chore(deps): update python dependencies (main) by red-hat-konflux[bot] · Pull Request #345 · securesign/segment-backup-job

red-hat-konflux · 2026-05-15T10:48:06Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Update	Change
cachetools (changelog)	patch	`==6.2.4` → `==6.2.6`
certifi	minor	`==2026.1.4` → `==2026.4.22`
charset-normalizer (changelog)	patch	`==3.4.4` → `==3.4.7`
google-auth	minor	`==2.47.0` → `==2.52.0`
hatchling (source, changelog)	minor	`==1.28.0` → `==1.29.0`
idna (changelog)	minor	`==3.11` → `==3.15`
mypy (changelog)	minor	`==1.14.0` → `==1.20.2`
pathspec (changelog)	minor	`==1.0.3` → `==1.1.1`
poetry-core	minor	`==2.3.0` → `==2.4.0`
pyasn1 (changelog)	patch	`==0.6.2` → `==0.6.3`
pyjwt	minor	`==2.10.1` → `==2.12.1`
requests (changelog)	minor	`==2.32.5` → `==2.34.2`
segment-analytics-python	patch	`==2.3.5` → `==2.3.6`
setuptools (changelog)	patch	`==80.10.1` → `==80.10.2`
trove-classifiers	minor	`==2026.1.14.14` → `==2026.5.7.17`
types-psutil (changelog)	patch	`==7.2.1.20260116` → `==7.2.2.20260508`
types-setuptools (changelog)	minor	`==80.9.0.20251223` → `==80.10.0.20260124`
urllib3 (changelog)	minor	`==2.6.3` → `==2.7.0`
wheel (changelog)	minor	`==0.45.1` → `==0.47.0`

Release Notes

tkem/cachetools (cachetools)

`v6.2.6`

Compare Source

===================

Improve typedkey performance.
Minor documentation improvements.
Minor testing improvements.
Minor code readability improvements.

`v6.2.5`

Compare Source

===================

Improve documentation regarding @cachedmethod with lock
parameter.
Add test cases for cache stampede scenarios.
Update CI environment.

certifi/python-certifi (certifi)

`v2026.4.22`

Compare Source

`v2026.2.25`

Compare Source

jawah/charset_normalizer (charset-normalizer)

`v3.4.7`

Compare Source

Changed

Pre-built optimized version using mypy[c] v1.20.
Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

`v3.4.6`

Compare Source

Changed

Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...)
in favor of feed_info(...).
Raised upper bound for mypy[c] to 1.20, for our optimized version.
Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

Edge case where noise difference between two candidates can be almost insignificant. (#672)
CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

`v3.4.5`

Compare Source

Changed

Update setuptools constraint to setuptools>=68,<=82.
Raised upper bound of mypyc for the optional pre-built extension to v1.19.1

Fixed

Add explicit link to lib math in our optimized build. (#692)
Logger level not restored correctly for empty byte sequences. (#701)
TypeError when passing bytearray to from_bytes. (#703)

Misc

Applied safe micro-optimizations in both our noise detector and language detector.
Rewrote the query_yes_no function (inside CLI) to avoid using ambiguous licensed code.
Added cd.py submodule into mypyc optional compilation to reduce further the performance impact.

googleapis/google-auth-library-python (google-auth)

`v2.48.0`

Compare Source

Features

add cryptography as required dependency (#1929) (52558ae2881b1e6555f6f5c0d76365c15807ead9)
Support the mTLS IAM domain for Certificate based Access (#1938) (8dcf91a1b05c85fbbd0bcee78d66e498099102ab)
add configurable GCE Metadata Server retries (#1488) (454b441b478ec62bbf1a6ad5bceb6c7cbbfd0c37)
honor NO_GCE_CHECK environment variable (#1610) (383c9827536d9376e8248370ce4c2b83e468d027)

Bug Fixes

resolve circular imports (#1942) (25c1b064545702cbef087cfcd15fbbb6ef1af74f)
removes content-header from AWS IMDS get request (#1934) (97bfea9e02ede953fc8ee154e0deed3a3cfc6dcc)
detect correct auth when ADC env var is set but empty (#1374) (bfc07e1050bd0aa86fa3b08cdf70c9b68b5fe6a2)
replace deprecated utcfromtimestamp (#1799) (e431f20cf73ccac71926a23ec454468cea92e053)
Use user_verification=preferred for ReAuth WebAuthn challenge (#1798) (3f88a24089c4ee6822d510de0db210b54260d873)

pypa/hatch (hatchling)

`v1.29.0`: Hatchling v1.29.0

Compare Source

Fixed:

Source Date Epoch no longer fails when set to date before 1980.

kjd/idna (idna)

`v3.15`

Compare Source

Enforce DNS-length cap on individual labels early in check_label,
short-circuiting contextual-rule processing for oversized input
while staying compatible with UTS 46 usage.
Tidy core helpers: hoist bidi category sets to module-level
frozensets (avoiding per-codepoint list construction), simplify
length checks, and reuse the shared _unicode_dots_re from
idna.core in the codec module.
Use raise ... from err for proper exception chaining and
switch internal string formatting to f-strings.
Allow flit_core 4.x in the build backend.
Expand the ruff lint set (flake8-bugbear, flake8-simplify,
pyupgrade, perflint) and apply the surfaced fixes; pin lint CI
to Python 3.14.
Add Dependabot configuration for GitHub Actions.
Convert README and HISTORY from reStructuredText to Markdown.
Reference CVE-2026-45409 for the 3.14 advisory in place of the
initial GHSA identifier.

Thanks to Felix Yan, Stan Ulbrych, and metsw24-max for
contributions to this release.

python/mypy (mypy)

`v1.20.2`

Compare Source

Use WAL with SQLite cache and fix close (Shantanu, PR 21154)
Adjust SQLite journal mode (Ivan Levkivskyi, PR 21217)
Correctly aggregate narrowing information on parent expressions (Shantanu, PR 21206)
Fix regression related to generic callables (Shantanu, PR 21208)
Fix regression by avoiding widening types in some contexts (Shantanu, PR 21242)
Fix slicing in non-strict optional mode (Shantanu, PR 21282)
mypyc: Fix match statement semantics for "or" pattern (Shantanu, PR 21156)
mypyc: Fix issue with module dunder attributes (Piotr Sawicki, PR 21275)
Initial support for Python 3.15.0a8 (Marc Mueller, PR 21255)

`v1.20.1`

Compare Source

Always disable sync in SQLite cache (Ivan Levkivskyi, PR 21184)
Temporarily skip few base64 tests (Ivan Levkivskyi, PR 21193)
Revert dict.__or__ typeshed change (Ivan Levkivskyi, PR 21186)
Fix narrowing for match case with variadic tuples (Shantanu, PR 21192)
Avoid narrowing type[T] in type calls (Shantanu, PR 21174)
Fix regression for catching empty tuple in except (Shantanu, PR 21153)
Fix reachability for frozenset and dict view narrowing (Shantanu, PR 21151)
Fix narrowing with chained comparison (Shantanu, PR 21150)
Avoid narrowing to unreachable at module level (Shantanu, PR 21144)
Allow dangerous identity comparisons to Any typed variables (Shantanu, PR 21142)
--warn-unused-config should not be a strict flag (Ivan Levkivskyi, PR 21139)

`v1.20.0`

Compare Source

`v1.19.1`

Compare Source

Fix noncommutative joins with bounded TypeVars (Shantanu, PR 20345)
Respect output format for cached runs by serializing raw errors in cache metas (Ivan Levkivskyi, PR 20372)
Allow types.NoneType in match cases (A5rocks, PR 20383)
Fix mypyc generator regression with empty tuple (BobTheBuidler, PR 20371)
Fix crash involving Unpack-ed TypeVarTuple (Shantanu, PR 20323)
Fix crash on star import of redefinition (Ivan Levkivskyi, PR 20333)
Fix crash on typevar with forward ref used in other module (Ivan Levkivskyi, PR 20334)
Fail with an explicit error on PyPy (Ivan Levkivskyi, PR 20389)

`v1.19.0`

Compare Source

`v1.18.2`

Compare Source

Fix crash on recursive alias (Ivan Levkivskyi, PR 19845)
Add additional guidance for stubtest errors when runtime is object.__init__ (Stephen Morton, PR 19733)
Fix handling of None values in f-string expressions in mypyc (BobTheBuidler, PR 19846)

`v1.18.1`

Compare Source

`v1.17.1`

Compare Source

Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, PR 19485)
Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, PR 19428)
Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, PR 19453)

`v1.17.0`

Compare Source

`v1.16.1`

Compare Source

`v1.16.0`

Compare Source

`v1.15.0`

Compare Source

`v1.14.1`

Compare Source

cpburnz/python-pathspec (pathspec)

`v1.1.1`

Compare Source

Improvements:

Improved type checking with mypy and pyright.

Bug fixes:

Fixed typing on PathSpec[TPattern] to PathSpec[TPattern_co].
Added missing variant type-hint type[Pattern] to PathSpec.from_lines() parameter pattern_factory.
Fixed possible type error when using + and += operators on PathSpec.

`v1.1.0`

Compare Source

New features:

Issue #108_: Specialize pattern type for PathSpec as PathSpec[TPattern] for better debugging of PathSpec().patterns.

Bug fixes:

Issue #93_: Git discards invalid range notation. GitIgnoreSpecPattern now discards patterns with invalid range notation like Git.
Pull #106_: Fix escape() not escaping backslash characters.

Improvements:

Pull #110_: Nicer debug print outs (and str for regex pattern).

.. _Pull #106: #106
.. _Issue #108: #108
.. _Pull #110: #110

`v1.0.4`

Compare Source

Bug fixes:

Issue #103_: Using re2 fails if pyre2 is also installed.

.. _Issue #103: #103

python-poetry/poetry-core (poetry-core)

`v2.4.0`

Compare Source

Changed

Update list of supported licenses (#935).

Vendoring

`v2.3.2`

Compare Source

Changed

Update list of supported licenses (#917).

Fixed

Fix an issue where platform_release could not be parsed on Debian Trixie (#930).
Fix an issue where using project.readme.text in the pyproject.toml file resulted in broken metadata (#914).
Fix an issue where dependency groups were considered equal when their resolved dependencies were equal, even if the groups themselves were not (#919).
Fix an issue where removing a dependency from a group that included another group resulted in other dependencies being added to the included group (#922).
Fix an issue where PEP 735 include-group entries were lost when [tool.poetry.group] also defined include-groups for the same group (#924).
Fix an issue where the union of <value> not in <marker> constraints was wrongly treated as always satisfied (#925).
Fix an issue where a post release with a local version identifier was wrongly allowed by a > version constraint (#921).
Fix an issue where a version with the local version identifier 0 was treated as equal to the corresponding public version (#920).
Fix an issue where a != <version> constraint wrongly disallowed pre releases and post releases of the specified version (#929).
Fix an issue where in and not in constraints were wrongly not allowed by specific compound constraints (#927).
Fix an issue where data entries in generated setup.py files were duplicated (#923).

`v2.3.1`

Compare Source

Changed

Update list of supported licenses (#912).

Fixed

Fix an issue where platform_release could not be parsed on Windows Server (#911).

pyasn1/pyasn1 (pyasn1)

`v0.6.3`

Compare Source

CVE-2026-30922 (GHSA-jr27-m4p2-rc6r): Added nesting depth
limit to ASN.1 decoder to prevent stack overflow from deeply
nested structures (thanks for reporting, romanticpragmatism)
Fixed OverflowError from oversized BER length field
issue #54
pr #100
Fixed DeprecationWarning stacklevel for deprecated attributes
issue #86
pr #101
Fixed asDateTime incorrect fractional seconds parsing
issue #81
pr #102

jpadilla/pyjwt (pyjwt)

`v2.12.1`

Compare Source

Changed


- Migrate the ``dev``, ``docs``, and ``tests`` package extras to dependency groups by @&#8203;kurtmckee in `#&#8203;1152 <https://github.com/jpadilla/pyjwt/pull/1152>`__

`v2.12.1 <https://github.com/jpadilla/pyjwt/compare/2.12.0...2.12.1>`__
------------------------------------------------------------------------

Fixed
~~~~~

- Add missing ``typing_extensions`` dependency for Python < 3.11 in `#&#8203;1150 <https://github.com/jpadilla/pyjwt/issues/1150>`__

`v2.12.0 <https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Annotate PyJWKSet.keys for pyright by @&#8203;tamird in `#&#8203;1134 <https://github.com/jpadilla/pyjwt/pull/1134>`__
- Close ``HTTPError`` response to prevent ``ResourceWarning`` on Python 3.14 by @&#8203;veeceey in `#&#8203;1133 <https://github.com/jpadilla/pyjwt/pull/1133>`__
- Do not keep ``algorithms`` dict in PyJWK instances by @&#8203;akx in `#&#8203;1143 <https://github.com/jpadilla/pyjwt/pull/1143>`__
- Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by @&#8203;dmbs335 in `GHSA-752w-5fwx-jx9f <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f>`__
- Use PyJWK algorithm when encoding without explicit algorithm in `#&#8203;1148 <https://github.com/jpadilla/pyjwt/pull/1148>`__

Added
~~~~~

- Docs: Add ``PyJWKClient`` API reference and document the two-tier caching system (JWK Set cache and signing key LRU cache).

`v2.11.0 <https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Enforce ECDSA curve validation per RFC 7518 Section 3.4.
- Fix build system warnings by @&#8203;kurtmckee in `#&#8203;1105 <https://github.com/jpadilla/pyjwt/pull/1105>`__
- Validate key against allowed types for Algorithm family in `#&#8203;964 <https://github.com/jpadilla/pyjwt/pull/964>`__
- Add iterator for JWKSet in `#&#8203;1041 <https://github.com/jpadilla/pyjwt/pull/1041>`__
- Validate `iss` claim is a string during encoding and decoding by @&#8203;pachewise in `#&#8203;1040 <https://github.com/jpadilla/pyjwt/pull/1040>`__
- Improve typing/logic for `options` in decode, decode_complete by @&#8203;pachewise in `#&#8203;1045 <https://github.com/jpadilla/pyjwt/pull/1045>`__
- Declare float supported type for lifespan and timeout by @&#8203;nikitagashkov in `#&#8203;1068 <https://github.com/jpadilla/pyjwt/pull/1068>`__
- Fix ``SyntaxWarning``\s/``DeprecationWarning``\s caused by invalid escape sequences by @&#8203;kurtmckee in `#&#8203;1103 <https://github.com/jpadilla/pyjwt/pull/1103>`__
- Development: Build a shared wheel once to speed up test suite setup times by @&#8203;kurtmckee in `#&#8203;1114 <https://github.com/jpadilla/pyjwt/pull/1114>`__
- Development: Test type annotations across all supported Python versions,
  increase the strictness of the type checking, and remove the mypy pre-commit hook
  by @&#8203;kurtmckee in `#&#8203;1112 <https://github.com/jpadilla/pyjwt/pull/1112>`__

Added
~~~~~

- Support Python 3.14, and test against PyPy 3.10 and 3.11 by @&#8203;kurtmckee in `#&#8203;1104 <https://github.com/jpadilla/pyjwt/pull/1104>`__
- Development: Migrate to ``build`` to test package building in CI by @&#8203;kurtmckee in `#&#8203;1108 <https://github.com/jpadilla/pyjwt/pull/1108>`__
- Development: Improve coverage config and eliminate unused test suite code by @&#8203;kurtmckee in `#&#8203;1115 <https://github.com/jpadilla/pyjwt/pull/1115>`__
- Docs: Standardize CHANGELOG links to PRs by @&#8203;kurtmckee in `#&#8203;1110 <https://github.com/jpadilla/pyjwt/pull/1110>`__
- Docs: Fix Read the Docs builds by @&#8203;kurtmckee in `#&#8203;1111 <https://github.com/jpadilla/pyjwt/pull/1111>`__
- Docs: Add example of using leeway with nbf by @&#8203;djw8605 in `#&#8203;1034 <https://github.com/jpadilla/pyjwt/pull/1034>`__
- Docs: Refactored docs with ``autodoc``; added ``PyJWS`` and ``jwt.algorithms`` docs by @&#8203;pachewise in `#&#8203;1045 <https://github.com/jpadilla/pyjwt/pull/1045>`__
- Docs: Documentation improvements for "sub" and "jti" claims by @&#8203;cleder in `#&#8203;1088 <https://github.com/jpadilla/pyjwt/pull/1088>`__
- Development: Add pyupgrade as a pre-commit hook by @&#8203;kurtmckee in `#&#8203;1109 <https://github.com/jpadilla/pyjwt/pull/1109>`__
- Add minimum key length validation for HMAC and RSA keys (CWE-326).
  Warns by default via ``InsecureKeyLengthWarning`` when keys are below
  minimum recommended lengths per RFC 7518 Section 3.2 (HMAC) and
  NIST SP 800-131A (RSA). Pass ``enforce_minimum_key_length=True`` in
  options to ``PyJWT`` or ``PyJWS`` to raise ``InvalidKeyError`` instead.
- Refactor ``PyJWT`` to own an internal ``PyJWS`` instance instead of
  calling global ``api_jws`` functions.

`v2.10.1 <https://github.com/jpadilla/pyjwt/compare/2.10.0...2.10.1>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Prevent partial matching of `iss` claim by @&#8203;fabianbadoi in `GHSA-75c5-xw7c-p5pm <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-75c5-xw7c-p5pm>`__

`v2.10.0 <https://github.com/jpadilla/pyjwt/compare/2.9.0...2.10.0>`__
-----------------------------------------------------------------------

Changed

Remove algorithm requirement from JWT API, instead relying on JWS API for enforcement, by @luhn in #975 <https://github.com/jpadilla/pyjwt/pull/975>__
Use Sequence for parameter types rather than List where applicable by @imnotjames in #970 <https://github.com/jpadilla/pyjwt/pull/970>__
Add JWK support to JWT encode by @luhn in #979 <https://github.com/jpadilla/pyjwt/pull/979>__
Encoding and decoding payloads using the none algorithm by @jpadilla in #c2629f6 <https://github.com/jpadilla/pyjwt/commit/c2629f66c593459e02616048443231ccbe18be16>__

Before:

.. code-block:: pycon

import jwt
jwt.encode({"payload": "abc"}, key=None, algorithm=None)

After:

.. code-block:: pycon

import jwt
jwt.encode({"payload": "abc"}, key=None, algorithm="none")
Added validation for 'sub' (subject) and 'jti' (JWT ID) claims in tokens by @Divan009 in #1005 <https://github.com/jpadilla/pyjwt/pull/1005>__
Refactor project configuration files from setup.cfg to pyproject.toml by @cleder in #995 <https://github.com/jpadilla/pyjwt/pull/995>__
Ruff linter and formatter changes by @gagandeepp in #1001 <https://github.com/jpadilla/pyjwt/pull/1001>__
Drop support for Python 3.8 (EOL) by @kkirsche in #1007 <https://github.com/jpadilla/pyjwt/pull/1007>__

Fixed


- Encode EC keys with a fixed bit length by @&#8203;etianen in `#&#8203;990 <https://github.com/jpadilla/pyjwt/pull/990>`__
- Add an RTD config file to resolve Read the Docs build failures by @&#8203;kurtmckee in `#&#8203;977 <https://github.com/jpadilla/pyjwt/pull/977>`__
- Docs: Update ``iat`` exception docs by @&#8203;pachewise in `#&#8203;974 <https://github.com/jpadilla/pyjwt/pull/974>`__
- Docs: Fix ``decode_complete`` scope and algorithms by @&#8203;RbnRncn in `#&#8203;982 <https://github.com/jpadilla/pyjwt/pull/982>`__
- Fix doctest for ``docs/usage.rst`` by @&#8203;pachewise in `#&#8203;986 <https://github.com/jpadilla/pyjwt/pull/986>`__
- Fix ``test_utils.py`` not to xfail by @&#8203;pachewise in `#&#8203;987 <https://github.com/jpadilla/pyjwt/pull/987>`__
- Docs: Correct `jwt.decode` audience param doc expression by @&#8203;peter279k in `#&#8203;994 <https://github.com/jpadilla/pyjwt/pull/994>`__

Added

Add support for python 3.13 by @hugovk in #972 <https://github.com/jpadilla/pyjwt/pull/972>__
Create SECURITY.md by @auvipy and @jpadilla in #973 <https://github.com/jpadilla/pyjwt/pull/973>__
Docs: Add PS256 encoding and decoding usage by @peter279k in #992 <https://github.com/jpadilla/pyjwt/pull/992>__
Docs: Add API docs for PyJWK by @luhn in #980 <https://github.com/jpadilla/pyjwt/pull/980>__
Docs: Add EdDSA algorithm encoding/decoding usage by @peter279k in #993 <https://github.com/jpadilla/pyjwt/pull/993>__
Include checkers and linters for pyproject.toml in pre-commit by @cleder in #1002 <https://github.com/jpadilla/pyjwt/pull/1002>__
Docs: Add ES256 decoding usage by @Gautam-Hegde in #1003 <https://github.com/jpadilla/pyjwt/pull/1003>__

`v2.12.0`

Compare Source

Security

Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by @dmbs335 in GHSA-752w-5fwx-jx9f

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1132
chore(docs): fix docs build by @tamird in #1137
Annotate PyJWKSet.keys for pyright by @tamird in #1134
fix: close HTTPError to prevent ResourceWarning on Python 3.14 by @veeceey in #1133
chore: remove superfluous constants by @tamird in #1136
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1135
chore(tests): enable mypy by @tamird in #1138
Bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #1142
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1141
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1145
fix: do not store reference to algorithms dict on PyJWK by @akx in #1143
Use PyJWK algorithm when encoding without explicit algorithm by @jpadilla in #1148

New Contributors

@tamird made their first contribution in #1137
@veeceey made their first contribution in #1133

Full Changelog: jpadilla/pyjwt@2.11.0...2.12.0

`v2.11.0`

Compare Source

What's Changed

Fixed type error in comment by @shuhaib-aot in #1026
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1018
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1033
Make note of use of leeway with nbf by @djw8605 in #1034
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1035
Fixes #964: Validate key against allowed types for Algorithm family by @pachewise in #985
Feat #1024: Add iterator for PyJWKSet by @pachewise in #1041
Fixes #1039: Add iss, issuer type checks by @pachewise in #1040
Fixes #660: Improve typing/logic for options in decode, decode_complete; Improve docs by @pachewise in #1045
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1042
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1052
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1053
Fix #1022: Map algorithm=None to "none" by @qqii in #1056
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1055
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1058
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1060
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1061
Fixes #1047: Correct PyJWKClient.get_signing_key_from_jwt annotation by @khvn26 in #1048
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1062
Fixed doc string typo in _validate_jti() function #1063 by @kuldeepkhatke in #1064
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1065
Update SECURITY.md by @auvipy in #1057
Typing fix: use float instead of int for lifespan and timeout by @nikitagashkov in #1068
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1067
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1071
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1076
Fix TYP header documentation by @fobiasmog in #1046
doc: Document claims sub and jti by @cleder in #1088
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1077
Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #1089
Bump actions/stale from 8 to 10 by @dependabot[bot] in #1090
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #1083
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1091
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1093
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1096
Resolve package build warnings by @kurtmckee in #1105
Support Python 3.14, and test against PyPy 3.10+ by @kurtmckee in #1104
Fix a SyntaxWarning caused by invalid escape sequences by @kurtmckee in #1103
Standardize CHANGELOG links to PRs by @kurtmckee in #1110
Migrate from pep517, which is deprecated, to build by @kurtmckee in #1108
Fix incorrectly-named test suite function by @kurtmckee in #1116
Fix Read the Docs builds by @kurtmckee in #1111
Bump actions/download-artifact from 4 to 6 by @dependabot[bot] in #1118
Escalate test suite warnings to errors by @kurtmckee in #1107
Add pyupgrade as a pre-commit hook by @kurtmckee in #1109
Simplify the test suite decorators by @kurtmckee in #1113
Improve coverage config and eliminate unused test suite code by @kurtmckee in #1115
Build a shared wheel once in the test suite by @kurtmckee in #1114
Bump actions/checkout from 5 to 6 by @dependabot[bot] in #1122
Thoroughly test type annotations, and resolve errors by @kurtmckee in #1112
Fix leeway value in usage documentation by @Matthew1471 in #1124
Bump actions/download-artifact from 6 to 7 by @dependabot[bot] in #1125

New Contributors

@shuhaib-aot made their first contribution in #1026
@qqii made their first contribution in #1056
@khvn26 made their first contribution in #1048
@kuldeepkhatke made their first contribution in #1064
@nikitagashkov made their first contribution in #1068
@fobiasmog made their first contribution in #1046
@Matthew1471 made their first contribution in #1124

Full Changelog: jpadilla/pyjwt@2.10.1...2.11.0

psf/requests (requests)

`v2.34.2`

Compare Source

Moved headers input type back to Mapping to avoid invariance issues
with MutableMapping and inferred dict types. Users calling
Request.headers.update() may need to narrow typing in their code. (#7441)

`v2.34.1`

Compare Source

Bugfixes

Widened json input type from dict and list to Mapping
and Sequence. (#7436)
Changed headers input type to MutableMapping and removed None from
Request.headers typing to improve handling for users. (#7431)
Response.reason moved from str | None to str to improve handling
for users. (#7437)
Fixed a bug where some bodies with custom __getattr__ implementations
weren't being properly detected as Iterables. (#7433)

`v2.34.0`

Compare Source

Announcements

Requests 2.34.0 introduces inline types, replacing those provided by
typeshed. Public API types should be fully compatible with mypy, pyright,
and ty. We believe types are comprehensive but if you find issues, please
report them to the pinned tracking issue.

Special thanks to @bastimeyer, @cthoyt, @edgarrmondragon, and @srittau for
helping review and test the types ahead of the release. (#7272)

Improvements

Digest Auth hashing algorithms have added usedforsecurity=False to clarify
security considerations. (#7310)
Requests added support for Python 3.15 based on beta1. Downstream projects
should be able to start testing prior to its release in October. (#7422)
Requests added support for Python 3.14t. (#7419)

Bugfixes

Response.history no longer contains a reference to itself, preventing
accidental looping when traversing the history list. (#7328)
Requests no longer performs greedy matching on no_proxy domains. The
proxy_bypass implementation has been updated with CPython's fix from
bpo-39057. (#7427)
Requests no longer incorrectly strips duplicate leading slashes in
URI paths. This should address user issues with specific presigned
URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

`v2.33.1`

Compare Source

Bugfixes

Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary
files in the tmp directory. (#7305)
Fixed Content-Type header parsing for malformed values. (#7309)
Improved error consistency for malformed header values. (#7308)

`v2.33.0`

Compare Source

Announcements

📣 Requests is adding inline types. If you have a typed code base that
uses Requests, please take a look at #7271. Give it a try, and report
any gaps or feedback you may have in the issue. 📣

Security

CVE-2026-25645 requests.utils.extract_zipped_paths now extracts
contents to a non-deterministic location to prevent malicious file
replacement. This does not affect default usage of Requests, only
applications calling the utility function directly.

Improvements

Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

Fixed an issue where an empty netrc entry could cause
malformed authentication to be applied to Requests on
Python 3.11+. (#7205)

Deprecations

Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

Various typo fixes and doc improvements.

segmentio/analytics-python (segment-analytics-python)

`v2.3.6`

Compare Source

Update and widen PyJWT version to address security issue

pypa/setuptools (setuptools)

`v80.10.2`

Compare Source

pypa/trove-classifiers (trove-classifiers)

`v2026.5.7.17`

Compare Source

`v2026.4.28.13`

Compare Source

urllib3/urllib3 (urllib3)

`v2.7.0`

Compare Source

=======================

Security

Addressed high-severity security issues.
Impact was limited to specific use cases detailed in the accompanying
advisories; overall user exposure was estimated to be marginal.

Decompression-bomb safeguards of the streaming API were bypassed:

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

chore(deps): update python dependencies

ae230ae

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label May 15, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update python dependencies (main)#345

chore(deps): update python dependencies (main)#345
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/python-deps

red-hat-konflux Bot commented May 15, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented May 15, 2026

Release Notes

Changed

Fixed

Changed

Fixed

Misc

Changed

Fixed

Misc

Features

Bug Fixes

v1.29.0: Hatchling v1.29.0

Changed

Vendoring

Changed

Fixed

Changed

Fixed

Security

What's Changed

New Contributors

What's Changed

New Contributors

Security

Configuration

Documentation

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v1.29.0`: Hatchling v1.29.0