Release/1.2.5 by sempervent · Pull Request #45 · ORNL/OpenSAMPL

sempervent · 2026-10-20T15:14:45Z

Includes dependabot fixes, update Dockerfiles to use this version of openSAMPL by default, and pins non-CVE versions of upstream packages.

Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 4 to 5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-pages-artifact/releases">actions/upload-pages-artifact's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h1>Changelog</h1> <ul> <li>Update upload-artifact action to version 7 <a href="https://github.com/Tom-van-Woudenberg"><code>@Tom-van-Woudenberg</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/139">#139</a>)</li> <li>feat: add <code>include-hidden-files</code> input <a href="https://github.com/jonchurch"><code>@jonchurch</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/137">#137</a>)</li> </ul> <p>See details of <a href="https://github.com/actions/upload-pages-artifact/compare/v4.0.0...v4.0.1">all code changes</a> since previous release.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-pages-artifact/commit/fc324d3547104276b827a68afc52ff2a11cc49c9"><code>fc324d3</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/139">#139</a> from Tom-van-Woudenberg/patch-1</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/fe9d4b7d84090e1d8d9c53a0236f810d4e00d2c3"><code>fe9d4b7</code></a> Merge branch 'main' into patch-1</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/0ca16172ca884f0a37117fed41734f29784cc980"><code>0ca1617</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/137">#137</a> from jonchurch/include-hidden-files</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/57f0e8492b437b7818227931fef2faa1a379839b"><code>57f0e84</code></a> Update action.yml</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/4a90348b2933470dc78cec55534259872a6d3c0d"><code>4a90348</code></a> v7 --> hash</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/56f665a6f297fa95f8d735b314187fb2d7764569"><code>56f665a</code></a> Update upload-artifact action to version 7</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/f7615f5917213b24245d49ba96693d0f5375a414"><code>f7615f5</code></a> Add <code>include-hidden-files</code> input</li> <li>See full diff in <a href="https://github.com/actions/upload-pages-artifact/compare/v4...v5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-pages-artifact&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pytest-cov](https://github.com/pytest-dev/pytest-cov) from 6.1.1 to 7.1.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst">pytest-cov's changelog</a>.</em></p> <blockquote> <h2>7.1.0 (2026-03-21)</h2> <ul> <li> <p>Fixed total coverage computation to always be consistent, regardless of reporting settings. Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on reporting options. See <code>[#641](pytest-dev/pytest-cov#641) <https://github.com/pytest-dev/pytest-cov/issues/641></code>_.</p> </li> <li> <p>Improve handling of ResourceWarning from sqlite3.</p> <p>The plugin adds warning filter for sqlite3 <code>ResourceWarning</code> unclosed database (since 6.2.0). It checks if there is already existing plugin for this message by comparing filter regular expression. When filter is specified on command line the message is escaped and does not match an expected message. A check for an escaped regular expression is added to handle this case.</p> <p>With this fix one can suppress <code>ResourceWarning</code> from sqlite3 from command line::</p> <p>pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...</p> </li> <li> <p>Various improvements to documentation. Contributed by Art Pelling in <code>[#718](pytest-dev/pytest-cov#718) <https://github.com/pytest-dev/pytest-cov/pull/718></code>_ and "vivodi" in <code>[#738](pytest-dev/pytest-cov#738) <https://github.com/pytest-dev/pytest-cov/pull/738></code><em>. Also closed <code>[#736](pytest-dev/pytest-cov#736) <https://github.com/pytest-dev/pytest-cov/issues/736></code></em>.</p> </li> <li> <p>Fixed some assertions in tests. Contributed by in Markéta Machová in <code>[#722](pytest-dev/pytest-cov#722) <https://github.com/pytest-dev/pytest-cov/pull/722></code>_.</p> </li> <li> <p>Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).</p> </li> </ul> <h2>7.0.0 (2025-09-09)</h2> <ul> <li> <p>Dropped support for subprocesses measurement.</p> <p>It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a <code>.pth</code> file, there was no way to opt-out and it created bad interactions with <code>coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch></code>_ added in <code>7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24></code>_.</p> <p>To migrate to this release you might need to enable the suprocess patch, example for <code>.coveragerc</code>:</p> <p>.. code-block:: ini</p> <p>[run] patch = subprocess</p> <p>This release also requires at least coverage 7.10.6.</p> </li> <li> <p>Switched packaging to have metadata completely in <code>pyproject.toml</code> and use <code>hatchling <https://pypi.org/project/hatchling/></code>_ for building. Contributed by Ofek Lev in <code>[#551](pytest-dev/pytest-cov#551) <https://github.com/pytest-dev/pytest-cov/pull/551></code>_ with some extras in <code>[#716](pytest-dev/pytest-cov#716) <https://github.com/pytest-dev/pytest-cov/pull/716></code>_.</p> </li> <li> <p>Removed some not really necessary testing deps like <code>six</code>.</p> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/66c8a526b1246b5eb8fb1bc218878131bc628622"><code>66c8a52</code></a> Bump version: 7.0.0 → 7.1.0</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/f7076624784332594aa4cb3585d4757d295db15e"><code>f707662</code></a> Make the examples use pypy 3.11.</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/6049a7847872e3139e6c82e93787123df5dc8672"><code>6049a78</code></a> Make context test use the old ctracer (seems the new sysmon tracer behaves di...</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/8ebf20bbbc73478b3f8fd36d30237d9ea083f06b"><code>8ebf20b</code></a> Update changelog.</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/861d30e60d571f97259c6b718b71c819d5dbc3b9"><code>861d30e</code></a> Remove the backup context manager - shouldn't be needed since coverage 5.0, ...</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/fd4c956014035527f0c3c8d7faef3f8cfdadac7f"><code>fd4c956</code></a> Pass the precision on the nulled total (seems that there's some caching goion...</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/78c9c4ecb005faf4962fd86ff7bf9c9cce9554d6"><code>78c9c4e</code></a> Only run the 3.9 on older deps.</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/4849a922e8be725c662a3d9175da571ace6545dc"><code>4849a92</code></a> Punctuation.</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/197c35e2f37031fd1927715307ab6eed7cb3d2b7"><code>197c35e</code></a> Update changelog and hopefully I don't forget to publish release again :))</li> <li><a href="https://github.com/pytest-dev/pytest-cov/commit/14dc1c92d44108384e39803888635fdbfc578b7f"><code>14dc1c9</code></a> Update examples to use 3.11 and make the adhoc layout example look a bit more...</li> <li>Additional commits viewable in <a href="https://github.com/pytest-dev/pytest-cov/compare/v6.1.1...v7.1.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pytest-cov&package-manager=uv&previous-version=6.1.1&new-version=7.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pytest-postgresql](https://github.com/dbfixtures/pytest-postgresql) from 8.0.0 to 9.1.1. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/dbfixtures/pytest-postgresql/blob/main/CHANGES.rst">pytest-postgresql's changelog</a>.</em></p> <blockquote> <h1>pytest-postgresql 9.1.1 (2026-10-04)</h1> <h2>Miscellaneous</h2> <ul> <li>Update actions with zizmor 1.30.0 and migrate to maintained actionlint fork (<code>[#1443](dbfixtures/pytest-postgresql#1443) <https://github.com/dbfixtures/pytest-postgresql/issues/1443></code>__)</li> <li>Adjust shared-automerge permissions (<code>[#1457](dbfixtures/pytest-postgresql#1457) <https://github.com/dbfixtures/pytest-postgresql/issues/1457></code>__)</li> <li>Bump psycopg-binary alongside psycopg and group both packages in Dependabot updates (<code>[#1460](dbfixtures/pytest-postgresql#1460) <https://github.com/dbfixtures/pytest-postgresql/issues/1460></code>__)</li> </ul> <h1>pytest-postgresql 9.1.0 (2026-09-04)</h1> <h2>Features</h2> <ul> <li><code>pg_ctl</code> discovery now finds a Windows PostgreSQL install without <code>--postgresql-exec</code>. The default executable path is empty on Windows, and discovery probes <code>%ProgramFiles%\PostgreSQL\*\bin\pg_ctl.exe</code> (newest version first) and <code>PATH</code> after <code>pg_config --bindir</code>. (<code>[#1399](dbfixtures/pytest-postgresql#1399) <https://github.com/dbfixtures/pytest-postgresql/issues/1399></code>__)</li> </ul> <h2>Miscellaneous</h2> <ul> <li>Migrate tests to be based on <code>actions-reuse</code> new composite action <code>uv-pytest-coverage</code> (<code>[#1424](dbfixtures/pytest-postgresql#1424) <https://github.com/dbfixtures/pytest-postgresql/issues/1424></code>__)</li> </ul> <h1>pytest-postgresql 9.0.0 (2026-08-28)</h1> <h2>Breaking changes</h2> <ul> <li>Load functions passed to proc/noproc fixtures have to accept new <code>autocommit</code> argument. (<code>[#902](dbfixtures/pytest-postgresql#902) <https://github.com/dbfixtures/pytest-postgresql/issues/902></code>__)</li> <li><code>postgresql_noproc</code> has an additional parameter <code>load_autocommit</code> which is grouped together with <code>load</code> making positional arguments filled till <code>depends_on</code> incompatible. (<code>[#902](dbfixtures/pytest-postgresql#902) <https://github.com/dbfixtures/pytest-postgresql/issues/902></code>__)</li> <li>Arguments after <code>dbname</code> in <code>postgresql_noproc</code> are now keyword-only. Update callers that pass <code>options</code>, <code>load</code>, <code>load_autocommit</code> or <code>depends_on</code> positionally. (<code>[#1387](dbfixtures/pytest-postgresql#1387) <https://github.com/dbfixtures/pytest-postgresql/issues/1387></code>__)</li> <li>Arguments after <code>dbname</code> in <code>postgresql_proc</code> are now keyword-only. Update callers that pass <code>options</code>, <code>startparams</code>, <code>unixsocketdir</code>, <code>postgres_options</code>, <code>load</code> or <code>load_autocommit</code> positionally. (<code>[#1387](dbfixtures/pytest-postgresql#1387) <https://github.com/dbfixtures/pytest-postgresql/issues/1387></code>__)</li> <li>Arguments after <code>dbname</code> in <code>PostgreSQLExecutor</code>. Update callers that pass +<code>shell</code>, <code>timeout</code>, <code>sleep</code>, <code>user</code>, <code>password</code>, +<code>options</code>, or <code>postgres_options</code> positionally. (<code>[#1387](dbfixtures/pytest-postgresql#1387) <https://github.com/dbfixtures/pytest-postgresql/issues/1387></code>__)</li> </ul> <h2>Deprecations</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/453350b48803a25d6a70d1dd8f6c2f0ee723ec19"><code>453350b</code></a> Release 9.1.1</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/f0d11cb056ed51a475a1ff848b0ae7f15c88c55b"><code>f0d11cb</code></a> Merge pull request <a href="https://redirect.github.com/dbfixtures/pytest-postgresql/issues/1462">#1462</a> from dbfixtures/pre-commit-ci-update-config</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/44f989ead84d59792218351a11c10994a5cc1603"><code>44f989e</code></a> [pre-commit.ci] pre-commit autoupdate</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/26d4fcb08f97b141d0501a9a370e904380e070e0"><code>26d4fcb</code></a> Merge pull request <a href="https://redirect.github.com/dbfixtures/pytest-postgresql/issues/1460">#1460</a> from dbfixtures/dependabot/uv/psycopg-3.3.6</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/963b007df7cd647c3b7cc3d43697713c526708e6"><code>963b007</code></a> Bump psycopg-binary and dependabot group</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/904693fbd533f67f55b25349a9f1a796806a8fed"><code>904693f</code></a> Merge pull request <a href="https://redirect.github.com/dbfixtures/pytest-postgresql/issues/1461">#1461</a> from dbfixtures/dependabot/github_actions/fizyk-acti...</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/8fd68364ec8c7552e018621783bd298df701045d"><code>8fd6836</code></a> Bump the fizyk-actions-reuse group across 1 directory with 10 updates</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/364ae42cd4708619112441c66116e428b5f31991"><code>364ae42</code></a> Bump psycopg from 3.3.5 to 3.3.6</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/8c6fbec33b075b5d954576c5d47f9ae724bab491"><code>8c6fbec</code></a> Merge pull request <a href="https://redirect.github.com/dbfixtures/pytest-postgresql/issues/1459">#1459</a> from dbfixtures/dependabot/github_actions/codecov/co...</li> <li><a href="https://github.com/dbfixtures/pytest-postgresql/commit/259c1c2aac72bb56cf0a757b6b5a1818be6d5655"><code>259c1c2</code></a> Bump codecov/codecov-action from 7.1.0 to 7.1.1</li> <li>Additional commits viewable in <a href="https://github.com/dbfixtures/pytest-postgresql/compare/v8.0.0...v9.1.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pytest-postgresql&package-manager=uv&previous-version=8.0.0&new-version=9.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pandas](https://github.com/pandas-dev/pandas) from 2.2.3 to 2.3.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pandas-dev/pandas/releases">pandas's releases</a>.</em></p> <blockquote> <h2>Pandas 2.3.3</h2> <p>We are pleased to announce the release of pandas 2.3.3. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.</p> <p>See the <a href="https://pandas.pydata.org/pandas-docs/version/2.3/whatsnew/v2.3.3.html">full whatsnew</a> for a list of all the changes. Pandas 2.3.3 supports Python 3.9 and higher, and is the first release to support Python 3.14.</p> <p>The release will be available on the conda-forge channel:</p> <pre><code>conda install pandas --channel conda-forge </code></pre> <p>Or via PyPI:</p> <pre><code>python3 -m pip install --upgrade pandas </code></pre> <p>Please report any issues with the release on the <a href="https://github.com/pandas-dev/pandas/issues">pandas issue tracker</a>.</p> <p>Thanks to all the contributors who made this release possible.</p> <h2>Pandas 2.3.2</h2> <p>We are pleased to announce the release of pandas 2.3.2. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.</p> <p>See the <a href="https://pandas.pydata.org/pandas-docs/version/2.3/whatsnew/v2.3.2.html">full whatsnew</a> for a list of all the changes. Pandas 2.3.2 supports Python 3.9 and higher.</p> <p>The release will be available on the conda-forge channel:</p> <pre><code>conda install pandas --channel conda-forge </code></pre> <p>Or via PyPI:</p> <pre><code>python3 -m pip install --upgrade pandas </code></pre> <p>Please report any issues with the release on the <a href="https://github.com/pandas-dev/pandas/issues">pandas issue tracker</a>.</p> <p>Thanks to all the contributors who made this release possible.</p> <h2>Pandas 2.3.1</h2> <p>We are pleased to announce the release of pandas 2.3.1. This release includes some improvements and fixes to the future string data type (preview feature for the upcoming pandas 3.0). We recommend that all users upgrade to this version.</p> <p>See the <a href="https://pandas.pydata.org/pandas-docs/version/2.3.1/whatsnew/v2.3.1.html">full whatsnew</a> for a list of all the changes. Pandas 2.3.1 supports Python 3.9 and higher.</p> <p>The release will be available on the conda-forge channel:</p> <pre><code>conda install pandas --channel conda-forge </code></pre> <p>Or via PyPI:</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pandas-dev/pandas/commit/9c8bc3e55188c8aff37207a74f1dd144980b8874"><code>9c8bc3e</code></a> RLS: 2.3.3</li> <li><a href="https://github.com/pandas-dev/pandas/commit/6aa788a00bda9b0f004302076dad94df3edeafc7"><code>6aa788a</code></a> [backport 2.3.x] DOC: prepare 2.3.3 whatsnew notes for release (<a href="https://redirect.github.com/pandas-dev/pandas/issues/62499">#62499</a>) (<a href="https://redirect.github.com/pandas-dev/pandas/issues/62508">#62508</a>)</li> <li><a href="https://github.com/pandas-dev/pandas/commit/b64f0df403d11ac733d9f460f89a5e99c8044ed0"><code>b64f0df</code></a> [backport 2.3.x] BUG: avoid validation error for ufunc with string[python] ar...</li> <li><a href="https://github.com/pandas-dev/pandas/commit/058eb2b0edfc408dae9966ef1f03372f2a3ff04c"><code>058eb2b</code></a> [backport 2.3.x] BUG: String[pyarrow] comparison with mixed object (<a href="https://redirect.github.com/pandas-dev/pandas/issues/62424">#62424</a>) (...</li> <li><a href="https://github.com/pandas-dev/pandas/commit/2ca088daef6a9d9333fea8aedffc7e50d28dfdee"><code>2ca088d</code></a> [backport 2.3.x] DEPR: remove the Period resampling deprecation (<a href="https://redirect.github.com/pandas-dev/pandas/issues/62480">#62480</a>) (<a href="https://redirect.github.com/pandas-dev/pandas/issues/62">#62</a>...</li> <li><a href="https://github.com/pandas-dev/pandas/commit/92bf98f623572ed053d48be5818c8503f1b61888"><code>92bf98f</code></a> [backport 2.3.x] BUG: fix .str.isdigit to honor unicode superscript for older...</li> <li><a href="https://github.com/pandas-dev/pandas/commit/e57c7d6a2247316188fba0ba2a0db3c11028d75c"><code>e57c7d6</code></a> Backport PR <a href="https://redirect.github.com/pandas-dev/pandas/issues/62452">#62452</a> on branch 2.3.x (TST: Adjust tests for numexpr 2.13) (<a href="https://redirect.github.com/pandas-dev/pandas/issues/62454">#62454</a>)</li> <li><a href="https://github.com/pandas-dev/pandas/commit/e0fe9a03c90e560c34a3bbbdd1735a8b64f7b281"><code>e0fe9a0</code></a> Backport to 2.3.x: REGR: from_records not initializing subclasses properly (#...</li> <li><a href="https://github.com/pandas-dev/pandas/commit/23a1085e641c8e3a5b500e319c5973e4160b9236"><code>23a1085</code></a> BUG: improve future warning for boolean operations with missaligned indexes (...</li> <li><a href="https://github.com/pandas-dev/pandas/commit/61136969fb18b438b6660bd5d485d0236dbf4a71"><code>6113696</code></a> Backport PR <a href="https://redirect.github.com/pandas-dev/pandas/issues/62396">#62396</a> on branch 2.3.x (PKG/DOC: indicate Python 3.14 support in ...</li> <li>Additional commits viewable in <a href="https://github.com/pandas-dev/pandas/compare/v2.2.3...v2.3.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pandas&package-manager=uv&previous-version=2.2.3&new-version=2.3.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps [pytz](https://github.com/stub42/pytz) from 2024.2 to 2026.5. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stub42/pytz/commit/21be17fe9b5334f51ac145d08dfc089b3c40b96f"><code>21be17f</code></a> Add Python 3.14 to test suite</li> <li><a href="https://github.com/stub42/pytz/commit/fddd01c11ddbf65dea944e7a2fdb523327df3275"><code>fddd01c</code></a> Bump version numbers to 2026.5 (2026e)</li> <li><a href="https://github.com/stub42/pytz/commit/8f05ab3e7f1176950c9490692ffec74db5dd2b85"><code>8f05ab3</code></a> IANA 2026e</li> <li><a href="https://github.com/stub42/pytz/commit/d79605f8e4d65ab57b8cdf7eca535d3b4f4685e5"><code>d79605f</code></a> Squashed 'tz/' changes from d633fe7ed3..db07415c7d</li> <li><a href="https://github.com/stub42/pytz/commit/1ac6e51578e9ed08303cd13fe0f2652f3d1f1314"><code>1ac6e51</code></a> Bump version numbers to 2026.4 (2026d)</li> <li><a href="https://github.com/stub42/pytz/commit/167279838c9bb07129c11ae73b89004e308d6e46"><code>1672798</code></a> IANA 2026d</li> <li><a href="https://github.com/stub42/pytz/commit/0b5995b7d3722167c2ad96b7510af1f331e07e19"><code>0b5995b</code></a> Squashed 'tz/' changes from 71f28b9ab3..bac9223f4b</li> <li><a href="https://github.com/stub42/pytz/commit/e96461bcc219da9d07865a358e6e0801ff76c4eb"><code>e96461b</code></a> Make deprecation notice louder</li> <li><a href="https://github.com/stub42/pytz/commit/3c7af5862767eb21496f0be9e50a6ec04ac9a43d"><code>3c7af58</code></a> Merge branch 'nicoleman0-fix/timezone-non-string-input' into 2026d</li> <li><a href="https://github.com/stub42/pytz/commit/234a2472de4648e3a877ff2eed56c1e03090d692"><code>234a247</code></a> Merge branch 'nicoleman0-fix/fixedoffset-basetzinfo' into 2026d</li> <li>Additional commits viewable in <a href="https://github.com/stub42/pytz/compare/release_2024.2...release_2026.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pytz&package-manager=uv&previous-version=2024.2&new-version=2026.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Bumps the python-minor-and-patch group with 18 updates: | Package | From | To | | --- | --- | --- | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.9.1` | `2.15.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.41` | `2.0.54` | | [click](https://github.com/pallets/click) | `8.2.1` | `8.5.0` | | [tqdm](https://github.com/tqdm/tqdm) | `4.67.1` | `4.70.1` | | [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` | | [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.13` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.4` | | [tabulate](https://github.com/astanin/python-tabulate) | `0.9.0` | `0.10.0` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.18.4` | `1.20.0` | | [fastapi](https://github.com/fastapi/fastapi) | `0.139.0` | `0.143.3` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.45.0` | `0.54.0` | | [prometheus-client](https://github.com/prometheus/client_python) | `0.25.0` | `0.26.0` | | [anyio](https://github.com/agronholm/anyio) | `4.14.2` | `4.15.1` | | [ty](https://github.com/astral-sh/ty) | `0.0.1a7` | `0.0.89` | | [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.14.1` | `3.16.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.11.12` | `0.17.1` | | [mkdocs-gen-files](https://github.com/oprypin/mkdocs-gen-files) | `0.5.0` | `0.6.1` | | [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `12.2` | `12.3` | Updates `pydantic-settings` from 2.9.1 to 2.15.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pydantic/pydantic-settings/releases">pydantic-settings's releases</a>.</em></p> <blockquote> <h2>v2.15.0</h2> <h2>Highlights</h2> <h3>Behavior changes</h3> <ul> <li><strong><code>case_sensitive</code> now applies to init kwargs and config-file sources</strong> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/900">#900</a>). <code>InitSettingsSource</code> and the JSON/TOML/YAML config sources previously ignored <code>case_sensitive</code>. Since it defaults to <code>False</code>, <strong>case-insensitive matching is now the default</strong> for these sources — e.g. <code>Settings(TeSt=...)</code> now populates a <code>test</code> field where it previously did not. Nested keys are still matched case-sensitively.</li> <li><strong>Fields with unresolved forward references now emit a warning</strong> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/901">#901</a>). Settings sources can silently fail to resolve such fields; they now raise <code>IncompleteFieldDefinitionWarning</code> telling you to call <code>model_rebuild()</code>. If you have <code>filterwarnings = error</code> configured, this may surface as a new failure.</li> <li><strong>Non-JSON env values for strict fields now raise <code>ValidationError</code></strong> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/926">#926</a>) instead of a less specific error.</li> </ul> <h3>New features</h3> <ul> <li><strong>Show environment variable names in CLI help</strong> via <code>cli_show_env_vars=True</code> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/860">#860</a>), so generated <code>--help</code> output doubles as configuration documentation.</li> <li><strong><code>PYDANTIC_SETTINGS_DEBUG</code> for debugging settings resolution</strong> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/906">#906</a>, <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/913">#913</a>). Set it to a truthy value with <code>DEBUG</code> logging enabled to see each source's contribution in priority order, which source won for each value, and which <code>env_file</code>/secret files were probed, loaded, or skipped — the long-standing "why isn't my <code>.env</code> being picked up?" question.</li> <li><strong><code>toml_table_header</code> for regular TOML files</strong> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/882">#882</a>, <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/886">#886</a>, <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/887">#887</a>), letting you root settings at a nested table in any TOML file, not just <code>pyproject.toml</code>.</li> <li><strong><code>Traversable</code> support for JSON/TOML/YAML file sources</strong> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/902">#902</a>), so you can load config packaged inside a distribution — including files inside a zip or wheel — via <code>importlib.resources.files(...)</code> without casting to <code>Path</code>.</li> <li><strong>GCP: <code>project_id</code> can come from an earlier settings source</strong> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/878">#878</a>), rather than only from the constructor or <code>GOOGLE_CLOUD_PROJECT</code>.</li> </ul> <h3>Bug fixes</h3> <ul> <li>Fix env vars not loading on Windows with <code>case_sensitive=True</code> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/894">#894</a>). Windows upper-cases <code>os.environ</code> keys, so fields raised <code>Field required</code> instead of picking up their values.</li> <li>Read secret files as UTF-8 instead of the platform locale encoding (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/917">#917</a>). On Windows code pages such as cp1252 this silently corrupted non-ASCII secrets.</li> <li>Fix <code>AliasPath</code> on nested model fields not JSON-decoding env values (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/898">#898</a>).</li> <li>Fix case-insensitive matching for <strong>optional</strong> nested models (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/905">#905</a>).</li> <li>Fix dotenv extras being wrongly claimed by a complex field sharing a name prefix (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/912">#912</a>) — e.g. <code>dbx_token</code> being swallowed by a <code>db: dict</code> field.</li> <li>Fix <code>nested_model_default_partial_update=True</code> corrupting discriminated unions (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/876">#876</a>).</li> <li>Fix <code>Secret</code> subclasses crashing when loaded from the environment (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/920">#920</a>).</li> <li>Fix enum names not parsing through nested annotations such as <code>Optional[Annotated[MyEnum, ...]]</code> with <code>env_parse_enums=True</code> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/910">#910</a>).</li> <li>An empty <code>yaml_config_section</code> now falls back to defaults instead of raising <code>AttributeError: 'NoneType' object has no attribute 'keys'</code> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/914">#914</a>).</li> <li><code>NestedSecretsSettingsSource</code> no longer follows symlinks pointing outside <code>secrets_dir</code> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/889">#889</a>).</li> <li>GCP: skip the <code>list_secrets</code> call when <code>case_sensitive=True</code> (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/862">#862</a>), lowering the required IAM permissions to just <code>roles/secretmanager.secretAccessor</code>.</li> <li>AWS: <code>types-boto3[secretsmanager]</code> is no longer required at runtime (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/880">#880</a>).</li> </ul> <h3>Documentation</h3> <ul> <li>Document JSON parsing of complex env values, plus a comma-separated-values recipe (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/919">#919</a>).</li> <li>Recommend an async settings loading pattern (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/908">#908</a>).</li> <li>Clarify behavior when an unprefixed value is present in a dotenv file (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/895">#895</a>).</li> <li>Clarify environment variable helper descriptions (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/867">#867</a>) and fix assorted typos (<a href="https://redirect.github.com/pydantic/pydantic-settings/pull/904">#904</a>).</li> </ul>  <h2>What's Changed</h2> <ul> <li>Update documentation link for Pydantic settings by <a href="https://github.com/hramezani"><code>@hramezani</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/863">pydantic/pydantic-settings#863</a></li> <li>Bump the python-packages group with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/865">pydantic/pydantic-settings#865</a></li> <li>docs: clarify environment variable helper descriptions by <a href="https://github.com/vip892766gma"><code>@vip892766gma</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/867">pydantic/pydantic-settings#867</a></li> <li>Bump the python-packages group with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/870">pydantic/pydantic-settings#870</a></li> <li>Bump the python-packages group with 4 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/875">pydantic/pydantic-settings#875</a></li> <li>Skip list_secrets call when case_sensitive=True by <a href="https://github.com/ecerulm"><code>@ecerulm</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/862">pydantic/pydantic-settings#862</a></li> <li>GoogleSecretManagerSettingsSource: read project_id from previous sources by <a href="https://github.com/ecerulm"><code>@ecerulm</code></a> in <a href="https://redirect.github.com/pydantic/pydantic-settings/pull/878">pydantic/pydantic-settings#878</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pydantic/pydantic-settings/commit/f725ca187bee4212e9ef799eefa3cb25be788462"><code>f725ca1</code></a> Prepare release 2.15.0 (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/930">#930</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/28f35c25fac5d61210d532c31a300d49c0b684a4"><code>28f35c2</code></a> Bump the python-packages group with 4 updates (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/929">#929</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/9056db049560897229f2603493753bae27b6479f"><code>9056db0</code></a> test: move function-local imports to the top of test modules (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/927">#927</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/f077e3ab3d9492838c7ef9275a88c95134688095"><code>f077e3a</code></a> fix: raise ValidationError for non-JSON env values on strict fields (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/926">#926</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/ae25d703c458b57f5a9a425f6ec9a28ad868f980"><code>ae25d70</code></a> fix: treat Secret subclasses as non-complex fields (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/716">#716</a>) (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/920">#920</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/798dcea2a23b08a3e9b37994014e036224f6dd18"><code>798dcea</code></a> Bump the python-packages group with 4 updates (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/924">#924</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/a190041d353bda2d432ea1908de4c499ae89ee0a"><code>a190041</code></a> Bump the github-actions group with 4 updates (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/925">#925</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/5d9333282b5c85d65a457c45e4476369b9949726"><code>5d93332</code></a> Bump the python-packages group with 4 updates (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/921">#921</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/d2fdeda91157140d2ff0c05404f32a9b1218115a"><code>d2fdeda</code></a> fix: read secret files as UTF-8 instead of the locale encoding (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/917">#917</a>)</li> <li><a href="https://github.com/pydantic/pydantic-settings/commit/2256a4e60f83f2da81e7654252562fc4841aa5d4"><code>2256a4e</code></a> Bump the python-packages group with 3 updates (<a href="https://redirect.github.com/pydantic/pydantic-settings/issues/915">#915</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pydantic/pydantic-settings/compare/v2.9.1...v2.15.0">compare view</a></li> </ul> </details> <br /> Updates `sqlalchemy` from 2.0.41 to 2.0.54 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sqlalchemy/sqlalchemy/releases">sqlalchemy's releases</a>.</em></p> <blockquote> <h1>2.0.54</h1> <p>Released: September 15, 2026</p> <h2>platform</h2> <ul> <li> <p><strong>[platform] [change]</strong> Binary wheels are no longer built for Python 3.7. PyPI now rejects wheel files whose filename does not begin with the normalized project name, and the packaging tools that can be installed on Python 3.7 do not produce such a filename. As a result, SQLAlchemy 2.0.44 was the last release to publish Python 3.7 wheels to PyPI, and releases 2.0.45 and later have been available on Python 3.7 only as a source distribution; the wheel builds for Python 3.7 are now removed. Python 3.7 remains supported by the 2.0 series.</p> </li> <li> <p><strong>[platform] [bug]</strong> Fixed issue where the Cython extensions were compiled without the <code>freethreading_compatible</code> directive, so that they did not declare themselves as safe to run without the GIL. On a free-threaded Python interpreter such as Python 3.13t or 3.14t, importing SQLAlchemy would cause the interpreter to re-enable the GIL, emitting a <code>RuntimeWarning</code>. The directive is now set when building for Python 3.13 and above, and a test has been added which confirms that importing SQLAlchemy on a free-threaded build does not enable the GIL.</p> <p>References: <a href="https://www.sqlalchemy.org/trac/ticket/13592">#13592</a></p> </li> </ul> <h1>2.0.53</h1> <p>Released: September 14, 2026</p> <h2>orm</h2> <ul> <li> <p><strong>[orm] [bug]</strong> Fixed issue where an expression passed to <code>_orm.with_expression()</code> that embedded a <code>_sql.select()</code>, such as a correlated <code>_sql.exists()</code>, would fail to populate the attribute correctly on the second and subsequent executions of an otherwise identical statement, when the <code>_orm.query_expression()</code> attribute was loaded by a relationship loader that emits a second query, i.e. <code>_orm.selectinload()</code>, <code>_orm.lazyload()</code> or <code>_orm.immediateload()</code>.</p> <p>References: <a href="https://www.sqlalchemy.org/trac/ticket/13560">#13560</a></p> </li> <li> <p><strong>[orm] [bug]</strong> Fixed memory issue where mapped classes, along with their <code>Table</code> and <code>_orm.Mapper</code> objects, would not be garbage collected after the <code>_orm.registry</code> in which they were mapped had been disposed and dereferenced. The issue would occur for mappings that made use of <code>_orm.relationship()</code> together with constructs such as an</p> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/sqlalchemy/sqlalchemy/commits">compare view</a></li> </ul> </details> <br /> Updates `click` from 8.2.1 to 8.5.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/pallets/click/releases">click's releases</a>.</em></p> <blockquote> <h2>8.5.0</h2> <p>This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.</p> <p>We encourage everyone to upgrade. You can read more about our <a href="https://palletsprojects.com/versions">Version Support Policy</a> on our website.</p> <p>PyPI: <a href="https://pypi.org/project/click/8.5.0/">https://pypi.org/project/click/8.5.0/</a> Changes: <a href="https://click.palletsprojects.com/page/changes/#version-8-5-0">https://click.palletsprojects.com/page/changes/#version-8-5-0</a> Milestone <a href="https://github.com/pallets/click/milestone/33">https://github.com/pallets/click/milestone/33</a></p> <ul> <li>Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing <code>bash</code>, <code>zsh</code>, and <code>fish</code> completers. Use <code>_FOO_BAR_COMPLETE=powershell_source foo-bar</code> to generate the completion script. <a href="https://redirect.github.com/pallets/click/issues/2672">#2672</a> <a href="https://redirect.github.com/pallets/click/issues/3637">#3637</a></li> <li>Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. <a href="https://redirect.github.com/pallets/click/issues/2986">#2986</a> <a href="https://redirect.github.com/pallets/click/issues/3505">#3505</a></li> <li>{class}<code>Argument</code> accepts a <code>help</code> parameter, and help output includes a <code>Positional arguments</code> section when argument help is available. <a href="https://redirect.github.com/pallets/click/issues/2983">#2983</a> <a href="https://redirect.github.com/pallets/click/issues/3473">#3473</a></li> <li><code>confirm()</code> and <code>prompt()</code> strip ANSI color and style codes from the prompt when the output stream does not support them, matching <code>echo()</code>. This stripping was lost in <code>8.4.0</code> when <a href="https://redirect.github.com/pallets/click/issues/2969">#2969</a> began writing the prompt with <code>input()</code> directly. <a href="https://redirect.github.com/pallets/click/issues/3572">#3572</a> <a href="https://redirect.github.com/pallets/click/issues/3653">#3653</a></li> <li>{class}<code>Path</code> with <code>allow_dash=True</code> no longer triggers a <code>BytesWarning</code>, an error under <code>python -bb</code>, when checking a value against the <code>-</code> convention. <a href="https://redirect.github.com/pallets/click/issues/2877">#2877</a> <a href="https://redirect.github.com/pallets/click/issues/3642">#3642</a></li> <li>Add {func}<code>custom_version_option</code>, a <code>--version</code> option whose output is produced by a callback, covering cases {func}<code>version_option</code> intentionally does not. The feature set of {func}<code>version_option</code> is now frozen; see [discussion <a href="https://redirect.github.com/pallets/click/issues/3527">#3527</a>](<a href="https://github.com/pallets/click/discussions/3527">https://github.com/pallets/click/discussions/3527</a>). <a href="https://redirect.github.com/pallets/click/issues/3581">#3581</a></li> <li><code>style()</code> and <code>secho()</code> no longer silently drop the 256-color index <code>0</code> (black) passed as <code>fg</code> or <code>bg</code>, and now validate color arguments. Invalid colors raise a <code>ValueError</code> instead of a <code>TypeError</code>. <a href="https://redirect.github.com/pallets/click/issues/3677">#3677</a></li> <li>The automatic help option stores its value under the reserved name <code>_click_default_help</code> instead of <code>help</code>, so a parameter named <code>help</code> no longer breaks parsing. The new name is visible in {meth}<code>Command.to_info_dict</code> output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). <a href="https://redirect.github.com/pallets/click/issues/2819">#2819</a> <a href="https://redirect.github.com/pallets/click/issues/3678">#3678</a></li> <li><code>unstyle</code> and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. <a href="https://redirect.github.com/pallets/click/issues/3681">#3681</a></li> <li>Streamline <code>Option</code> flag handling: the flag-kind, type, lazy-default and validation steps in <code>Option.__init__</code> move into focused helpers, and <code>flag_value</code> and <code>default</code> keep their unset sentinel at construction (resolved lazily on read) so <code>is UNSET</code> reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}<code>Parameter.to_info_dict</code> now resolves <code>default=True</code> on a feature switch to its <code>flag_value</code>, matching what the function receives at call</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/pallets/click/blob/main/CHANGES.md">click's changelog</a>.</em></p> <blockquote> <h2>Version 8.5.0</h2> <p>Released 2026-08-24</p> <ul> <li>Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing <code>bash</code>, <code>zsh</code>, and <code>fish</code> completers. Use <code>_FOO_BAR_COMPLETE=powershell_source foo-bar</code> to generate the completion script. {issue}<code>2672</code> {pr}<code>3637</code></li> <li>Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}<code>2986</code> {pr}<code>3505</code></li> <li>{class}<code>Argument</code> accepts a <code>help</code> parameter, and help output includes a <code>Positional arguments</code> section when argument help is available. {issue}<code>2983</code> {pr}<code>3473</code></li> <li><code>confirm()</code> and <code>prompt()</code> strip ANSI color and style codes from the prompt when the output stream does not support them, matching <code>echo()</code>. This stripping was lost in <code>8.4.0</code> when {pr}<code>2969</code> began writing the prompt with <code>input()</code> directly. {issue}<code>3572</code> {pr}<code>3653</code></li> <li>Fix test failures when using pytest >= 9.1. {pr}<code>3656</code></li> <li>{class}<code>Path</code> with <code>allow_dash=True</code> no longer triggers a <code>BytesWarning</code>, an error under <code>python -bb</code>, when checking a value against the <code>-</code> convention. {issue}<code>2877</code> {pr}<code>3642</code></li> <li>Add {func}<code>custom_version_option</code>, a <code>--version</code> option whose output is produced by a callback, covering cases {func}<code>version_option</code> intentionally does not. The feature set of {func}<code>version_option</code> is now frozen; see [discussion <a href="https://redirect.github.com/pallets/click/issues/3527">#3527</a>](<a href="https://github.com/pallets/click/discussions/3527">https://github.com/pallets/click/discussions/3527</a>). {pr}<code>3581</code></li> <li><code>style()</code> and <code>secho()</code> no longer silently drop the 256-color index <code>0</code> (black) passed as <code>fg</code> or <code>bg</code>, and now validate color arguments. Invalid colors raise a <code>ValueError</code> instead of a <code>TypeError</code>. {pr}<code>3677</code></li> <li>The automatic help option stores its value under the reserved name <code>_click_default_help</code> instead of <code>help</code>, so a parameter named <code>help</code> no longer breaks parsing. The new name is visible in {meth}<code>Command.to_info_dict</code> output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}<code>2819</code> {pr}<code>3678</code></li> <li><code>unstyle</code> and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}<code>3681</code></li> <li>Streamline <code>Option</code> flag handling: the flag-kind, type, lazy-default and validation steps in <code>Option.__init__</code> move into focused helpers, and <code>flag_value</code> and <code>default</code> keep their unset sentinel at construction (resolved lazily on read) so <code>is UNSET</code> reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}<code>Parameter.to_info_dict</code> now resolves <code>default=True</code> on a feature switch to its <code>flag_value</code>, matching what the function receives at call time. {pr}<code>3641</code></li> <li>{func}<code>get_binary_stream</code> and {func}<code>get_text_stream</code> are deprecated and will be removed in Click 9.0. {issue}<code>3481</code> {pr}<code>3695</code></li> <li>The following <code>click.utils</code> names were never intentionally public and are now private (<code>_</code>-prefixed). The old names remain available with a <code>DeprecationWarning</code> until Click 9.0: <code>LazyFile</code>, <code>KeepOpenFile</code>,</li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/pallets/click/commit/8b19813f2bfca99f1018a587a8cf54fc959f2e5d"><code>8b19813</code></a> Release version 8.5.0</li> <li><a href="https://github.com/pallets/click/commit/2c8cd3ac958a7eb316d67f2d316c27086c4c0369"><code>2c8cd3a</code></a> Add FAQ entry about <code>UnicodeEncodeError</code> on Windows (<a href="https://redirect.github.com/pallets/click/issues/3778">#3778</a>)</li> <li><a href="https://github.com/pallets/click/commit/131c86aadddfa5cb6dca8339c9d6294c4eacb8ac"><code>131c86a</code></a> Add FAQ entry about <code>UnicodeEncodeError</code> on Windows</li> <li><a href="https://github.com/pallets/click/commit/e1fd5946ab26aaf372009eaff1acf947140b40fb"><code>e1fd594</code></a> Add support of <code>pathlib.Path</code> to <code>edit</code> (<a href="https://redirect.github.com/pallets/click/issues/3781">#3781</a>)</li> <li><a href="https://github.com/pallets/click/commit/a1d87858abd77fa8e3ffc204670ccd75b96c4781"><code>a1d8785</code></a> Add support of <code>pathlib.Path</code> to <code>edit</code></li> <li><a href="https://github.com/pallets/click/commit/2103e157683c5e4cadc8ee1838df526a54bde9a4"><code>2103e15</code></a> Forward all user's parameters set in <code>PAGER</code> and improve flag detection (<a href="https://redirect.github.com/pallets/click/issues/3777">#3777</a>)</li> <li><a href="https://github.com/pallets/click/commit/a6256bfb5971d5e58585fe7b6c656134e1ade5a4"><code>a6256bf</code></a> Forwards all user's parameters set in <code>PAGER</code></li> <li><a href="https://github.com/pallets/click/commit/61b69e967e525bd502f5bf42def4d551e761fe0e"><code>61b69e9</code></a> Resolve the pager command once, in <code>_pager_contextmanager</code> (<a href="https://redirect.github.com/pallets/click/issues/3776">#3776</a>)</li> <li><a href="https://github.com/pallets/click/commit/9835b0f7612d1b1ea180a975fd6d24cf16791ba8"><code>9835b0f</code></a> Resolve the pager command once, in <code>_pager_contextmanager</code></li> <li><a href="https://github.com/pallets/click/commit/f36d58bbd7f188178de2d4fe1d0292c510375ca7"><code>f36d58b</code></a> Refactor pager stream handling (<a href="https://redirect.github.com/pallets/click/issues/3767">#3767</a>)</li> <li>Additional commits viewable in <a href="https://github.com/pallets/click/compare/8.2.1...8.5.0">compare view</a></li> </ul> </details> <br /> Updates `tqdm` from 4.67.1 to 4.70.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tqdm/tqdm/releases">tqdm's releases</a>.</em></p> <blockquote> <h2>tqdm v4.70.1 stable</h2> <ul> <li><code>contrib.concurrent</code>: fix no-len iterables (<a href="https://redirect.github.com/tqdm/tqdm/issues/1830">#1830</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1828">#1828</a>)</li> <li>tests: major overhaul (<a href="https://redirect.github.com/tqdm/tqdm/issues/1819">#1819</a>)</li> <li>update AI policy in PR template</li> <li>misc lint & tidy</li> <li>CI: bump workflow actions & pre-commit hooks</li> </ul> <h2>tqdm v4.70.0 stable</h2> <ul> <li><code>contrib.concurrent</code>: major improvements <ul> <li>support <code>process_map(mp_context, max_tasks_per_child)</code>, <code>thread_map(thread_name_prefix)</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1265">#1265</a>)</li> <li>fix <code>total</code> based on shortest iterable length (<a href="https://redirect.github.com/tqdm/tqdm/issues/1473">#1473</a>)</li> <li>use default <code>max_workers</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1543">#1543</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1530">#1530</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/1518">#1518</a>)</li> <li>support <code>timeout</code>, <code>buffersize</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1576">#1576</a>)</li> <li>improve ETA (<a href="https://redirect.github.com/tqdm/tqdm/issues/1708">#1708</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1161">#1161</a>)</li> <li>update <code>as_completed</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1709">#1709</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1565">#1565</a>)</li> <li>add <code>tqdm.concurrent.intepreter_map</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1777">#1777</a>)</li> </ul> </li> <li><code>asyncio</code>: support iterables with only <code>__aiter__</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1714">#1714</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1686">#1686</a>)</li> <li>support <code>reset(float("inf"))</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1783">#1783</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1781">#1781</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/651">#651</a>)</li> <li>framework: test & reduce wheel size (<a href="https://redirect.github.com/tqdm/tqdm/issues/1782">#1782</a>)</li> </ul> <h2>tqdm v4.69.1 stable</h2> <ul> <li><code>contrib.logging</code>: preserve filters (<a href="https://redirect.github.com/tqdm/tqdm/issues/1775">#1775</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1581">#1581</a>)</li> <li><code>rich</code>: misc fixes (<a href="https://redirect.github.com/tqdm/tqdm/issues/1773">#1773</a>) <ul> <li>support generators (without <code>len</code>) (<a href="https://redirect.github.com/tqdm/tqdm/issues/1391">#1391</a>)</li> <li>fix potential <code>AttributeError</code> on exit (<a href="https://redirect.github.com/tqdm/tqdm/issues/1674">#1674</a>)</li> </ul> </li> <li>fix <code>total=float('inf')</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1781">#1781</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/651">#651</a>)</li> <li>fix potential <code>AttributeError</code> on exit (<a href="https://redirect.github.com/tqdm/tqdm/issues/1778">#1778</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1668">#1668</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/1537">#1537</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/261">#261</a>)</li> <li>fix minor docs typos (<a href="https://redirect.github.com/tqdm/tqdm/issues/1780">#1780</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/1746">#1746</a>)</li> </ul> <h2>tqdm v4.69.0 stable</h2> <ul> <li>add <code>tqdm.asyncio.gather(..., return_exceptions=False)</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1776">#1776</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/1671">#1671</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1286">#1286</a>)</li> <li>misc minor framework updates <ul> <li>bump workflow actions & pre-commit hooks</li> </ul> </li> </ul> <h2>tqdm v4.68.4 stable</h2> <ul> <li>trim to <code>ncols</code> even when <code>'{bar}' not in bar_format</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1717">#1717</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/1767">#1767</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1658">#1658</a>)</li> <li>fix <code>tqdm.write</code> when <code>stdout=None</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1768">#1768</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1654">#1654</a>)</li> </ul> <h2>tqdm v4.68.3 stable</h2> <ul> <li><code>utils</code>: delay <code>os.get_terminal_size</code> (<a href="https://redirect.github.com/tqdm/tqdm/issues/1763">#1763</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1760">#1760</a>)</li> <li><code>autonotebook</code>: support QtConsole, Spyder, JupyterLite (<a href="https://redirect.github.com/tqdm/tqdm/issues/1763">#1763</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/1628">#1628</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/1559">#1559</a> <- <a href="https://redirect.github.com/tqdm/tqdm/issues/1283">#1283</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/1098">#1098</a>, <a href="https://redirect.github.com/tqdm/tqdm/issues/512">#512</a>)</li> <li>minor docs updates <ul> <li>fix typo (<a href="https://redirect.github.com/tqdm/tqdm/issues/1762">#1762</a>)</li> <li>use <code>git-fame</code></li> </ul> </li> <li>misc minor framework updates <ul> <li>fix & update CI build</li> <li>pre-commit: add docs & metadata generation</li> <li>move <code>tox.ini</code> -> <code>pyproject.toml</code>, move <code>tox-gh-actions</code> -> <code>tox-gh</code></li> <li>add Python 3.14, drop 3.7 support</li> </ul> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tqdm/tqdm/commit/9cf5a12b1f955468a17f0ba3c59092b23e4258ac"><code>9cf5a12</code></a> Merge pull request <a href="https://redirect.github.com/tqdm/tqdm/issues/1830">#1830</a> from eaubin/master</li> <li><a href="https://github.com/tqdm/tqdm/commit/24b9e1e08a097f1c30f2d235b63f9eb25ba47974"><code>24b9e1e</code></a> misc tidy</li> <li><a href="https://github.com/tqdm/tqdm/commit/2a9e4e82ddba07c5dd6d126e23a4745b76ea49c8"><code>2a9e4e8</code></a> contrib.concurrent: fix no-len iterables</li> <li><a href="https://github.com/tqdm/tqdm/commit/8d6ff8de5a9066de77d0a9df3e80a022a3dcf146"><code>8d6ff8d</code></a> Merge pull request <a href="https://redirect.github.com/tqdm/tqdm/issues/1819">#1819</a> from tqdm/devel</li> <li><a href="https://github.com/tqdm/tqdm/commit/bed379609c2c8300671c784c8f85a185c8cf6fb3"><code>bed3796</code></a> tests: major overhaul</li> <li><a href="https://github.com/tqdm/tqdm/commit/4d3d3194d5467e0701bc0f4b836a735273ef0868"><code>4d3d319</code></a> AI policy</li> <li><a href="https://github.com/tqdm/tqdm/commit/5dcb022b55553b60ed2131b64aa5bf1e65470df1"><code>5dcb022</code></a> minor syntax update</li> <li><a href="https://github.com/tqdm/tqdm/commit/309effe4244bf45427c5add7f1bcf33f98a7b421"><code>309effe</code></a> tests: pre-commit coverage</li> <li><a href="https://github.com/tqdm/tqdm/commit/604193aa03b5f5c0ad5f3d441951f0fbb515f1e4"><code>604193a</code></a> tests: slight tidy</li> <li><a href="https://github.com/tqdm/tqdm/commit/17f1cac07c89943eb0e6082875b3821205308d4f"><code>17f1cac</code></a> CI: bump workflow actions</li> <li>Additional commits viewable in <a href="https://github.com/tqdm/tqdm/compare/v4.67.1...v4.70.1">compare view</a></li> </ul> </details> <br /> Updates `pyyaml` from 6.0.2 to 6.0.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/yaml/pyyaml/releases">pyyaml's releases</a>.</em></p> <blockquote> <h2>6.0.3</h2> <h2>What's Changed</h2> <ul> <li>Support for Python 3.14 and free-threading (experimental).</li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3">https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES">pyyaml's changelog</a>.</em></p> <blockquote> <p>6.0.3 (2025-09-25)</p> <ul> <li><a href="https://redirect.github.com/yaml/pyyaml/pull/864">yaml/pyyaml#864</a> -- Support for Python 3.14 and free-threading (experimental)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/yaml/pyyaml/commit/49790e73684bebad1df05ef8d828fa12f685bffb"><code>49790e7</code></a> Release 6.0.3 (<a href="https://redirect.github.com/yaml/pyyaml/issues/889">#889</a>)</li> <li>See full diff in <a href="https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3">compare view</a></li> </ul> </details> <br /> Updates `psycopg2-binary` from 2.9.10 to 2.9.13 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/psycopg/psycopg2/blob/master/NEWS">psycopg2-binary's changelog</a>.</em></p> <blockquote> <h2>Current release</h2> <p>What's new in psycopg 2.9.13 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^</p> <ul> <li>Add support for Python 3.15 (:ticket:<code>[#1848](https://github.com/psycopg/psycopg2/issues/1848)</code>).</li> <li>Fix parsing of malformed bytea input.</li> <li>Fix parsing of malformed int64 input in arrays (:ticket:<code>[#1847](https://github.com/psycopg/psycopg2/issues/1847)</code>).</li> <li>Add a <code>pyproject.toml</code> file to declare a PEP 517 build backend (:ticket:<code>[#1788](https://github.com/psycopg/psycopg2/issues/1788)</code>).</li> <li>Drop support for Python 3.9.</li> </ul> <p>What's new in psycopg 2.9.12 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^</p> <ul> <li>Fix infinite loop with malformed interval (:ticket:<code>1835</code>).</li> </ul> <p>What's new in psycopg 2.9.11 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^</p> <ul> <li>Add support for Python 3.14.</li> <li>Avoid a segfault passing more arguments than placeholders if Python is built with assertions enabled (:ticket:<code>[#1791](https://github.com/psycopg/psycopg2/issues/1791)</code>).</li> <li>Add riscv64 platform binary packages (:ticket:<code>[#1813](https://github.com/psycopg/psycopg2/issues/1813)</code>).</li> <li><code>~psycopg2.errorcodes</code> map and <code>~psycopg2.errors</code> classes updated to PostgreSQL 18.</li> <li>Drop support for Python 3.8.</li> </ul> <p>What's new in psycopg 2.9.10 ^^^^^^^^^^^^^^^^^^^^^^^^^^^^</p> <ul> <li>Add support for Python 3.13.</li> <li>Receive notifications on commit (:ticket:<code>[#1728](https://github.com/psycopg/psycopg2/issues/1728)</code>).</li> <li><code>~psycopg2.errorcodes</code> map and <code>~psycopg2.errors</code> classes updated to PostgreSQL 17.</li> <li>Drop support for Python 3.7.</li> </ul> <p>What's new in psycopg 2.9.9 ^^^^^^^^^^^^^^^^^^^^^^^^^^^</p> <ul> <li>Add support for Python 3.12.</li> <li>Drop support for Python 3.6.</li> </ul> <p>What's new in psycopg 2.9.8</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/psycopg/psycopg2/commit/f650e7afed0c94f596594e8328a0c7fa65a9d0e5"><code>f650e7a</code></a> chore: bump to release 2.9.13</li> <li><a href="https://github.com/psycopg/psycopg2/commit/368c8a1ca6d80088703a693ce64b68ad7d346698"><code>368c8a1</code></a> chore!: drop support for Python 3.9</li> <li><a href="https://github.com/psycopg/psycopg2/commit/9b39e65ab232f0a267a278cdaef1bd9975d88c65"><code>9b39e65</code></a> chore: drop scaleway build support</li> <li><a href="https://github.com/psycopg/psycopg2/commit/2ca70416be6d4d3d8170ec439876c0b3569af718"><code>2ca7041</code></a> fix: fix handling of PostgreSQL 18 exceptions</li> <li><a href="https://github.com/psycopg/psycopg2/commit/5385c027ef62ce14e57a7379e0375868507d6746"><code>5385c02</code></a> Build CPython 3.15 wheels</li> <li><a href="https://github.com/psycopg/psycopg2/commit/1d32e1f6678ffa8ab8897ca81826bf4dde6354cd"><code>1d32e1f</code></a> ci: only attempt triggering documentation refresh when pushing on main repo</li> <li><a href="https://github.com/psycopg/psycopg2/commit/433e7b77a7b700fbb1cdc6e9dca6b5948d07fc23"><code>433e7b7</code></a> chore: add pyproject.toml file to declare a PEP 517 build backend</li> <li><a href="https://github.com/psycopg/psycopg2/commit/8fb80bc3b2c358f4e3c54e33a37326d3f8b3ff6a"><code>8fb80bc</code></a> fix: fix parsing of malformed int64 input in arrays</li> <li><a href="https://github.com/psycopg/psycopg2/commit/f98014a46a1e34f024ebd6134d1d87b77490c500"><code>f98014a</code></a> fix: fix parsing of malformed bytea input</li> <li><a href="https://github.com/psycopg/psycopg2/commit/822b79cfe12ca0a04482acd382cae669a16aa789"><code>822b79c</code></a> chore: bump dependencies in binary package</li> <li>Additional commits viewable in <a href="https://github.com/psycopg/psycopg2/compare/2.9.10...2.9.13">compare view</a></li> </ul> </details> <br /> Updates `python-dotenv` from 1.2.2 to 1.2.4 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/theskumar/python-dotenv/releases">python-dotenv's releases</a>.</em></p> <blockquote> <h2>v1.2.4</h2> <h3>Fixed</h3> <ul> <li><code>dotenv get</code> no longer exits with code 1 for empty string values (<code>KEY=</code>) by [<a href="https://github.com/ShamikOfficial"><code>@ShamikOfficial</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/700">#700</a></li> <li>An unquoted empty value followed by an inline comment (e.g. <code>KEY= # comment</code>) is now parsed as an empty string instead of the comment text by [<a href="https://github.com/Noethix55555"><code>@Noethix55555</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/663">#663</a></li> <li><code>dotenv run --no-override</code> now expands variable references with the same precedence as <code>load_dotenv(override=False)</code>, so a value like <code>${BASE}/suffix</code> uses the existing <code>BASE</code> from the environment instead of the one from the <code>.env</code> file by [<a href="https://github.com/ROTl24"><code>@ROTl24</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/698">#698</a></li> </ul> <h2>v1.2.3</h2> <h3>Fixed</h3> <ul> <li>Strip a leading UTF-8 BOM from <code>.env</code> file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [<a href="https://github.com/h1whelan"><code>@h1whelan</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/640">#640</a></li> <li><code>set_key</code> now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [<a href="https://github.com/dchaudhari7177"><code>@dchaudhari7177</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/680">#680</a></li> <li><code>dotenv run</code> now prints a friendly error instead of a traceback when no command is given by [<a href="https://github.com/bbc2"><code>@bbc2</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/606">#606</a></li> <li>Cache the parsed result for empty <code>.env</code> files so repeated <code>dotenv_values</code>/<code>load_dotenv</code> calls no longer re-read the file by [<a href="https://github.com/ReinerBRO"><code>@ReinerBRO</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/638">#638</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md">python-dotenv's changelog</a>.</em></p> <blockquote> <h2>[1.2.4] - 2026-10-01</h2> <h3>Fixed</h3> <ul> <li><code>dotenv get</code> no longer exits with code 1 for empty string values (<code>KEY=</code>) by [<a href="https://github.com/ShamikOfficial"><code>@ShamikOfficial</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/700">#700</a></li> <li>An unquoted empty value followed by an inline comment (e.g. <code>KEY= # comment</code>) is now parsed as an empty string instead of the comment text by [<a href="https://github.com/Noethix55555"><code>@Noethix55555</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/663">#663</a></li> <li><code>dotenv run --no-override</code> now expands variable references with the same precedence as <code>load_dotenv(override=False)</code>, so a value like <code>${BASE}/suffix</code> uses the existing <code>BASE</code> from the environment instead of the one from the <code>.env</code> file by [<a href="https://github.com/ROTl24"><code>@ROTl24</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/698">#698</a></li> </ul> <h2>[1.2.3] - 2026-08-16</h2> <h3>Fixed</h3> <ul> <li>Strip a leading UTF-8 BOM from <code>.env</code> file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [<a href="https://github.com/h1whelan"><code>@h1whelan</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/640">#640</a></li> <li><code>set_key</code> now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [<a href="https://github.com/dchaudhari7177"><code>@dchaudhari7177</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/680">#680</a></li> <li><code>dotenv run</code> now prints a friendly error instead of a traceback when no command is given by [<a href="https://github.com/bbc2"><code>@bbc2</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/606">#606</a></li> <li>Cache the parsed result for empty <code>.env</code> files so repeated <code>dotenv_values</code>/<code>load_dotenv</code> calls no longer re-read the file by [<a href="https://github.com/ReinerBRO"><code>@ReinerBRO</code></a>] in <a href="https://redirect.github.com/theskumar/python-dotenv/issues/638">#638</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/theskumar/python-dotenv/commit/a565c2cc41599c48eabc6b7b7f5b826d43c5a6d7"><code>a565c2c</code></a> Bump version: 1.2.3 → 1.2.4</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/4a7abd00261e51baba958e15f443c66165042ea2"><code>4a7abd0</code></a> docs: add 1.2.4 release notes (<a href="https://redirect.github.com/theskumar/python-dotenv/issues/663">#663</a>, <a href="https://redirect.github.com/theskumar/python-dotenv/issues/698">#698</a>, <a href="https://redirect.github.com/theskumar/python-dotenv/issues/700">#700</a>)</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/f215c0274dc4c310e5ca5feb4c6bddade25ece21"><code>f215c02</code></a> fix: dotenv get exits 0 for empty string values (<a href="https://redirect.github.com/theskumar/python-dotenv/issues/700">#700</a>)</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/58f2d7c112235b347040bb5cb579d4ebc0a0ad91"><code>58f2d7c</code></a> test: make test_run_with_command_flags portable and meaningful (<a href="https://redirect.github.com/theskumar/python-dotenv/issues/709">#709</a>)</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/e0310e5bb3f2b701b11bbc007ca0c82c1bd56f38"><code>e0310e5</code></a> fix: honor --no-override when expanding variables in dotenv run (<a href="https://redirect.github.com/theskumar/python-dotenv/issues/698">#698</a>)</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/a00cb2eed0704cd6d2071b2004c37e95ccc86ee5"><code>a00cb2e</code></a> docs: add CHANGELOG entry for <a href="https://redirect.github.com/theskumar/python-dotenv/issues/663">#663</a> (fix <a href="https://redirect.github.com/theskumar/python-dotenv/issues/600">#600</a>)</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/f5485a61eefa5e686d6d5bdc7aa9ad6b104b1e92"><code>f5485a6</code></a> fix: parse empty unquoted value with inline comment as empty string</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/49515afee2d50c33cad9419b3800b3a0dc93fc59"><code>49515af</code></a> Bump version: 1.2.2 → 1.2.3</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/8ac846ff2760b65470e769d7eed33e540f0934e1"><code>8ac846f</code></a> chore: add release runbook (RELEASING.md) and make release target</li> <li><a href="https://github.com/theskumar/python-dotenv/commit/bb31c944fb4b40e8dea59587f525840c38326166"><code>bb31c94</code></a> docs: add 1.2.3 release notes (<a href="https://redirect.github.com/theskumar/python-dotenv/issues/606">#606</a>, <a href="https://redirect.github.com/theskumar/python-dotenv/issues/638">#638</a>, <a href="https://redirect.github.com/theskumar/python-dotenv/issues/680">#680</a>)</li> <li>Additional commits viewable in <a href="https://github.com/theskumar/python-dotenv/compare/v1.2.2...v1.2.4">compare view</a></li> </ul> </details> <br /> Updates `tabulate` from 0.9.0 to 0.10.0 <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astanin/python-tabulate/blob/master/CHANGELOG">tabulate's changelog</a>.</em></p> <blockquote> <ul> <li>0.10.0: Add support for Python 3.11, 3.12, 3.13, 3.14. Drop support for Python 3.7, 3.8, 3.9. PRESERVE_STERILITY global is replaced with preserve_sterility function argument. New formatting options: headersglobalalign, headersalign, colglobalalign. New output format: <code>colon_grid</code> (Pandoc grid_tables with alignment) Various bug fixes. Improved error messages.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astanin/python-tabulate/commit/3b4cd509820e4c45cd2aaba833aa585ea6308b94"><code>3b4cd50</code></a> update HOWTOPUBLISH</li> <li><a href="https://github.com/astanin/python-tabulate/commit/35ee0f61544b53067247cfe8fd8b7547b7e1c1e2"><code>35ee0f6</code></a> update mini-benchmark table</li> <li><a href="https://github.com/astanin/python-tabulate/commit/37ac76e9365fa3694e92c8ab651a2cc694438983"><code>37ac76e</code></a> restore tabulate.<strong>version</strong></li> <li><a href="https://github.com/astanin/python-tabulate/commit/37e1ed089f779ed5a962e287b12dc9c15e61c7ff"><code>37e1ed0</code></a> move # nowa: E931 to a different line (flake8)</li> <li><a href="https://github.com/astanin/python-tabulate/commit/7bacc90422f416f61034c6aeb45be32dc67bafdf"><code>7bacc90</code></a> run pre-commit hooks (black)</li> <li><a href="https://github.com/astanin/python-tabulate/commit/1b69704b12b13c70b1fa42f942e84d9c134a5763"><code>1b69704</code></a> Remove spurious cast in string interpolation</li> <li><a href="https://github.com/astanin/python-tabulate/commit/4d535af12d2de46ee5a87329d2bc5810a386ef89"><code>4d535af</code></a> Use specific noqa directives</li> <li><a href="https://github.com/astanin/python-tabulate/commit/76c3d37a5f51546b2bfba8d3e0648ebcda05b436"><code>76c3d37</code></a> Remove spurious space from error message</li> <li><a href="https://github.com/astanin/python-tabulate/commit/13508e7a75783af650a2b76065dac28e06d1fa34"><code>13508e7</code></a> Unnecessary <code>list</code> call</li> <li><a href="https://github.com/astanin/python-tabulate/commit/69f67cd72de4c7990bc7a25200b89ab9b2bdd870"><code>69f67cd</code></a> Do not call <code>getattr</code> with a constant value</li> <li>Additional commits viewable in <a href="https://github.com/astanin/python-tabulate/compare/v0.9.0...v0.10.0">compare view</a></li> </ul> </details> <br /> Updates `alembic` from 1.18.4 to 1.20.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sqlalchemy/alembic/releases">alembic's releases</a>.</em></p> <blockquote> <h1>1.20.0</h1> <p>Released: September 11, 2026</p> <h2>usecase</h2> <ul> <li> <p><strong>[usecase] [batch]</strong> Added a warning for the case where an unnamed CHECK constraint on a reflected table is omitted from a batch "recreate" operation. An unnamed CHECK constraint can't be reliably carried over in a batch recreate as it may refer to columns that are being dropped or changed. This omission was previously a silent operation. The presence of any <code>~sqlalchemy.schema.CheckConstraint</code> in <code>Operations.batch_alter_table.table_args</code> is taken to indicate that the case has been accommodated, and no warning is emitted.</p> <p>References: <a href="https://redirect.github.com/sqlalchemy/alembic/issues/1846">#1846</a></p> </li> <li> <p><strong>[usecase] [autogenerate]</strong> Autogenerate now renders a warning comment above any rendered <code>Operations.drop_constraint()</code> directive for which the constraint name is <code>None</code>, as is the case when a constraint that has no name in the model is dropped, most typically within the <code>downgrade()</code> function of a migration that adds an unnamed constraint. A warning is also emitted on the console when the migration script is generated. The directive requires a non-None name in order to be able to emit a "DROP CONSTRAINT" command.</p> <p>References: <a href="https://redirect.github.com/sqlalchemy/alembic/issues/916">#916</a></p> </li> </ul> <h2>bug</h2> <ul> <li> <p><strong>[bug] [batch]</strong> Fixed bug in batch mode where adding a column with a type that generates its own CHECK constraint, such as <code>~sqlalchemy.types.Boolean</code> or <code>~sqlalchemy.types.Enum</code> with <code>~sqlalchemy.types.Boolean.create_constraint</code> set to <code>True</code>, would emit the constraint twice when the table was recreated, once under the name generated by the naming convention in use and once under the name given to the type. The constraint is now emitted once, using the same name that would be used outside of batch mode.</p> <p>References: <a href="https://redirect.github.com/sqlalchemy/alembic/issues/1768">#1768</a></p> </li> <li> <p><strong>[bug] [batch]</strong> Fixed bug in batch mode where a CHECK constraint generated by a type such as <code>~sqlalchemy.types.Boolean</code> or <code>~sqlalchemy.types.Enum</code> would lose the name established for it by the naming convention in use when the table was recreated, as the constraint was regenerated against the temporary table used for the recreate operation. The naming convention is now resolved against the name of the table being replaced.</p> </li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/sqlalchemy/alembic/commits">compare view</a></li> </ul> </details> <br /> Updates `fastapi` from 0.139.0 to 0.143.3 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fastapi/fastapi/releases">fastapi's releases</a>.</em></p> <blockquote> <h2>0.143.3</h2> <h3>Fixes</h3> <ul> <li>🐛 Fix non-finite float serialization in JSONL and SSE streams. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16509">#16509</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Docs</h3> <ul> <li>🎨 Update Python format in Markdown with Ruff. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16505">#16505</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h2>0.143.2</h2> <h3>Fixes</h3> <ul> <li>🐛 Fix blocking frontend fallback file checks. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16503">#16503</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h3>Translations</h3> <ul> <li>🌐 Update translations for zh-hant (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16500">#16500</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for ja (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16499">#16499</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for zh (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16501">#16501</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for hi (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16498">#16498</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for es (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16497">#16497</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for fr (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16495">#16495</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for ko (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16496">#16496</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for de (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16493">#16493</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for uk (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16494">#16494</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for tr (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16490">#16490</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for pt (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16491">#16491</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> <li>🌐 Update translations for ru (update-outdated). PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16492">#16492</a> by <a href="https://github.com/apps/pr-submit"><code>@pr-submit[bot]</code></a>.</li> </ul> <h3>Internal</h3> <ul> <li>⬆ Bump pydantic-ai-slim from 2.49.0 to 2.53.0. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16487">#16487</a> by <a href="https://github.com/apps/dependabot"><code>@dependabot[bot]</code></a>.</li> <li>⬆ Bump werkzeug from 3.1.6 to 3.1.9. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16464">#16464</a> by <a href="https://github.com/apps/dependabot"><code>@dependabot[bot]</code></a>.</li> </ul> <h2>0.143.1</h2> <h3>Fixes</h3> <ul> <li>🐛 Fix included route metadata in <code>iter_route_contexts()</code>. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16484">#16484</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h2>0.143.0</h2> <p>Automatic OpenTelemetry exporter setup is now opt-in. If you rely on FastAPI to configure exporters from <code>OTEL_*</code> environment variables, set <code>FASTAPI_OTEL_AUTO_CONFIGURE=true</code> or use <code>FastAPI(telemetry={"auto_configure": True})</code> to retain the previous behavior.</p> <p>Applications that configure their own providers and exporters require no changes. FastAPI Cloud enables automatic setup for you.</p> <h3>Breaking Changes</h3> <ul> <li>💥 Require opt-in for automatic OpenTelemetry exporter setup. PR <a href="https://redirect.github.com/fastapi/fastapi/pull/16476">#16476</a> by <a href="https://github.com/tiangolo"><code>@tiangolo</code></a>.</li> </ul> <h2>0.142.4</h2> <h3>Fixes</h3>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/fastapi/fastapi/commit/bb7f314287bf36e04539c572a2256d94ea45f0d6"><code>bb7f314</code></a> 🔖 Release version 0.143.3 (<a href="https://redirect.github.com/fastapi/fastapi/issues/16510">#16510</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/c34a14c659b52ee4dd4ff592d16221b0ceaebb76"><code>c34a14c</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/d1fd422fd9c3b24b0e2bcf1cc89f1e7249b5fcd6"><code>d1fd422</code></a> 🐛 Fix non-finite float serialization in JSONL and SSE streams (<a href="https://redirect.github.com/fastapi/fastapi/issues/16509">#16509</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/0b919816378eaa773df7ce4204414c712c9fdbea"><code>0b91981</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/64efa4fe956c8e278960213c120d26255d852193"><code>64efa4f</code></a> 🎨 Update Python format in Markdown with Ruff (<a href="https://redirect.github.com/fastapi/fastapi/issues/16505">#16505</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/ba24dc3bc011bad3efdbd68b9d529faae2c2993c"><code>ba24dc3</code></a> 🔖 Release version 0.143.2 (<a href="https://redirect.github.com/fastapi/fastapi/issues/16504">#16504</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/98050eeaf006cf26e9a8b7f83d26fe00d74091ba"><code>98050ee</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/d0282a388b3875dfdfd69813693608676006254f"><code>d0282a3</code></a> 🐛 Fix blocking frontend fallback file checks (<a href="https://redirect.github.com/fastapi/fastapi/issues/16503">#16503</a>)</li> <li><a href="https://github.com/fastapi/fastapi/commit/db04f5b7ed05e3408be73d2c62ae04653be3b3fb"><code>db04f5b</code></a> 📝 Update release notes</li> <li><a href="https://github.com/fastapi/fastapi/commit/fd0614cac4c5eb57e08ba82c63be0824453dafe2"><code>fd0614c</code></a> 🌐 Update translations for zh-hant (update-outdated) (<a href="https://redirect.github.com/fastapi/fastapi/issues/16500">#16500</a>)</li> <li>Additional commits viewable in <a href="https://github.com/fastapi/fastapi/compare/0.139.0...0.143.3">compare view</a></li> </ul> </details> <br /> Updates `uvicorn` from 0.45.0 to 0.54.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Kludex/uvicorn/releases">uvicorn's releases</a>.</em></p> <blockquote> <h2>Version 0.54.0</h2> <h2>📨 Send metadata after the response body</h2> <p><code>uvicorn</code> 0.54.0 adds response trailers and <code>103 Early Hints</code> to its experimental HTTP/2 implementation through <code>zttp</code>.</p> <pre lang="console"><code>uv add uvicorn==0.54.0 "zttp>=0.0.34" </code></pre> <ul> <li><strong>Send HTTP/2 response trailers</strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3146">#3146</a>). The ASGI <code>http.response.trailers</code> extension lets applications send metadata, such as checksums, after the response body. Clients must send <code>TE: trailers</code> to receive them. Multiple trailer messages are combined before completing the response.</li> <li><strong>HTTP/2 remains experimental and opt-in.</strong> Enable it with <code>--http zttp --http2</code>. Upgrade-based h2c and WebSockets over HTTP/2 remain unsupported.</li> </ul> <h2>💡 Hint at resources before the final response</h2> <ul> <li><strong>Send <code>103 Early Hints</code> over HTTP/2</strong> (<a href="https://redirect.github.com/Kludex/uvicorn/pull/3137">#3137</a>). Applications can use the ASGI <code>http.response.early_hint</code> extension to send resource hints before the final response. Each supplied link becomes a separate <code>Link</code> header.</li> </ul> <p><strong>Full changelog:</strong> <a href="https://github.com/Kludex/uvicorn/compare/0.53.0...0.54.0">0.53.0...0.54.0</a></p> <h2>Version 0.53.0</h2> <h2>🌐 Opt-in HTTP/2 support</h2> <p><code>uvicorn</code> 0.53.0 adds experimental HTTP/2 through <code>zttp</code>, alongside a new <code>zuvloop</code> integration and connection-handling improvements.</p> <pre lang="console"><code>uv add uvicorn==0.53.0 </cod…

Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>v7 What's new</h2> <h3>Direct Uploads</h3> <p>Adds support for uploading single files directly (unzipped). Callers can set the new <code>archive</code> parameter to <code>false</code> to skip zipping the file during upload. Right now, we only support single files. The action will fail if the glob passed resolves to multiple files. The <code>name</code> parameter is also ignored with this setting. Instead, the name of the artifact will be the name of the uploaded file.</p> <h3>ESM</h3> <p>To support new versions of the <code>@actions/*</code> packages, we've upgraded the package to ESM.</p> <h2>What's Changed</h2> <ul> <li>Add proxy integration test by <a href="https://github.com/Link"><code>@Link</code></a>- in <a href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li> <li>Upgrade the module to ESM and bump dependencies by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/762">actions/upload-artifact#762</a></li> <li>Support direct file uploads by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/764">actions/upload-artifact#764</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Link"><code>@Link</code></a>- made their first contribution in <a href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0">https://github.com/actions/upload-artifact/compare/v6...v7.0.0</a></p> <h2>v6.0.0</h2> <h2>v6 - What's new</h2> <blockquote> <p>[!IMPORTANT] actions/upload-artifact@v6 now runs on Node.js 24 (<code>runs.using: node24</code>) and requires a minimum Actions Runner version of 2.327.1. If you are using self-hosted runners, ensure they are updated before upgrading.</p> </blockquote> <h3>Node.js 24</h3> <p>This release updates the runtime to Node.js 24. v5 had preliminary support for Node.js 24, however this action was by default still running on Node.js 20. Now this action by default will run on Node.js 24.</p> <h2>What's Changed</h2> <ul> <li>Upload Artifact Node 24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/719">actions/upload-artifact#719</a></li> <li>fix: update <code>@actions/artifact</code> for Node.js 24 punycode deprecation by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/744">actions/upload-artifact#744</a></li> <li>prepare release v6.0.0 for Node.js 24 support by <a href="https://github.com/salmanmkc"><code>@salmanmkc</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/745">actions/upload-artifact#745</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0">https://github.com/actions/upload-artifact/compare/v5.0.0...v6.0.0</a></p> <h2>v5.0.0</h2> <h2>What's Changed</h2> <p><strong>BREAKING CHANGE:</strong> this update supports Node <code>v24.x</code>. This is not a breaking change per-se but we're treating it as such.</p> <ul> <li>Update README.md by <a href="https://github.com/GhadimiR"><code>@GhadimiR</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/681">actions/upload-artifact#681</a></li> <li>Update README.md by <a href="https://github.com/nebuk89"><code>@nebuk89</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/712">actions/upload-artifact#712</a></li> <li>Readme: spell out the first use of GHES by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/727">actions/upload-artifact#727</a></li> <li>Update GHES guidance to include reference to Node 20 version by <a href="https://github.com/patrikpolyak"><code>@patrikpolyak</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/725">actions/upload-artifact#725</a></li> <li>Bump <code>@actions/artifact</code> to <code>v4.0.0</code></li> <li>Prepare <code>v5.0.0</code> by <a href="https://github.com/danwkennedy"><code>@danwkennedy</code></a> in <a href="https://redirect.github.com/actions/upload-artifact/pull/734">actions/upload-artifact#734</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-artifact/commit/cf430e030ddbb5b0abf93d22962f4752f3646cd9"><code>cf430e0</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/822">#822</a> from actions/tunc-d-prepare-upload-v7-0-2</li> <li><a href="https://github.com/actions/upload-artifact/commit/c2acdedd35a8824a1552c7137f8c18288c3ea469"><code>c2acded</code></a> chore: prepare v7.0.2 release</li> <li><a href="https://github.com/actions/upload-artifact/commit/4687c1bbaa0a58abb517d90b4bbade6754c80c1a"><code>4687c1b</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/821">#821</a> from actions/tunc-d-upload-artifact-package-bump</li> <li><a href="https://github.com/actions/upload-artifact/commit/8cbe1bebdb858105d8fdd88f81404d4de4595719"><code>8cbe1be</code></a> Bump <code>@actions/artifact</code> to 6.3.1</li> <li><a href="https://github.com/actions/upload-artifact/commit/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"><code>043fb46</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-artifact/issues/797">#797</a> from actions/yacaovsnc/update-dependency</li> <li><a href="https://github.com/actions/upload-artifact/commit/634250c1388765ea7ed0f053e636f1f399000b94"><code>634250c</code></a> Include changes in typespec/ts-http-runtime 0.3.5</li> <li><a href="https://github.com/actions/upload-artifact/commit/e454baaac2be505c9450e11b8f3215c6fc023ce8"><code>e454baa</code></a> Readme: bump all the example versions to v7 (<a href="https://redirect.github.com/actions/upload-artifact/issues/796">#796</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/74fad66b98a6d799dc004d3353ccd0e6f6b2530e"><code>74fad66</code></a> Update the readme with direct upload details (<a href="https://redirect.github.com/actions/upload-artifact/issues/795">#795</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/bbbca2ddaa5d8feaa63e36b76fdaad77386f024f"><code>bbbca2d</code></a> Support direct file uploads (<a href="https://redirect.github.com/actions/upload-artifact/issues/764">#764</a>)</li> <li><a href="https://github.com/actions/upload-artifact/commit/589182c5a4cec8920b8c1bce3e2fab1c97a02296"><code>589182c</code></a> Upgrade the module to ESM and bump dependencies (<a href="https://redirect.github.com/actions/upload-artifact/issues/762">#762</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/upload-artifact/compare/v4...v7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-artifact&package-manager=github_actions&previous-version=4&new-version=7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…updates (#39) > [!WARNING] > Cooldown could not be applied because no publication date was available from the registry. > Bumps the container-minor-and-patch group with 2 updates in the / directory: [astral-sh/uv](https://github.com/astral-sh/uv) and python. Bumps the container-minor-and-patch group with 1 update in the /opensampl/server/backend directory: python. Bumps the container-minor-and-patch group with 1 update in the /opensampl/server/migrations directory: python. Updates `astral-sh/uv` from 0.12.21 to 0.13.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/uv/releases">astral-sh/uv's releases</a>.</em></p> <blockquote> <h2>0.13.1</h2> <h2>Release Notes</h2> <p>Released on 2026-10-14.</p> <h3>Enhancements</h3> <ul> <li>Ignore <code>Requires-Python</code> upper bounds in <code>uv pip check</code> and <code>uv pip install --strict</code>, consistent with resolution (<a href="https://redirect.github.com/astral-sh/uv/pull/22500">#22500</a>)</li> <li>Support Linux SPARC by falling back when filesystem cloning and detailed cache accounting are unavailable (<a href="https://redirect.github.com/astral-sh/uv/pull/22463">#22463</a>)</li> <li>Report missing trusted hashes in resolution errors (<a href="https://redirect.github.com/astral-sh/uv/pull/22241">#22241</a>)</li> </ul> <h3>Python</h3> <ul> <li>Add CPython 3.16.0a1 (<a href="https://redirect.github.com/astral-sh/uv/pull/22527">#22527</a>)</li> </ul> <h3>Preview features</h3> <ul> <li>Allow <code>uv tool upgrade</code> to upgrade installed tools when <code>tool-install-locks</code> is enabled (<a href="https://redirect.github.com/astral-sh/uv/pull/22498">#22498</a>)</li> <li>Add preliminary support for parsing PEP 825 variant labels in wheel filenames with <code>wheel-variants</code> (<a href="https://redirect.github.com/astral-sh/uv/pull/22039">#22039</a>)</li> </ul> <h3>Performance</h3> <ul> <li>Reduce uv's binary size (<a href="https://redirect.github.com/astral-sh/uv/pull/22429">#22429</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22430">#22430</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22432">#22432</a>)</li> <li>Speed up Simple API parsing (<a href="https://redirect.github.com/astral-sh/uv/pull/22429">#22429</a>)</li> <li>Reduce package metadata parsing overhead (<a href="https://redirect.github.com/astral-sh/uv/pull/22239">#22239</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Prevent tool and managed Python uninstalls from deleting unrelated files beside their storage directories (<a href="https://redirect.github.com/astral-sh/uv/pull/22495">#22495</a>)</li> <li>Restore support for source distributions containing hard links or full-length tar user or group names (<a href="https://redirect.github.com/astral-sh/uv/pull/22516">#22516</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22522">#22522</a>)</li> <li>Preserve device files and FIFOs used as <code>uv pip compile</code> or <code>uv export</code> output destinations (<a href="https://redirect.github.com/astral-sh/uv/pull/22496">#22496</a>)</li> <li>Fix <code>sys._base_executable</code> detection for environments created from symlinked interpreters (<a href="https://redirect.github.com/astral-sh/uv/pull/22520">#22520</a>)</li> <li>Prevent concurrent readers from observing partially written lockfiles, Python version files, or managed Python sysconfig files (<a href="https://redirect.github.com/astral-sh/uv/pull/22399">#22399</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22402">#22402</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22403">#22403</a>)</li> <li>Serialize concurrent project commands that reach the same environment through real and symlinked paths (<a href="https://redirect.github.com/astral-sh/uv/pull/22390">#22390</a>)</li> <li>Prevent installs, syncs, and environment creation from failing when they race with <code>uv cache clean</code> (<a href="https://redirect.github.com/astral-sh/uv/pull/22387">#22387</a>)</li> <li>Prevent concurrent tool installations from corrupting an environment when the last tool is uninstalled (<a href="https://redirect.github.com/astral-sh/uv/pull/22391">#22391</a>)</li> <li>Persist changed upgrade settings even when <code>uv tool upgrade</code> leaves the tool version unchanged (<a href="https://redirect.github.com/astral-sh/uv/pull/22499">#22499</a>)</li> <li>Reuse environments with installed Git dependencies pinned to full commit hashes without resolving again (<a href="https://redirect.github.com/astral-sh/uv/pull/22464">#22464</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Explain how to select an emulated Python interpreter on Windows ARM64 when native wheels are unavailable (<a href="https://redirect.github.com/astral-sh/uv/pull/22424">#22424</a>)</li> <li>Fix the <code>.netrc</code> format documentation link (<a href="https://redirect.github.com/astral-sh/uv/pull/22514">#22514</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Publish Python 3.15-based uv Docker images under stable tags (<a href="https://redirect.github.com/astral-sh/uv/pull/22503">#22503</a>)</li> </ul> <h2>Install uv 0.13.1</h2>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/uv/blob/main/CHANGELOG.md">astral-sh/uv's changelog</a>.</em></p> <blockquote> <h2>0.13.1</h2> <p>Released on 2026-10-14.</p> <h3>Enhancements</h3> <ul> <li>Ignore <code>Requires-Python</code> upper bounds in <code>uv pip check</code> and <code>uv pip install --strict</code>, consistent with resolution (<a href="https://redirect.github.com/astral-sh/uv/pull/22500">#22500</a>)</li> <li>Support Linux SPARC by falling back when filesystem cloning and detailed cache accounting are unavailable (<a href="https://redirect.github.com/astral-sh/uv/pull/22463">#22463</a>)</li> <li>Report missing trusted hashes in resolution errors (<a href="https://redirect.github.com/astral-sh/uv/pull/22241">#22241</a>)</li> </ul> <h3>Python</h3> <ul> <li>Add CPython 3.16.0a1 (<a href="https://redirect.github.com/astral-sh/uv/pull/22527">#22527</a>)</li> </ul> <h3>Preview features</h3> <ul> <li>Allow <code>uv tool upgrade</code> to upgrade installed tools when <code>tool-install-locks</code> is enabled (<a href="https://redirect.github.com/astral-sh/uv/pull/22498">#22498</a>)</li> <li>Add preliminary support for parsing PEP 825 variant labels in wheel filenames with <code>wheel-variants</code> (<a href="https://redirect.github.com/astral-sh/uv/pull/22039">#22039</a>)</li> </ul> <h3>Performance</h3> <ul> <li>Reduce uv's binary size (<a href="https://redirect.github.com/astral-sh/uv/pull/22429">#22429</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22430">#22430</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22432">#22432</a>)</li> <li>Speed up Simple API parsing (<a href="https://redirect.github.com/astral-sh/uv/pull/22429">#22429</a>)</li> <li>Reduce package metadata parsing overhead (<a href="https://redirect.github.com/astral-sh/uv/pull/22239">#22239</a>)</li> </ul> <h3>Bug fixes</h3> <ul> <li>Prevent tool and managed Python uninstalls from deleting unrelated files beside their storage directories (<a href="https://redirect.github.com/astral-sh/uv/pull/22495">#22495</a>)</li> <li>Restore support for source distributions containing hard links or full-length tar user or group names (<a href="https://redirect.github.com/astral-sh/uv/pull/22516">#22516</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22522">#22522</a>)</li> <li>Preserve device files and FIFOs used as <code>uv pip compile</code> or <code>uv export</code> output destinations (<a href="https://redirect.github.com/astral-sh/uv/pull/22496">#22496</a>)</li> <li>Fix <code>sys._base_executable</code> detection for environments created from symlinked interpreters (<a href="https://redirect.github.com/astral-sh/uv/pull/22520">#22520</a>)</li> <li>Prevent concurrent readers from observing partially written lockfiles, Python version files, or managed Python sysconfig files (<a href="https://redirect.github.com/astral-sh/uv/pull/22399">#22399</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22402">#22402</a>, <a href="https://redirect.github.com/astral-sh/uv/pull/22403">#22403</a>)</li> <li>Serialize concurrent project commands that reach the same environment through real and symlinked paths (<a href="https://redirect.github.com/astral-sh/uv/pull/22390">#22390</a>)</li> <li>Prevent installs, syncs, and environment creation from failing when they race with <code>uv cache clean</code> (<a href="https://redirect.github.com/astral-sh/uv/pull/22387">#22387</a>)</li> <li>Prevent concurrent tool installations from corrupting an environment when the last tool is uninstalled (<a href="https://redirect.github.com/astral-sh/uv/pull/22391">#22391</a>)</li> <li>Persist changed upgrade settings even when <code>uv tool upgrade</code> leaves the tool version unchanged (<a href="https://redirect.github.com/astral-sh/uv/pull/22499">#22499</a>)</li> <li>Reuse environments with installed Git dependencies pinned to full commit hashes without resolving again (<a href="https://redirect.github.com/astral-sh/uv/pull/22464">#22464</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>Explain how to select an emulated Python interpreter on Windows ARM64 when native wheels are unavailable (<a href="https://redirect.github.com/astral-sh/uv/pull/22424">#22424</a>)</li> <li>Fix the <code>.netrc</code> format documentation link (<a href="https://redirect.github.com/astral-sh/uv/pull/22514">#22514</a>)</li> </ul> <h3>Other changes</h3> <ul> <li>Publish Python 3.15-based uv Docker images under stable tags (<a href="https://redirect.github.com/astral-sh/uv/pull/22503">#22503</a>)</li> </ul> <h2>0.13.0</h2> <p>Released on 2026-10-09.</p>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/uv/commit/62faed3351cfee2121b3c28b937b1f4b93233a93"><code>62faed3</code></a> Bump version to 0.13.1 (<a href="https://redirect.github.com/astral-sh/uv/issues/22525">#22525</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/01bfd2279db7567446e6fa8f08198c7165a3ade4"><code>01bfd22</code></a> Sync latest Python releases (<a href="https://redirect.github.com/astral-sh/uv/issues/22527">#22527</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/07ab80e743b83b910da7312eebb9c0346fe51365"><code>07ab80e</code></a> Avoid linking the Zstandard ZIP encoder (<a href="https://redirect.github.com/astral-sh/uv/issues/22432">#22432</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/66cea0c1027999d1bfc7f69258942cc8392c4186"><code>66cea0c</code></a> Keep large Debug formatters out of line (<a href="https://redirect.github.com/astral-sh/uv/issues/22430">#22430</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/d7eb7ab1142e0da5b3694dd055973a7e3baa0089"><code>d7eb7ab</code></a> Deserialize dependency overrides and Simple API fields directly (<a href="https://redirect.github.com/astral-sh/uv/issues/22429">#22429</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/b757f15552203f42d8081b2378955e725cd732ce"><code>b757f15</code></a> Revert interpreter cache warming (<a href="https://redirect.github.com/astral-sh/uv/issues/22520">#22520</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/c977e8e13b9aa3caa572654e47bf1c51a362f6d1"><code>c977e8e</code></a> Support <code>bot:automerge</code> for promoted pull requests (<a href="https://redirect.github.com/astral-sh/uv/issues/22523">#22523</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/4f14d44ce52fe64bd007fdcb5564ac4a9629c262"><code>4f14d44</code></a> Require hashes for uv's build dependencies (<a href="https://redirect.github.com/astral-sh/uv/issues/22517">#22517</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/06bf2e81489ea54db0861ad5896c28e70a44d8a3"><code>06bf2e8</code></a> Bump tar-codec to 0.0.15 (<a href="https://redirect.github.com/astral-sh/uv/issues/22522">#22522</a>)</li> <li><a href="https://github.com/astral-sh/uv/commit/6609cfd7af6474cf87c1112661c0f227b45f36c4"><code>6609cfd</code></a> Use async I/O and atomic pkgconfig writes for managed Python setup (<a href="https://redirect.github.com/astral-sh/uv/issues/22521">#22521</a>)</li> <li>Additional commits viewable in <a href="https://github.com/astral-sh/uv/compare/0.12.21...0.13.1">compare view</a></li> </ul> </details> <br /> Updates `python` from 3.11 to 3.14 Updates `python` from 3.12 to 3.14 Updates `python` from 3.12 to 3.14 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Joshua Grant <jngrant9@gmail.com>

…curity

Grant, Josh and others added 12 commits October 20, 2026 09:12

bump up to release 1.2.5

397f360

re-lock the uv file

e0cf64d

midgemacf reviewed Oct 21, 2026

View reviewed changes

Comment thread .github/workflows/dependency-security.yml

Update CHANGELOG and modify the pull_request branch for dependency se…

a5c2709

…curity

midgemacf reviewed Oct 21, 2026

View reviewed changes

Comment thread .github/workflows/dependency-security.yml

Grant, Josh added 2 commits October 21, 2026 09:52

ensure the new bugfix branch exists

ec6175a

add in note about the ensure_branch job in the security-review workflow

61116d8

midgemacf approved these changes Oct 21, 2026

View reviewed changes

midgemacf merged commit 72ebe70 into main Oct 21, 2026
4 checks passed

midgemacf deleted the release/1.2.5 branch October 21, 2026 16:34

Navigation Menu

Repository navigation

Release/1.2.5 - #45

Release/1.2.5#45
midgemacf merged 15 commits into
mainfrom
release/1.2.5

sempervent commented Oct 20, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

sempervent commented Oct 20, 2026

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants