Bump the all-pip-updates group across 3 directories with 37 updates by dependabot[bot] · Pull Request #69785 · saltstack/salt

dependabot · 2026-07-11T21:12:26Z

Updates the requirements on pip, docker, pytest, certifi, cffi, croniter, cryptography, jaraco-functools, jaraco-context, msgpack, multidict, opentelemetry-api, opentelemetry-sdk, opentelemetry-exporter-otlp-proto-http, opentelemetry-exporter-prometheus, xxhash, psutil, pyasn1, pyopenssl, requests, tornado, truststore, virtualenv, filelock, zipp, setuptools-scm, build, pylint, boto3, botocore, pynacl, vcert, xmldiff, pygit2, ansible, python-telegram-bot and mercurial to permit the latest version.
Updates pip from 25.2 to 26.1.2

Changelog

Sourced from pip's changelog.

26.1.2 (2026-05-31)

Bug Fixes

Reject console_scripts and gui_scripts entry points whose name would install a script outside the scripts directory. ([#14000](https://github.com/pypa/pip/issues/14000) <https://github.com/pypa/pip/issues/14000>_)

Fix installation incorrectly failing when the target path contains a doubled slash, such as with pip install --root //.... ([#14001](https://github.com/pypa/pip/issues/14001) <https://github.com/pypa/pip/issues/14001>_)

Send a consistent Accept-Encoding header to avoid a spurious Cache entry deserialization failed warning. ([#14012](https://github.com/pypa/pip/issues/14012) <https://github.com/pypa/pip/issues/14012>_)

26.1.1 (2026-05-04)

Bug Fixes

Fix issue where uninstallation left behind empty directories. Revert the removal of the adjacent __pycache__ directory when a .py file is removed. ([#13973](https://github.com/pypa/pip/issues/13973) <https://github.com/pypa/pip/issues/13973>_)

26.1 (2026-04-26)

Deprecations and Removals

Drop support for Python 3.9. ([#13795](https://github.com/pypa/pip/issues/13795) <https://github.com/pypa/pip/issues/13795>_)

Features

Add experimental support to read requirements from standardized pylock.toml files (-r pylock.toml). ([#13876](https://github.com/pypa/pip/issues/13876) <https://github.com/pypa/pip/issues/13876>_)

Allow --uploaded-prior-to to accept a duration in days (e.g., P3D for 3 days ago). ([#13674](https://github.com/pypa/pip/issues/13674) <https://github.com/pypa/pip/issues/13674>_)

Enhancements

Speed up dependency resolution when there are complex conflicts. ([#13859](https://github.com/pypa/pip/issues/13859) <https://github.com/pypa/pip/issues/13859>_)

Reduce memory usage when resolving large dependency trees. ([#13843](https://github.com/pypa/pip/issues/13843) <https://github.com/pypa/pip/issues/13843>_)

Emit a deprecation warning when pip imports an unexpected module after installation of a distribution has started. ([#13912](https://github.com/pypa/pip/issues/13912) <https://github.com/pypa/pip/issues/13912>_)

Allow URL constraints to apply to requirements with extras. ([#12018](https://github.com/pypa/pip/issues/12018) <https://github.com/pypa/pip/issues/12018>_)

Allow unpinned requirements to use hashes from constraints. Constraints like {name}=={version} --hash=... feeds into hash verification for a corresponding requirement. ([#9243](https://github.com/pypa/pip/issues/9243) <https://github.com/pypa/pip/issues/9243>_)

Improve conflict reports that involve direct URLs. ([#13932](https://github.com/pypa/pip/issues/13932) <https://github.com/pypa/pip/issues/13932>_)

Show all errors instead of first error for faulty dependency_groups definitions. ([#13917](https://github.com/pypa/pip/issues/13917) <https://github.com/pypa/pip/issues/13917>_)

... (truncated)

Commits

31d7d16 Bump for release
79f348c Update AUTHORS.txt
237a925 Merge pull request #14001 from notatallshaw/fix-is-within-directory
34d0285 Merge pull request #14006 from laymonage/fix-requirements_from_scripts-space-...
09d3e07 Merge pull request #14012 from notatallshaw/stable-accept-encoding
fa7854f Use is_within_directory for entry point check
d01b46c NEWS ENTRY
7ff8bdd Fix is_within_directory for doubled-slash roots
7ea3466 NEWS ENTRY
85673ea Fix Accept-Encoding to gzip, deflate
Additional commits viewable in compare view

Updates docker to 7.2.0

Release notes

Sourced from docker's releases.

7.2.0

Upgrade Notes

docker.from_env() now honors the active Docker CLI context when DOCKER_HOST is not set.

This means the client may connect to the daemon selected by DOCKER_CONTEXT or the current context in ~/.docker/config.json, matching Docker CLI behavior more closely.

If your application relied on the previous default connection behavior, set DOCKER_HOST explicitly, set DOCKER_CONTEXT=default, or pass use_context=False to DockerClient.from_env().

Added docker.from_context() / DockerClient.from_context() for explicitly creating a client from a Docker CLI context.

Features

Added support for Docker contexts when creating the default client

Added subpath support for volumes

Bugfixes

Fixed exec_run documentation for the stream parameter

Fixed image loading to avoid depending on the deprecated JSONMessage.error field

Preserved the rotated unlock key in swarm integration tests

Fixed SSL certificate generation in tests

Fixed IPv6 integration tests by explicitly enabling IPv6 where required

Miscellaneous

Updated tests for newer Docker Engine behavior

CI and build updates

What's Changed

tests/exec: expect 127 exit code for missing executable by @laurazard in docker/docker-py#3290

fixing doc for stream param in exec_run by @yasonk in docker/docker-py#3292

Bump default API version to 1.45 (Moby 26.0/26.1) by @thaJeztah in docker/docker-py#3261

Set a dummy-version if none set, and remove unused APT_MIRROR build-arg by @thaJeztah in docker/docker-py#3267

test_service_logs: stop testing experimental versions by @thaJeztah in docker/docker-py#2442

Makefile: fix circular reference for integration-dind by @thaJeztah in docker/docker-py#3297

image load: don't depend on deprecated JSONMessage.error field by @thaJeztah in docker/docker-py#3307

integration: test_create_volume_invalid_driver allow either 400 or 404 by @thaJeztah in docker/docker-py#3296

integration: adjust tests for omitted "OnBuild" by @thaJeztah in docker/docker-py#3336

Implement Subpath Support for Volumes in Docker-Py (#3243) by @Khushiyant in docker/docker-py#3270

tests: fix ssl generation by @thaJeztah in docker/docker-py#3365

test/integration: don't check for deprecated Networks field by @thaJeztah in docker/docker-py#3362

test: Skip from_env_unix tests if DOCKER_HOST is network socket by @ricardobranco777 in docker/docker-py#3366

test_connect_with_ipv6_address: enable IPv6 by @robmry in docker/docker-py#3372

test_create_with_ipv6_address: enable IPv6 by @robmry in docker/docker-py#3373

tests: Migrate off gpg2 and regenerate key ed25519 by @vvoland in docker/docker-py#3399

gha: Pin to digests by @vvoland in docker/docker-py#3408

Fix integration tests on non-amd64 hosts and add ARM64 CI by @vvoland in docker/docker-py#3407

integration/swarm: Preserve rotated unlock key by @vvoland in docker/docker-py#3410

[DKP-2535] Honour context if present for default client, add contexts support by @ebriney in docker/docker-py#3401

docs: 7.2.0 changelog by @vvoland in docker/docker-py#3415

New Contributors

@laurazard made their first contribution in docker/docker-py#3290

@yasonk made their first contribution in docker/docker-py#3292

@ricardobranco777 made their first contribution in docker/docker-py#3366

... (truncated)

Commits

5ad5327 Merge pull request #3415 from vvoland/update-changelog
d242230 docs: 7.2.0 changelog
ba01cc7 Merge pull request #3401 from ebriney/client-from-context
ae5dfe9 Merge pull request #3410 from vvoland/fix-flaky
aa99999 integration/swarm: Preserve rotated unlock key
059d371 Merge pull request #3407 from vvoland/fix-arm64
9b4b9b8 gha: Add arm64 integration CI
9e9f8ff Skip tests incompatible with host architecture
e0542d9 Merge pull request #3408 from vvoland/gha-pin
578a11d gha: Pin to digests
Additional commits viewable in compare view

Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

#14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.

#14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".

#14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.

#14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

Commits

cf470ec Prepare release version 9.1.1
e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
501c4bc Merge pull request #14596 from bluetech/doc-classmethod
b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
9a567e0 [automated] Update plugin list (#14617) (#14618)
ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
Additional commits viewable in compare view

Updates certifi to 2026.6.17

Commits

d0ac52f 2026.06.17 (#418)
d46de62 Bump actions/checkout from 6.0.2 to 6.0.3 (#417)
6c183ec fix: update Requests docs link to canonical URL (#415)
36e3568 Bump dessant/lock-threads from 6.0.0 to 6.0.2
See full diff in compare view

Updates cffi to 2.1.0

Release notes

Sourced from cffi's releases.

v2.1.0

Added support for Python 3.15 and support for C extensions generated by CFFI to target the new abi3t free-threaded ABI.

Dropped support for Python 3.9.

Added cffi-gen-src CLI to generate CFFI C extension source for alternate build backend support.

Fixed crashes inside __delitem__.

Fixed "string too big" error under MSVC.

Fixed mingw builds.

Added support for arm64 iOS wheels.

Commits

d9f6f70 New release 2.1.0
02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
1362e5d Move cffi-gen-src release note to 2.1.0 notes
a797055 Make error message when embedding version test fails more friendly
f1f40a8 Update changelog
dc62c93 Delete missed cp39 Windows builds
a341180 Update version numbers to prepare for v2.1 release
9f04d85 Mark test using inet_ntoa as thread-unsafe
5f12702 Fix flaky pytest-run-parallel CI crash
26b3d3a Merge branch 'main' into integrate-buildtool
Additional commits viewable in compare view

Updates croniter to 6.2.4

Release notes

Sourced from croniter's releases.

6.2.4

croniter 6.2.4

Bugfixes

Fix expand_from_start_time day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (isoweekday() % 7 instead of weekday() + 1). (#239, thanks @alhudz)

Packaging

Bump pinned GitHub Actions via dependabot. (#238, #240)

Install: pip install croniter==6.2.4 · PyPI

Changelog

Sourced from croniter's changelog.

6.2.4 (2026-07-10)

Bugfixes

- Fix ``expand_from_start_time`` day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (``isoweekday() % 7`` instead of ``weekday() + 1``). [44e3090, [#239](https://github.com/pallets-eco/croniter/issues/239), @alhudz]
Packaging

Bump pinned GitHub Actions via dependabot. [fd13d2e, #240; 5cd2e46, #238]

6.2.3 (2026-07-02)

Features and Improvements

- Fix quadratic expansion of comma-separated range lists for a large speed-up on expressions with many ranges. [1d79fc6, [#231](https://github.com/pallets-eco/croniter/issues/231), @alhudz]
Bugfixes
- Reject a zero step (e.g. ``5-5/0``) in equal and reversed cron ranges instead of silently accepting it. [ab27767, [#232](https://github.com/pallets-eco/croniter/issues/232), @alhudz]
- Fix ``expand_from_start_time`` month low-bound off-by-one so stepped month ranges start on the correct month. [f329964, [#235](https://github.com/pallets-eco/croniter/issues/235), @alhudz]
Packaging



Fix zizmor-reported security findings in GitHub Actions workflows. [ed19f94, #230]
Bump pinned build and CI dependencies via dependabot.
Upgrade locked development and build dependencies (uv lock --upgrade).

6.2.2 (2026-03-15)
Packaging
- Switch build backend from ``flit_core`` to ``hatchling`` with pinned dependencies. [4cce160]
- Add PEP 639 license expression (``license = &quot;MIT&quot;``) to project metadata. [4cce160]
- Pin all GitHub Actions to SHA hashes across CI workflows. [4cce160]
- Add dependabot for automated dependency updates. [4cce160]
- Add zizmor workflow for CI security scanning. [4cce160]
6.2.1 (2026-03-15)
Bugfixes
- Fix ``get_prev`` skipping Feb 29 on leap years for day-of-month expressions. [441a0b5, [#203](https://github.com/pallets-eco/croniter/issues/203), @Souls-R]

&amp;lt;/tr&amp;gt;&amp;lt;/table&amp;gt; 
&lt;/code&gt;&lt;/pre&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/58534997eb4634344f00d407fb199d4d1bd057e7&quot;&gt;&lt;code&gt;5853499&lt;/code&gt;&lt;/a&gt; Prepare for release 6.2.4 (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/241&quot;&gt;#241&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/fd13d2ec447efd854806638cb5f71a2a3a90a0b5&quot;&gt;&lt;code&gt;fd13d2e&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/240&quot;&gt;#240&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/44e3090ae47ccf72e4027ed6fabf6a31eca42f85&quot;&gt;&lt;code&gt;44e3090&lt;/code&gt;&lt;/a&gt; wrap sunday in expand_from_start_time day-of-week low bound (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/239&quot;&gt;#239&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/5cd2e4611e8ebea446a9d0edef3f9d8e1f30c0e3&quot;&gt;&lt;code&gt;5cd2e46&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/238&quot;&gt;#238&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/f1eeddd7b9057b66406d162d04879258b29601d5&quot;&gt;&lt;code&gt;f1eeddd&lt;/code&gt;&lt;/a&gt; Prepare for 6.2.4 development (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/237&quot;&gt;#237&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/22b59e05f5ca485c45596b2a9b580fddffbf753f&quot;&gt;&lt;code&gt;22b59e0&lt;/code&gt;&lt;/a&gt; Prepare for release 6.2.3 (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/236&quot;&gt;#236&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/ab277671adc8e446e8dc7f1e939eabf024b6199e&quot;&gt;&lt;code&gt;ab27767&lt;/code&gt;&lt;/a&gt; reject zero step in equal and reversed cron ranges (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/232&quot;&gt;#232&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/f329964223eeb29e7788b1a9d615b525148fec96&quot;&gt;&lt;code&gt;f329964&lt;/code&gt;&lt;/a&gt; fix expand_from_start_time month low bound off-by-one (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/235&quot;&gt;#235&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/9810279c20030954e2f1ed2cf5f1d34b98c6b07f&quot;&gt;&lt;code&gt;9810279&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/233&quot;&gt;#233&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/d051aaf6342fbe9c559b9fcd99e6fb6f3bb63cb7&quot;&gt;&lt;code&gt;d051aaf&lt;/code&gt;&lt;/a&gt; Bump hatchling from 1.29.0 to 1.30.1 in the pip-dependencies group (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/234&quot;&gt;#234&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/pallets-eco/croniter/compare/6.2.2...6.2.4&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;</code></pre>

Updates `cryptography` to 49.0.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>49.0.0 - 2026-06-12</p>
<pre><code>
* **BACKWARDS INCOMPATIBLE:** Support for ``x86_64`` macOS has been removed.
  We now only publish ``arm64`` wheels for macOS.
* **BACKWARDS INCOMPATIBLE:** Support for 32-bit Windows has been removed.
  Users should move to a 64-bit Python installation.
* **BACKWARDS INCOMPATIBLE:** Removed the deprecated
  ``PUBLIC_KEY_TYPES``, ``PRIVATE_KEY_TYPES``,
  ``CERTIFICATE_PRIVATE_KEY_TYPES``, ``CERTIFICATE_ISSUER_PUBLIC_KEY_TYPES``,
  and ``CERTIFICATE_PUBLIC_KEY_TYPES`` type aliases. Use
  ``PublicKeyTypes``, ``PrivateKeyTypes``, ``CertificateIssuerPrivateKeyTypes``,
  ``CertificateIssuerPublicKeyTypes``, and ``CertificatePublicKeyTypes``
  instead. These were deprecated in version 40.0.
* **BACKWARDS INCOMPATIBLE:** :class:`~cryptography.hazmat.primitives.ciphers.algorithms.ChaCha20`
  now treats the first 4 bytes of the ``nonce`` as a 32-bit little-endian block
  counter (as defined in :rfc:`7539`) and tracks the number of bytes processed.
  Attempting to encrypt or decrypt more data than the counter allows before it
  would overflow now raises a :class:`ValueError` rather than silently diverging
  from RFC 7539. Setting the counter portion of the ``nonce`` to zero allows
  encrypting up to 256 GiB with a given nonce.
* **BACKWARDS INCOMPATIBLE:** Loading an X.509 certificate whose ECDSA or DSA
  signature ``AlgorithmIdentifier`` contains encoded NULL parameters now raises
  a :class:`ValueError`. Such certificates are invalid, but older versions of
  Java emitted them; previously they loaded with a deprecation warning.
* Fixed cross-compilation of the CFFI bindings when ``PYO3_CROSS_LIB_DIR``
  is set. The build now derives the Python include directory from
  ``PYO3_CROSS_LIB_DIR`` instead of querying the host interpreter, which
  previously caused the build to fail during cross-compilations for embedded
  systems, on hosts which have same-version Python development headers
  installed as the target Python.
* Added support for signing and verifying X.509 certificates, certificate
  signing requests, and certificate revocation lists with
  :doc:`/hazmat/primitives/asymmetric/mldsa` keys, as well as loading
  certificates that contain ML-DSA public keys.
* Added :meth:`~cryptography.hazmat.primitives.hpke.KEM.enc_length` to
  :class:`~cryptography.hazmat.primitives.hpke.KEM` so callers can split the
  encapsulated key from the ciphertext returned by
  :meth:`~cryptography.hazmat.primitives.hpke.Suite.encrypt`.
* :meth:`~cryptography.x509.verification.ExtensionPolicy.require_present`,
  :meth:`~cryptography.x509.verification.ExtensionPolicy.may_be_present`, and
  :meth:`~cryptography.x509.verification.ExtensionPolicy.require_not_present`
  now accept any extension type. Previously only a fixed set of extension
  types was supported, which made it impossible to account for otherwise
  unrecognized critical extensions during path validation.
* Added support for using :class:`~cryptography.x509.Certificate`,
  :class:`~cryptography.x509.CertificateSigningRequest`, and
  :class:`~cryptography.x509.CertificateRevocationList` as field types in
  :doc:`/hazmat/asn1/index` structures.
* Added :func:`~cryptography.hazmat.asn1.value_set`, a class decorator that
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/e300bbe2f1bec75e5ee7e0ab7b196958831b3db6"><code>e300bbe</code></a> bump version and changelog for 49.0.0 (<a href="https://redirect.github.com/pyca/cryptography/issues/15030">#15030</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/fa74cd8031b263edb50307f6d5a9a70df9f0a541"><code>fa74cd8</code></a> Add external mu (message representative) support for ML-DSA (<a href="https://redirect.github.com/pyca/cryptography/issues/14979">#14979</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/f594db3f315e621473c58721961f502ba2a286ec"><code>f594db3</code></a> chore(deps): bump openssl from 0.10.80 to 0.10.81 (<a href="https://redirect.github.com/pyca/cryptography/issues/15029">#15029</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/608e0119532153336310e51747724c6b9d107df7"><code>608e011</code></a> chore(deps): bump openssl-sys from 0.9.116 to 0.9.117 (<a href="https://redirect.github.com/pyca/cryptography/issues/15028">#15028</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/a322bc4fb2bd2fd6f345fdb155cac226b1770dad"><code>a322bc4</code></a> chore(deps): bump cc from 1.2.63 to 1.2.64 (<a href="https://redirect.github.com/pyca/cryptography/issues/15027">#15027</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/33181a74d41aa859b05f3720700a31c8e5b9e54c"><code>33181a7</code></a> Reject critical nameConstraints extensions containing directoryName constrain...</li>
<li><a href="https://github.com/pyca/cryptography/commit/6080dc7f08e7473544b07df95833ff2ee843266e"><code>6080dc7</code></a> Bump dependencies that dependabot isn't (<a href="https://redirect.github.com/pyca/cryptography/issues/15026">#15026</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/121faa33a717559a8b0f0180b2d4e7785234af79"><code>121faa3</code></a> chore(deps): bump virtualenv from 21.4.2 to 21.4.3 (<a href="https://redirect.github.com/pyca/cryptography/issues/15023">#15023</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/829520baa909eff95d64e5ebd165544d6fd60172"><code>829520b</code></a> Add more robust processing for DH parameters. (<a href="https://redirect.github.com/pyca/cryptography/issues/15016">#15016</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/0f0500141cec535846f36c4c68d02b03126386b5"><code>0f05001</code></a> Bump downstream dependencies in CI (<a href="https://redirect.github.com/pyca/cryptography/issues/15025">#15025</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pyca/cryptography/compare/48.0.0...49.0.0">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-functools` to 4.5.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst">jaraco-functools's changelog</a>.</em></p>
<blockquote>
<h1>v4.5.0</h1>
<h2>Features</h2>
<ul>
<li><code>bypass_when</code> and <code>bypass_unless</code> now accept callable checks and evaluate
them on each invocation instead of binding only at decoration time. (<a href="https://redirect.github.com/jaraco/jaraco.functools/issues/36">#36</a>)</li>
</ul>
<h1>v4.4.0</h1>
<h2>Features</h2>
<ul>
<li>Add noop.</li>
</ul>
<h1>v4.3.0</h1>
<h2>Features</h2>
<ul>
<li>Add none_as function.</li>
</ul>
<h1>v4.2.1</h1>
<p>No significant changes.</p>
<h1>v4.2.0</h1>
<h2>Features</h2>
<ul>
<li>Add 'passthrough' function.</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Added missing <code>splat</code> in stubs -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.functools/issues/29">#29</a>)</li>
</ul>
<p>v4.1.0</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/0e89d963ab0a2d6d0755df2424e5e3d5b983cf98"><code>0e89d96</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/4df0abd88dc7c36897b4f40abebda9ae7b24d33e"><code>4df0abd</code></a> Merge pull request <a href="https://redirect.github.com/jaraco/jaraco.functools/issues/36">#36</a> from jaraco/copilot/enhance-bypass-decorators-callables</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/e3ad23e72c049950d79d4c1c702a9b7e286d6983"><code>e3ad23e</code></a> 👹 Feed the hobgoblins (delint).</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/9ed118eb092ba639e925578576192d0da823d93f"><code>9ed118e</code></a> Merge branch 'main' into copilot/enhance-bypass-decorators-callables</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/d3cdfdf173d8f073d3c51f7d452e3860d783e283"><code>d3cdfdf</code></a> 👹 Feed the hobgoblins (delint).</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/dfc27da53d5b17d1d3b9b04459933f9054a1e3a2"><code>dfc27da</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/dc2a6a50c7b45d357e608b6beafd1339719d2f7c"><code>dc2a6a5</code></a> Rename towncrier fragment to PR number</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/a99352800c88bcac801dc3385cb9952f7729e946"><code>a993528</code></a> Add feature news fragment for callable bypass checks</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/2257f0ecead9b3b4bdc57615edb47485572b1669"><code>2257f0e</code></a> Inline bypass check normalization call</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/4d5cf8b5ba250ee46ef59fa7cd9760806ee06440"><code>4d5cf8b</code></a> Drop redundant bypass unit tests</li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.functools/compare/v4.4.0...v4.5.0">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-context` to 6.1.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst">jaraco-context's changelog</a>.</em></p>
<blockquote>
<h1>v6.1.2</h1>
<p>No significant changes.</p>
<h1>v6.1.1</h1>
<p>No significant changes.</p>
<h1>v6.1.0</h1>
<h2>Features</h2>
<ul>
<li>In tarfile.context, ensure that the default filter honors the data filter to avoid path traversal vulnerabilities.</li>
</ul>
<h1>v6.0.2</h1>
<p>No significant changes.</p>
<h1>v6.0.1</h1>
<h2>Bugfixes</h2>
<ul>
<li>Removed type declarations as suggested by Gemini. (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/13">#13</a>)</li>
</ul>
<h1>v6.0.0</h1>
<h2>Bugfixes</h2>
<ul>
<li>Fixed bug in repo_context where standard output from git would not be hidden (because git emits standard output on the stderr stream).</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Removed deprecated 'tarball_context', 'infer_compression', and 'null' contexts.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.context/commit/098f39c911d4504b2c718f2ff483ae24f1c4d378"><code>098f39c</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/926a20e42307a2b5d87b058f2df42345fba61ad4"><code>926a20e</code></a> Fix condition for skipping safety test on Python 3.12 (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/20">#20</a>)</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/19f1cbbcf4811fec84c2fee47e51c1a823b7d368"><code>19f1cbb</code></a> Strict type checking and re-enable mypy (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/16">#16</a>)</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/256995fa4d2bcaf5513d7d14204045de94b4957d"><code>256995f</code></a> Suppress coverage errors.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/0190667b24bd7b7f5f199ec36dc6e974fa31aab2"><code>0190667</code></a> Suppress type errors in test_safety.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/bc0dc8a641a0ef9539bd7b193c961f8de05344e0"><code>bc0dc8a</code></a> Suppress type errors with new property.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/8eee4d0bbf99ee75163865b150e638378e5a0b46"><code>8eee4d0</code></a> Modernize with ruff</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/825171649ef9d312b6f9740d235d206c0e927c3e"><code>8251716</code></a> Merge branch 'main' into Strict-type-checking-and-re-enable-mypy</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/7df1443e0d81d0f7a781231ab05e00fc4173672e"><code>7df1443</code></a> Restore expression algebra.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/616e2d6153eea558d0acf971adefc4d2c9dd6fc9"><code>616e2d6</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.context/compare/v6.1.1...v6.1.2">compare view</a></li>
</ul>
</details>
<br />

Updates `msgpack` to 1.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/releases">msgpack's releases</a>.</em></p>
<blockquote>
<h2>v1.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump pypa/cibuildwheel from 4.0.0 to 4.1.0 in the all-dependencies group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/694">msgpack/msgpack-python#694</a></li>
<li>release v1.2.1 by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/698">msgpack/msgpack-python#698</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/msgpack/msgpack-python/compare/v1.2.0...v1.2.1">https://github.com/msgpack/msgpack-python/compare/v1.2.0...v1.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md">msgpack's changelog</a>.</em></p>
<blockquote>
<h1>1.2.1</h1>
<p>Release Date: 2026-06-19</p>
<p>Fix a segfault when calling <code>Unpacker.unpack()</code> or <code>Unpacker.skip()</code> after an unpacking failure.
But note that reusing the same <code>Unpacker</code> instance after an unpacking failure is not supported.
Please create a new <code>Unpacker</code> instance instead. GHSA-6v7p-g79w-8964</p>
<h1>1.2.0</h1>
<p>Release Date: 2026-06-11</p>
<ul>
<li>Support free threaded Python. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/654">#654</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/686">#686</a></li>
<li>Dropped support for Python 3.9. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/656">#656</a></li>
<li>Fix missing error checks in C code. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/665">#665</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/666">#666</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/667">#667</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/672">#672</a></li>
<li>Fix <code>strict_map_key</code> option didn't work for <code>object_pairs_hook</code>. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/673">#673</a></li>
<li>Increase DEFAULT_RECURSE_LIMIT of Unpacker to 1024. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/676">#676</a></li>
<li>Fix memory leak when Unpacker returns error for invalid input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/671">#671</a></li>
<li>Fix <code>Packer.pack_ext_type()</code> ignored <code>autoreset</code> option. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/663">#663</a></li>
<li>Fix <code>Timestamp.from_datetime()</code> returning wrong value for pre-epoch datetimes. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/662">#662</a></li>
<li>Fix use-after-free in <code>unpackb()</code> and <code>Unpacker.unpack()</code> for non-contiguous input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/677">#677</a></li>
<li>Fix possible memory leak when calling <code>Unpacker.__init__()</code> several times. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/687">#687</a></li>
</ul>
<h1>1.1.2</h1>
<p>Release Date: 2025-10-08</p>
<p>This release does not change source code. It updates only building
wheels:</p>
<ul>
<li>Update Cython to v3.1.4</li>
<li>Update cibuildwheel to v3.2.0</li>
<li>Drop Python 3.8</li>
<li>Add Python 3.14</li>
<li>Add windows-arm</li>
</ul>
<h1>1.1.1</h1>
<p>Release Date: 2025-06-13</p>
<ul>
<li>No change from 1.1.1rc1.</li>
</ul>
<h1>1.1.1rc1</h1>
<p>Release Date: 2025-06-06</p>
<ul>
<li>Update Cython to 3.1.1 and cibuildwheel to 2.23.3.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/msgpack/msgpack-python/commit/448d43f5dcca7b3a2b0810e161af0a6431d90071"><code>448d43f</code></a> release v1.2.1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/698">#698</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/2c56ddb5d0025ed481d962c0f5d62d19dec7476d"><code>2c56ddb</code></a> Merge commit from fork</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/0f4f350b6f3e80f24750422673424cce5d96e15d"><code>0f4f350</code></a> Bump pypa/cibuildwheel from 4.0.0 to 4.1.0 in the all-dependencies group (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/694">#694</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/11ed0a5110c1920b85b7d24d9414f480983e0f16"><code>11ed0a5</code></a> release v1.2.0 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/692">#692</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/c410a388c58d55091736e510cad064977a12cb8b"><code>c410a38</code></a> Bump pypa/cibuildwheel from 3.4.1 to 4.0.0 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/691">#691</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/97ba6ca0d29c1e8a5b30112f13f37a4d6b3c4492"><code>97ba6ca</code></a> skip ci: remove unneeded CIBW_SKIP option</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/cdde1b0d6336caff4e82310c3c7d2b4c73f22d59"><code>cdde1b0</code></a> Wheels CI hangs for MacOS Intel (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/689">#689</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/5eb57e15455f5dd25001e97a7ef1170911dee104"><code>5eb57e1</code></a> release v1.2.0rc1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/681">#681</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/77395c19a50061238306df5ea10e67c5312ceff0"><code>77395c1</code></a> Harden <code>Unpacker.__init__</code> re-entry cleanup to prevent buffer/context leaks (...</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/7df7136e20933fd3a498bd58bff7975a24790516"><code>7df7136</code></a> Guard <code>Packer</code> buffer protocol hooks with Cython critical sections (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/686">#686</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/msgpack/msgpack-python/compare/v1.1.2...v1.2.1">compare view</a></li>
</ul>
</details>
<br />

Updates `multidict` to 6.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/aio-libs/multidict/releases">multidict's releases</a>.</em></p>
<blockquote>
<h2>6.7.1</h2>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed slow memory leak caused by identity by adding <code>Py_DECREF</code> to identity value before leaving <code>md_pop_one</code> on success
-- by :user:<code>Vizonex</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a href="https://redirect.github.com/aio-libs/multidict/issues/1284">#1284</a>.</p>
</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/aio-libs/multidict/blob/master/CHANGES.rst">multidict's changelog</a>.</em></p>
<blockquote>
<h1>6.7.1</h1>
<p><em>(2026-01-25)</em></p>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed slow memory leak caused by identity by adding <code>Py_DECREF</code> to identity value before leaving <code>md_pop_one</code> on success
-- by :user:<code>Vizonex</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1284</code>.</p>
</li>
</ul>
<hr />
<h1>6.7.0</h1>
<p><em>(2025-10-05)</em></p>
<h2>Contributor-facing changes</h2>
<ul>
<li>
<p>Updated tests and added CI for CPython 3.14 -- by :user:<code>kumaraditya303</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1235</code>.</p>
</li>
</ul>
<hr />
<h1>6.6.4</h1>
<p><em>(2025-08-11)</em></p>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed <code>MutliDict</code> &amp; <code>CIMultiDict</code> memory leak when deleting values or clearing them
-- by :user:<code>Vizonex</code></p>
<p><em>Related issues and pull requests on GitHub:</em></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/aio-libs/multidict/commit/39d3c322f6a9e824beee9b6f178e3166205f0f59"><code>39d3c32</code></a> Release 6.7.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1289">#1289</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/77bb95e83c226c3557015d055a1ce4a29889d49e"><code>77bb95e</code></a> Fix memory leak caused by identity when default value is inplace (<a href="https://redirect.github.com/aio-libs/multidict/issues/1284">#1284</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/87dd4a49a5e8d5b01a8d801cac0c92984726f411"><code>87dd4a4</code></a> Bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1287">#1287</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/6c764124a79da8f700faa1e3638311c58828947e"><code>6c76412</code></a> Bump actions/cache from 4 to 5 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1275">#1275</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/b91a033a29f360e76a8a24b92d50120d9cd08065"><code>b91a033</code></a> Bump actions/upload-artifact from 4 to 6 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1277">#1277</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/84bf82c0e2ec68919e7f3b7c5c7388a82f4737ee"><code>84bf82c</code></a> Bump psutil from 7.1.3 to 7.2.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1279">#1279</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/3f7b3cec6a5c23a100d972a667e7f67b84809bb3"><code>3f7b3ce</code></a> Bump pypa/cibuildwheel from 3.3.0 to 3.3.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1280">#1280</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/bbae9027cc99e23fc1ab98d97ed0adcd644c32c8"><code>bbae902</code></a> Bump sigstore/gh-action-sigstore-python from 3.1.0 to 3.2.0 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1274">#1274</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/000b5b0d25b3fc672c4226615f52a7d0cd6c2c96"><code>000b5b0</code></a> Remove follow_untyped_imports for mypy-sphinx (<a href="https://redirect.github.com/aio-libs/multidict/issues/1286">#1286</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/3d2d63044c98c8ede9204e8a9685921763cc0d4e"><code>3d2d630</code></a> Bump actions/download-artifact from 6 to 7 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1276">#1276</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/aio-libs/multidict/compare/v6.6.0...v6.7.1">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-api` to 1.43.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md">opentelemetry-api's changelog</a>.</em></p>
<blockquote>
<h2>Version 1.43.0/0.64b0 (2026-06-24)</h2>
<h3>Added</h3>
<ul>
<li><code>opentelemetry-sdk</code>: add <code>add_metric_reader</code> / <code>remove_metric_reader</code> public
APIs to register / unregister metric readers at runtime.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4863">#4863</a>)</li>
<li><code>opentelemetry-exporter-prometheus</code>: add support for configuring metric scope
labels
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5123">#5123</a>)</li>
<li><code>opentelemetry-exporter-otlp-proto-grpc</code>: Add grpc error details to the log
message that's written when the grpc call fails.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5143">#5143</a>)</li>
<li><code>opentelemetry-exporter-http-transport</code>: add
'opentelemetry-exporter-http-transport' package for HTTP exporters
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5194">#5194</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>composite/development</code> samplers support to
declarative file configuration
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5201">#5201</a>)</li>
<li><code>opentelemetry-exporter-otlp-json-file</code>: Add OTLP JSON File exporter
implementation
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5207">#5207</a>)</li>
<li><code>opentelemetry-sdk</code>: add <code>_resolve_component</code> shared utility for declarative
config plugin loading, reducing boilerplate in exporter factory functions
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5215">#5215</a>)</li>
<li><code>opentelemetry-sdk</code>: add pull metric reader support to declarative file
configuration, including Prometheus metric reader via the
<code>prometheus_development</code> config field
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5216">#5216</a>)</li>
<li><code>opentelemetry-proto-json</code>: update to use opentelemetry-proto v1.10.0
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5224">#5224</a>)</li>
<li><code>opentelemetry-proto</code>: bump maximum supported protobuf version to 7.x.x
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5251">#5251</a>)</li>
<li><code>opentelemetry-sdk</code>: add <code>ServiceInstanceIdResourceDetector</code> for populating
<code>service.instance.id</code>
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5259">#5259</a>)</li>
<li><code>opentelemetry-sdk</code>: declarative config loader now recursively converts
parsed dicts into typed dataclass instances, including nested dataclasses,
lists of dataclasses, and enum values. End-to-end YAML/JSON → SDK
configuration now works via the factory functions.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5269">#5269</a>)</li>
<li><code>opentelemetry-sdk</code>: add <code>configure_sdk(config)</code> to the declarative
configuration API. Single entry point that takes a parsed
<code>OpenTelemetryConfiguration</code>, builds the resource, and applies the
tracer/meter/logger providers and propagator globally. Honors the top-level
<code>disabled</code> flag.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5270">#5270</a>)</li>
<li><code>opentelemetry-sdk</code>: the SDK configurator now honors the <code>OTEL_CONFIG_FILE</code>
environment variable. When set, the SDK loads and applies the referenced
declarative configuration file (YAML or JSON) in place of the env-var-based</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/fcbbeb8e4eeb785519c7d2efbe367e8fd79dd0b3"><code>fcbbeb8</code></a> [release/v1.43.x-0.64bx] Prepare release 1.43.0/0.64b0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5349">#5349</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/b40dcbc8c66ad85ba5b7f346ab657d61800bd6f2"><code>b40dcbc</code></a> opentelemetry-exporter-http-transport: enable entry-point loading of transpor...</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/10e8577798c94b743bfb2de3ed299fcb34c43898"><code>10e8577</code></a> update to Sphinx to 8.1.3 in order to support Python 3.14 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5278">#5278</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/6ac68952f4593d1582218f29316f6da75315166a"><code>6ac6895</code></a> docs: add declarative configuration guide and example (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5309">#5309</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/13ad4d54f9bef5ca1a486e042b685276a964429f"><code>13ad4d5</code></a> opentelemetry-api: normalize empty environment propagation names to &quot;_&quot; in En...</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/6a0ab8420aa07d4f41dd0dc2c1a8a9cad87ecf4c"><code>6a0ab84</code></a> opentelemetry-sdk: merge doesn't need a copy, dict already does this (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5326">#5326</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/ac7a3df2fb5a3de775c1df3cd2a6c71eb53aec73"><code>ac7a3df</code></a> feat(config): support OTEL_CONFIG_FILE in the SDK configurator (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5271">#5271</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/fa75422c5cc4c9a15e973a1f4e704af0319494d7"><code>fa75422</code></a> Add support for composite samplers in declarative config (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5201">#5201</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/43f079f5dd6b07c06afe2ed68fd310bad9c38e56"><code>43f079f</code></a> Update json and proto encoder to always accept None type, cleanup code / test...</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/53c9d962f4148eb13272f655cd349bc6e9f99729"><code>53c9d96</code></a> chore: cleanup typo found in test (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5324">#5324</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/open-telemetry/opentelemetry-python/compare/v1.41.1...v1.43.0">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-sdk` to 1.43.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md">opentelemetry-sdk's changelog</a>.</em></p>
<blockquote>
<h2>Version 1.43.0/0.64b0 (2026-06-24)</h2>
<h3>Added</h3>
<ul>
<li><code>opentelemetry-sdk</code>: add <code>add_metric_reader</code> / <code>remove_metric_reader</code> public
APIs to register / unregister metric readers at runtime.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/4863">#4863</a>)</li>
<li><code>opentelemetry-exporter-prometheus</code>: add support for configuring metric scope
labels
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5123">#5123</a>)</li>
<li><code>opentelemetry-exporter-otlp-proto-grpc</code>: Add grpc error details to the log
message that's written when the grpc call fails.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5143">#5143</a>)</li>
<li><code>opentelemetry-exporter-http-transport</code>: add
'opentelemetry-exporter-http-transport' package for HTTP exporters
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5194">#5194</a>)</li>
<li><code>opentelemetry-sdk</code>: Add <code>composite/development</code> samplers support to
declarative file configuration
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5201">#5201</a>)</li>
<li><code>opentelemetry-exporter-otlp-json-file</code>: Add OTLP JSON File exporter
implementation
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5207">#5207</a>)</li>
<li><code>opentelemetry-sdk</code>: add <code>_resolve_component</code> shared utility for declarative
config plugin loading, reducing boilerplate in exporter factory functions
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5215">#5215</a>)</li>
<li><code>opentelemetry-sdk</code>: add pull metric...

_Description has been truncated_

Updates the requirements on [pip](https://github.com/pypa/pip), [docker](https://github.com/docker/docker-py), [pytest](https://github.com/pytest-dev/pytest), [certifi](https://github.com/certifi/python-certifi), [cffi](https://github.com/python-cffi/cffi), [croniter](https://github.com/pallets-eco/croniter), [cryptography](https://github.com/pyca/cryptography), [jaraco-functools](https://github.com/jaraco/jaraco.functools), [jaraco-context](https://github.com/jaraco/jaraco.context), [msgpack](https://github.com/msgpack/msgpack-python), [multidict](https://github.com/aio-libs/multidict), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-prometheus](https://github.com/open-telemetry/opentelemetry-python), [xxhash](https://github.com/ifduyue/python-xxhash), [psutil](https://github.com/giampaolo/psutil), [pyasn1](https://github.com/pyasn1/pyasn1), [pyopenssl](https://github.com/pyca/pyopenssl), [requests](https://github.com/psf/requests), [tornado](https://github.com/tornadoweb/tornado), [truststore](https://github.com/sethmlarson/truststore), [virtualenv](https://github.com/pypa/virtualenv), [filelock](https://github.com/tox-dev/py-filelock), [zipp](https://github.com/jaraco/zipp), [setuptools-scm](https://github.com/pypa/setuptools-scm), [build](https://github.com/pypa/build), [pylint](https://github.com/pylint-dev/pylint), [boto3](https://github.com/boto/boto3), [botocore](https://github.com/boto/botocore), [pynacl](https://github.com/pyca/pynacl), [vcert](https://github.com/Venafi/vcert-python), [xmldiff](https://github.com/Shoobx/xmldiff), [pygit2](https://github.com/libgit2/pygit2), [ansible](https://github.com/ansible-community/ansible-build-data), [python-telegram-bot](https://github.com/python-telegram-bot/python-telegram-bot) and mercurial to permit the latest version. Updates `pip` from 25.2 to 26.1.2 - [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst) - [Commits](pypa/pip@25.2...26.1.2) Updates `docker` to 7.2.0 - [Release notes](https://github.com/docker/docker-py/releases) - [Commits](docker/docker-py@7.1.0...7.2.0) Updates `pytest` to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.1.1) Updates `certifi` to 2026.6.17 - [Commits](certifi/python-certifi@2026.05.20...2026.06.17) Updates `cffi` to 2.1.0 - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](python-cffi/cffi@v2.0.0...v2.1.0) Updates `croniter` to 6.2.4 - [Release notes](https://github.com/pallets-eco/croniter/releases) - [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst) - [Commits](pallets-eco/croniter@6.2.2...6.2.4) Updates `cryptography` to 49.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.0...49.0.0) Updates `jaraco-functools` to 4.5.0 - [Release notes](https://github.com/jaraco/jaraco.functools/releases) - [Changelog](https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.functools@v4.4.0...v4.5.0) Updates `jaraco-context` to 6.1.2 - [Release notes](https://github.com/jaraco/jaraco.context/releases) - [Changelog](https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.context@v6.1.1...v6.1.2) Updates `msgpack` to 1.2.1 - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md) - [Commits](msgpack/msgpack-python@v1.1.2...v1.2.1) Updates `multidict` to 6.7.1 - [Release notes](https://github.com/aio-libs/multidict/releases) - [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst) - [Commits](aio-libs/multidict@v6.6.0...v6.7.1) Updates `opentelemetry-api` to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.43.0) Updates `opentelemetry-sdk` to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.43.0) Updates `opentelemetry-exporter-otlp-proto-http` to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.43.0) Updates `opentelemetry-exporter-prometheus` to 0.64b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/commits) Updates `xxhash` to 3.8.1 - [Release notes](https://github.com/ifduyue/python-xxhash/releases) - [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst) - [Commits](ifduyue/python-xxhash@v3.7.0...v3.8.1) Updates `psutil` to 7.2.2 - [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst) - [Commits](giampaolo/psutil@v5.0.0...v7.2.2) Updates `pyasn1` to 0.6.4 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.3...v0.6.4) Updates `pyopenssl` to 26.3.0 - [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst) - [Commits](pyca/pyopenssl@26.2.0...26.3.0) Updates `requests` to 2.34.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v0.2.0...v2.34.2) Updates `tornado` to 6.5.7 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.6...v6.5.7) Updates `truststore` to 0.10.4 - [Release notes](https://github.com/sethmlarson/truststore/releases) - [Changelog](https://github.com/sethmlarson/truststore/blob/main/CHANGELOG.md) - [Commits](sethmlarson/truststore@v0.10.0...v0.10.4) Updates `virtualenv` to 21.6.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.4.2...21.6.1) Updates `filelock` to 3.29.7 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.29.1...3.29.7) Updates `zipp` to 4.1.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.23.1...v4.1.0) Updates `setuptools-scm` to 10.2.0 - [Release notes](https://github.com/pypa/setuptools-scm/releases) - [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md) - [Commits](pypa/setuptools-scm@0.1...setuptools-scm-v10.2.0) Updates `build` to 1.5.1 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.4.4...1.5.1) Updates `docker` to 7.2.0 - [Release notes](https://github.com/docker/docker-py/releases) - [Commits](docker/docker-py@7.1.0...7.2.0) Updates `cffi` to 2.1.0 - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](python-cffi/cffi@v2.0.0...v2.1.0) Updates `cryptography` to 49.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.0...49.0.0) Updates `virtualenv` to 21.6.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.4.2...21.6.1) Updates `filelock` to 3.29.7 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.29.1...3.29.7) Updates `pylint` to 3.3.9 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v3.1.0...v3.3.9) Updates `boto3` to 1.43.46 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.24...1.43.46) Updates `botocore` to 1.43.46 - [Commits](boto/botocore@1.43.24...1.43.46) Updates `pynacl` to 1.6.2 - [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst) - [Commits](pyca/pynacl@1.5.0...1.6.2) Updates `vcert` to 0.9.1 - [Release notes](https://github.com/Venafi/vcert-python/releases) - [Commits](Venafi/vcert-python@v0.9.0...v0.9.1) Updates `xmldiff` to 3.0 - [Release notes](https://github.com/Shoobx/xmldiff/releases) - [Changelog](https://github.com/Shoobx/xmldiff/blob/master/CHANGES.rst) - [Commits](Shoobx/xmldiff@2.7.0...3.0) Updates `pygit2` to 1.19.3 - [Release notes](https://github.com/libgit2/pygit2/releases) - [Changelog](https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md) - [Commits](libgit2/pygit2@v1.19.2...v1.19.3) Updates `ansible` to 14.1.0 - [Changelog](https://github.com/ansible-community/ansible-build-data/blob/main/docs/release-process.md) - [Commits](ansible-community/ansible-build-data@14.0.0...14.1.0) Updates `python-telegram-bot` to 22.8 - [Release notes](https://github.com/python-telegram-bot/python-telegram-bot/releases) - [Commits](python-telegram-bot/python-telegram-bot@v22.7...v22.8) Updates `mercurial` to 7.2.3 Updates `cryptography` to 49.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.0...49.0.0) Updates `pyopenssl` to 26.3.0 - [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst) - [Commits](pyca/pyopenssl@26.2.0...26.3.0) --- updated-dependencies: - dependency-name: pip dependency-version: 26.1.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-pip-updates - dependency-name: docker dependency-version: 7.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: certifi dependency-version: 2026.6.17 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cffi dependency-version: 2.1.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: croniter dependency-version: 6.2.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 49.0.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: jaraco-functools dependency-version: 4.5.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: jaraco-context dependency-version: 6.1.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: msgpack dependency-version: 1.2.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: multidict dependency-version: 6.7.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-api dependency-version: 1.43.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-sdk dependency-version: 1.43.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.43.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-exporter-prometheus dependency-version: 0.64b0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: xxhash dependency-version: 3.8.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: psutil dependency-version: 7.2.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pyasn1 dependency-version: 0.6.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pyopenssl dependency-version: 26.3.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: requests dependency-version: 2.34.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: tornado dependency-version: 6.5.7 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: truststore dependency-version: 0.10.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: virtualenv dependency-version: 21.6.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: filelock dependency-version: 3.29.7 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: zipp dependency-version: 4.1.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: setuptools-scm dependency-version: 10.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: build dependency-version: 1.5.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: docker dependency-version: 7.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cffi dependency-version: 2.1.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 49.0.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: virtualenv dependency-version: 21.6.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: filelock dependency-version: 3.29.7 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pylint dependency-version: 3.3.9 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: boto3 dependency-version: 1.43.46 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: botocore dependency-version: 1.43.46 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pynacl dependency-version: 1.6.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: vcert dependency-version: 0.9.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: xmldiff dependency-version: '3.0' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pygit2 dependency-version: 1.19.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: ansible dependency-version: 14.1.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: python-telegram-bot dependency-version: '22.8' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: mercurial dependency-version: 7.2.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 49.0.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pyopenssl dependency-version: 26.3.0 dependency-type: direct:production dependency-group: all-pip-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the test:full Run the full test suite label Jul 11, 2026

dependabot Bot requested a review from a team as a code owner July 11, 2026 21:12

dependabot Bot added the test:full Run the full test suite label Jul 11, 2026

dependabot Bot temporarily deployed to workflow-restart July 11, 2026 21:12 Inactive

dependabot Bot had a problem deploying to ci July 11, 2026 21:12 Error

Automated requirement synchronization

9a38877

salt-pr-bot Bot temporarily deployed to workflow-restart July 11, 2026 21:13 Inactive

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 21:13 Inactive

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 21:27 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 21:27 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 21:43 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 21:43 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 21:43 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 22:20 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 22:24 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 22:24 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 22:24 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 22:28 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 22:32 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 22:32 Failure

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 22:37 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 22:40 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 22:40 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 22:40 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 22:45 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 22:49 Inactive

salt-pr-bot Bot had a problem deploying to ci July 11, 2026 22:49 Failure

salt-pr-bot Bot temporarily deployed to ci July 11, 2026 22:49 Inactive

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the all-pip-updates group across 3 directories with 37 updates#69785

Bump the all-pip-updates group across 3 directories with 37 updates#69785
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/pip/master/all-pip-updates-37423c6043

dependabot Bot commented on behalf of github Jul 11, 2026

6.2.2 (2026-03-15)

6.2.1 (2026-03-15)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 11, 2026

26.1.2 (2026-05-31)

Bug Fixes

26.1.1 (2026-05-04)

Bug Fixes

26.1 (2026-04-26)

Deprecations and Removals

Features

Enhancements

7.2.0

Upgrade Notes

Features

Bugfixes

Miscellaneous

What's Changed

New Contributors

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

v2.1.0

6.2.4

croniter 6.2.4

Bugfixes

Packaging

6.2.4 (2026-07-10)

6.2.3 (2026-07-02)

6.2.2 (2026-03-15)

6.2.1 (2026-03-15)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants