Skip to content

build(deps): bump the all-pip-updates group across 3 directories with 46 updates - #70115

Open
dependabot[bot] wants to merge 2 commits into
3007.xfrom
dependabot/pip/3007.x/all-pip-updates-f01d0da9f7
Open

build(deps): bump the all-pip-updates group across 3 directories with 46 updates#70115
dependabot[bot] wants to merge 2 commits into
3007.xfrom
dependabot/pip/3007.x/all-pip-updates-f01d0da9f7

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 22, 2026

Copy link
Copy Markdown
Contributor

Updates the requirements on aiohttp, certifi, cffi, croniter, cryptography, gitpython, idna, jaraco-functools, jaraco-context, jaraco-text, lxml, more-itertools, multidict, msgpack, packaging, psutil, pyasn1, pymssql, pyopenssl, pythonnet, requests, tornado, virtualenv, filelock, zipp, docker, pytest, pyzmq, build, wheel, setuptools-scm, pip, boto3, botocore, kubernetes, pynacl, sqlparse, vcert, xmldiff, pylint, m2crypto, pygit2, mercurial, ansible, twilio and python-telegram-bot to permit the latest version.
Updates aiohttp to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

  • Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

    Related issues and pull requests on GitHub: :issue:13180.

  • Fixed error message construction in the C HTTP parser -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:13222.


3.14.2 (2026-07-20)

Bug fixes

  • Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

    Related issues and pull requests on GitHub: :issue:5303.

  • Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

    Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

Updates certifi to 2026.7.22

Commits

Updates cffi to 2.1.1

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

  • Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

Commits
  • fd33e77 New release 2.1.1
  • 56a7876 Use PyGILState_Ensure to avoid accessing CPython internals (#269) (#270)
  • d9f6f70 New release 2.1.0
  • 02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
  • 1362e5d Move cffi-gen-src release note to 2.1.0 notes
  • a797055 Make error message when embedding version test fails more friendly
  • f1f40a8 Update changelog
  • dc62c93 Delete missed cp39 Windows builds
  • a341180 Update version numbers to prepare for v2.1 release
  • 9f04d85 Mark test using inet_ntoa as thread-unsafe
  • Additional commits viewable in compare view

Updates croniter to 6.2.4

Release notes

Sourced from croniter's releases.

6.2.4

croniter 6.2.4

Bugfixes

  • Fix expand_from_start_time day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (isoweekday() % 7 instead of weekday() + 1). (#239, thanks @​alhudz)

Packaging

  • Bump pinned GitHub Actions via dependabot. (#238, #240)

Install: pip install croniter==6.2.4 · PyPI

Changelog

Sourced from croniter's changelog.

6.2.4 (2026-07-10)

Bugfixes

- Fix ``expand_from_start_time`` day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (``isoweekday() % 7`` instead of ``weekday() + 1``). [44e3090, [#239](https://github.com/pallets-eco/croniter/issues/239), @alhudz]

Packaging

  • Bump pinned GitHub Actions via dependabot. [fd13d2e, #240; 5cd2e46, #238]

6.2.3 (2026-07-02)

Features and Improvements

- Fix quadratic expansion of comma-separated range lists for a large speed-up on expressions with many ranges. [1d79fc6, [#231](https://github.com/pallets-eco/croniter/issues/231), @alhudz]

Bugfixes

- Reject a zero step (e.g. ``5-5/0``) in equal and reversed cron ranges instead of silently accepting it. [ab27767, [#232](https://github.com/pallets-eco/croniter/issues/232), @alhudz]
- Fix ``expand_from_start_time`` month low-bound off-by-one so stepped month ranges start on the correct month. [f329964, [#235](https://github.com/pallets-eco/croniter/issues/235), @alhudz]

Packaging

  • Fix zizmor-reported security findings in GitHub Actions workflows. [ed19f94, #230]
  • Bump pinned build and CI dependencies via dependabot.
  • Upgrade locked development and build dependencies (uv lock --upgrade).

6.2.2 (2026-03-15)

Packaging

- Switch build backend from ``flit_core`` to ``hatchling`` with pinned dependencies. [4cce160]
- Add PEP 639 license expression (``license = "MIT"``) to project metadata. [4cce160]
- Pin all GitHub Actions to SHA hashes across CI workflows. [4cce160]
- Add dependabot for automated dependency updates. [4cce160]
- Add zizmor workflow for CI security scanning. [4cce160]

6.2.1 (2026-03-15)

Bugfixes

- Fix ``get_prev`` skipping Feb 29 on leap years for day-of-month expressions. [441a0b5, [#203](https://github.com/pallets-eco/croniter/issues/203), @Souls-R]

</tr></table> 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>
<li><a href="https://github.com/pallets-eco/croniter/commit/58534997eb4634344f00d407fb199d4d1bd057e7"><code>5853499</code></a> Prepare for release 6.2.4 (<a href="https://redirect.github.com/pallets-eco/croniter/issues/241">#241</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/fd13d2ec447efd854806638cb5f71a2a3a90a0b5"><code>fd13d2e</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/240">#240</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/44e3090ae47ccf72e4027ed6fabf6a31eca42f85"><code>44e3090</code></a> wrap sunday in expand_from_start_time day-of-week low bound (<a href="https://redirect.github.com/pallets-eco/croniter/issues/239">#239</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/5cd2e4611e8ebea446a9d0edef3f9d8e1f30c0e3"><code>5cd2e46</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/238">#238</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/f1eeddd7b9057b66406d162d04879258b29601d5"><code>f1eeddd</code></a> Prepare for 6.2.4 development (<a href="https://redirect.github.com/pallets-eco/croniter/issues/237">#237</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/22b59e05f5ca485c45596b2a9b580fddffbf753f"><code>22b59e0</code></a> Prepare for release 6.2.3 (<a href="https://redirect.github.com/pallets-eco/croniter/issues/236">#236</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/ab277671adc8e446e8dc7f1e939eabf024b6199e"><code>ab27767</code></a> reject zero step in equal and reversed cron ranges (<a href="https://redirect.github.com/pallets-eco/croniter/issues/232">#232</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/f329964223eeb29e7788b1a9d615b525148fec96"><code>f329964</code></a> fix expand_from_start_time month low bound off-by-one (<a href="https://redirect.github.com/pallets-eco/croniter/issues/235">#235</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/9810279c20030954e2f1ed2cf5f1d34b98c6b07f"><code>9810279</code></a> Bump the github-actions group with 2 updates (<a href="https://redirect.github.com/pallets-eco/croniter/issues/233">#233</a>)</li>
<li><a href="https://github.com/pallets-eco/croniter/commit/d051aaf6342fbe9c559b9fcd99e6fb6f3bb63cb7"><code>d051aaf</code></a> Bump hatchling from 1.29.0 to 1.30.1 in the pip-dependencies group (<a href="https://redirect.github.com/pallets-eco/croniter/issues/234">#234</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pallets-eco/croniter/compare/6.2.2...6.2.4">compare view</a></li>
</ul>
</details>

&lt;br /&gt;</code></pre>

Updates `cryptography` to 50.0.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>50.0.0 - 2026-07-31</p>
<pre><code>
* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification &lt;cryptography.x509.verification&gt;` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  &lt;https://c2sp.org/chunked-encryption&gt;`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
  ``subjectPublicKey`` (or EC ``publicKey``) ``BIT STRING`` declares a non-zero
  number of unused bits, instead of silently ignoring it.
* Parsing a CRL entry's ``InvalidityDate`` extension now rejects a
  ``GeneralizedTime`` that carries fractional seconds or another non-DER form,
  matching the strict encoding already required for every other X.509 time
  field.
* :func:`~cryptography.x509.ocsp.load_der_ocsp_request` and
  :func:`~cryptography.x509.ocsp.load_der_ocsp_response` now reject a request
  or response whose ``version`` field is not ``v1``, the only version defined
  by RFC 6960, matching the version validation already performed when loading
  certificates, CSRs and CRLs.
* :class:`~cryptography.hazmat.primitives.hashes.XOFHash` is now supported
  when building against AWS-LC.
* HMAC (and therefore PBKDF2-HMAC) with SHA-3 hashes is now supported when
  building against AWS-LC.
* Diffie-Hellman (:doc:`/hazmat/primitives/asymmetric/dh`) is now supported
  when building against AWS-LC.
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/dcb7050b807b00392fa9fe2eac7cb362fcf355cc"><code>dcb7050</code></a> Prepare for 50.0.0 release (<a href="https://redirect.github.com/pyca/cryptography/issues/15372">#15372</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f"><code>53fccd9</code></a> Don't leak how PKCS#7 encryptedKey decryption failed (<a href="https://redirect.github.com/pyca/cryptography/issues/15369">#15369</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/d472f978470fbefa521b86d98b2ecccbbb4d1dd8"><code>d472f97</code></a> Add <code>from __future__ import annotations</code> to all src/ Python files (<a href="https://redirect.github.com/pyca/cryptography/issues/15371">#15371</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/908773d53829fb1466c6db364b31321c3cd8eb9a"><code>908773d</code></a> Bump downstream dependencies in CI (<a href="https://redirect.github.com/pyca/cryptography/issues/15368">#15368</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/2cc07cc948948211899bcb0cddd1fddf86e95812"><code>2cc07cc</code></a> Bump BoringSSL, OpenSSL, AWS-LC in CI (<a href="https://redirect.github.com/pyca/cryptography/issues/15367">#15367</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/c94ede9f040fa44942f7139772603419000acf66"><code>c94ede9</code></a> chore(deps): bump ruff from 0.16.0 to 0.16.1 (<a href="https://redirect.github.com/pyca/cryptography/issues/15366">#15366</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/67a8308dc9ea4cce6056e0f1438f903c208c3f35"><code>67a8308</code></a> chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (<a href="https://redirect.github.com/pyca/cryptography/issues/15365">#15365</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/95018ffcdbbc510fd92fc872e3a3e80aa6e58596"><code>95018ff</code></a> Release the GIL in one-shot AEAD encrypt/decrypt (<a href="https://redirect.github.com/pyca/cryptography/issues/15361">#15361</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/6954733eaf55a0074abf88f06f7242dfca3a5d02"><code>6954733</code></a> Release the GIL during DH and DSA parameter generation (<a href="https://redirect.github.com/pyca/cryptography/issues/15364">#15364</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/6893b94c33e948f6240082461424cfb5da2dacc6"><code>6893b94</code></a> Import _serialization instead of serialization in x509/extensions (<a href="https://redirect.github.com/pyca/cryptography/issues/15363">#15363</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pyca/cryptography/compare/48.0.0...50.0.0">compare view</a></li>
</ul>
</details>
<br />

Updates `gitpython` to 3.1.59
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/gitpython-developers/GitPython/releases">gitpython's releases</a>.</em></p>
<blockquote>
<h2>3.1.59 - Security</h2>
<h2>What's Changed</h2>
<ul>
<li>prepare changelog for upcoming release by <a href="https://github.com/Byron"><code>@​Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2207">gitpython-developers/GitPython#2207</a></li>
<li>Block file-reading Git options by <a href="https://github.com/Byron"><code>@​Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2208">gitpython-developers/GitPython#2208</a></li>
<li>index: write blobs via git hash-object, not gitdb's odb.store by <a href="https://github.com/caroescm"><code>@​caroescm</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2209">gitpython-developers/GitPython#2209</a></li>
<li>Block separate git directories during clone by <a href="https://github.com/Byron"><code>@​Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2210">gitpython-developers/GitPython#2210</a></li>
<li>fix: harden config parsing boundaries by <a href="https://github.com/Byron"><code>@​Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2211">gitpython-developers/GitPython#2211</a></li>
<li><code>repo.index.add()</code> now respects worktree filters  <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2209">gitpython-developers/GitPython#2209</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.58...3.1.59">https://github.com/gitpython-developers/GitPython/compare/3.1.58...3.1.59</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/66340d77aab9a7468f4aed3681d4ef1e3c0ec931"><code>66340d7</code></a> prepare changelog prior to release</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/a5e047d0db7047c4249c0de335585470b14d50c4"><code>a5e047d</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2211">#2211</a> from gitpython-developers/config-sanitize-more</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/ef7568e3b317ce617eacda39b8b54dcdff8c3b5c"><code>ef7568e</code></a> fix: ignore includes in submodule configuration</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/4b4e47fc1224e23b0c8ee7220a7192818f2e4abb"><code>4b4e47f</code></a> fix: preserve multiline config values when writing</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/b473abb0f7de754392e1ec923f2fe296509013ab"><code>b473abb</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2210">#2210</a> from gitpython-developers/fix-clone-unsafe-option</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/5ff52cccca770fd69c6caf0b8f281d3e45d599be"><code>5ff52cc</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2209">#2209</a> from caroescm/fix-index-add-chmod</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/b68afff45af0f49e79a3e2d2162018986b37ad5d"><code>b68afff</code></a> Block separate git directories during clone</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/93677a00ab9dcb06cc08595fd1f88a4b4a0fa23b"><code>93677a0</code></a> fix: <code>index.add()</code> now supports filters (<a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2021">#2021</a>)</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/9729ed3b948f2bde09f1f188c5311e172212b67e"><code>9729ed3</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2208">#2208</a> from gitpython-developers/security-fixes</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/ce9d8e8d150e06ae2e2cc2efa229071cd3048a93"><code>ce9d8e8</code></a> prepare next release</li>
<li>Additional commits viewable in <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.50...3.1.59">compare view</a></li>
</ul>
</details>
<br />

Updates `idna` to 3.19
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/kjd/idna/releases">idna's releases</a>.</em></p>
<blockquote>
<h2>v3.19</h2>
<ul>
<li>Restore the <code>std3_rules</code> option, which had no effect since changes
to UTS <a href="https://redirect.github.com/kjd/idna/issues/46">#46</a> processing in Unicode 16. Note that <code>uts46_remap()</code>
defaults to enabling STD3 rules, so direct callers will see input
containing non-LDH ASCII characters rejected again.</li>
<li>Performance improvements to UTS <a href="https://redirect.github.com/kjd/idna/issues/46">#46</a> mapping, particularly for
ASCII-only domains.</li>
<li>Test on free-threaded CPython with the GIL disabled and document
thread safety.</li>
<li>Expose the Unicode version of the generated tables as
<code>idna.unicode_version</code>, and show it in <code>idna --version</code>.</li>
<li>Add <code>code</code>, <code>text</code>, <code>codepoint</code> and <code>position</code> attributes to
<code>IDNAError</code> so that the failed rule and the offending character can
be identified without parsing the exception message.</li>
<li>The deprecated <code>transitional</code> argument to <code>encode()</code> and
<code>uts46_remap()</code> is now completely ignored, and gives a deprecation warning
for the latter.</li>
<li>Reject A-labels that are not the canonical Punycode encoding of
their U-label.</li>
<li>Fix CONTEXTJ violations raising <code>IDNAError</code> instead of
<code>InvalidCodepointContext</code>.</li>
<li>Consistently raise <code>IDNAError</code> for empty labels and non-ASCII bytes
passed to label helper functions and the incremental codec.</li>
<li>Add property-based tests, extended fuzzing targets, coverage
measurement, and CI checks that the data tables match the generator
output.</li>
<li>Various code quality and tooling improvements.</li>
</ul>
<p>Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for
contributions to this release.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/kjd/idna/blob/master/HISTORY.md">idna's changelog</a>.</em></p>
<blockquote>
<h2>3.19 (2026-08-18)</h2>
<ul>
<li>Restore the <code>std3_rules</code> option, which had no effect since changes
to UTS <a href="https://redirect.github.com/kjd/idna/issues/46">#46</a> processing in Unicode 16. Note that <code>uts46_remap()</code>
defaults to enabling STD3 rules, so direct callers will see input
containing non-LDH ASCII characters rejected again.</li>
<li>Performance improvements to UTS <a href="https://redirect.github.com/kjd/idna/issues/46">#46</a> mapping, particularly for
ASCII-only domains.</li>
<li>Test on free-threaded CPython with the GIL disabled and document
thread safety.</li>
<li>Expose the Unicode version of the generated tables as
<code>idna.unicode_version</code>, and show it in <code>idna --version</code>.</li>
<li>Add <code>code</code>, <code>text</code>, <code>codepoint</code> and <code>position</code> attributes to
<code>IDNAError</code> so that the failed rule and the offending character can
be identified without parsing the exception message.</li>
<li>The deprecated <code>transitional</code> argument to <code>encode()</code> and
<code>uts46_remap()</code> is now completely ignored, and gives a deprecation warning
for the latter.</li>
<li>Reject A-labels that are not the canonical Punycode encoding of
their U-label.</li>
<li>Fix CONTEXTJ violations raising <code>IDNAError</code> instead of
<code>InvalidCodepointContext</code>.</li>
<li>Consistently raise <code>IDNAError</code> for empty labels and non-ASCII bytes
passed to label helper functions and the incremental codec.</li>
<li>Add property-based tests, extended fuzzing targets, coverage
measurement, and CI checks that the data tables match the generator
output.</li>
<li>Various code quality and tooling improvements.</li>
</ul>
<p>Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for
contributions to this release.</p>
<h2>3.18 (2026-06-02)</h2>
<ul>
<li>When decoding a domain, add a <code>display</code> argument that will pass
through invalid labels rather than raising an exception.</li>
</ul>
<h2>3.17 (2026-05-28)</h2>
<ul>
<li>Substantial 75% reduction in memory usage through new data
structures and some optimization in processing speed.</li>
<li>Added a general 1024-character input length cap to the public
validation, conversion, and codec entry points. This is well above
any legitimate domain or label and guards against pathological
inputs.</li>
</ul>
<h2>3.16 (2026-05-22)</h2>
<ul>
<li>Add a command-line interface (<code>python -m idna</code>, also available as
the <code>idna</code> script). Encodes or decodes one or more domains supplied</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/kjd/idna/commit/03a9a11dd8aecd4fea742cabe20f4d3d9ed82abb"><code>03a9a11</code></a> Release 3.19</li>
<li><a href="https://github.com/kjd/idna/commit/2d2a7ef0c59210a48407b3dde6d884933cecf093"><code>2d2a7ef</code></a> Pre-release 3.19rc0</li>
<li><a href="https://github.com/kjd/idna/commit/5cce1308d148019c5fa0febceafa13e99cdacfe7"><code>5cce130</code></a> Merge pull request <a href="https://redirect.github.com/kjd/idna/issues/268">#268</a> from kjd/fix-std3-regex-alert</li>
<li><a href="https://github.com/kjd/idna/commit/3914b75f3e4cbc11e59f92eeecdb16d10871e57f"><code>3914b75</code></a> Split the STD3 disallowed-character range so uppercase is explicit</li>
<li><a href="https://github.com/kjd/idna/commit/ce9fd98ac4073866db276e93834b259f2a5a4ac4"><code>ce9fd98</code></a> Merge pull request <a href="https://redirect.github.com/kjd/idna/issues/267">#267</a> from kjd/housekeeping</li>
<li><a href="https://github.com/kjd/idna/commit/809240c3cc9358c9c9c79b2d12ffe39e75ccfb0f"><code>809240c</code></a> Fail CI when the license copyright year is behind the current year</li>
<li><a href="https://github.com/kjd/idna/commit/d9e16c523d7d25dcc14100fa80f3e303404e09be"><code>d9e16c5</code></a> Consolidate test fixtures, prune stale gitignore entries, and fix doc typos</li>
<li><a href="https://github.com/kjd/idna/commit/ef30feeed3a758e96286fdab0315a551f7f5e7d6"><code>ef30fee</code></a> Remove dead code and pare back superfluous comments</li>
<li><a href="https://github.com/kjd/idna/commit/b907913f854d26cc714f721c6c2cb626d41ac468"><code>b907913</code></a> Tighten the version support and Unicode notes in the README</li>
<li><a href="https://github.com/kjd/idna/commit/6204cbe343ef438df7c58bc80b94d0f960991d90"><code>6204cbe</code></a> Ignore local build artifacts and stop packaging stray tooling config</li>
<li>Additional commits viewable in <a href="https://github.com/kjd/idna/compare/v3.18...v3.19">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-functools` to 4.6.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst">jaraco-functools's changelog</a>.</em></p>
<blockquote>
<h1>v4.6.0</h1>
<h2>Features</h2>
<ul>
<li>Add <code>signed</code> wrapper to render a value with an explicit sign.</li>
</ul>
<h1>v4.5.0</h1>
<h2>Features</h2>
<ul>
<li><code>bypass_when</code> and <code>bypass_unless</code> now accept callable checks and evaluate
them on each invocation instead of binding only at decoration time. (<a href="https://redirect.github.com/jaraco/jaraco.functools/issues/36">#36</a>)</li>
</ul>
<h1>v4.4.0</h1>
<h2>Features</h2>
<ul>
<li>Add noop.</li>
</ul>
<h1>v4.3.0</h1>
<h2>Features</h2>
<ul>
<li>Add none_as function.</li>
</ul>
<h1>v4.2.1</h1>
<p>No significant changes.</p>
<h1>v4.2.0</h1>
<h2>Features</h2>
<ul>
<li>Add 'passthrough' function.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/f7f4f3bcac8f70e01064dee9a8bde6cc8f997a17"><code>f7f4f3b</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/1b615071613da21818c3f20f5696c1ec6e1eeb3d"><code>1b61507</code></a> Merge pull request <a href="https://redirect.github.com/jaraco/jaraco.functools/issues/38">#38</a> from jaraco/feature/signed</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/ec615a584e5938420245a58616d6db8dd9c5f2ae"><code>ec615a5</code></a> Add news fragment.</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/016937453ab0e4342c45c9872c07c8d2fa98d97e"><code>0169374</code></a> Add signed, a wrapper to render a value's formatter with an explicit sign</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/0e89d963ab0a2d6d0755df2424e5e3d5b983cf98"><code>0e89d96</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/4df0abd88dc7c36897b4f40abebda9ae7b24d33e"><code>4df0abd</code></a> Merge pull request <a href="https://redirect.github.com/jaraco/jaraco.functools/issues/36">#36</a> from jaraco/copilot/enhance-bypass-decorators-callables</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/e3ad23e72c049950d79d4c1c702a9b7e286d6983"><code>e3ad23e</code></a> 👹 Feed the hobgoblins (delint).</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/9ed118eb092ba639e925578576192d0da823d93f"><code>9ed118e</code></a> Merge branch 'main' into copilot/enhance-bypass-decorators-callables</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/d3cdfdf173d8f073d3c51f7d452e3860d783e283"><code>d3cdfdf</code></a> 👹 Feed the hobgoblins (delint).</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/dfc27da53d5b17d1d3b9b04459933f9054a1e3a2"><code>dfc27da</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.functools/compare/v4.4.0...v4.6.0">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-context` to 6.1.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst">jaraco-context's changelog</a>.</em></p>
<blockquote>
<h1>v6.1.2</h1>
<p>No significant changes.</p>
<h1>v6.1.1</h1>
<p>No significant changes.</p>
<h1>v6.1.0</h1>
<h2>Features</h2>
<ul>
<li>In tarfile.context, ensure that the default filter honors the data filter to avoid path traversal vulnerabilities.</li>
</ul>
<h1>v6.0.2</h1>
<p>No significant changes.</p>
<h1>v6.0.1</h1>
<h2>Bugfixes</h2>
<ul>
<li>Removed type declarations as suggested by Gemini. (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/13">#13</a>)</li>
</ul>
<h1>v6.0.0</h1>
<h2>Bugfixes</h2>
<ul>
<li>Fixed bug in repo_context where standard output from git would not be hidden (because git emits standard output on the stderr stream).</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Removed deprecated 'tarball_context', 'infer_compression', and 'null' contexts.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.context/commit/098f39c911d4504b2c718f2ff483ae24f1c4d378"><code>098f39c</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/926a20e42307a2b5d87b058f2df42345fba61ad4"><code>926a20e</code></a> Fix condition for skipping safety test on Python 3.12 (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/20">#20</a>)</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/19f1cbbcf4811fec84c2fee47e51c1a823b7d368"><code>19f1cbb</code></a> Strict type checking and re-enable mypy (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/16">#16</a>)</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/256995fa4d2bcaf5513d7d14204045de94b4957d"><code>256995f</code></a> Suppress coverage errors.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/0190667b24bd7b7f5f199ec36dc6e974fa31aab2"><code>0190667</code></a> Suppress type errors in test_safety.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/bc0dc8a641a0ef9539bd7b193c961f8de05344e0"><code>bc0dc8a</code></a> Suppress type errors with new property.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/8eee4d0bbf99ee75163865b150e638378e5a0b46"><code>8eee4d0</code></a> Modernize with ruff</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/825171649ef9d312b6f9740d235d206c0e927c3e"><code>8251716</code></a> Merge branch 'main' into Strict-type-checking-and-re-enable-mypy</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/7df1443e0d81d0f7a781231ab05e00fc4173672e"><code>7df1443</code></a> Restore expression algebra.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/616e2d6153eea558d0acf971adefc4d2c9dd6fc9"><code>616e2d6</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.context/compare/v6.1.1...v6.1.2">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-text` to 4.3.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.text/blob/main/NEWS.rst">jaraco-text's changelog</a>.</em></p>
<blockquote>
<h1>v4.3.0</h1>
<h2>Features</h2>
<ul>
<li>Added <code>strip_ansi</code> for removing ANSI escape sequences (e.g. SGR color codes) from a string.</li>
</ul>
<h1>v4.2.0</h1>
<h2>Features</h2>
<ul>
<li>Replaced <code>autocommand</code> usage with <code>Typer</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/25">#25</a>)</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Fixed <code>join_continuation</code>'s parameter type annotation -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/28">#28</a>)</li>
</ul>
<h1>v4.1.0</h1>
<h2>Features</h2>
<ul>
<li>Complete annotations and add <code>py.typed</code> marker -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
<li>Add support for <code>start</code> and <code>end</code> in <code>jaraco.text.FoldedCase.index</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
<li>Support <code>None</code> <code>splitter</code> argument in <code>jaraco.text.FoldedCase.split</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
</ul>
<h1>v4.0.0</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>Made 'inflect' an optional dependency. The show-newlines script now will crash unless jaraco.text[inflect] is installed.</li>
</ul>
<h1>v3.14.0</h1>
<h2>Features</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.text/commit/8c5892111b3dac47030bcdc7a34dcef3ce7828ef"><code>8c58921</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/981b230f6027eb03be8124e4b268225b3565a299"><code>981b230</code></a> Satisfy updated ruff and mypy.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/263edcb940aab5c8a30a09cad16aa8dab240e8c3"><code>263edcb</code></a> Ruff fixes.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/6ba69221bf7e54cf39f2101c1e6eb15366c70daf"><code>6ba6922</code></a> Add strip_ansi for removing ANSI escape sequences from a string.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/1683d5ab470d6ed57475a546cdf399ffaf6b6e6b"><code>1683d5a</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/684a3157eae9988cdd8e95969efa9a79a70f69f6"><code>684a315</code></a> Bump badge for 2026.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/606a7a5f999e6a43480015460be604a77f16ce68"><code>606a7a5</code></a><code>jaraco/skeleton#194</code></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/07389c4c4609a49826ea9ed510419c2e32eccee9"><code>07389c4</code></a><code>jaraco/skeleton#193</code></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/16fb289d38af0d510e39afcbbd43bace2d6d8dd9"><code>16fb289</code></a> Bump <code>pytest-checkdocs</code> to <code>&gt;= 2.14</code> to resolve deprecation warnings (jaraco/...</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/d9b029be3925b99d3b0d2ef529d79d0a1b9d2c52"><code>d9b029b</code></a> Don't install (nor run) mypy on PyPy (librt build failures) (jaraco/skeleton#...</li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.text/compare/v4.2.0...v4.3.0">compare view</a></li>
</ul>
</details>
<br />

Updates `lxml` to 6.1.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/lxml/lxml/blob/master/CHANGES.txt">lxml's changelog</a>.</em></p>
<blockquote>
<h1>6.1.2 (2026-08-18)</h1>
<ul>
<li>
<p>GH#526: Some build files were missing in the sdist.
Patch by Nicola Soranzo.</p>
</li>
<li>
<p>Some minor corrections for error handling cases.</p>
</li>
</ul>
<h2>Other changes</h2>
<ul>
<li>Built with Cython 3.2.9.</li>
</ul>
<h1>6.1.1 (2026-05-18)</h1>
<h2>Bugs fixed</h2>
<ul>
<li>
<p>The known link attributes in <code>lxml.html.defs.link_attrs</code> were missing <code>xlink:href</code>,
which can be used for URL bypass attacks in embedded SVG/MathML/etc. content.
<a href="https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f">https://github.com/fedora-python/lxml_html_clean/security/advisories/GHSA-4jhm-jv67-739f</a></p>
</li>
<li>
<p>The Linux wheels use a patched libxslt 1.1.43, fixing CVE-2025-7424 and CVE-2025-11731.</p>
</li>
<li>
<p>The Windows wheels use libxslt 1.1.45, fixing CVE-2025-7424 and CVE-2025-11731.</p>
</li>
</ul>
<h1>6.1.0 (2026-04-17)</h1>
<p>This release fixes a possible external entity injection (XXE) vulnerability in
<code>iterparse()</code> and the <code>ETCompatXMLParser</code>.</p>
<h2>Features added</h2>
<ul>
<li>
<p>GH#486: The HTML ARIA accessibility attributes were added to the set of safe attributes
in <code>lxml.html.defs</code>.  This allows <code>lxml_html_clean</code> to pass them through.
Patch by oomsveta.</p>
</li>
<li>
<p>The default chunk size for reading from file-likes in <code>iterparse()</code> is now configurable
with a new <code>chunk_size</code> argument.</p>
</li>
</ul>
<h2>Bugs fixed</h2>
<ul>
<li>LP#2146291: The <code>resolve_entities</code> option was still set to <code>True</code> for
<code>iterparse</code> and <code>ETCompatXMLParser</code>, allowing for external entity injection (XXE)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/lxml/lxml/commit/f2874e9008c83d2d26e0b7292772eb74d2b83ce3"><code>f2874e9</code></a> Update release date.</li>
<li><a href="https://github.com/lxml/lxml/commit/687a295a4c19288b95ec1b74c31a620acaabdf9d"><code>687a295</code></a> Build: Exclude Py3.8 from windows-arm builds.</li>
<li><a href="https://github.com/lxml/lxml/commit/acadc56553ff74e6ea296158e118b08ac6ec9f4b"><code>acadc56</code></a> Build: Remove outdated build target.</li>
<li><a href="https://github.com/lxml/lxml/commit/59f93eb420a988bc61e7c5b8f4d97869c0536be7"><code>59f93eb</code></a> Build: Split old-Linux and other-Py3.8 builds.</li>
<li><a href="https://github.com/lxml/lxml/commit/923df83ed6a40ca5aab267b1c3fe073ff13a00ab"><code>923df83</code></a> Build: Fix manylinux2014 build.</li>
<li><a href="https://github.com/lxml/lxml/commit/975cc83e4626117e36adb6d336ac9a6f6cc0ca42"><code>975cc83</code></a> Build: Fix Px3.8 build setup.</li>
<li><a href="https://github.com/lxml/lxml/commit/09e5d3e968f380d7a790c2b47f59f7937e00942e"><code>09e5d3e</code></a> Build: Fix cibuildwheel version.</li>
<li><a href="https://github.com/lxml/lxml/commit/998cf504a3b0da7f316861c5a552c5c16069d91f"><code>998cf50</code></a> Build: Build Py3.8 wheels only once, not in every build job.</li>
<li><a href="https://github.com/lxml/lxml/commit/55670370cd68117ff2b3b71e0f20a7f275d1baeb"><code>5567037</code></a> Build: Exclude Py3.15 from 32bit builds.</li>
<li><a href="https://github.com/lxml/lxml/commit/904db40b04ef590ae1ca8fc84be863fc0f8196dc"><code>904db40</code></a> Build: Update cibuildwheel to include Py3.15.</li>
<li>Additional commits viewable in <a href="https://github.com/lxml/lxml/compare/lxml-6.1.1...lxml-6.1.2">compare view</a></li>
</ul>
</details>
<br />

Updates `more-itertools` to 11.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/more-itertools/more-itertools/releases">more-itertools's releases</a>.</em></p>
<blockquote>
<h2>Version 11.1.0</h2>
<p>Changes:</p>
<ul>
<li><code>numeric_range</code> was updated to fix its handling of empty ranges (thanks to rhettinger)</li>
<li><code>peekable</code> was updated to fix typing issues (thanks to DORI2001, powellnorma, Pandede, m9810223, and rhettinger)</li>
<li><code>islice_extended</code> was optimized for memory usage and speed (thanks to ben42code, rhettinger, and pochmann)</li>
<li><code>serialize</code> now supports the generator methods <code>throw</code>, <code>send</code>, and <code>close</code> (thanks to rhettinger)</li>
<li><code>seekable</code> now supports implements <code>__getitem__</code> for cached elements (thanks to SAY-5, jenstroeger, and JamesParrott)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/more-itertools/more-itertools/commit/64be96ceb2a6e836f76f069f4a96d2394d59fd0c"><code>64be96c</code></a> Merge pull request <a href="https://redirect.github.com/more-itertools/more-itertools/issues/1159">#1159</a> from more-itertools/version-11.1.0</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/03a08ec2459bd616362c8d7414bf9388d71a0a0f"><code>03a08ec</code></a> Changes for version 11.1.0</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/9af73b9ca01bd7ff2e776578610095fc0b7ae248"><code>9af73b9</code></a> Bump version: 11.0.2 → 11.1.0</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/264b18d8dfbab42fdbd969fc09abf602c6ea58b3"><code>264b18d</code></a> Merge pull request <a href="https://redirect.github.com/more-itertools/more-itertools/issues/1158">#1158</a> from SAY-5/seekable-getitem</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/ba7ef9425f6983deaf0aedb616e8cdf0ece2f517"><code>ba7ef94</code></a> Add seekable.<strong>getitem</strong> to access the internal cache</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/18d98893df45e0014bf316ca7832d441dd94aa4f"><code>18d9889</code></a> Merge pull request <a href="https://redirect.github.com/more-itertools/more-itertools/issues/1157">#1157</a> from rhettinger/expand_serialize</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/c7b870ad903821eb43cbbe2964ad7a55159a77a4"><code>c7b870a</code></a> Add tests</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/fb6923e01f31ffe5fe4a23e57bffae6e3c8396b1"><code>fb6923e</code></a> Update stub</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/1c85ece40f9549bcc542eb9af9893597ab58f888"><code>1c85ece</code></a> Make attributes private. Support all generator methods.</li>
<li><a href="https://github.com/more-itertools/more-itertools/commit/bd8475cc1e9b2efdbc055ab4af4d4693a9c5cb7a"><code>bd8475c</code></a> Merge pull request <a href="https://redirect.github.com/more-itertools/more-itertools/issues/1155">#1155</a> from rhettinger/optimize_islice_extended</li>
<li>Additional commits viewable in <a href="https://github.com/more-itertools/more-itertools/compare/v10.8.0...v11.1.0">compare view</a></li>
</ul>
</details>
<br />

Updates `multidict` to 6.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/aio-libs/multidict/releases">multidict's releases</a>.</em></p>
<blockquote>
<h2>6.7.1</h2>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed slow memory leak caused by identity by adding <code>Py_DECREF</code> to identity value before leaving <code>md_pop_one</code> on success
-- by :user:<code>Vizonex</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a href="https://redirect.github.com/aio-libs/multidict/issues/1284">#1284</a>.</p>
</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/aio-libs/multidict/blob/master/CHANGES.rst">multidict's changelog</a>.</em></p>
<blockquote>
<h1>6.7.1</h1>
<p><em>(2026-01-25)</em></p>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed slow memory leak caused by identity by adding <code>Py_DECREF</code> to identity value before leaving <code>md_pop_one</code> on success
-- by :user:<code>Vizonex</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1284</code>.</p>
</li>
</ul>
<hr />
<h1>6.7.0</h1>
<p><em>(2025-10-05)</em></p>
<h2>Contributor-facing changes</h2>
<ul>
<li>
<p>Updated tests and added CI for CPython 3.14 -- by :user:<code>kumaraditya303</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1235</code>.</p>
</li>
</ul>
<hr />
<h1>6.6.4</h1>
<p><em>(2025-08-11)</em></p>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed <code>MutliDict</code> &amp; <code>CIMultiDict</code> memory leak when deleting values or clearing them
-- by :user:<code>Vizonex</code></p>
<p><em>Related issues and pull requests on GitHub:</em></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/aio-libs/multidict/commit/39d3c322f6a9e824beee9b6f178e3166205f0f59"><code>39d3c32</code></a> Release 6.7.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1289">#1289</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/77bb95e83c226c3557015d055a1ce4a29889d49e"><code>77bb95e</code></a> Fix memory leak caused by identity when default value is inplace (<a href="https://redirect.github.com/aio-libs/multidict/issues/1284">#1284</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/87dd4a49a5e8d5b01a8d801cac0c92984726f411"><code>87dd4a4</code></a> Bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1287">#1287</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/6c764124a79da8f700faa1e3638311c58828947e"><code>6c76412</code></a> Bump actions/cache from 4 to 5 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1275">#1275</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/b91a033a29f360e76a8a24b92d50120d9cd08065"><code>b91a033</code></a> Bump actions/upload-artifact from 4 to 6 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1277">#1277</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/84bf82c0e2ec68919e7f3b7c5c7388a82f4737ee"><code>84bf82c</code></a> Bump psutil from 7.1.3 to 7.2.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1279">#1279</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/3f7b3cec6a5c23a100d972a667e7f67b84809bb3"><code>3f7b3ce</code></a> Bump pypa/cibuildwheel from 3.3.0 to 3.3.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1280">#1280</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/bbae9027cc99e23fc1ab98d97ed0adcd644c32c8"><code>bbae902</code></a> Bump sigstore/gh-action-sigstore-python from 3.1.0 to 3.2.0 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1274">#1274</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/000b5b0d25b3fc672c4226615f52a7d0cd6c2c96"><code>000b5b0</code></a> Remove follow_untyped_imports for mypy-sphinx (<a href="https://redirect.github.com/aio-libs/multidict/issues/1286">#1286</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/3d2d63044c98c8ede9204e8a9685921763cc0d4e"><code>3d2d630</code></a> Bump actions/download-artifact from 6 to 7 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1276">#1276</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/aio-libs/multidict/compare/v6.6.0...v6.7.1">compare view</a></li>
</ul>
</details>
<br />

Updates `msgpack` to 1.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/releases">msgpack's releases</a>.</em></p>
<blockquote>
<h2>v1.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump pypa/cibuildwheel from 4.0.0 to 4.1.0 in the all-dependencies group by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/694">msgpack/msgpack-python#694</a></li>
<li>release v1.2.1 by <a href="https://github.com/methane"><code>@​methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/698">msgpack/msgpack-python#698</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/msgpack/msgpack-python/compare/v1.2.0...v1.2.1">https://github.com/msgpack/msgpack-python/compare/v1.2.0...v1.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md">msgpack's changelog</a>.</em></p>
<blockquote>
<h1>1.2.1</h1>
<p>Release Date: 2026-06-19</p>
<p>Fix a segfault when calling <code>Unpacker.unpack()</code> or <code>Unpacker.skip()</code> after an unpacking failure.
But note that reusing the same <code>Unpacker</code> instance after an unpacking failure is not supported.
Please create a new <code>Unpacker</code> instance instead. GHSA-6v7p-g79w-8964</p>
<h1>1.2.0</h1>
<p>Release Date: 2026-06-11</p>
<ul>
<li>Support free threaded Python. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/654">#654</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/686">#686</a></li>
<li>Dropped support for Python 3.9. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/656">#656</a></li>
<li>Fix missing error checks in C code. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/665">#665</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/666">#666</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/667">#667</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/672">#672</a></li>
<li>Fix <code>strict_map_key</code> option didn't work for <code>object_pairs_hook</code>. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/673">#673</a></li>
<li>Increase DEFAULT_RECURSE_LIMIT of Unpacker to 1024. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/676">#676</a></li>
<li>Fix memory leak when Unpacker returns error for invalid input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/671">#671</a></li>
<li>Fix <code>Packer.pack_ext_type()</code> ignored <code>autoreset</code> option. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/663">#663</a></li>
<li>Fix <code>Timestamp.from_datetime()</code> returning wrong value for pre-epoch datetimes. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/662">#662</a></li>
<li>Fix use-after-free in <code>unpackb()</code> and <code>Unpacker.unpack()</code> for non-contiguous input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/677">#677</a></li>
<li>Fix possible memory leak when calling <code>Unpacker.__init__()</code> several times. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/687">#687</a></li>
</ul>
<h1>1.1.2</h1>
<p>Release Date: 2025-10-08</p>
<p>This release does not change source code. It updates only building
wheels:</p>
<ul>
<li>Update Cython to v3.1.4</li>
<li>Update cibuildwheel to v3.2.0</li>
<li>Drop Python 3.8</li>
<li>Add Python 3.14</li>
<li>Add windows-arm</li>
</ul>
<h1>1.1.1</h1>
<p>Release Date: 2025-06-13</p>
<ul>
<li>No change from 1.1.1rc1.</li>
</ul>
<h1>1.1.1rc1</h1>
<p>Release Date: 2025-06-06</p>
<ul>
<li>Update Cython to 3.1.1 and cibuildwheel to 2.23.3.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/msgpack/msgpack-python/commit/448d43f5dcca7b3a2b0810e161af0a6431d90071"><code>448d43f</code></a> release v1.2.1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/698">#698</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/2c56ddb5d0025ed481d962c0f5d62d19dec7476d"><code>2c56ddb</code></a> Merge commit from fork</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/0f4f350b6f3e80f24750422673424cce5d96e15d"><code>0f4f350</code></a> Bump pypa/cibuildwheel from 4.0.0 to 4.1.0 in the all-dependencies group (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/694">#694</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/11ed0a5110c1920b85b7d24d9414f480983e0f16"><code>11ed0a5</code></a> release v1.2.0 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/692">#692</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/c410a388c58d55091736e510cad064977a12cb8b"><code>c410a38</code></a> Bump pypa/cibuildwheel from 3.4.1 to 4.0.0 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/691">#691</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/97ba6ca0d29c1e8a5b30112f13f37a4d6b3c4492"><code>97ba6ca</code></a> skip ci: remove unneeded CIBW_SKIP option</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/cdde1b0d6336caff4e82310c3c7d2b4c73f22d59"><code>cdde1b0</code></a> Wheels CI hangs for MacOS Intel (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/689">#689</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/5eb57e15455f5dd25001e97a7ef1170911dee104"><code>5eb57e1</code></a> release v1.2.0rc1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/681">#681</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/77395c19a50061238306df5ea10e67c5312ceff0"><code>77395c1</code></a> Harden <code>Unpacker.__init__</code> re-entry cleanup to prevent buffer/context leaks (...</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/7df7136e20933fd3a498bd58bff7975a24790516"><code>7df7136</code></a> Guard <code>Packer</code> buffer protocol hooks with Cython critical sections (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/686">#686</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/msgpack/msgpack-python/compare/v1.1.2...v1.2.1">compare view</a></li>
</ul>
</details>
<br />

Updates `packaging` from 26.2 to 26.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pypa/packaging/releases">packaging's releases</a>.</em></p>
<blockquote>
<h2>26.3</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>Features</h3>
<ul>
<li>Add a public <code>VersionRange</code> API and <code>SpecifierSet.to_range()</code>, representing the versions a specifier set acc...

_Description has been truncated_

… 46 updates

Updates the requirements on [aiohttp](https://github.com/aio-libs/aiohttp), [certifi](https://github.com/certifi/python-certifi), [cffi](https://github.com/python-cffi/cffi), [croniter](https://github.com/pallets-eco/croniter), [cryptography](https://github.com/pyca/cryptography), [gitpython](https://github.com/gitpython-developers/GitPython), [idna](https://github.com/kjd/idna), [jaraco-functools](https://github.com/jaraco/jaraco.functools), [jaraco-context](https://github.com/jaraco/jaraco.context), [jaraco-text](https://github.com/jaraco/jaraco.text), [lxml](https://github.com/lxml/lxml), [more-itertools](https://github.com/more-itertools/more-itertools), [multidict](https://github.com/aio-libs/multidict), [msgpack](https://github.com/msgpack/msgpack-python), [packaging](https://github.com/pypa/packaging), [psutil](https://github.com/giampaolo/psutil), [pyasn1](https://github.com/pyasn1/pyasn1), [pymssql](https://github.com/pymssql/pymssql), [pyopenssl](https://github.com/pyca/pyopenssl), [pythonnet](https://github.com/pythonnet/pythonnet), [requests](https://github.com/psf/requests), [tornado](https://github.com/tornadoweb/tornado), [virtualenv](https://github.com/pypa/virtualenv), [filelock](https://github.com/tox-dev/py-filelock), [zipp](https://github.com/jaraco/zipp), [docker](https://github.com/docker/docker-py), [pytest](https://github.com/pytest-dev/pytest), [pyzmq](https://github.com/zeromq/pyzmq), [build](https://github.com/pypa/build), [wheel](https://github.com/pypa/wheel), [setuptools-scm](https://github.com/pypa/setuptools-scm), [pip](https://github.com/pypa/pip), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore), [kubernetes](https://github.com/kubernetes-client/python), [pynacl](https://github.com/pyca/pynacl), [sqlparse](https://github.com/andialbrecht/sqlparse), [vcert](https://github.com/Venafi/vcert-python), [xmldiff](https://github.com/Shoobx/xmldiff), [pylint](https://github.com/pylint-dev/pylint), m2crypto, [pygit2](https://github.com/libgit2/pygit2), mercurial, [ansible](https://github.com/ansible-community/ansible-build-data), [twilio](https://github.com/twilio/twilio-python) and [python-telegram-bot](https://github.com/python-telegram-bot/python-telegram-bot) to permit the latest version.

Updates `aiohttp` to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3)

Updates `certifi` to 2026.7.22
- [Commits](certifi/python-certifi@2026.05.20...2026.07.22)

Updates `cffi` to 2.1.1
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.0.0...v2.1.1)

Updates `croniter` to 6.2.4
- [Release notes](https://github.com/pallets-eco/croniter/releases)
- [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst)
- [Commits](pallets-eco/croniter@6.2.2...6.2.4)

Updates `cryptography` to 50.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@48.0.0...50.0.0)

Updates `gitpython` to 3.1.59
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.50...3.1.59)

Updates `idna` to 3.19
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.18...v3.19)

Updates `jaraco-functools` to 4.6.0
- [Release notes](https://github.com/jaraco/jaraco.functools/releases)
- [Changelog](https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst)
- [Commits](jaraco/jaraco.functools@v4.4.0...v4.6.0)

Updates `jaraco-context` to 6.1.2
- [Release notes](https://github.com/jaraco/jaraco.context/releases)
- [Changelog](https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst)
- [Commits](jaraco/jaraco.context@v6.1.1...v6.1.2)

Updates `jaraco-text` to 4.3.0
- [Release notes](https://github.com/jaraco/jaraco.text/releases)
- [Changelog](https://github.com/jaraco/jaraco.text/blob/main/NEWS.rst)
- [Commits](jaraco/jaraco.text@v4.2.0...v4.3.0)

Updates `lxml` to 6.1.2
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](lxml/lxml@lxml-6.1.1...lxml-6.1.2)

Updates `more-itertools` to 11.1.0
- [Release notes](https://github.com/more-itertools/more-itertools/releases)
- [Commits](more-itertools/more-itertools@v10.8.0...v11.1.0)

Updates `multidict` to 6.7.1
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.6.0...v6.7.1)

Updates `msgpack` to 1.2.1
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md)
- [Commits](msgpack/msgpack-python@v1.1.2...v1.2.1)

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `psutil` to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@v5.0.0...v7.2.2)

Updates `pyasn1` to 0.6.4
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.3...v0.6.4)

Updates `pymssql` from 2.3.11 to 2.3.13
- [Release notes](https://github.com/pymssql/pymssql/releases)
- [Changelog](https://github.com/pymssql/pymssql/blob/master/ChangeLog.rst)
- [Commits](pymssql/pymssql@v2.3.11...v2.3.13)

Updates `pyopenssl` to 26.4.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@26.2.0...26.4.0)

Updates `pythonnet` to 3.1.0
- [Release notes](https://github.com/pythonnet/pythonnet/releases)
- [Changelog](https://github.com/pythonnet/pythonnet/blob/master/CHANGELOG.md)
- [Commits](pythonnet/pythonnet@v3.0.5...v3.1.0)

Updates `requests` to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v0.2.0...v2.34.2)

Updates `tornado` to 6.5.8
- [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst)
- [Commits](tornadoweb/tornado@v6.5.6...v6.5.8)

Updates `virtualenv` to 21.7.4
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.4.2...21.7.4)

Updates `filelock` to 3.32.3
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.1...3.32.3)

Updates `zipp` to 4.1.0
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.23.1...v4.1.0)

Updates `docker` to 7.2.0
- [Release notes](https://github.com/docker/docker-py/releases)
- [Commits](docker/docker-py@7.1.0...7.2.0)

Updates `pytest` to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.4.2...9.1.1)

Updates `pyzmq` to 27.1.0
- [Release notes](https://github.com/zeromq/pyzmq/releases)
- [Commits](zeromq/pyzmq@v25.1.2...v27.1.0)

Updates `build` to 1.5.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.4.4...1.5.0)

Updates `wheel` to 0.48.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.47.0...0.48.0)

Updates `setuptools-scm` to 10.2.1
- [Release notes](https://github.com/pypa/setuptools-scm/releases)
- [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md)
- [Commits](pypa/setuptools-scm@0.1...setuptools-scm-v10.2.1)

Updates `pip` from 26.0.1 to 26.2.1
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@26.0.1...26.2.1)

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `aiohttp` to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3)

Updates `cffi` to 2.1.1
- [Release notes](https://github.com/python-cffi/cffi/releases)
- [Commits](python-cffi/cffi@v2.0.0...v2.1.1)

Updates `cryptography` to 50.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@48.0.0...50.0.0)

Updates `gitpython` to 3.1.59
- [Release notes](https://github.com/gitpython-developers/GitPython/releases)
- [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES)
- [Commits](gitpython-developers/GitPython@3.1.50...3.1.59)

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `virtualenv` to 21.7.4
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.4.2...21.7.4)

Updates `filelock` to 3.32.3
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.1...3.32.3)

Updates `docker` to 7.2.0
- [Release notes](https://github.com/docker/docker-py/releases)
- [Commits](docker/docker-py@7.1.0...7.2.0)

Updates `boto3` to 1.43.75
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.24...1.43.75)

Updates `botocore` to 1.43.75
- [Commits](boto/botocore@1.43.24...1.43.75)

Updates `kubernetes` to 36.0.3
- [Release notes](https://github.com/kubernetes-client/python/releases)
- [Changelog](https://github.com/kubernetes-client/python/blob/master/CHANGELOG.md)
- [Commits](kubernetes-client/python@v36.0.2...v36.0.3)

Updates `pynacl` to 1.6.2
- [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pynacl@1.5.0...1.6.2)

Updates `sqlparse` to 0.6.0
- [Changelog](https://github.com/andialbrecht/sqlparse/blob/master/CHANGELOG)
- [Commits](andialbrecht/sqlparse@0.5.5...0.6.0)

Updates `vcert` to 0.9.1
- [Release notes](https://github.com/Venafi/vcert-python/releases)
- [Commits](Venafi/vcert-python@v0.9.0...v0.9.1)

Updates `xmldiff` to 3.0
- [Release notes](https://github.com/Shoobx/xmldiff/releases)
- [Changelog](https://github.com/Shoobx/xmldiff/blob/master/CHANGES.rst)
- [Commits](Shoobx/xmldiff@2.7.0...3.0)

Updates `pylint` to 3.3.9
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](pylint-dev/pylint@v3.1.0...v3.3.9)

Updates `m2crypto` from 0.48.0 to 0.49.0

Updates `pygit2` to 1.20.0
- [Release notes](https://github.com/libgit2/pygit2/releases)
- [Changelog](https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md)
- [Commits](libgit2/pygit2@v1.19.2...v1.20.0)

Updates `mercurial` to 7.2.4

Updates `packaging` from 26.2 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@26.2...26.3)

Updates `ansible` to 14.3.1
- [Changelog](https://github.com/ansible-community/ansible-build-data/blob/main/docs/release-process.md)
- [Commits](ansible-community/ansible-build-data@14.0.0...14.3.1)

Updates `twilio` to 9.11.0
- [Release notes](https://github.com/twilio/twilio-python/releases)
- [Changelog](https://github.com/twilio/twilio-python/blob/main/CHANGES.md)
- [Commits](twilio/twilio-python@9.10.9...9.11.0)

Updates `python-telegram-bot` to 22.8
- [Release notes](https://github.com/python-telegram-bot/python-telegram-bot/releases)
- [Commits](python-telegram-bot/python-telegram-bot@v22.7...v22.8)

Updates `cryptography` to 50.0.0
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@48.0.0...50.0.0)

Updates `pyopenssl` to 26.4.0
- [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pyopenssl@26.2.0...26.4.0)

---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: cffi
  dependency-version: 2.1.1
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: croniter
  dependency-version: 6.2.4
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: gitpython
  dependency-version: 3.1.59
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: idna
  dependency-version: '3.19'
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: jaraco-functools
  dependency-version: 4.6.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: jaraco-context
  dependency-version: 6.1.2
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: jaraco-text
  dependency-version: 4.3.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: lxml
  dependency-version: 6.1.2
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: more-itertools
  dependency-version: 11.1.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: multidict
  dependency-version: 6.7.1
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: msgpack
  dependency-version: 1.2.1
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-updates
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pyasn1
  dependency-version: 0.6.4
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pymssql
  dependency-version: 2.3.13
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-pip-updates
- dependency-name: pyopenssl
  dependency-version: 26.4.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pythonnet
  dependency-version: 3.1.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: tornado
  dependency-version: 6.5.8
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: virtualenv
  dependency-version: 21.7.4
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: filelock
  dependency-version: 3.32.3
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: zipp
  dependency-version: 4.1.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: docker
  dependency-version: 7.2.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pyzmq
  dependency-version: 27.1.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: build
  dependency-version: 1.5.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: wheel
  dependency-version: 0.48.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: setuptools-scm
  dependency-version: 10.2.1
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pip
  dependency-version: 26.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-updates
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-updates
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: cffi
  dependency-version: 2.1.1
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: gitpython
  dependency-version: 3.1.59
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-updates
- dependency-name: virtualenv
  dependency-version: 21.7.4
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: filelock
  dependency-version: 3.32.3
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: docker
  dependency-version: 7.2.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: boto3
  dependency-version: 1.43.75
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: botocore
  dependency-version: 1.43.75
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: kubernetes
  dependency-version: 36.0.3
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pynacl
  dependency-version: 1.6.2
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: sqlparse
  dependency-version: 0.6.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: vcert
  dependency-version: 0.9.1
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: xmldiff
  dependency-version: '3.0'
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pylint
  dependency-version: 3.3.9
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: m2crypto
  dependency-version: 0.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-updates
- dependency-name: pygit2
  dependency-version: 1.20.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: mercurial
  dependency-version: 7.2.4
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: packaging
  dependency-version: '26.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-pip-updates
- dependency-name: ansible
  dependency-version: 14.3.1
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: twilio
  dependency-version: 9.11.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: python-telegram-bot
  dependency-version: '22.8'
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: cryptography
  dependency-version: 50.0.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
- dependency-name: pyopenssl
  dependency-version: 26.4.0
  dependency-type: direct:production
  dependency-group: all-pip-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the test:full Run the full test suite label Aug 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 22, 2026 21:17
@dependabot dependabot Bot added the test:full Run the full test suite label Aug 22, 2026
@dependabot
dependabot Bot deployed to workflow-restart August 22, 2026 21:17 Active
@salt-pr-bot
salt-pr-bot Bot deployed to workflow-restart August 22, 2026 21:19 Active
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

test:full Run the full test suite

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants