From d63b25056cb5dedb63043a597772a404bf7d6ea1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 11:48:08 +0000 Subject: [PATCH 1/6] Bump coverage from 7.15.3 to 7.15.4 (#13369) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [coverage](https://github.com/coveragepy/coveragepy) from 7.15.3 to 7.15.4.
Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

:arrow_right:  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=coverage&package-manager=pip&previous-version=7.15.3&new-version=7.15.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/test-common-base.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test-mobile.txt | 2 +- requirements/test.txt | 2 +- 7 files changed, 7 insertions(+), 7 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 9d15a368840..56e58066b6b 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -65,7 +65,7 @@ click==8.4.2 # via # pip-tools # towncrier -coverage==7.15.3 +coverage==7.15.4 # via # -r requirements/test-common.in # pytest-cov diff --git a/requirements/dev.txt b/requirements/dev.txt index b7770e8b076..86d44009225 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -65,7 +65,7 @@ click==8.4.2 # via # pip-tools # towncrier -coverage==7.15.3 +coverage==7.15.4 # via # -r requirements/test-common.in # pytest-cov diff --git a/requirements/test-common-base.txt b/requirements/test-common-base.txt index 80573871fef..cf73034a819 100644 --- a/requirements/test-common-base.txt +++ b/requirements/test-common-base.txt @@ -14,7 +14,7 @@ attrs==26.1.0 # via aiohttp backports-asyncio-runner==1.2.0 # via pytest-asyncio -coverage==7.15.3 +coverage==7.15.4 # via pytest-cov exceptiongroup==1.3.1 # via pytest diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 4399651721e..52c4569646b 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -22,7 +22,7 @@ blockbuster==1.5.26 # via -r requirements/test-common.in cffi==2.1.0 # via cryptography -coverage==7.15.3 +coverage==7.15.4 # via # -r requirements/test-common.in # pytest-cov diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 4527ab4a993..0e03b7219b8 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -38,7 +38,7 @@ cffi==2.1.0 # via # cryptography # pycares -coverage==7.15.3 +coverage==7.15.4 # via # -r requirements/test-common.in # pytest-cov diff --git a/requirements/test-mobile.txt b/requirements/test-mobile.txt index dcb3a37bad9..21e213a1cc0 100644 --- a/requirements/test-mobile.txt +++ b/requirements/test-mobile.txt @@ -34,7 +34,7 @@ cffi==2.1.0 ; sys_platform != "android" and sys_platform != "ios" # via # -r requirements/test-mobile.in # pycares -coverage==7.15.3 +coverage==7.15.4 # via pytest-cov exceptiongroup==1.3.1 # via diff --git a/requirements/test.txt b/requirements/test.txt index b74df3aaf7c..049195a8d4b 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -38,7 +38,7 @@ cffi==2.1.0 # via # cryptography # pycares -coverage==7.15.3 +coverage==7.15.4 # via # -r requirements/test-common.in # pytest-cov From 72c09a9ee9f0100caae9d135cabb39eacfe500e7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 11:53:16 +0000 Subject: [PATCH 2/6] Bump librt from 0.13.0 to 0.14.0 (#13367) Bumps [librt](https://github.com/mypyc/librt) from 0.13.0 to 0.14.0.
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=librt&package-manager=pip&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 56e58066b6b..ed98e8f28b0 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -123,7 +123,7 @@ jinja2==3.1.6 # sphinx # sphinxcontrib-mermaid # towncrier -librt==0.13.0 +librt==0.14.0 # via mypy markdown-it-py==3.0.0 # via diff --git a/requirements/dev.txt b/requirements/dev.txt index 86d44009225..6bff6a79d1a 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -121,7 +121,7 @@ jinja2==3.1.6 # sphinx # sphinxcontrib-mermaid # towncrier -librt==0.13.0 +librt==0.14.0 # via mypy markdown-it-py==3.0.0 # via diff --git a/requirements/lint.txt b/requirements/lint.txt index f999a579709..ea5ebc5a563 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -64,7 +64,7 @@ iniconfig==2.3.0 # via pytest isal==1.8.0 # via -r requirements/lint.in -librt==0.13.0 +librt==0.14.0 # via mypy markdown-it-py==4.2.0 # via rich diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 52c4569646b..36195f51f07 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -48,7 +48,7 @@ iniconfig==2.3.0 # via pytest isal==1.8.0 ; python_version < "3.14" and implementation_name == "cpython" # via -r requirements/test-common.in -librt==0.13.0 +librt==0.14.0 # via mypy markdown-it-py==4.2.0 # via rich diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 0e03b7219b8..df9ddca07b3 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -69,7 +69,7 @@ iniconfig==2.3.0 # via pytest isal==1.8.0 ; python_version < "3.14" and implementation_name == "cpython" # via -r requirements/test-common.in -librt==0.13.0 +librt==0.14.0 # via mypy markdown-it-py==4.2.0 # via rich diff --git a/requirements/test.txt b/requirements/test.txt index 049195a8d4b..4c833b4e959 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -69,7 +69,7 @@ iniconfig==2.3.0 # via pytest isal==1.8.0 ; python_version < "3.14" and implementation_name == "cpython" # via -r requirements/test-common.in -librt==0.13.0 +librt==0.14.0 # via mypy markdown-it-py==4.2.0 # via rich From e47551845f8376da5836580316e82ce45004955a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 11:59:13 +0000 Subject: [PATCH 3/6] Bump ast-serialize from 0.6.0 to 0.7.0 (#13371) Bumps [ast-serialize](https://github.com/mypyc/ast_serialize) from 0.6.0 to 0.7.0.
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ast-serialize&package-manager=pip&previous-version=0.6.0&new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index ed98e8f28b0..7af51b87fb3 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -26,7 +26,7 @@ alabaster==1.0.0 # via sphinx annotated-types==0.8.0 # via pydantic -ast-serialize==0.6.0 +ast-serialize==0.7.0 # via mypy async-timeout==5.0.1 ; python_version < "3.11" # via diff --git a/requirements/dev.txt b/requirements/dev.txt index 6bff6a79d1a..f53b5d5c43d 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -26,7 +26,7 @@ alabaster==1.0.0 # via sphinx annotated-types==0.8.0 # via pydantic -ast-serialize==0.6.0 +ast-serialize==0.7.0 # via mypy async-timeout==5.0.1 ; python_version < "3.11" # via diff --git a/requirements/lint.txt b/requirements/lint.txt index ea5ebc5a563..50dad9f6d4d 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -14,7 +14,7 @@ aiosignal==1.4.0 # via aiohttp annotated-types==0.8.0 # via pydantic -ast-serialize==0.6.0 +ast-serialize==0.7.0 # via mypy async-timeout==5.0.1 # via diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 36195f51f07..96e700e1837 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -10,7 +10,7 @@ aiosignal==1.4.0 # via aiohttp annotated-types==0.8.0 # via pydantic -ast-serialize==0.6.0 +ast-serialize==0.7.0 # via mypy async-timeout==5.0.1 # via aiohttp diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index df9ddca07b3..89e84eb2cd1 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -18,7 +18,7 @@ aiosignal==1.4.0 # aiohttp annotated-types==0.8.0 # via pydantic -ast-serialize==0.6.0 +ast-serialize==0.7.0 # via mypy async-timeout==5.0.1 ; python_version < "3.11" # via diff --git a/requirements/test.txt b/requirements/test.txt index 4c833b4e959..ed11c20dd29 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -18,7 +18,7 @@ aiosignal==1.4.0 # aiohttp annotated-types==0.8.0 # via pydantic -ast-serialize==0.6.0 +ast-serialize==0.7.0 # via mypy async-timeout==5.0.1 ; python_version < "3.11" # via From be7959c2b311b75985ee4ba352b821de294c8886 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 12:26:06 +0000 Subject: [PATCH 4/6] Bump packaging from 26.2 to 26.3 (#13374) Bumps [packaging](https://github.com/pypa/packaging) from 26.2 to 26.3.
Release notes

Sourced from packaging's releases.

26.3

What's Changed

Features

  • Add a public VersionRange API and SpecifierSet.to_range(), representing the versions a specifier set accepts as an interval set that supports intersection, union, difference, complement, set relations, membership tests, and filtering. VersionRange.to_specifier_set() converts a range back to a SpecifierSet where a PEP 440 form exists. (#1267, #1270, #1298)
  • PEP 808: accept Metadata-Version: 2.6. (#1194)
  • Add a limit argument to parse_tag() for compressed tag sets. (#1220)
  • Add a prefer_sdist_predicate argument to Pylock.select() to prefer source distributions over wheels for selected packages. (#1334)
  • Add pure_python_tags() to generate the pure-Python tags for a Python version without touching the running platform. (#1346)
  • Add SpecifierSet.is_subset(), SpecifierSet.is_superset(), and SpecifierSet.is_disjoint(), which compare the versions two specifier sets accept. (#1313)

Behavior adaptations

  • Drop support for Python 3.8; packaging now requires Python 3.9 or later. (#1157)
  • Prefer native linux_* platform tags over manylinux and musllinux tags on Linux. (#160)

Fixes for versions and specifiers

  • Raise InvalidVersion instead of TypeError when Version is given a non-string. (#1319)
  • Raise InvalidVersion for non-string pre-release letters passed to Version.from_parts. (#1241)
  • Fix an AttributeError when hashing internally trimmed versions. (#1242)
  • Fix SpecifierSet.is_unsatisfiable for post-release boundary intersections. (#1257)

Fixes for requirements and markers

  • Make Requirement.__hash__ consistent with __eq__ for trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and foo==1.0.0.0), so equal requirements hash equal and deduplicate in sets and dicts. (#1232)
  • Normalize requested extra names before comparing or hashing requirements. (#644)
  • Preserve a Requirement's specifier prereleases override across a pickle round trip. (#1204)
  • Raise InvalidRequirement instead of InvalidSpecifier when a requirement contains an invalid specifier. (#1332)
  • Clarify the error for post-release prefix wildcards like ==1.0.post1.*. (#1299)
  • Preserve quoting semantics when serializing marker values, so round-tripped markers parse back to the same marker. (#1213)
  • Keep the parentheses of a nested group when serializing markers. (#1316)
  • Normalize extra and dependency_groups values in nested markers at parse time. (#1246, #1310)
  • Raise UndefinedComparison when a set-valued variable like extras is used outside the membership form. (#1265)
  • Raise UndefinedEnvironmentName (a KeyError subclass) for missing environment keys during marker evaluation. (#1276)
  • Wrap malformed string literal errors in InvalidMarker / InvalidRequirement instead of leaking a low-level error. (#1249)
  • Reject requirements and markers with a trailing line break. (#1345)

Fixes for metadata and licenses

  • Collect all from_email validation errors into one ExceptionGroup instead of raising the first. (#1268)
  • Accept the UTF-8 charset case-insensitively in email payloads. (#1330)
  • Reject malformed Description-Content-Type values. (#1329)
  • Don't rewrite user values that contain {field} placeholders in error messages. (#1327)
  • Route multipart email payloads to unparsed instead of asserting. (#1247)
  • Make InvalidMetadata and CyclicDependencyGroup picklable. (#1328)
  • Fold every line boundary str.splitlines recognizes when writing a header with RFC822Message. (#1356)

... (truncated)

Changelog

Sourced from packaging's changelog.

26.3 - 2026-08-03


Features:

    

  • Add a public :class:~packaging.ranges.VersionRange API
and
    
:meth:SpecifierSet.to_range()
&lt;packaging.specifiers.SpecifierSet.to_range&gt;,
    
representing the versions a specifier set accepts as an interval set
that
    
supports intersection, union, difference, complement, set relations,
    
membership tests, and filtering.
    
:meth:~packaging.ranges.VersionRange.to_specifier_set
converts a range back
    
to a :class:~packaging.specifiers.SpecifierSet where a PEP
440 form exists.
    
(:pull:1267, :pull:1270,
:pull:1298)
    • 

  • PEP 808: accept Metadata-Version: 2.6.
(:pull:1194)
    • 

  • Add a limit argument to parse_tag() for
compressed tag sets.
    
(:issue:1220)
    • 

  • Add a prefer_sdist_predicate argument to
Pylock.select() to prefer
    
source distributions over wheels for selected packages.
(:pull:1334)
    • 

  • Add :func:~packaging.tags.pure_python_tags to generate
the pure-Python
    
tags for a Python version without touching the running platform.
    
(:pull:1346)
    • 

  • Add :meth:SpecifierSet.is_subset()
&lt;packaging.specifiers.SpecifierSet.is_subset&gt;,
:meth:~packaging.specifiers.SpecifierSet.is_superset,
    
and :meth:~packaging.specifiers.SpecifierSet.is_disjoint,
which compare the
    
versions two specifier sets accept. (:pull:1313)
    • 



Behavior adaptations:


    

  • Drop support for Python 3.8; packaging now requires Python 3.9 or
later.
    
(:pull:1157)
    • 

  • Prefer native linux_* platform tags over
manylinux and musllinux
    
tags on Linux. (:issue:160)
    • 



Fixes for versions and specifiers:


    

  • Raise InvalidVersion instead of TypeError
when Version is given a
    
non-string. (:pull:1319)
    • 

  • Raise InvalidVersion for non-string pre-release letters
passed to
    
Version.from_parts. (:pull:1241)
    • 

  • Fix an AttributeError when hashing internally trimmed
versions.
    
(:pull:1242)
    • 

  • Fix SpecifierSet.is_unsatisfiable for post-release
boundary
    
intersections. (:pull:1257)
    • 



Fixes for requirements and markers:


    

  • Make Requirement.__hash__ consistent with
__eq__ for
    
trailing-zero-equivalent specifiers (e.g. foo==1.0.0 and
    
foo==1.0.0.0), so equal requirements hash equal and
deduplicate in
    
sets and dicts. (:pull:1232)
    
</tr></table>

... (truncated)

Commits
  • 929fd4b Bump for release
  • f300ebf chore(deps): bump the pre-commit group with 5 updates (#1357)
  • f91d975 ci(downstream): bump hatchling to 1.31.0 and fix its pytest rootdir (#1361)
  • b1a7124 chore(deps): bump the github-actions group with 7 updates (#1358)
  • 2d873eb fix(metadata): fold every line boundary when writing headers (#1356)
  • 413d006 docs: changelog for 26.3 (#1343)
  • 4eb0753 docs(metadata): explain selective field validation (#1342)
  • 77e9ed4 feat(tags): add pure Python tag generator (#1346)
  • 7cea5e8 ci: drop 3.13t on Windows (3.13.14t may fail to build, run takes 9 minutes) (...
  • 45a8b34 docs: add missing versionadded/versionchanged directives (#1344)
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=packaging&package-manager=pip&previous-version=26.2&new-version=26.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/base-ft.txt | 2 +- requirements/base.txt | 2 +- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/doc-spelling.txt | 2 +- requirements/doc.txt | 2 +- requirements/lint.txt | 2 +- requirements/test-common-base.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test-mobile.txt | 2 +- requirements/test.txt | 2 +- 12 files changed, 12 insertions(+), 12 deletions(-) diff --git a/requirements/base-ft.txt b/requirements/base-ft.txt index 813373012c1..e5917fcf3d7 100644 --- a/requirements/base-ft.txt +++ b/requirements/base-ft.txt @@ -34,7 +34,7 @@ multidict==6.7.1 # via # -r requirements/runtime-deps.in # yarl -packaging==26.2 +packaging==26.3 # via gunicorn propcache==0.5.2 # via diff --git a/requirements/base.txt b/requirements/base.txt index 4fe91eb89b7..eb61f7930c3 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -34,7 +34,7 @@ multidict==6.7.1 # via # -r requirements/runtime-deps.in # yarl -packaging==26.2 +packaging==26.3 # via gunicorn propcache==0.5.2 # via diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 7af51b87fb3..183b42912e8 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -152,7 +152,7 @@ myst-parser==4.0.1 # via -r requirements/doc.in nodeenv==1.10.0 # via pre-commit -packaging==26.2 +packaging==26.3 # via # build # gunicorn diff --git a/requirements/dev.txt b/requirements/dev.txt index f53b5d5c43d..3169b0c6320 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -149,7 +149,7 @@ myst-parser==4.0.1 # via -r requirements/doc.in nodeenv==1.10.0 # via pre-commit -packaging==26.2 +packaging==26.3 # via # build # gunicorn diff --git a/requirements/doc-spelling.txt b/requirements/doc-spelling.txt index 7f4b2216dfc..9b0d6d6ac3b 100644 --- a/requirements/doc-spelling.txt +++ b/requirements/doc-spelling.txt @@ -42,7 +42,7 @@ mdurl==0.1.2 # via markdown-it-py myst-parser==4.0.1 # via -r requirements/doc.in -packaging==26.2 +packaging==26.3 # via sphinx pyenchant==3.3.0 # via sphinxcontrib-spelling diff --git a/requirements/doc.txt b/requirements/doc.txt index 8df5441b84c..a84f9b097b3 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -42,7 +42,7 @@ mdurl==0.1.2 # via markdown-it-py myst-parser==4.0.1 # via -r requirements/doc.in -packaging==26.2 +packaging==26.3 # via sphinx pygments==2.20.0 # via sphinx diff --git a/requirements/lint.txt b/requirements/lint.txt index 50dad9f6d4d..8e22fb331e7 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -80,7 +80,7 @@ mypy-extensions==1.1.0 # via mypy nodeenv==1.10.0 # via pre-commit -packaging==26.2 +packaging==26.3 # via pytest pathspec==1.1.1 # via mypy diff --git a/requirements/test-common-base.txt b/requirements/test-common-base.txt index cf73034a819..1c7bfc2ac60 100644 --- a/requirements/test-common-base.txt +++ b/requirements/test-common-base.txt @@ -32,7 +32,7 @@ multidict==6.7.1 # via # aiohttp # yarl -packaging==26.2 +packaging==26.3 # via pytest pkgconfig==1.6.0 # via -r requirements/test-common-base.in diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 96e700e1837..66f85952733 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -62,7 +62,7 @@ mypy==2.1.0 ; implementation_name == "cpython" # via -r requirements/test-common.in mypy-extensions==1.1.0 # via mypy -packaging==26.2 +packaging==26.3 # via pytest pathspec==1.1.1 # via mypy diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 89e84eb2cd1..d26583bcee4 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -84,7 +84,7 @@ mypy==2.1.0 ; implementation_name == "cpython" # via -r requirements/test-common.in mypy-extensions==1.1.0 # via mypy -packaging==26.2 +packaging==26.3 # via # gunicorn # pytest diff --git a/requirements/test-mobile.txt b/requirements/test-mobile.txt index 21e213a1cc0..f4a72e36e2a 100644 --- a/requirements/test-mobile.txt +++ b/requirements/test-mobile.txt @@ -58,7 +58,7 @@ multidict==6.7.1 # -r requirements/runtime-deps.in # aiohttp # yarl -packaging==26.2 +packaging==26.3 # via # gunicorn # pytest diff --git a/requirements/test.txt b/requirements/test.txt index ed11c20dd29..384ce832f86 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -84,7 +84,7 @@ mypy==2.1.0 ; implementation_name == "cpython" # via -r requirements/test-common.in mypy-extensions==1.1.0 # via mypy -packaging==26.2 +packaging==26.3 # via # gunicorn # pytest From 7b72a42c85263be8c6cb718dbba243118ba121b6 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 12:34:32 +0000 Subject: [PATCH 5/6] Bump cffi from 2.1.0 to 2.1.1 (#13340) Bumps [cffi](https://github.com/python-cffi/cffi) from 2.1.0 to 2.1.1.
Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

  • Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: https://github.com/python-cffi/cffi/compare/v2.1.0...v2.1.1

Commits

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/base-ft.txt | 2 +- requirements/base.txt | 2 +- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/runtime-deps.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test-mobile.txt | 2 +- requirements/test.txt | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/requirements/base-ft.txt b/requirements/base-ft.txt index e5917fcf3d7..e760653dace 100644 --- a/requirements/base-ft.txt +++ b/requirements/base-ft.txt @@ -18,7 +18,7 @@ backports-zstd==1.3.0 ; platform_python_implementation == "CPython" and python_v # via -r requirements/runtime-deps.in brotli==1.2.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -cffi==2.1.0 +cffi==2.1.1 # via pycares exceptiongroup==1.3.1 # via aiofastnet diff --git a/requirements/base.txt b/requirements/base.txt index eb61f7930c3..cebcd66a98a 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -18,7 +18,7 @@ backports-zstd==1.3.0 ; platform_python_implementation == "CPython" and python_v # via -r requirements/runtime-deps.in brotli==1.2.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -cffi==2.1.0 +cffi==2.1.1 # via pycares exceptiongroup==1.3.1 # via aiofastnet diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 183b42912e8..032b59ca289 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -53,7 +53,7 @@ build==1.5.1 # via pip-tools certifi==2026.7.22 # via requests -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pycares diff --git a/requirements/dev.txt b/requirements/dev.txt index 3169b0c6320..a9faaa4df00 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -53,7 +53,7 @@ build==1.5.1 # via pip-tools certifi==2026.7.22 # via requests -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pycares diff --git a/requirements/lint.txt b/requirements/lint.txt index 8e22fb331e7..a1c2b9fe3c0 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -28,7 +28,7 @@ backports-zstd==1.3.0 ; implementation_name == "cpython" and python_version < "3 # via -r requirements/lint.in blockbuster==1.5.26 # via -r requirements/lint.in -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pycares diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt index ddb0ac4fc26..451d0cf3bd6 100644 --- a/requirements/runtime-deps.txt +++ b/requirements/runtime-deps.txt @@ -18,7 +18,7 @@ backports-zstd==1.3.0 ; platform_python_implementation == "CPython" and python_v # via -r requirements/runtime-deps.in brotli==1.2.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -cffi==2.1.0 +cffi==2.1.1 # via pycares exceptiongroup==1.3.1 # via aiofastnet diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 66f85952733..384cbff0255 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -20,7 +20,7 @@ backports-asyncio-runner==1.2.0 # via pytest-asyncio blockbuster==1.5.26 # via -r requirements/test-common.in -cffi==2.1.0 +cffi==2.1.1 # via cryptography coverage==7.15.4 # via diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index d26583bcee4..9b7bcb083d0 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -34,7 +34,7 @@ blockbuster==1.5.26 # via -r requirements/test-common.in brotli==1.2.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pycares diff --git a/requirements/test-mobile.txt b/requirements/test-mobile.txt index f4a72e36e2a..934f6612e69 100644 --- a/requirements/test-mobile.txt +++ b/requirements/test-mobile.txt @@ -30,7 +30,7 @@ backports-zstd==1.3.0 ; platform_python_implementation == "CPython" and python_v # via -r requirements/runtime-deps.in brotli==1.2.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -cffi==2.1.0 ; sys_platform != "android" and sys_platform != "ios" +cffi==2.1.1 ; sys_platform != "android" and sys_platform != "ios" # via # -r requirements/test-mobile.in # pycares diff --git a/requirements/test.txt b/requirements/test.txt index 384ce832f86..b85ca3ee7e8 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -34,7 +34,7 @@ blockbuster==1.5.26 # via -r requirements/test-common.in brotli==1.2.0 ; platform_python_implementation == "CPython" and sys_platform != "android" and sys_platform != "ios" # via -r requirements/runtime-deps.in -cffi==2.1.0 +cffi==2.1.1 # via # cryptography # pycares From d8b943bd8367276c321893eda3ce47791776078c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 12:55:26 +0000 Subject: [PATCH 6/6] Bump pip from 26.2 to 26.2.1 (#13375) Bumps [pip](https://github.com/pypa/pip) from 26.2 to 26.2.1.
Changelog

Sourced from pip's changelog.

26.2.1 (2026-08-04)

Bug Fixes

  • Reallow keyring installed in a (non-activated) virtual environment to be be used via the import provider method while installing build dependencies. ([#14227](https://github.com/pypa/pip/issues/14227) <https://github.com/pypa/pip/issues/14227>_)
Commits

Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 032b59ca289..c5429d9d14d 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -161,7 +161,7 @@ packaging==26.3 # wheel pathspec==1.1.1 # via mypy -pip==26.2 +pip==26.2.1 # via pip-tools pip-tools==7.6.0 # via -r requirements/dev.in diff --git a/requirements/dev.txt b/requirements/dev.txt index a9faaa4df00..812a6835741 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -158,7 +158,7 @@ packaging==26.3 # wheel pathspec==1.1.1 # via mypy -pip==26.2 +pip==26.2.1 # via pip-tools pip-tools==7.6.0 # via -r requirements/dev.in