ignored, and gives a deprecation warning
for the latter.</li>
<li>Reject A-labels that are not the canonical Punycode encoding of
their U-label.</li>
<li>Fix CONTEXTJ violations raising <code>IDNAError</code> instead of
<code>InvalidCodepointContext</code>.</li>
<li>Consistently raise <code>IDNAError</code> for empty labels and non-ASCII bytes
passed to label helper functions and the incremental codec.</li>
<li>Add property-based tests, extended fuzzing targets, coverage
measurement, and CI checks that the data tables match the generator
output.</li>
<li>Various code quality and tooling improvements.</li>
</ul>
<p>Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for
contributions to this release.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/kjd/idna/blob/master/HISTORY.md">idna's changelog</a>.</em></p>
<blockquote>
<h2>3.19 (2026-08-18)</h2>
<ul>
<li>Restore the <code>std3_rules</code> option, which had no effect since changes
to UTS <a href="https://redirect.github.com/kjd/idna/issues/46">#46</a> processing in Unicode 16. Note that <code>uts46_remap()</code>
defaults to enabling STD3 rules, so direct callers will see input
containing non-LDH ASCII characters rejected again.</li>
<li>Performance improvements to UTS <a href="https://redirect.github.com/kjd/idna/issues/46">#46</a> mapping, particularly for
ASCII-only domains.</li>
<li>Test on free-threaded CPython with the GIL disabled and document
thread safety.</li>
<li>Expose the Unicode version of the generated tables as
<code>idna.unicode_version</code>, and show it in <code>idna --version</code>.</li>
<li>Add <code>code</code>, <code>text</code>, <code>codepoint</code> and <code>position</code> attributes to
<code>IDNAError</code> so that the failed rule and the offending character can
be identified without parsing the exception message.</li>
<li>The deprecated <code>transitional</code> argument to <code>encode()</code> and
<code>uts46_remap()</code> is now completely ignored, and gives a deprecation warning
for the latter.</li>
<li>Reject A-labels that are not the canonical Punycode encoding of
their U-label.</li>
<li>Fix CONTEXTJ violations raising <code>IDNAError</code> instead of
<code>InvalidCodepointContext</code>.</li>
<li>Consistently raise <code>IDNAError</code> for empty labels and non-ASCII bytes
passed to label helper functions and the incremental codec.</li>
<li>Add property-based tests, extended fuzzing targets, coverage
measurement, and CI checks that the data tables match the generator
output.</li>
<li>Various code quality and tooling improvements.</li>
</ul>
<p>Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for
contributions to this release.</p>
<h2>3.18 (2026-06-02)</h2>
<ul>
<li>When decoding a domain, add a <code>display</code> argument that will pass
through invalid labels rather than raising an exception.</li>
</ul>
<h2>3.17 (2026-05-28)</h2>
<ul>
<li>Substantial 75% reduction in memory usage through new data
structures and some optimization in processing speed.</li>
<li>Added a general 1024-character input length cap to the public
validation, conversion, and codec entry points. This is well above
any legitimate domain or label and guards against pathological
inputs.</li>
</ul>
<h2>3.16 (2026-05-22)</h2>
<ul>
<li>Add a command-line interface (<code>python -m idna</code>, also available as
the <code>idna</code> script). Encodes or decodes one or more domains supplied</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/kjd/idna/commit/03a9a11dd8aecd4fea742cabe20f4d3d9ed82abb"><code>03a9a11</code></a> Release 3.19</li>
<li><a href="https://github.com/kjd/idna/commit/2d2a7ef0c59210a48407b3dde6d884933cecf093"><code>2d2a7ef</code></a> Pre-release 3.19rc0</li>
<li><a href="https://github.com/kjd/idna/commit/5cce1308d148019c5fa0febceafa13e99cdacfe7"><code>5cce130</code></a> Merge pull request <a href="https://redirect.github.com/kjd/idna/issues/268">#268</a> from kjd/fix-std3-regex-alert</li>
<li><a href="https://github.com/kjd/idna/commit/3914b75f3e4cbc11e59f92eeecdb16d10871e57f"><code>3914b75</code></a> Split the STD3 disallowed-character range so uppercase is explicit</li>
<li><a href="https://github.com/kjd/idna/commit/ce9fd98ac4073866db276e93834b259f2a5a4ac4"><code>ce9fd98</code></a> Merge pull request <a href="https://redirect.github.com/kjd/idna/issues/267">#267</a> from kjd/housekeeping</li>
<li><a href="https://github.com/kjd/idna/commit/809240c3cc9358c9c9c79b2d12ffe39e75ccfb0f"><code>809240c</code></a> Fail CI when the license copyright year is behind the current year</li>
<li><a href="https://github.com/kjd/idna/commit/d9e16c523d7d25dcc14100fa80f3e303404e09be"><code>d9e16c5</code></a> Consolidate test fixtures, prune stale gitignore entries, and fix doc typos</li>
<li><a href="https://github.com/kjd/idna/commit/ef30feeed3a758e96286fdab0315a551f7f5e7d6"><code>ef30fee</code></a> Remove dead code and pare back superfluous comments</li>
<li><a href="https://github.com/kjd/idna/commit/b907913f854d26cc714f721c6c2cb626d41ac468"><code>b907913</code></a> Tighten the version support and Unicode notes in the README</li>
<li><a href="https://github.com/kjd/idna/commit/6204cbe343ef438df7c58bc80b94d0f960991d90"><code>6204cbe</code></a> Ignore local build artifacts and stop packaging stray tooling config</li>
<li>Additional commits viewable in <a href="https://github.com/kjd/idna/compare/v3.18...v3.19">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-functools` to 4.6.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst">jaraco-functools's changelog</a>.</em></p>
<blockquote>
<h1>v4.6.0</h1>
<h2>Features</h2>
<ul>
<li>Add <code>signed</code> wrapper to render a value with an explicit sign.</li>
</ul>
<h1>v4.5.0</h1>
<h2>Features</h2>
<ul>
<li><code>bypass_when</code> and <code>bypass_unless</code> now accept callable checks and evaluate
them on each invocation instead of binding only at decoration time. (<a href="https://redirect.github.com/jaraco/jaraco.functools/issues/36">#36</a>)</li>
</ul>
<h1>v4.4.0</h1>
<h2>Features</h2>
<ul>
<li>Add noop.</li>
</ul>
<h1>v4.3.0</h1>
<h2>Features</h2>
<ul>
<li>Add none_as function.</li>
</ul>
<h1>v4.2.1</h1>
<p>No significant changes.</p>
<h1>v4.2.0</h1>
<h2>Features</h2>
<ul>
<li>Add 'passthrough' function.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/f7f4f3bcac8f70e01064dee9a8bde6cc8f997a17"><code>f7f4f3b</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/1b615071613da21818c3f20f5696c1ec6e1eeb3d"><code>1b61507</code></a> Merge pull request <a href="https://redirect.github.com/jaraco/jaraco.functools/issues/38">#38</a> from jaraco/feature/signed</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/ec615a584e5938420245a58616d6db8dd9c5f2ae"><code>ec615a5</code></a> Add news fragment.</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/016937453ab0e4342c45c9872c07c8d2fa98d97e"><code>0169374</code></a> Add signed, a wrapper to render a value's formatter with an explicit sign</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/0e89d963ab0a2d6d0755df2424e5e3d5b983cf98"><code>0e89d96</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/4df0abd88dc7c36897b4f40abebda9ae7b24d33e"><code>4df0abd</code></a> Merge pull request <a href="https://redirect.github.com/jaraco/jaraco.functools/issues/36">#36</a> from jaraco/copilot/enhance-bypass-decorators-callables</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/e3ad23e72c049950d79d4c1c702a9b7e286d6983"><code>e3ad23e</code></a> 👹 Feed the hobgoblins (delint).</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/9ed118eb092ba639e925578576192d0da823d93f"><code>9ed118e</code></a> Merge branch 'main' into copilot/enhance-bypass-decorators-callables</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/d3cdfdf173d8f073d3c51f7d452e3860d783e283"><code>d3cdfdf</code></a> 👹 Feed the hobgoblins (delint).</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/dfc27da53d5b17d1d3b9b04459933f9054a1e3a2"><code>dfc27da</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.functools/compare/v4.4.0...v4.6.0">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-context` to 6.1.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst">jaraco-context's changelog</a>.</em></p>
<blockquote>
<h1>v6.1.2</h1>
<p>No significant changes.</p>
<h1>v6.1.1</h1>
<p>No significant changes.</p>
<h1>v6.1.0</h1>
<h2>Features</h2>
<ul>
<li>In tarfile.context, ensure that the default filter honors the data filter to avoid path traversal vulnerabilities.</li>
</ul>
<h1>v6.0.2</h1>
<p>No significant changes.</p>
<h1>v6.0.1</h1>
<h2>Bugfixes</h2>
<ul>
<li>Removed type declarations as suggested by Gemini. (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/13">#13</a>)</li>
</ul>
<h1>v6.0.0</h1>
<h2>Bugfixes</h2>
<ul>
<li>Fixed bug in repo_context where standard output from git would not be hidden (because git emits standard output on the stderr stream).</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Removed deprecated 'tarball_context', 'infer_compression', and 'null' contexts.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.context/commit/098f39c911d4504b2c718f2ff483ae24f1c4d378"><code>098f39c</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/926a20e42307a2b5d87b058f2df42345fba61ad4"><code>926a20e</code></a> Fix condition for skipping safety test on Python 3.12 (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/20">#20</a>)</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/19f1cbbcf4811fec84c2fee47e51c1a823b7d368"><code>19f1cbb</code></a> Strict type checking and re-enable mypy (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/16">#16</a>)</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/256995fa4d2bcaf5513d7d14204045de94b4957d"><code>256995f</code></a> Suppress coverage errors.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/0190667b24bd7b7f5f199ec36dc6e974fa31aab2"><code>0190667</code></a> Suppress type errors in test_safety.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/bc0dc8a641a0ef9539bd7b193c961f8de05344e0"><code>bc0dc8a</code></a> Suppress type errors with new property.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/8eee4d0bbf99ee75163865b150e638378e5a0b46"><code>8eee4d0</code></a> Modernize with ruff</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/825171649ef9d312b6f9740d235d206c0e927c3e"><code>8251716</code></a> Merge branch 'main' into Strict-type-checking-and-re-enable-mypy</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/7df1443e0d81d0f7a781231ab05e00fc4173672e"><code>7df1443</code></a> Restore expression algebra.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/616e2d6153eea558d0acf971adefc4d2c9dd6fc9"><code>616e2d6</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.context/compare/v6.1.1...v6.1.2">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-text` to 4.3.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.text/blob/main/NEWS.rst">jaraco-text's changelog</a>.</em></p>
<blockquote>
<h1>v4.3.0</h1>
<h2>Features</h2>
<ul>
<li>Added <code>strip_ansi</code> for removing ANSI escape sequences (e.g. SGR color codes) from a string.</li>
</ul>
<h1>v4.2.0</h1>
<h2>Features</h2>
<ul>
<li>Replaced <code>autocommand</code> usage with <code>Typer</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/25">#25</a>)</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Fixed <code>join_continuation</code>'s parameter type annotation -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/28">#28</a>)</li>
</ul>
<h1>v4.1.0</h1>
<h2>Features</h2>
<ul>
<li>Complete annotations and add <code>py.typed</code> marker -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
<li>Add support for <code>start</code> and <code>end</code> in <code>jaraco.text.FoldedCase.index</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
<li>Support <code>None</code> <code>splitter</code> argument in <code>jaraco.text.FoldedCase.split</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
</ul>
<h1>v4.0.0</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>Made 'inflect' an optional dependency. The show-newlines script now will crash unless jaraco.text[inflect] is installed.</li>
</ul>
<h1>v3.14.0</h1>
<h2>Features</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.text/commit/8c5892111b3dac47030bcdc7a34dcef3ce7828ef"><code>8c58921</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/981b230f6027eb03be8124e4b268225b3565a299"><code>981b230</code></a> Satisfy updated ruff and mypy.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/263edcb940aab5c8a30a09cad16aa8dab240e8c3"><code>263edcb</code></a> Ruff fixes.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/6ba69221bf7e54cf39f2101c1e6eb15366c70daf"><code>6ba6922</code></a> Add strip_ansi for removing ANSI escape sequences from a string.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/1683d5ab470d6ed57475a546cdf399ffaf6b6e6b"><code>1683d5a</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/684a3157eae9988cdd8e95969efa9a79a70f69f6"><code>684a315</code></a> Bump badge for 2026.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/606a7a5f999e6a43480015460be604a77f16ce68"><code>606a7a5</code></a><code>jaraco/skeleton#194</code></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/07389c4c4609a49826ea9ed510419c2e32eccee9"><code>07389c4</code></a><code>jaraco/skeleton#193</code></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/16fb289d38af0d510e39afcbbd43bace2d6d8dd9"><code>16fb289</code></a> Bump <code>pytest-checkdocs</code> to <code>&gt;= 2.14</code> to resolve deprecation warnings (jaraco/...</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/d9b029be3925b99d3b0d2ef529d79d0a1b9d2c52"><code>d9b029b</code></a> Don't install (nor run) mypy on PyPy (librt build failures) (jaraco/skeleton#...</li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.text/compare/v4.2.0...v4.3.0">compare view</a></li>
</ul>
</details>
<br />

Updates `lxml` to 6.1.3
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/lxml/lxml/blob/master/CHANGES.txt">lxml's changelog</a>.</em></p>
<blockquote>
<h1>6.1.3 (2026-09-02)</h1>
<h2>Bugs fixed</h2>
<ul>
<li>LP#2165901: External parameter entity parsing was allowed by default
(with <code>resolve_entities=&quot;internal&quot;</code>).
Issue found by Tomer Fichman.</li>
</ul>
<h1>6.1.2 (2026-08-18)</h1>
<ul>
<li>
<p>GH#526: Some build files were missing in the sdist.
Patch by Nicola Soranzo.</p>
</li>
<li>
<p>Some minor corrections for error handling cases.</p>
</li>
</ul>
<h2>Other changes</h2>
<ul>
<li>Built with Cython 3.2.9.</li>
</ul>
<h1>6.1.1 (2026-05-18)</h1>
<h2>Bugs fixed</h2>
<ul>
<li>
<p>The known link attributes in <code>lxml.html.defs.link_attrs</code> were missing <code>xlink:href</code>,
which can be used for URL bypass attacks in embedded SVG/MathML/etc. content.
<a href="https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f">https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f</a></p>
</li>
<li>
<p>The Linux wheels use a patched libxslt 1.1.43, fixing CVE-2025-7424 and CVE-2025-11731.</p>
</li>
<li>
<p>The Windows wheels use libxslt 1.1.45, fixing CVE-2025-7424 and CVE-2025-11731.</p>
</li>
</ul>
<h1>6.1.0 (2026-04-17)</h1>
<p>This release fixes a possible external entity injection (XXE) vulnerability in
<code>iterparse()</code> and the <code>ETCompatXMLParser</code>.</p>
<h2>Features added</h2>
<ul>
<li>GH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/lxml/lxml/commit/3c1a4c7f2d5a3c19efe01adfd3c33ac3c8fe52c1"><code>3c1a4c7</code></a> Prepare release of 6.1.3.</li>
<li><a href="https://github.com/lxml/lxml/commit/c1191fc55b8d574544203d07e7a02ba3378ced8d"><code>c1191fc</code></a> Update changelog.</li>
<li><a href="https://github.com/lxml/lxml/commit/03ec3123b9683e7f02ce659f34322667683d3eef"><code>03ec312</code></a> Disable parameter entity parsing when internal-only entity parsing is requested.</li>
<li><a href="https://github.com/lxml/lxml/commit/11d03e922e0a7845131df3ab2fb5e894c0ced0ab"><code>11d03e9</code></a> Build: Prevent duplicate Py3.8 wheel builds.</li>
<li><a href="https://github.com/lxml/lxml/commit/9efc586ed3555be22548a3188f7f435826834961"><code>9efc586</code></a> Build: Exclude musllinux-ARM from Py3.8 wheel building to prevent slow emulat...</li>
<li><a href="https://github.com/lxml/lxml/commit/9716fb1e1a80db4ba5e36bf99947dfccd8730471"><code>9716fb1</code></a> Build: Include older PyPy versions.</li>
<li><a href="https://github.com/lxml/lxml/commit/0f3327d3c8fc1ba01c90a866770ad8c4889e537f"><code>0f3327d</code></a> Build: Exclude Win-Aarch64 from wheel build.</li>
<li><a href="https://github.com/lxml/lxml/commit/6967c960976541979570099de9866af398fb292f"><code>6967c96</code></a> Build: Make all built wheels downloadable even if they don't pass the release...</li>
<li><a href="https://github.com/lxml/lxml/commit/061218d210747a1181dea76fb6b6d0eebe946b2d"><code>061218d</code></a> Build: Exclude Py3.15 i686 wheels from validation (because they are intention...</li>
<li><a href="https://github.com/lxml/lxml/commit/ce9fe0dd26bd5b64fe03b6bcdf68a997ee5a2596"><code>ce9fe0d</code></a> Build: Fix Py3.8 windows build.</li>
<li>Additional commits viewable in <a href="https://github.com/lxml/lxml/compare/lxml-6.1.1...lxml-6.1.3">compare view</a></li>
</ul>
</details>
<br />

Updates `msgpack` to 1.2.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/releases">msgpack's releases</a>.</em></p>
<blockquote>
<h2>v1.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix docstring for read_size by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/700">msgpack/msgpack-python#700</a></li>
<li>unpacker: fix silent datetime truncation with datetime=3 by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/701">msgpack/msgpack-python#701</a></li>
<li>run test with debug build by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/702">msgpack/msgpack-python#702</a></li>
<li>fix: add reentrant guard to Unpacker.feed() by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/704">msgpack/msgpack-python#704</a></li>
<li>Bump actions/checkout from 6.0.3 to 7.0.0 in the all-dependencies group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/705">msgpack/msgpack-python#705</a></li>
<li>Improve error handling and reporting in unpacking functions by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/707">msgpack/msgpack-python#707</a></li>
<li>test_unpack.py: add tests for ExtraData by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/708">msgpack/msgpack-python#708</a></li>
<li>Bump the all-dependencies group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/709">msgpack/msgpack-python#709</a></li>
<li>Fix Timestamp.from_datetime() precision for far-future datetimes by <a href="https://github.com/gaoflow"><code>@gaoflow</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/710">msgpack/msgpack-python#710</a></li>
<li>Fix typos in test and docs by <a href="https://github.com/maxtaran2010"><code>@maxtaran2010</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/712">msgpack/msgpack-python#712</a></li>
<li>Bump the all-dependencies group across 1 directory with 5 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/719">msgpack/msgpack-python#719</a></li>
<li>fix: use-after-free in unpackb() ExtraData path for non-contiguous input by <a href="https://github.com/ThomasWaldmann"><code>@ThomasWaldmann</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/722">msgpack/msgpack-python#722</a></li>
<li>Bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the all-dependencies group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/721">msgpack/msgpack-python#721</a></li>
<li>Bump pypa/cibuildwheel from 4.1.1 to 4.2.0 in the all-dependencies group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/724">msgpack/msgpack-python#724</a></li>
<li>Convert Packer's buf_size once by <a href="https://github.com/hdimer"><code>@hdimer</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/726">msgpack/msgpack-python#726</a></li>
<li>fix: translate RecursionError to StackError in fallback Unpacker.skip() by <a href="https://github.com/hdimer"><code>@hdimer</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/727">msgpack/msgpack-python#727</a></li>
<li>Validate nanoseconds range when unpacking timestamps in the C extension by <a href="https://github.com/chuenchen309"><code>@chuenchen309</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/716">msgpack/msgpack-python#716</a></li>
<li>Avoid parallel execution of the recursion-limit nesting test on free-threaded builds by <a href="https://github.com/methane"><code>@methane</code></a> with <a href="https://github.com/Copilot"><code>@Copilot</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/729">msgpack/msgpack-python#729</a></li>
<li>Raise OverflowError when use_single_float cannot represent a value by <a href="https://github.com/dylanpulver"><code>@dylanpulver</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/728">msgpack/msgpack-python#728</a></li>
<li>release v1.2.2 by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/730">msgpack/msgpack-python#730</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/gaoflow"><code>@gaoflow</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/710">msgpack/msgpack-python#710</a></li>
<li><a href="https://github.com/maxtaran2010"><code>@maxtaran2010</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/712">msgpack/msgpack-python#712</a></li>
<li><a href="https://github.com/hdimer"><code>@hdimer</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/726">msgpack/msgpack-python#726</a></li>
<li><a href="https://github.com/chuenchen309"><code>@chuenchen309</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/716">msgpack/msgpack-python#716</a></li>
<li><a href="https://github.com/dylanpulver"><code>@dylanpulver</code></a> made their first contribution in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/728">msgpack/msgpack-python#728</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/msgpack/msgpack-python/compare/v1.2.1...v1.2.2">https://github.com/msgpack/msgpack-python/compare/v1.2.1...v1.2.2</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md">msgpack's changelog</a>.</em></p>
<blockquote>
<h1>1.2.2</h1>
<p>Release Date: 2026-08-27</p>
<ul>
<li>Fix the <code>read_size</code> documentation. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/700">#700</a></li>
<li>Fix silent truncation when unpacking an out-of-range timestamp with <code>timestamp=3</code>. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/701">#701</a></li>
<li>Prevent reentrant calls to <code>Unpacker.feed()</code> while unpacking. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/704">#704</a></li>
<li>Improve error handling and reporting in unpacking functions. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/707">#707</a></li>
<li>Fix <code>Timestamp.from_datetime()</code> precision for far-future datetimes. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/710">#710</a></li>
<li>Fix typos in the documentation. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/712">#712</a></li>
<li>Validate the nanoseconds range when unpacking timestamps in the C extension. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/716">#716</a></li>
<li>Fix a use-after-free in the <code>unpackb()</code> <code>ExtraData</code> path for non-contiguous input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/722">#722</a></li>
<li>Prevent a buffer overflow when converting <code>Packer</code>'s <code>buf_size</code>. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/726">#726</a></li>
<li>Translate <code>RecursionError</code> to <code>StackError</code> in the fallback <code>Unpacker.skip()</code>. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/727">#727</a></li>
<li>Raise <code>OverflowError</code> when <code>use_single_float=True</code> cannot represent a value. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/728">#728</a></li>
</ul>
<h1>1.2.1</h1>
<p>Release Date: 2026-06-19</p>
<p>Fix a segfault when calling <code>Unpacker.unpack()</code> or <code>Unpacker.skip()</code> after an unpacking failure.
But note that reusing the same <code>Unpacker</code> instance after an unpacking failure is not supported.
Please create a new <code>Unpacker</code> instance instead. GHSA-6v7p-g79w-8964</p>
<h1>1.2.0</h1>
<p>Release Date: 2026-06-11</p>
<ul>
<li>Support free threaded Python. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/654">#654</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/686">#686</a></li>
<li>Dropped support for Python 3.9. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/656">#656</a></li>
<li>Fix missing error checks in C code. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/665">#665</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/666">#666</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/667">#667</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/672">#672</a></li>
<li>Fix <code>strict_map_key</code> option didn't work for <code>object_pairs_hook</code>. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/673">#673</a></li>
<li>Increase DEFAULT_RECURSE_LIMIT of Unpacker to 1024. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/676">#676</a></li>
<li>Fix memory leak when Unpacker returns error for invalid input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/671">#671</a></li>
<li>Fix <code>Packer.pack_ext_type()</code> ignored <code>autoreset</code> option. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/663">#663</a></li>
<li>Fix <code>Timestamp.from_datetime()</code> returning wrong value for pre-epoch datetimes. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/662">#662</a></li>
<li>Fix use-after-free in <code>unpackb()</code> and <code>Unpacker.unpack()</code> for non-contiguous input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/677">#677</a></li>
<li>Fix possible memory leak when calling <code>U...

_Description has been truncated_

… 53 updates Updates the requirements on [aiohttp](https://github.com/aio-libs/aiohttp), [certifi](https://github.com/certifi/python-certifi), [cffi](https://github.com/python-cffi/cffi), [charset-normalizer](https://github.com/jawah/charset_normalizer), [croniter](https://github.com/pallets-eco/croniter), [cryptography](https://github.com/pyca/cryptography), [gitpython](https://github.com/gitpython-developers/GitPython), [idna](https://github.com/kjd/idna), [jaraco-functools](https://github.com/jaraco/jaraco.functools), [jaraco-context](https://github.com/jaraco/jaraco.context), [jaraco-text](https://github.com/jaraco/jaraco.text), [lxml](https://github.com/lxml/lxml), [msgpack](https://github.com/msgpack/msgpack-python), [multidict](https://github.com/aio-libs/multidict), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-prometheus](https://github.com/open-telemetry/opentelemetry-python), [xxhash](https://github.com/ifduyue/python-xxhash), [packaging](https://github.com/pypa/packaging), [psutil](https://github.com/giampaolo/psutil), [requests](https://github.com/psf/requests), [tornado](https://github.com/tornadoweb/tornado), [truststore](https://github.com/sethmlarson/truststore), [virtualenv](https://github.com/pypa/virtualenv), [filelock](https://github.com/tox-dev/py-filelock), [zipp](https://github.com/jaraco/zipp), [wheel](https://github.com/pypa/wheel), [setuptools-scm](https://github.com/pypa/setuptools-scm), [pip](https://github.com/pypa/pip), [cython](https://github.com/cython/cython), [docker](https://github.com/docker/docker-py), [pytest](https://github.com/pytest-dev/pytest), [build](https://github.com/pypa/build), [pyzmq](https://github.com/zeromq/pyzmq), m2crypto, [pylint](https://github.com/pylint-dev/pylint), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore), [kubernetes](https://github.com/kubernetes-client/python), [moto](https://github.com/getmoto/moto), [pynacl](https://github.com/pyca/pynacl), [sqlparse](https://github.com/andialbrecht/sqlparse), [vcert](https://github.com/Venafi/vcert-python), [websocket-client](https://github.com/websocket-client/websocket-client), [xmldiff](https://github.com/Shoobx/xmldiff), mercurial, [pygit2](https://github.com/libgit2/pygit2), [ansible](https://github.com/ansible-community/ansible-build-data), [twilio](https://github.com/twilio/twilio-python), [python-telegram-bot](https://github.com/python-telegram-bot/python-telegram-bot), [importlib-metadata](https://github.com/python/importlib_metadata) and [pyopenssl](https://github.com/pyca/pyopenssl) to permit the latest version. Updates `aiohttp` to 3.14.3 - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3) Updates `certifi` to 2026.7.22 - [Commits](certifi/python-certifi@2026.05.20...2026.07.22) Updates `cffi` to 2.1.1 - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](python-cffi/cffi@v2.0.0...v2.1.1) Updates `charset-normalizer` to 3.5.1 - [Release notes](https://github.com/jawah/charset_normalizer/releases) - [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md) - [Commits](jawah/charset_normalizer@3.4.7...3.5.1) Updates `croniter` to 6.2.4 - [Release notes](https://github.com/pallets-eco/croniter/releases) - [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst) - [Commits](pallets-eco/croniter@6.2.2...6.2.4) Updates `cryptography` to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@50.0.0...50.0.1) Updates `gitpython` to 3.1.61 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.59...3.1.61) Updates `idna` to 3.19 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md) - [Commits](kjd/idna@v3.18...v3.19) Updates `jaraco-functools` to 4.6.0 - [Release notes](https://github.com/jaraco/jaraco.functools/releases) - [Changelog](https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.functools@v4.4.0...v4.6.0) Updates `jaraco-context` to 6.1.2 - [Release notes](https://github.com/jaraco/jaraco.context/releases) - [Changelog](https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.context@v6.1.1...v6.1.2) Updates `jaraco-text` to 4.3.0 - [Release notes](https://github.com/jaraco/jaraco.text/releases) - [Changelog](https://github.com/jaraco/jaraco.text/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.text@v4.2.0...v4.3.0) Updates `lxml` to 6.1.3 - [Release notes](https://github.com/lxml/lxml/releases) - [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt) - [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.3) Updates `msgpack` to 1.2.2 - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md) - [Commits](msgpack/msgpack-python@v1.2.1...v1.2.2) Updates `multidict` to 6.7.1 - [Release notes](https://github.com/aio-libs/multidict/releases) - [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst) - [Commits](aio-libs/multidict@v6.6.0...v6.7.1) Updates `opentelemetry-api` to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0) Updates `opentelemetry-sdk` to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0) Updates `opentelemetry-exporter-otlp-proto-http` to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0) Updates `opentelemetry-exporter-prometheus` to 0.65b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/commits) Updates `xxhash` to 4.0.1 - [Release notes](https://github.com/ifduyue/python-xxhash/releases) - [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst) - [Commits](ifduyue/python-xxhash@v3.7.0...v4.0.1) Updates `packaging` to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `psutil` to 7.2.2 - [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst) - [Commits](giampaolo/psutil@v5.0.0...v7.2.2) Updates `requests` to 2.34.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v0.2.0...v2.34.2) Updates `tornado` to 6.5.8 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.6...v6.5.8) Updates `truststore` to 0.10.4 - [Release notes](https://github.com/sethmlarson/truststore/releases) - [Changelog](https://github.com/sethmlarson/truststore/blob/main/CHANGELOG.md) - [Commits](sethmlarson/truststore@v0.10.0...v0.10.4) Updates `virtualenv` to 21.7.8 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.4.2...21.7.8) Updates `filelock` to 3.32.5 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.29.1...3.32.5) Updates `zipp` to 4.1.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.23.1...v4.1.0) Updates `wheel` to 0.48.0 - [Release notes](https://github.com/pypa/wheel/releases) - [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst) - [Commits](pypa/wheel@0.47.0...0.48.0) Updates `setuptools-scm` to 10.2.2 - [Release notes](https://github.com/pypa/setuptools-scm/releases) - [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md) - [Commits](pypa/setuptools-scm@0.1...setuptools-scm-v10.2.2) Updates `pip` from 25.2 to 26.2.1 - [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst) - [Commits](pypa/pip@25.2...26.2.1) Updates `cython` to 3.3.0 - [Release notes](https://github.com/cython/cython/releases) - [Changelog](https://github.com/cython/cython/blob/master/CHANGES.rst) - [Commits](cython/cython@0.9.6.14...3.3.0) Updates `docker` to 7.2.0 - [Release notes](https://github.com/docker/docker-py/releases) - [Commits](docker/docker-py@7.1.0...7.2.0) Updates `pytest` to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.1.1) Updates `build` to 1.6.0 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.4.4...1.6.0) Updates `pyzmq` to 27.2.0 - [Release notes](https://github.com/zeromq/pyzmq/releases) - [Commits](zeromq/pyzmq@v27.1.0...v27.2.0) Updates `aiohttp` to 3.14.3 - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3) Updates `cffi` to 2.1.1 - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](python-cffi/cffi@v2.0.0...v2.1.1) Updates `cryptography` to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@50.0.0...50.0.1) Updates `gitpython` to 3.1.61 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.59...3.1.61) Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `virtualenv` to 21.7.8 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.4.2...21.7.8) Updates `filelock` to 3.32.5 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.29.1...3.32.5) Updates `docker` to 7.2.0 - [Release notes](https://github.com/docker/docker-py/releases) - [Commits](docker/docker-py@7.1.0...7.2.0) Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `m2crypto` from 0.48.0 to 0.49.0 Updates `pylint` to 3.3.9 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v3.1.0...v3.3.9) Updates `boto3` to 1.43.87 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.24...1.43.87) Updates `botocore` to 1.43.87 - [Commits](boto/botocore@1.43.24...1.43.87) Updates `kubernetes` to 36.0.3 - [Release notes](https://github.com/kubernetes-client/python/releases) - [Changelog](https://github.com/kubernetes-client/python/blob/master/CHANGELOG.md) - [Commits](kubernetes-client/python@v36.0.2...v36.0.3) Updates `moto` to 5.2.3 - [Release notes](https://github.com/getmoto/moto/releases) - [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md) - [Commits](getmoto/moto@5.2.2...5.2.3) Updates `pynacl` to 1.6.2 - [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst) - [Commits](pyca/pynacl@1.5.0...1.6.2) Updates `sqlparse` to 0.6.0 - [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG) - [Commits](andialbrecht/sqlparse@0.5.5...0.6.0) Updates `vcert` to 0.9.1 - [Release notes](https://github.com/Venafi/vcert-python/releases) - [Commits](Venafi/vcert-python@v0.9.0...v0.9.1) Updates `websocket-client` to 1.9.2 - [Release notes](https://github.com/websocket-client/websocket-client/releases) - [Changelog](https://github.com/websocket-client/websocket-client/blob/master/ChangeLog) - [Commits](websocket-client/websocket-client@v1.9.0...v1.9.2) Updates `xmldiff` to 3.0 - [Release notes](https://github.com/Shoobx/xmldiff/releases) - [Changelog](https://github.com/Shoobx/xmldiff/blob/master/CHANGES.rst) - [Commits](Shoobx/xmldiff@2.7.0...3.0) Updates `mercurial` to 7.2.4 Updates `pygit2` to 1.20.0 - [Release notes](https://github.com/libgit2/pygit2/releases) - [Changelog](https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md) - [Commits](libgit2/pygit2@v1.19.2...v1.20.0) Updates `ansible` to 14.3.1 - [Changelog](https://github.com/ansible-community/ansible-build-data/blob/main/docs/release-process.md) - [Commits](ansible-community/ansible-build-data@14.0.0...14.3.1) Updates `twilio` to 9.11.0 - [Release notes](https://github.com/twilio/twilio-python/releases) - [Changelog](https://github.com/twilio/twilio-python/blob/main/CHANGES.md) - [Commits](twilio/twilio-python@9.10.9...9.11.0) Updates `python-telegram-bot` to 22.8 - [Release notes](https://github.com/python-telegram-bot/python-telegram-bot/releases) - [Commits](python-telegram-bot/python-telegram-bot@v22.7...v22.8) Updates `importlib-metadata` to 9.0.1 - [Release notes](https://github.com/python/importlib_metadata/releases) - [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst) - [Commits](python/importlib_metadata@v9.0.0...v9.0.1) Updates `cryptography` to 50.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@50.0.0...50.0.1) Updates `pyopenssl` to 26.4.0 - [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst) - [Commits](pyca/pyopenssl@26.2.0...26.4.0) --- updated-dependencies: - dependency-name: aiohttp dependency-version: 3.14.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: certifi dependency-version: 2026.7.22 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cffi dependency-version: 2.1.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: charset-normalizer dependency-version: 3.5.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: croniter dependency-version: 6.2.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: gitpython dependency-version: 3.1.61 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: idna dependency-version: '3.19' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: jaraco-functools dependency-version: 4.6.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: jaraco-context dependency-version: 6.1.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: jaraco-text dependency-version: 4.3.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: lxml dependency-version: 6.1.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: msgpack dependency-version: 1.2.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: multidict dependency-version: 6.7.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-api dependency-version: 1.44.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-sdk dependency-version: 1.44.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.44.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-exporter-prometheus dependency-version: 0.65b0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: xxhash dependency-version: 4.0.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: psutil dependency-version: 7.2.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: requests dependency-version: 2.34.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: tornado dependency-version: 6.5.8 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: truststore dependency-version: 0.10.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: virtualenv dependency-version: 21.7.8 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: filelock dependency-version: 3.32.5 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: zipp dependency-version: 4.1.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: wheel dependency-version: 0.48.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: setuptools-scm dependency-version: 10.2.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pip dependency-version: 26.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-pip-updates - dependency-name: cython dependency-version: 3.3.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: docker dependency-version: 7.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: build dependency-version: 1.6.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pyzmq dependency-version: 27.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: aiohttp dependency-version: 3.14.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cffi dependency-version: 2.1.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: gitpython dependency-version: 3.1.61 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-updates - dependency-name: virtualenv dependency-version: 21.7.8 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: filelock dependency-version: 3.32.5 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: docker dependency-version: 7.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-updates - dependency-name: m2crypto dependency-version: 0.49.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-updates - dependency-name: pylint dependency-version: 3.3.9 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: boto3 dependency-version: 1.43.87 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: botocore dependency-version: 1.43.87 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: kubernetes dependency-version: 36.0.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: moto dependency-version: 5.2.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pynacl dependency-version: 1.6.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: sqlparse dependency-version: 0.6.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: vcert dependency-version: 0.9.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: websocket-client dependency-version: 1.9.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: xmldiff dependency-version: '3.0' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: mercurial dependency-version: 7.2.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pygit2 dependency-version: 1.20.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: ansible dependency-version: 14.3.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: twilio dependency-version: 9.11.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: python-telegram-bot dependency-version: '22.8' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: importlib-metadata dependency-version: 9.0.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 50.0.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pyopenssl dependency-version: 26.4.0 dependency-type: direct:production dependency-group: all-pip-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the test:full Run the full test suite label Sep 5, 2026

dependabot Bot requested a review from a team as a code owner September 5, 2026 21:16

dependabot Bot added the test:full Run the full test suite label Sep 5, 2026

dependabot Bot deployed to workflow-restart September 5, 2026 21:16 Active

dependabot Bot had a problem deploying to ci September 5, 2026 21:16 Error

Automated requirement synchronization

8bffaec

salt-pr-bot Bot deployed to workflow-restart September 5, 2026 21:17 Active

salt-pr-bot Bot temporarily deployed to ci September 5, 2026 21:17 Inactive

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 21:31 Failure

salt-pr-bot Bot temporarily deployed to ci September 5, 2026 21:31 Inactive

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 21:31 Failure

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 21:48 Failure

salt-pr-bot Bot temporarily deployed to ci September 5, 2026 21:48 Inactive

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 21:48 Failure

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 22:17 Failure

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 22:32 Failure

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 23:02 Failure

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 23:17 Failure

salt-pr-bot Bot temporarily deployed to ci September 5, 2026 23:17 Inactive

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 23:17 Failure

salt-pr-bot Bot had a problem deploying to ci September 5, 2026 23:49 Failure

salt-pr-bot Bot had a problem deploying to ci September 6, 2026 00:06 Failure

salt-pr-bot Bot temporarily deployed to ci September 6, 2026 00:06 Inactive

salt-pr-bot Bot had a problem deploying to ci September 6, 2026 00:35 Failure

salt-pr-bot Bot had a problem deploying to ci September 6, 2026 00:50 Failure

salt-pr-bot Bot temporarily deployed to ci September 6, 2026 00:50 Inactive

Navigation Menu

Uh oh!

build(deps): bump the all-pip-updates group across 3 directories with 53 updates - #70243

build(deps): bump the all-pip-updates group across 3 directories with 53 updates#70243
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/pip/master/all-pip-updates-36bcc0bd1b

dependabot Bot commented on behalf of github Sep 5, 2026

6.2.2 (2026-03-15)

6.2.1 (2026-03-15)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 5, 2026

3.14.3 (2026-07-22)

Bug fixes

3.14.2 (2026-07-20)

Bug fixes

v2.1.1

What's Changed

Version 3.5.1

3.5.1 (2026-08-15)

Changed

Fixed

3.5.1 (2026-08-15)

Changed

Fixed

3.5.0 (2026-08-12)

Added

Fixed

Changed

Misc

3.4.9 (2026-07-07)

Fixed

3.4.8 (2026-07-06)

Fixed

6.2.4

croniter 6.2.4

Bugfixes

Packaging

6.2.4 (2026-07-10)

6.2.3 (2026-07-02)

6.2.2 (2026-03-15)

6.2.1 (2026-03-15)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants