build(deps): bump tomlkit from 0.14.0 to 0.15.1

[dependabot]

Bumps tomlkit from 0.14.0 to 0.15.1.

Release notes

Sourced from tomlkit's releases.

0.15.1

What's Changed

• Fix inline table separator after append by @​cyliu0 in python-poetry/tomlkit#477
• chore(deps): bump idna from 3.7 to 3.15 in /docs by @​dependabot[bot] in python-poetry/tomlkit#481
• chore(deps-dev): bump idna from 3.7 to 3.15 by @​dependabot[bot] in python-poetry/tomlkit#480
• chore(deps): bump urllib3 from 2.5.0 to 2.7.0 in /docs by @​dependabot[bot] in python-poetry/tomlkit#475
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#478
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#484
• Fix duplicated comma when removing a middle inline table element by @​sarathfrancis90 in python-poetry/tomlkit#486
• Add native contains to Container, Table and InlineTable by @​tfoutrein in python-poetry/tomlkit#487
• Make Source index-based instead of materializing a char list by @​tfoutrein in python-poetry/tomlkit#489
• reject surrogate code points in \U unicode escapes by @​netliomax25-code in python-poetry/tomlkit#493
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#496
• Scan character runs in bulk while parsing by @​tfoutrein in python-poetry/tomlkit#490
• Fix doubled comma when inserting into a comma-first array by @​gaoflow in python-poetry/tomlkit#499
• reject tab characters in bare keys by @​netliomax25-code in python-poetry/tomlkit#497
• reject non-hex digits in \u and \U escapes by @​netliomax25-code in python-poetry/tomlkit#501
• Bulk-scan single-line string bodies by @​tfoutrein in python-poetry/tomlkit#491
• Remove the internal TOMLChar wrapper by @​tfoutrein in python-poetry/tomlkit#492
• Fix corrupt output when adding to a dotted key inside an inline table by @​gaoflow in python-poetry/tomlkit#500
• Compare StringType members by identity instead of building a set by @​tfoutrein in python-poetry/tomlkit#502
• Merge super tables in place instead of deep-copying on every merge by @​tfoutrein in python-poetry/tomlkit#503
• Move a value replacing a table out of the table region by @​gaoflow in python-poetry/tomlkit#506
• Restore dumps() delegating to as_string for non-Mapping wrappers by @​gaoflow in python-poetry/tomlkit#508
• Limit parser nesting depth instead of crashing with RecursionError by @​gaoflow in python-poetry/tomlkit#510
• Prefix every line of a multiline comment with # by @​gaoflow in python-poetry/tomlkit#511
• Add a native OutOfOrderTableProxy.contains by @​tfoutrein in python-poetry/tomlkit#515
• Place inline-table separator after the value, not a trailing comment (fix #512) by @​gaoflow in python-poetry/tomlkit#514
• reject a table redefined after its parent table header by @​netliomax25-code in python-poetry/tomlkit#516
• Don't build a discarded error when an array closes right after a value by @​tfoutrein in python-poetry/tomlkit#517
• Validate out-of-order tables incrementally while parsing by @​gaoflow in python-poetry/tomlkit#509
• Return a single key from key() for a single-element list (fixes #430) by @​tienvantranspk-tech in python-poetry/tomlkit#520
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#522
• Speed up unwrap() by resolving keys from the key map instead of items() by @​tfoutrein in python-poetry/tomlkit#521
• Merge AoT fragments when building an out-of-order table proxy by @​gaoflow in python-poetry/tomlkit#507
• Bulk-scan multiline string bodies by @​tfoutrein in python-poetry/tomlkit#518
• reject array-of-tables header missing its second closing bracket by @​netliomax25-code in python-poetry/tomlkit#519
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#541
• Fix ParseError when a sub-table extends an array of tables out of order by @​sarathfrancis90 in python-poetry/tomlkit#498
• Render inline tables in O(n) instead of O(n²) by @​tfoutrein in python-poetry/tomlkit#525
• Fix duplicated prefix and captured sibling when replacing a dotted key with a table by @​Labib-Bin-Salam in python-poetry/tomlkit#526
• Reject tables inserted into inline tables by @​gaoflow in python-poetry/tomlkit#532
• raise on malformed array element instead of dropping it by @​netliomax25-code in python-poetry/tomlkit#527
• fix: reject out-of-order concrete+super table redefinitions at parse time by @​gaoflow in python-poetry/tomlkit#530
• fix: keep newline after dotted inline table by @​gaoflow in python-poetry/tomlkit#533
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in python-poetry/tomlkit#548
• chore(deps): bump soupsieve from 2.5 to 2.8.4 in /docs by @​dependabot[bot] in python-poetry/tomlkit#560
• chore(deps-dev): bump soupsieve from 2.4.1 to 2.8.4 by @​dependabot[bot] in python-poetry/tomlkit#559
• Preserve whitespace when replacing super tables by @​gaoflow in python-poetry/tomlkit#534
• Preserve table display names on self assignment by @​gaoflow in python-poetry/tomlkit#537

... (truncated)

Changelog

Sourced from tomlkit's changelog.

[0.15.1] - 2026-07-17

Changed

• Speed up membership tests (key in ...) on Container, Table and InlineTable with native __contains__ implementations, avoiding the inherited MutableMapping round-trip through __getitem__ (which resolves the value and builds an exception on every absent key). (#483)
• Speed up parsing by making Source index-based: it now tracks an integer position over the input string instead of materializing a list of (index, char) tuples up front, so construction is O(1) and state save/restore no longer copies an iterator. (#489)
• Speed up parsing by scanning character runs in bulk: Source.advance_while/advance_until consume a whole run of whitespace, bare-key or number characters in a single pass over the input string instead of one inc() call per character. (#490)
• Speed up parsing of single-line strings by bulk-appending the run of ordinary characters up to the next delimiter, backslash or control character in one pass, instead of one character at a time. (#491)
• Speed up parsing by removing the internal TOMLChar wrapper: the parser now reads plain str characters from Source and detects end-of-input positionally, avoiding a per-character object construction and method dispatch. (#492)
• Speed up parsing by comparing StringType members by identity (is) instead of building a set on every is_basic/is_literal/is_singleline/is_multiline call, avoiding millions of enum hashes while parsing. (#502)
• Speed up merging super tables by merging in place instead of deep-copying the growing target on every merge, turning the parse of documents with many subtables under a shared super table (e.g. consecutive [a.b.c] / [a.b.d] headers) from O(n²) into O(n). (#503)
• Speed up membership tests (key in ...) on out-of-order tables with a native OutOfOrderTableProxy.__contains__, completing #483 for the last mapping type that still inherited the slow MutableMapping mixin (which resolves the value and builds an exception on every absent key). (#515)
• Speed up parsing documents with many dotted keys or table headers sharing a prefix by validating out-of-order tables incrementally: each new fragment is merged into a cached validation container once, instead of re-merging (and deep-copying) every earlier fragment on each append, turning a super-cubic worst case into linear time (80 shared-prefix dotted keys: ~8 s → ~10 ms). (#479)
• Speed up parsing of arrays that close right after a value (e.g. the files = [...] blocks that dominate lock files): the parser no longer attempts to read a value while sitting on the closing ], which previously built an UnexpectedCharError just to discard it — and constructing that exception eagerly computes a line/column by scanning the whole document, making it O(document size) per such array. (#517)
• Speed up parsing of multiline strings by bulk-appending the run of ordinary characters — across raw line feeds and tabs — up to the next delimiter, backslash, carriage return or control character, instead of one character at a time. This extends to """/''' bodies the single-line fast path added in #491; a \r still stops the scan so \r\n stays validated and byte-for-byte preserved. (#518)
• Speed up unwrap() (converting a parsed document to a plain dict) by resolving each key directly from the container's key map instead of iterating the inherited MutableMapping view, which rebuilt a SingleKey from the bare string for every key just to re-look-up the value. Out-of-order tables still resolve through their proxy, so their validation is unchanged. (#521)
• Speed up rendering (as_string() / dumps()) of inline tables with many keys by precomputing the last-key and last-deleted-element indices in a single pass, instead of rescanning the remaining body on every separator comma — turning an O(n²) render into O(n). (#525)
• Raise on malformed array element instead of dropping it, (#527)

Fixed

• Fix string() dropping a leading newline of a multiline string on round-trip: a value beginning with a newline is now rendered with an extra leading newline (the one the parser trims after the opening delimiter) so it survives re-parsing.
• Fix invalid serialization with a duplicated comma when removing a non-edge element from a parsed inline table. (#486)
• Fix invalid serialization with a duplicated comma when appending or inserting into a comma-first formatted array. (#499)
• Fix ParseError when a sub-table extends the last element of an array of tables after an unrelated table. (#261)
• Fix unparseable serialization when adding a key to a dotted-key table inside an inline table. (#500)
• Fix a table replaced by a plain value being serialized inside the preceding table's body when other tables follow; the value now moves before the first table like other root-level values. (#504)
• Fix assigning a table over a dotted key (e.g. doc["a"] = {...} where a came from a.b = ...): the dotted prefix was duplicated onto the new [a] header, and the header then swallowed any sibling that follows it on round-trip. The replacement now renders as a plain table and, when needed, moves before the inline entries (values and dotted keys) it would otherwise capture. (#513, #524)
• Restore dumps() rendering mapping-like wrappers around a parsed document (e.g. dotty_dict's Dotty) through their delegated as_string, preserving the original table order and layout instead of re-encoding through a plain dict — a 0.15.0 regression. (#482)
• Fix uncontrolled recursion when parsing deeply nested documents: crafted input could crash the process with a RecursionError. Values nested more than 100 levels deep and keys with more than 100 dotted fragments now raise ParseError. (#459)
• Fix comment() producing invalid TOML for a multiline string by prefixing every line with #, not just the first. (#449)
• Fix the separator comma being swallowed by a trailing comment when appending a key to a multiline inline table, leaving the new key without a separator so the result no longer round-trips. (#512)
• Fix a KeyAlreadyPresent error when parsing or accessing an out-of-order table whose array-of-tables elements are split across the table's parts. (#505)
• Out-of-order value-vs-table and dotted-key-vs-table redefinitions are now rejected at parse time instead of being silently accepted or raising only on access. The parser also detects when a non-dotted key is a prefix of an existing dotted key, matching the stdlib tomllib behaviour. (#523)
• Reject tables inserted into inline tables instead of serializing invalid TOML. (#531)
• Fix assigning an array of tables over a dotted key (e.g. doc["a"] = aot(...) where a came from a.b = ...): the new [[a]] header kept the dotted key's inline position and swallowed the following dotted sibling on round-trip. The array of tables now renders past the inline entries it would otherwise capture, mirroring the table fix for #513. (#542)
• Fix a new top-level scalar being captured by a table rendered from a dotted key: appending a scalar after a dotted-key entry (e.g. a.b = 1) whose table had gained a [a.c]-style child placed the scalar inside that table's scope, silently re-nesting it on round-trip. Scalars now move before such an entry, like they do before regular tables. (#543)
• Fix invalid serialization with a duplicated [table] header when adding a key to an out-of-order table whose concrete header is declared after its sub-tables; the new key now lands in the existing concrete part instead of giving the header-less super part a second header. (#545)
• Fix a table's display name (its exact header spelling, including whitespace and quoting) being normalised when the table is assigned onto itself, e.g. doc[k] = doc[k] rewriting [keys .'a'.'c'] to [keys.a.'c']. (#291)
• Fix missing newlines when appending a key after a dotted inline table, including when the original document has no trailing newline. (#533)
• Preserve trailing whitespace when replacing a super table, including assigning it onto itself. (#534)
• Fix str() and repr() of out-of-order table proxies to show their merged values. (#536)
• Reject decimal integer literals that exceed Python's integer-string conversion limit instead of coercing them to infinity. (#538)

[0.15.0] - 2026-05-10

Changed

• Update parser to support TOML spec v1.1.0. (#456)

Commits

• 1bd7e3b chore: release 0.15..1
• 94e62fb Float is not a sequence (#563)
• 495a42e Fix top-level scalar captured by a table rendered from a dotted key (#550)
• 21a4942 reject a comment containing line breaks in Item.comment and add_line (#544)
• 8cd44f5 fix: preserve leading newline of multiline string built with string() (#551)
• 67d3e86 Fix array of tables replacing a dotted key swallowing the next sibling (#542)...
• e23a254 fix: avoid duplicate table header when adding a key to an out-of-order table ...
• 34e51e2 Update CHANGELOG.md to reflect recent fixes and enhancements
• b48c094 reject overlong decimal integer instead of coercing to inf (#538)
• cc05afa Represent out-of-order table proxies with merged values (#536)
• Additional commits viewable in compare view