chore(deps): bump the all-updates group across 1 directory with 104 updates

[dependabot]

Bumps the all-updates group with 104 updates in the /analytics directory:

Package	From	To
anyio	4.8.0	4.15.1
appnope	0.1.4	1.0.0
argon2-cffi	23.1.0	25.1.0
argon2-cffi-bindings	21.2.0	26.1.0
arrow	1.3.0	1.4.0
asttokens	3.0.0	3.0.2
async-lru	2.0.4	2.3.0
attrs	24.3.0	26.1.0
babel	2.16.0	2.18.0
beautifulsoup4	4.12.3	4.15.0
bleach	6.2.0	6.4.0
cachetools	5.5.1	7.2.0
certifi	2024.12.14	2026.7.22
cffi	1.17.1	2.1.1
charset-normalizer	3.4.1	3.5.1
comm	0.2.2	0.2.3
contourpy	1.3.1	1.4.0
debugpy	1.8.12	1.8.22
decorator	5.1.1	5.3.1
executing	2.2.0	2.2.1
fastjsonschema	2.21.1	2.22.2
fonttools	4.55.4	4.66.0
fqdn	1.5.1	1.6.0
google-api-core	2.24.0	2.39.0
google-api-python-client	2.159.0	2.200.0
google-auth	2.37.0	2.58.1
google-auth-httplib2	0.2.0	0.4.2
google-auth-oauthlib	1.2.1	1.4.1
googleapis-common-protos	1.66.0	1.75.4
gspread	6.1.4	6.2.1
gspread-formatting	1.2.0	1.2.1
h11	0.14.0	0.16.0
httpcore	1.0.7	1.0.9
httplib2	0.22.0	0.32.0
idna	3.10	3.20
ipykernel	6.29.5	7.3.0
ipython	8.31.0	9.17.1
ipywidgets	8.1.5	8.1.9
jedi	0.19.2	0.20.0
jinja2	3.1.5	3.1.6
json5	0.10.0	0.15.0
jsonpointer	3.0.0	3.1.1
jsonschema	4.23.0	4.26.0
jsonschema-specifications	2024.10.1	2025.9.1
jupyter-events	0.11.0	0.12.1
jupyter-lsp	2.2.5	2.3.1
jupyter-client	8.6.3	8.10.0
jupyter-core	5.7.2	5.9.1
jupyter-server	2.15.0	2.21.1
jupyter-server-terminals	0.5.3	0.5.4
jupyterlab	4.3.4	4.6.4
jupyterlab-server	2.27.3	2.28.1
jupyterlab-widgets	3.0.13	3.0.17
kiwisolver	1.4.8	1.5.1
markupsafe	3.0.2	3.0.3
matplotlib	3.10.0	3.11.2
matplotlib-inline	0.1.7	0.2.2
mistune	3.1.0	3.3.4
nbclient	0.10.2	0.11.0
nbconvert	7.16.5	7.17.1
nbformat	5.10.4	5.11.1
notebook	7.3.2	7.6.3
numpy	2.2.2	2.5.3
oauthlib	3.2.2	4.0.0
packaging	24.2	26.3
pandas	2.2.3	3.0.6
parso	0.8.4	0.8.7
pillow	11.1.0	12.3.0
platformdirs	4.3.6	4.12.1
prometheus-client	0.21.1	0.26.0
prompt-toolkit	3.0.50	3.0.53
proto-plus	1.25.0	1.28.4
protobuf	5.29.3	7.36.2
psutil	6.1.1	7.2.2
pure-eval	0.2.3	0.2.4
pyasn1	0.6.1	0.6.4
pyasn1-modules	0.4.1	0.4.2
pycparser	2.22	3.0
pygments	2.19.1	2.21.0
pyparsing	3.2.1	3.3.3
python-json-logger	3.2.1	4.2.0
pytz	2024.2	2026.4
pyyaml	6.0.2	6.0.3
pyzmq	26.2.0	27.2.0
referencing	0.36.1	0.37.0
requests	2.32.3	2.34.2
rpds-py	0.22.3	2026.6.3
rsa	4.9	4.9.1
send2trash	1.8.3	2.1.0
setuptools	75.8.0	84.0.0
soupsieve	2.6	2.10
tinycss2	1.4.0	1.5.1
tornado	6.4.2	6.5.10
traitlets	5.14.3	5.16.1
types-python-dateutil	2.9.0.20241206	2.9.0.20260807
typing-extensions	4.12.2	4.16.0
tzdata	2025.1	2026.4
uritemplate	4.1.1	4.2.0
urllib3	2.3.0	2.8.0
wcwidth	0.2.13	0.9.1
webcolors	24.11.1	25.10.0
webencodings	0.5.1	0.6.1
websocket-client	1.8.0	1.9.2
widgetsnbextension	4.0.13	4.0.16

Updates anyio from 4.8.0 to 4.15.1

Release notes

Sourced from anyio's releases.

4.15.1

• Implemented a compatibility fix for supporting direct access of anyio.* submodules from the main package even when those submodules were not directly imported first (#1311 <agronholm/anyio#1311)

4.15.0

• Added support for the newer keyword-only arguments on anyio.Path methods to match the standard library pathlib.Path:

  • follow_symlinks on exists() (Python 3.12+)
  • follow_symlinks on is_dir() (Python 3.13+)
  • follow_symlinks on is_file() (Python 3.13+)
  • follow_symlinks on owner() (Python 3.13+)
  • follow_symlinks on group() (Python 3.13+)
  • newline on read_text() (Python 3.13+)

  (#1286, #1293; PR by @​jaideeppyne)

• Added amap, gather, and as_completed utility functions to simplify common patterns (#1173; PR by @​Graeme22)

• Added --anyio-mode command-line option as an alternative to the anyio_mode ini setting, and fix the pytest plugin's auto mode detection to recognize the mode when set via either mechanism(e.g: pytest_asyncio). (#1242; PR by @​EmmanuelNiyonshuti)

• Added the anyio.Future synchronization primitive which behaves similar to asyncio.Future, allowing tasks to wait for a value (or exception) from another task (#1146; PR by @​Vizonex)

• Added guidance for managing multiple memory object stream producers and consumers with cloned streams (#330; PR by @​nightcityblade)

• Added StapledObjectStream.send_nowait() that delegates to the underlying ObjectSendStream, if it implements it (#1241; PR by @​davidbrochart)

• Added the move_on_at() and fail_at() functions to complement move_on_after() and fail_after()

• Changed the default name for a task spawned with TaskGroup.create_task(func()) to match the default task name for the analogous task spawned with TaskGroup.start_soon(func) or TaskGroup.start(func) in more situations. Previously, the default name of a TaskGroup.create_task task never included the module name. (The default name for a task spawned with TaskGroup.start_soon or TaskGroup.start typically includes the module name.) (#1234; PR by @​gschaffner)

• Changed the anyio and anyio.abc modules to lazily (much like 810) import the necessary submodules. This is done by parsing the AST of the module and building a lookup table from the if TYPE_CHECKING: block. A fallback mode has been provided for installations where the source code is unavailable (e.g. PyInstaller). (#1169)

• Fixed free-threading compatibility issues arising from the fact that on Python 3.14 free-threading builds, newly created threads inherit the current context by default, causing AnyIO to behave erroneously in relation to start_blocking_portal() and anyio.to_thread.run_sync() (#1224; PR by @​EmmanuelNiyonshuti)

• Fixed SpooledTemporaryFile.readinto() and readinto1() reading twice before rollover, so the destination buffer was overwritten by the second read and the file position advanced twice, silently losing data (#1215; PR by @​c-tonneslan)

• Added a reason parameter to fail_after (and the new fail_at) allowing for added exception context when raising TimeoutError (#1227; PR by @​Graeme22)

• Fixed the default TaskHandle.name missing part of the task name for tasks started with TaskGroup.start on Trio (#1231; PR by @​gschaffner)

• Fixed anyio.run leaking, or at least, delaying collection of loop and root_task due to the root task being cached in a RunVar. (#1203; PR by @​tapetersen)

• Fixed anyio.Path.with_stem() silently producing a wrong path (e.g. Path(".txt")) instead of raising ValueError when given an empty stem on a path with a non-empty suffix, unlike pathlib.PurePath.with_stem (#1200; PR by @​Sanjays2402)

• Fixed UNIXSocketStream.aclose() raising asyncio.InvalidStateError when a concurrent receive or send operation had just been cancelled on the asyncio backend (#1267; PR by @​alloutflo)

• Fixed the pytest plugin importing the deprecated _pytest.python.CallSpec2 alias, which triggers PytestRemovedIn10Warning on pytest>=9.2 and crashes pytest at startup when filterwarnings = error is configured (#1271; PR by @​matthewfeickert)

• Fixed an asyncio worker thread race that could raise RuntimeError when the event loop closed between checking its state and scheduling the worker result (#1265; PR by @​hansu650)

• Fixed CapacityLimiter on the asyncio backend over-granting tokens when total_tokens was raised while the limiter was over-subscribed (#1223; PR by @​zelinewang)

... (truncated)

Commits

• ffcd154 Bumped up the version
• 0ecf5ed Added a workaround for third party code accessing unimported submodules (#1309)
• 9283662 Bumped up the version
• d137692 Improved the instructions for AI agents
• 033fc52 Shield TemporaryDirectory cleanup from cancellation (#1304)
• 942e9a6 [pre-commit.ci] pre-commit autoupdate (#1305)
• b825c3b Fixed pyproject.toml changes not triggering the test suite
• 9727dc5 Fixed start inconsistencies between trio and asyncio (#1198)
• b05fe6d Fixed wrong type in move_on_after (#1297)
• 44d0c93 Fixed asyncio task group coroutine cleanup (#1275)
• Additional commits viewable in compare view

Updates appnope from 0.1.4 to 1.0.0

Commits

• 3b529de Bump to 1.0.0
• e2d3041 Bump to 1.0.0.dev0
• 81036fb pypa update to v1.14.1
• 90ddca6 Bump to 1.0.0
• 2195053 set dev0
• 2ee259b Merge pull request #39 from minrk/pyproject
• 8989fdf switch to pyproject, enable trusted publishing
• 0b63ba2 Merge pull request #38 from minrk/dependabot/github_actions/actions-e91bde37dc
• 08748dd Bump the actions group with 2 updates
• f20a7c5 Merge pull request #37 from brandonrwin/patch-1
• Additional commits viewable in compare view

Updates argon2-cffi from 23.1.0 to 25.1.0

Release notes

Sourced from argon2-cffi's releases.

25.1.0

Highlights

This release is mostly about smoothing out packaging metadata and improve support for Pyodide / WebAssembly environments.

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Klaviyo (@klaviyo), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Doist (@Doist), nate nowack (@zzstoatzz), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Jesse Snyder (@jessesnyder), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Moving Content AG (@moving-content), ProteinQure (@ProteinQure), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Not to forget 14 more amazing humans who chose to be generous but anonymous!

Full Changelog

Added

• Official support for Python 3.13 and 3.14. No code changes were necessary.

Removed

• Python 3.7 is not supported anymore. #186

Changed

• argon2.PasswordHasher.check_needs_rehash() now also accepts bytes like the rest of the API. #174

• Improved parameter compatibility handling for Pyodide / WebAssembly environments. #190

---

This release contains contributions from @​alarmfox, @​hynek, @​isidroas, @​ngoldbaum, @​peterc-s, and @​twm.

Artifact Attestations

You can verify this release's artifact attestions using GitHub's CLI tool by downloading the sdist and wheel from PyPI and running:

... (truncated)

Changelog

Sourced from argon2-cffi's changelog.

25.1.0 - 2025-06-03

Added

• Official support for Python 3.13 and 3.14. No code changes were necessary.

Removed

• Python 3.7 is not supported anymore. #186

Changed

• argon2.PasswordHasher.check_needs_rehash() now also accepts bytes like the rest of the API. #174

• Improved parameter compatibility handling for Pyodide / WebAssembly environments. #190

Commits

• 1fcae4f Prepare 25.1.0
• 18939b1 ci: placate dr zizmor
• 8dcceb5 ci: pin & trust
• 9542242 Clean up trove classifiers
• 298af7e Switch to dependency groups (#202)
• 2eedf07 Update & rename Ruff
• bc861f0 Add 3.14
• f8260dd [pre-commit.ci] pre-commit autoupdate (#200)
• b8321fa Add a multithreaded stress test (#199)
• 9143d90 [pre-commit.ci] pre-commit autoupdate (#198)
• Additional commits viewable in compare view

Updates argon2-cffi-bindings from 21.2.0 to 26.1.0

Release notes

Sourced from argon2-cffi-bindings's releases.

26.1.0

Highlights

Big and scary release! We've switched from setuptools to scikit-build-core and added wheels for pyemscripten and (provisionally) RISC-V.

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Kraken Tech (@kraken-tech), Klaviyo (@klaviyo), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), TestMu AI Open Source Office (Formerly LambdaTest) (@LambdaTest-Inc), Todoist Inc (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Nick Libertini (@libertininick), Brian M. Dennis (@crossjam), Al Sweigart (@asweigart), Celebrity News AG (@celebritynewsag), The Westervelt Company (@westerveltco), Sławomir Ehlert (@slafs), Mostafa Khalil (@khadrawy), Filip Mularczyk (@mukiblejlok), Thomas Klinger (@thmsklngr), Andreas Poehlmann (@ap--), August Trapper Bigelow (@atbigelow), Carlton Gibson (@carltongibson), and Roboflow (@roboflow).

Full Changelog

Vendoring Argon2 @ f57e61e.

Added

• Python 3.15 wheels. #112

• PyPy 3.11 wheels.

• Linux on RISC-V 64bit wheels. #106

• pyemscripten wheels for Python 3.13 and 3.14. #129

Changed

• The bindings are now built with scikit-build-core and CMake instead of setuptools. The C source for the extension module is generated from _ffi.cdef.txt and _ffi.csrc.c using CFFI's cffi-gen-src tool and committed to the repository as _ffi.c. The build compiles that file directly and needs no CFFI at build time. Building from source requires CMake now. If none is found, it is downloaded automatically as part of the build. #173

Removed

• Python 3.9 support. #173

• Python 3.13t wheels. Free-threading on 3.13 was always only experimental and both manylinux and cibuildwheel dropped support for it.

---

... (truncated)

Changelog

Sourced from argon2-cffi-bindings's changelog.

26.1.0 - 2026-08-20

Vendoring Argon2 @ f57e61e.

Added

• Python 3.15 wheels. #112

• PyPy 3.11 wheels.

• Linux on RISC-V 64bit wheels. #106

• pyemscripten wheels for Python 3.13 and 3.14. #129

Changed

• The bindings are now built with scikit-build-core and CMake instead of setuptools. The C source for the extension module is generated from _ffi.cdef.txt and _ffi.csrc.c using CFFI's cffi-gen-src tool and committed to the repository as _ffi.c. The build compiles that file directly and needs no CFFI at build time. Building from source requires CMake now. If none is found, it is downloaded automatically as part of the build. #173

Removed

• Python 3.9 support. #173

• Python 3.13t wheels. Free-threading on 3.13 was always only experimental and both manylinux and cibuildwheel dropped support for it.

25.1.0 - 2025-07-30

Vendoring Argon2 @ f57e61e.

Added

• Official Python 3.12, 3.13, and 3.14 support. No code or packaging changes were necessary.

... (truncated)

Commits

• fb50afc Prepare 26.1.0
• 2e198d0 update dev
• 5ab01f9 Switch from setuptools to scikit-build-core (#137)
• 04ace1a update (#140)
• 58eb37e Amend AI policy
• c1d25ed [pre-commit.ci] pre-commit autoupdate (#139)
• e6c20e9 update dev (#138)
• abcbd7b Build Python 3.15 wheels (#112)
• af04999 [pre-commit.ci] pre-commit autoupdate (#135)
• 42976a3 Bump actions/setup-python in the github-actions group (#134)
• Additional commits viewable in compare view

Updates arrow from 1.3.0 to 1.4.0

Release notes

Sourced from arrow's releases.

Version 1.4.0

ADDED

• Added week_start parameter to floor() and ceil() methods. [PR #1222](arrow-py/arrow#1222)
• Added FORMAT_RFC3339_STRICT with a T separator. [PR #1201](arrow-py/arrow#1201)
• Added Macedonian in Latin locale support. [PR #1200](arrow-py/arrow#1200)
• Added Persian/Farsi locale support. [PR #1190](arrow-py/arrow#1190)
• Added week and weeks to Thai locale timeframes. [PR #1218](arrow-py/arrow#1218)
• Added weeks to Catalan locale. [PR #1189](arrow-py/arrow#1189)
• Added Persian names of months, month-abbreviations and day-abbreviations in Gregorian calendar. [PR #1172](arrow-py/arrow#1172)

CHANGED

• Migrated Arrow to use ZoneInfo for timezones instead of pytz. [PR #1217](arrow-py/arrow#1217)

FIXED

• Fixed humanize month limits. [PR #1224](arrow-py/arrow#1224)
• Fixed type hint of Arrow.__getattr__. [PR #1171](arrow-py/arrow#1171)
• Fixed spelling and removed poorly used expressions in Korean locale. [PR #1181](arrow-py/arrow#1181)
• Updated shift() method for issue #1145. [PR #1194](arrow-py/arrow#1194)
• Improved Greek locale translations (seconds, days, "ago", and month typo). [PR #1184](arrow-py/arrow#1184), [PR #1186](arrow-py/arrow#1186)
• Addressed datetime.utcnow deprecation warning. [PR #1182](arrow-py/arrow#1182)

INTERNAL

• Added codecov test results. [PR #1223](arrow-py/arrow#1223)
• Updated CI dependencies (actions/setup-python, actions/checkout, codecov/codecov-action, actions/cache).
• Added docstrings to parser.py. [PR #1010](arrow-py/arrow#1010)
• Updated Python versions support and bumped CI dependencies. [PR #1177](arrow-py/arrow#1177)
• Added dependabot for GitHub actions. [PR #1193](arrow-py/arrow#1193)
• Moved dateutil types to test requirements. [PR #1183](arrow-py/arrow#1183)
• Added documentation link for arrow.format. [PR #1180](arrow-py/arrow#1180)

Changelog

Sourced from arrow's changelog.

1.4.0 (2025-10-18)

• [ADDED] Added week_start parameter to floor() and ceil() methods. PR [#1222](https://github.com/arrow-py/arrow/issues/1222) <https://github.com/arrow-py/arrow/pull/1222>_
• [ADDED] Added FORMAT_RFC3339_STRICT with a T separator. PR [#1201](https://github.com/arrow-py/arrow/issues/1201) <https://github.com/arrow-py/arrow/pull/1201>_
• [ADDED] Added Macedonian in Latin locale support. PR [#1200](https://github.com/arrow-py/arrow/issues/1200) <https://github.com/arrow-py/arrow/pull/1200>_
• [ADDED] Added Persian/Farsi locale support. PR [#1190](https://github.com/arrow-py/arrow/issues/1190) <https://github.com/arrow-py/arrow/pull/1190>_
• [ADDED] Added week and weeks to Thai locale timeframes. PR [#1218](https://github.com/arrow-py/arrow/issues/1218) <https://github.com/arrow-py/arrow/pull/1218>_
• [ADDED] Added weeks to Catalan locale. PR [#1189](https://github.com/arrow-py/arrow/issues/1189) <https://github.com/arrow-py/arrow/pull/1189>_
• [ADDED] Added Persian names of months, month-abbreviations and day-abbreviations in Gregorian calendar. PR [#1172](https://github.com/arrow-py/arrow/issues/1172) <https://github.com/arrow-py/arrow/pull/1172>_
• [CHANGED] Migrated Arrow to use ZoneInfo for timezones instead of pytz. PR [#1217](https://github.com/arrow-py/arrow/issues/1217) <https://github.com/arrow-py/arrow/pull/1217>_
• [FIXED] Fixed humanize month limits. PR [#1224](https://github.com/arrow-py/arrow/issues/1224) <https://github.com/arrow-py/arrow/pull/1224>_
• [FIXED] Fixed type hint of Arrow.__getattr__. PR [#1171](https://github.com/arrow-py/arrow/issues/1171) <https://github.com/arrow-py/arrow/pull/1171>_
• [FIXED] Fixed spelling and removed poorly used expressions in Korean locale. PR [#1181](https://github.com/arrow-py/arrow/issues/1181) <https://github.com/arrow-py/arrow/pull/1181>_
• [FIXED] Updated shift() method for issue #1145. PR [#1194](https://github.com/arrow-py/arrow/issues/1194) <https://github.com/arrow-py/arrow/pull/1194>_
• [FIXED] Improved Greek locale translations (seconds, days, "ago", and month typo). PR [#1184](https://github.com/arrow-py/arrow/issues/1184) <https://github.com/arrow-py/arrow/pull/1184>, PR [#1186](https://github.com/arrow-py/arrow/issues/1186) <https://github.com/arrow-py/arrow/pull/1186>
• [FIXED] Addressed datetime.utcnow deprecation warning. PR [#1182](https://github.com/arrow-py/arrow/issues/1182) <https://github.com/arrow-py/arrow/pull/1182>_
• [INTERNAL] Added codecov test results. PR [#1223](https://github.com/arrow-py/arrow/issues/1223) <https://github.com/arrow-py/arrow/pull/1223>_
• [INTERNAL] Updated CI dependencies (actions/setup-python, actions/checkout, codecov/codecov-action, actions/cache).
• [INTERNAL] Added docstrings to parser.py. PR [#1010](https://github.com/arrow-py/arrow/issues/1010) <https://github.com/arrow-py/arrow/pull/1010>_
• [INTERNAL] Updated Python versions support and bumped CI dependencies. PR [#1177](https://github.com/arrow-py/arrow/issues/1177) <https://github.com/arrow-py/arrow/pull/1177>_
• [INTERNAL] Added dependabot for GitHub actions. PR [#1193](https://github.com/arrow-py/arrow/issues/1193) <https://github.com/arrow-py/arrow/pull/1193>_
• [INTERNAL] Moved dateutil types to test requirements. PR [#1183](https://github.com/arrow-py/arrow/issues/1183) <https://github.com/arrow-py/arrow/pull/1183>_
• [INTERNAL] Added documentation link for arrow.format. PR [#1180](https://github.com/arrow-py/arrow/issues/1180) <https://github.com/arrow-py/arrow/pull/1180>_

Commits

• 2c1f518 Bump release CI flow to use Python 3.14
• 2483bfe Bump changelog date
• c61de92 Bump version and add changelog (#1228)
• c3bb589 Update pypy CI version and update pre-commit dependencies
• 85cd905 Run tests on next Python release (#1227)
• 4c8c44a Add week_start parameter to floor() and ceil() (#1222)
• 7ccbe66 add codecov test results (#1223)
• 05cd9b4 fix humanize month limits (#1224)
• ea756ea Bump actions/setup-python from 5 to 6 (#1220)
• 86f7520 Bump actions/checkout from 4 to 5 (#1219)
• Additional commits viewable in compare view

Updates asttokens from 3.0.0 to 3.0.2

Release notes

Sourced from asttokens's releases.

v3.0.2

What's Changed

• Modernize type annotations by @​AlexWaygood in gristlabs/asttokens#172
• Fix pypy CI by skipping redundant mypy runs on it by @​dsagal in gristlabs/asttokens#173
• Fix IndexError on source mixing lone CR with LF line endings (#105) by @​apoorvdarshan in gristlabs/asttokens#174
• Release modernization, and publish to PyPI from CI via trusted publishing by @​dsagal in gristlabs/asttokens#175

New Contributors

• @​AlexWaygood made their first contribution in gristlabs/asttokens#172
• @​apoorvdarshan made their first contribution in gristlabs/asttokens#174

Full Changelog: gristlabs/asttokens@v3.0.1...v3.0.2

Commits

• f97a6e1 Release modernization, and publish to PyPI from CI via trusted publishing (#175)
• bb3c487 Fix IndexError on source mixing lone CR with LF line endings (#105) (#174)
• d1eed10 Fix pypy CI by skipping redundant mypy runs on it (#173)
• b8834d3 Modernize type annotations (#172)
• bdbf396 Update mypy; add 3.14 to the CI; drop python 3.8 support (#167)
• f859c05 Add tests for astroid v2, v3, and v4 to the CI (#166)
• 84ef059 Adapt asttokens for astroid 4.x (#165)
• 9db9335 Various links improvements (#163)
• 3371ebf Merge pull request #161 from gristlabs/dependabot/pip/docs/requests-2.32.4
• 3a60115 Bump requests from 2.32.2 to 2.32.4 in /docs
• Additional commits viewable in compare view

Updates async-lru from 2.0.4 to 2.3.0

Release notes

Sourced from async-lru's releases.

2.3.0

• Added cache_contains() for read-only key lookup.
• Changed cross-loop cache access to auto-reset and rebind to the current event loop.
• Added AlruCacheLoopResetWarning when an auto-reset happens due to event loop change.
• Forwarded cache_close(wait=...) for bound methods.

2.2.0

• Added a jitter parameter to randomise TTL.
• Raise RuntimeError when cache is used by different loop.

2.1.0

• Fixed cancelling of task when all tasks waiting on it have been cancelled.
• Fixed DeprecationWarning from asyncio.iscoroutinefunction.

2.0.5

• Fixed a memory leak on exceptions and minor performance improvement.

Changelog

Sourced from async-lru's changelog.

2.3.0 (2026-03-18)

• Added cache_contains() for read-only key lookup.
• Changed cross-loop cache access to auto-reset and rebind to the current event loop.
• Added AlruCacheLoopResetWarning when an auto-reset happens due to event loop change.
• Forwarded cache_close(wait=...) for bound methods.

2.2.0 (2026-02-20)

• Added a jitter parameter to randomise TTL.
• Raise RuntimeError when cache is used by different loop.

2.1.0 (2026-01-17)

• Fixed cancelling of task when all tasks waiting on it have been cancelled.
• Fixed DeprecationWarning from asyncio.iscoroutinefunction.

2.0.5 (2025-03-16)

• Fixed a memory leak on exceptions and minor performance improvement.

Commits

• cb9e034 Release v2.3.0 (#748)
• a2aa7b0 build(deps): bump coverage from 7.13.4 to 7.13.5 (#747)
• 63760a4 feat: add cache_contains() for read-only key lookup (#746)
• e2ddf7a Forward cache_close(wait=...) for bound methods (#745)
• 33e1a7c Emit AlruCacheLoopResetWarning on event loop auto-reset (#744)
• fff4d49 feat: Allow alru_cache to automatically clear and rebind to the current eve...
• 7ef00b7 Release v2.2.0 (#741)
• 01db639 fix: avoid binding loop for invalid cache keys (#740)
• c6acbe8 build(deps): bump pytest-codspeed from 4.2.0 to 4.3.0 (#738)
• 8783cf7 build(deps): bump coverage from 7.13.3 to 7.13.4 (#737)
• Additional commits viewable in compare view

Updates attrs from 24.3.0 to 26.1.0

Release notes

Sourced from attrs's releases.

26.1.0

Highlights

The main outward change here only affects people using field transformers, but it should be a nice quality of life improvement!

Full changelog below!

Special Thanks

This release would not be possible without my generous sponsors! Thank you to all of you making sustainable maintenance possible! If you would like to join them, go to https://github.com/sponsors/hynek and check out the sweet perks!

Above and Beyond

Variomedia AG (@variomedia), Tidelift (@tidelift), Kraken Tech (@kraken-tech), Privacy Solutions GmbH (@privacy-solutions), FilePreviews (@filepreviews), Ecosystems (@ecosyste-ms), TestMu AI Open Source Office (Formerly LambdaTest) (@LambdaTest-Inc), Doist (@Doist), Daniel Fortunov (@asqui), and Kevin P. Fleming (@kpfleming).

Maintenance Sustainers

Buttondown (@buttondown), Christopher Dignam (@chdsbd), Magnus Watn (@magnuswatn), David Cramer (@dcramer), Rivo Laks (@rivol), Polar (@polarsource), Mike Fiedler (@miketheman), Duncan Hill (@cricalix), Colin Marquardt (@cmarqu), Pieter Swinkels (@swinkels), Nick Libertini (@