fix(deps): update all non-major dependencies

[khepri-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/checkout (changelog)	action	digest	de0fac2 → d23441a
actions/checkout	action	pin	v6 → v6
click (changelog)	project.dependencies	minor	==8.3.3 → ==8.4.2
pydantic (changelog)	project.dependencies	patch	==2.13.3 → ==2.13.4

---

Release Notes

pallets/click (click)

v8.4.2

Compare Source

Released 2026-06-24

• Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and
  tabs in option help text are now escaped, keeping the original completion
  format while still supporting multi-line help. {issue}3502
  {issue}3043 {pr}3504 {pr}3508
• Deprecated commands and options with empty or missing help text no longer
  render a stray leading space before the (DEPRECATED) label. {pr}3509
• A {class}Group with invoke_without_command=True marks its subcommand as
  optional in the usage help, showing [COMMAND] instead of COMMAND.
  {issue}3059 {pr}3507
• echo_via_pager flushes after each write, so passing a generator streams
  output to the pager incrementally instead of staying hidden until the pipe
  buffer fills. {issue}3242 {issue}2542 {pr}3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout
  stream when no external pager runs, completing the partial
  I/O operation on closed file fix from {pr}3482. {issue}3449
  {pr}3533
• Fix CLI usage symopsis for optional arguments producing double square brackets
  [[a|b|c]]... whose type already brackets their metavar. {pr}3578
• {func}version_option resolves a package_name that does not match an
  installed distribution as an import (top-level module) name via
  {func}importlib.metadata.packages_distributions. Packages whose
  top-level module name differs from their distribution name (PIL vs
  Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the
  box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

v8.4.1

Compare Source

Released 2026-05-21

• get_parameter_source() is available during eager callbacks and type
  conversion again. {issue}3458 {pr}3484
• Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
• Shell completion of Enum values used as Choice options produces a
  valid completion result. {issue}3015 {pr}3471
• Fix empty byte-string handling in echo. {issue}3487 {pr}3493
• Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
• Fix open_url on Windows when the file path contains spaces.
  {issue}2994 {pr}3478

v8.4.0

Compare Source

Released 2026-05-17

• {class}ParamType typing improvements. {pr}3371

  • {class}ParamType is now a generic abstract base class,
    parameterized by its converted value type.
  • {meth}~ParamType.convert return types are narrowed on all
    concrete types (str for {class}STRING, int for
    {class}INT, etc.).
  • {meth}~ParamType.to_info_dict returns specific
    {class}~typing.TypedDict subclasses instead of
    dict[str, Any].
  • {class}CompositeParamType and the number-range base are now
    generic with abstract methods.

• Refactor convert_type to extract type inference into a private
  _guess_type helper, and add {func}typing.overload signatures.
  {pr}3372

• {class}Parameter typing improvements. {pr}2805

  • {class}Parameter is now an abstract base class, making explicit
    that it cannot be instantiated directly.
  • {attr}Parameter.name is now str instead of str | None.
    When expose_value=False, the name is set to "" instead
    of None.
  • The ctx parameter of {meth}Parameter.get_error_hint is now
    typed as Context | None, matching the runtime behavior.

• Split string values from default_map for parameters with nargs > 1
  or {class}Tuple type, matching environment variable behavior.
  {issue}2745 {pr}3364

• Auto-detect type=UNPROCESSED for flag_value of non-basic types
  (not str, int, float, or bool), so programmer-provided
  Python objects like classes and enum members are passed through unchanged
  instead of being stringified. Previously type=click.UNPROCESSED had
  to be set explicitly. {issue}2012 {pr}3363

• The error hint now uses {meth}Command.get_help_option_names to pick
  non-shadowed help option names, so Try '... -h' no longer points to a
  subcommand option that shadows -h. The longest surviving name is
  shown (--help over -h) for readability. {issue}2790 {pr}3208

• Fix readline functionality on non-Windows platforms. Prompt text is now
  passed directly to readline instead of being printed separately, allowing
  proper backspace, line editing, and line wrapping behavior. {issue}2968
  {pr}2969

• Use {func}os.startfile on Windows to open URLs in {func}open_url,
  replacing the start built-in which cannot be invoked without
  shell=True. {issue}2868 {issue}3164 {pr}3186

• Fix Fish shell completion errors when option help text contains newlines.
  {issue}3043 {pr}3126

• Add {class}NoSuchCommand exception with suggestions for misspelled
  commands. {issue}3107 {pr}3228

• Use {class}ValueError message when conversion in {class}FuncParamType would
  fail. {issue}3105 {pr}3211

• Add click.get_pager_file for file-like access to an output
  pager. {pr}1572 {pr}3405

• {func}~click.formatting.wrap_text now measures line width in visible
  characters, ignoring ANSI escape sequences. {pr}3420

• Fix {meth}HelpFormatter.write_usage emitting only a blank line when
  called without args. The usage prefix and program name are now
  written even when no arguments follow, and the trailing separator
  space is stripped so the line ends at the program name.
  {issue}3360 {pr}3434

• Show custom error messages from types when {func}prompt with
  hide_input=True fails validation, instead of always showing a
  generic message. Built-in type messages mask the input value.
  {issue}2809 {pr}3256

• Add capture parameter to {class}CliRunner with two modes: sys
  (default) and fd. fd redirects file descriptors 1 and 2
  via {func}os.dup2 so output that bypasses sys.stdout (stale stream
  references, C extensions, subprocesses, faulthandler) is captured
  with proper isolation. {issue}854 {issue}2412 {issue}2468
  {issue}2497 {issue}2761 {issue}2827 {issue}2865 {pr}3391

• Revert the 8.3.3 change that exposed the original file descriptor
  via fileno() on the redirected CliRunner streams in the default
  capture mode. os.dup2(w, sys.stdout.fileno()) calls inside a CLI no
  longer mutate the host runner's stdout, which broke Pytest's fd-level
  capture teardown. C-level consumers that need a real fd should use
  capture="fd". {issue}3384 {pr}3391

• Mark additional built-in strings with gettext() to extend translation
  coverage. {pr}2902

• Fix feature switch groups (several flag_value options sharing one
  parameter name) silently dropping an explicit default when a sibling
  option without an explicit default was declared first. Arbitration is now
  source-aware: a more explicit {class}ParameterSource always wins, and
  within ParameterSource.DEFAULT, an option that received an explicit
  default= keyword wins over a sibling whose default was auto-derived.
  The 8.3.x first-wins fallback for remaining ties was reverted to the
  pre-8.3.x last-wins fallback. {issue}3403 {pr}3404

• Fix missing space between option help text and the (DEPRECATED)
  label, and localize the option label so it matches the command label.
  The label and the DeprecationWarning reason suffix are now produced
  by shared helpers. {pr}3423

• Document short option stacking (-abc is parsed as -a -b -c) and
  clarify that multi-character short option names are not supported.
  {issue}2779 {pr}3431

pydantic/pydantic (pydantic)

v2.13.4

Compare Source

GitHub release

What's Changed

Packaging

• Bump libc from 0.2.155 to 0.2.185 by @​Viicos in #​13109
• Adapt pydantic-core linker flags on macOS by @​washingtoneg and @​Viicos in #​13147

Fixes

• Preserve RootModel core metadata by @​Viicos in #​13129

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • Between 12:00 AM and 08:59 AM, only on Monday (* 0-8 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.