chore(deps): bump the python-minor-and-patch group across 1 directory with 15 updates

[dependabot]

Bumps the python-minor-and-patch group with 15 updates in the /shifter/engine/provisioner directory:

Package	From	To
asgiref	3.11.1	3.12.1
boto3	1.43.12	1.43.93
botocore	1.43.12	1.43.96
cffi	2.0.0	2.1.1
debugpy	1.8.20	1.8.21
grpcio	1.80.0	1.83.1
protobuf	7.34.1	7.36.1
psycopg	3.3.4	3.3.5
psycopg-binary	3.3.4	3.3.5
pydantic	2.13.4	2.13.5
s3transfer	0.17.0	0.19.2
semver	3.0.4	3.1.0
typing-extensions	4.15.0	4.16.0
pytest	9.0.3	9.1.1
ruff	0.15.12	0.16.7

Updates asgiref from 3.11.1 to 3.12.1

Changelog

Sourced from asgiref's changelog.

3.12.1 (2026-07-14)

• Restored the previous SyncToAsync.call internal code shape, which was relied on by some APM services. (#572)

  Note, this change was available whilst maintaining the underlying fix (from #564). It does not constitute an API stability promise. Ideally APMs are not monkey patching internal APIs, and future changes will be made here if needed.

3.12.0 (2026-07-14)

• AsyncToSync no longer captures the running event loop on instantiation. (#562)

  This resolves a series of deadlocks that users experienced after asgiref 3.9.0, particularly with pytest-asyncio. pytest-asyncio stops the event loop between tests, and long-running unawaited futures could find themselves trying to schedule work onto a stopped loop, and so would never complete. Ideally, code should be structured to await long-running futures before returning, but this change should help users experiencing issues here.

  The loop is now resolved when the callable is invoked rather than when it is created. If async_to_sync is called from within sync_to_async, the parent event loop is still used, as before.

  The possibility of deadlock therefore remains in some nested patterns. For example, an async function may call a long-running sync_to_async function that itself uses async_to_sync; if the outer function returns before the sync future completes, the parent event loop may already be stopped, and the nested calls cannot be driven to completion.

  This is not a bug in asgiref — the same patterns deadlock in plain asyncio. As above, restructure your code to await the sync_to_async future before exiting the driving coroutine.

• Fixed an event loop deadlock when exiting ThreadSensitiveContext while its executor thread was still blocked waiting on the event loop. (#535)

• Dropped support for EOL Python 3.9.

• Fixed StatelessServer.run() failing on Python 3.14, where asyncio.get_event_loop() no longer creates an event loop if none exists. It now uses asyncio.run(). (#559)

• Fixed Local leaking data between unrelated sync threads when sys.flags.thread_inherit_context is enabled (Python 3.14+), so a newly

... (truncated)

Commits

• ef9d4b8 Releasing 3.12.1
• 34fba63 Restore previous SyncToAsync.call internal code shape.
• a43900c Separate mypy from tests extra.
• 1b7c338 Releasing 3.12.0
• 157d9d4 Renovate precommit (#552)
• deda0d4 Test free-threading builds and fix Local data leak for thread_inherit_context...
• a54250a Don’t capture the event loop in AsyncToSync.__init__ (#562)
• 836356a Use asyncio.run in StatelessServer.run (#561)
• e04afd5 Dropped support for Python 3.9. (#543)
• 95d2430 Fixed #535: ThreadSensitiveContext.aexit blocking the event loop. (#563)
• Additional commits viewable in compare view

Updates boto3 from 1.43.12 to 1.43.93

Commits

• 655751c Merge branch 'release-1.43.93'
• e522bfd Bumping version to 1.43.93
• 9c7d4c3 Add changelog entries from botocore
• 4477cdc Merge branch 'release-1.43.92'
• a465bee Merge branch 'release-1.43.92' into develop
• 5d8a8ab Bumping version to 1.43.92
• 959442c Add changelog entries from botocore
• 5073bde Merge branch 'release-1.43.91'
• 19fa272 Merge branch 'release-1.43.91' into develop
• 036a8a0 Bumping version to 1.43.91
• Additional commits viewable in compare view

Updates botocore from 1.43.12 to 1.43.96

Commits

• 9da9912 Merge branch 'release-1.43.96'
• edef4a7 Bumping version to 1.43.96
• bafb058 Update to latest models
• 4cd222f Merge branch 'release-1.43.95'
• eb82496 Merge branch 'release-1.43.95' into develop
• af5f9f3 Bumping version to 1.43.95
• cee2474 Update to latest models
• 7b8c332 Merge branch 'release-1.43.94'
• 582c7af Merge branch 'release-1.43.94' into develop
• c4231df Bumping version to 1.43.94
• Additional commits viewable in compare view

Updates cffi from 2.0.0 to 2.1.1

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

• Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

v2.1.0

• Added support for Python 3.15 and support for C extensions generated by CFFI to target the new abi3t free-threaded ABI.
• Dropped support for Python 3.9.
• Added cffi-gen-src CLI to generate CFFI C extension source for alternate build backend support.
• Fixed crashes inside __delitem__.
• Fixed "string too big" error under MSVC.
• Fixed mingw builds.
• Added support for arm64 iOS wheels.

Commits

• fd33e77 New release 2.1.1
• 56a7876 Use PyGILState_Ensure to avoid accessing CPython internals (#269) (#270)
• d9f6f70 New release 2.1.0
• 02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
• 1362e5d Move cffi-gen-src release note to 2.1.0 notes
• a797055 Make error message when embedding version test fails more friendly
• f1f40a8 Update changelog
• dc62c93 Delete missed cp39 Windows builds
• a341180 Update version numbers to prepare for v2.1 release
• 9f04d85 Mark test using inet_ntoa as thread-unsafe
• Additional commits viewable in compare view

Updates debugpy from 1.8.20 to 1.8.21

Release notes

Sourced from debugpy's releases.

debugpy v1.8.21

Fixes for:

• Return evaluate result in DAP response body instead of writing to stdout: #2027
• Prevent invalid scopes request from crashing debug session: #2026
• Skip uninitialized __slots__ in variable resolver: #2024
• Handle -c arguments that are bytes instead of str: #2021
• Fix evaluation of variables from chained exception frames: #2018
• ContinueRequest with a specific threadId no longer resumes all threads (in-process adapter): #2012
• Avoid strong reference to exceptions during unwind: #2008
• Show error message on evaluate failures in the hover context: #2006
• Display dlerror output when dlopen fails: #2000
• Replace removed pkgutil.get_loader with importlib.util.find_spec in get_fullname: #1998

Enhancements:

• Add option to ignore all system exit codes: #2017
• Pull changes from pydevd up to March 2026: #2010

Infrastructure work:

• Suppress Flawfinder false positives on Cython memcpy / read-loop iterators (TSA #2816216, #2816217, #2816218, #2816219, #2816220): #2028, #2029, #2030, #2031, #2032

Thanks to @​maxbachmann, @​mfussenegger, and @​sambrightman for the commits.

Commits

• 858b05c Fix TSA #2816217: suppress Flawfinder false positive on Cython JoinPyUnicode ...
• f0c34f1 Fix TSA #2816216: suppress Flawfinder false positive on Cython DIGIT_PAIRS_8 ...
• 4c70e13 Fix TSA #2816218: suppress Flawfinder false positive on Cython read-loop iter...
• 19c2b8c Fix TSA #2816220: suppress Flawfinder false positive on Cython read-loop iter...
• ab92638 Merge pull request #2031 from StellaHuang95/stellahuang/tsa-2816219-flawfinde...
• 12bd4fe Return evaluate result in DAP response body instead of writing to stdout (#2027)
• 8bd57a7 Prevent invalid scopes request from crashing debug session (#2026)
• bf118c8 Skip uninitialized slots in variable resolver (#2024)
• a55be0e Potential fix when -c arguments are bytes instead of a str (#2021)
• 0f037ad Fix evaluation of variables from chained exception frames (#2018)
• Additional commits viewable in compare view

Updates grpcio from 1.80.0 to 1.83.1

Release notes

Sourced from grpcio's releases.

Release v1.83.1

This is release gRPC Core 1.83.1 (garden).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

Release v1.83.0

This is release 1.83.0 (garden) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [Security] Default to Post-Quantum Cryptography in TLS key exchange. (#42560)
• [authz] don't pass RBAC policy by value when constructing authorization engine. (#42636)

C#

• Migrate CSharp Grpc.Tools to new DotNet Version. (#42661)
• [C#] Tools - Build: Fix protoc SIGSEGV on ARM64 by aligning max-page-size and migrating to manylinux_2_28. (#42590)

Python

• [Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#43001)
• [Python] Add abort_with_status to the aio ServicerContext ABC. (#42733)
• [Python] Update lower bound for protobuf from 6.33.5 to 7.35.1. (#42914)
• [Python] Pyright typeCheckingMode - standard. (#42739)
• [Python] Support Python 3.15 - Upgrade bazel dep rules_python to 2.0.2. (#42637)
• [Python] Hide internal symbols from Python's cygrpc shared object. (#42325)
• [Python] Handle custom Interceptor exceptions in InterceptedCall APIs . (#42593)

Release v1.83.0-pre1

This is a prerelease of gRPC Core 1.83.0 (garden).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.82.2

This is release gRPC Core 1.82.2 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

... (truncated)

Commits

• aae2670 [Backport][v1.83.x] Fix legacy_channel.cc compile error with `std::optional<a...
• b77ea36 [Backport][v1.83.x] Memory optimization (#43297)
• 9dcd5aa [CI] Fix Python 3.15 Sanity (#43299)
• ed8899e [Backport][v1.83.x] Fixing bug in GoAway and gRPC Message Compression (#43270)
• 5f8d6df [Release] Bump version to 1.83.1 (on v1.83.x branch) (#43274)
• 291e0be [Backport][v1.83.x][Python] Fix the StatusCode Enums to be int (#43252)
• 05ceb5d [CI][Backport][v1.83.x][Python] Fix PSM Interop xds-v3 Python continuous fail...
• dbc73b8 [Backport][v1.83.x][PHP]updated workflow to preserve github folder (#43243)
• c876f4d [Release] Bump version to 1.83.0 (on v1.83.x branch) (#43036)
• b5c40cd [Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower boun...
• Additional commits viewable in compare view

Updates protobuf from 7.34.1 to 7.36.1

Commits

• See full diff in compare view

Updates psycopg from 3.3.4 to 3.3.5

Changelog

Sourced from psycopg's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.6 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.15 (:ticket:[#1245](https://github.com/psycopg/psycopg/issues/1245)).
• Don't wait forever for a query to terminate after interrupting it, for instance if the server is unresponsive. The fix requires libpq 17 or newer (:ticket:[#1371](https://github.com/psycopg/psycopg/issues/1371)).
• Cancel a running query upon receiving !SystemExit (:ticket:[#1384](https://github.com/psycopg/psycopg/issues/1384)).
• Report !None instead of 65535 as the Column.precision of an :sql:interval column declared with a fields restriction and no explicit precision, such as e.g. :sql:interval day to second (:ticket:[#1397](https://github.com/psycopg/psycopg/issues/1397)).
• Fix dumping of nested subclasses of lists as arrays (:ticket:[#1398](https://github.com/psycopg/psycopg/issues/1398)).
• Discard prepared statements upon :sql:DEALLOCATE ALL (:ticket:[#1408](https://github.com/psycopg/psycopg/issues/1408)).

Current release

Psycopg 3.3.5 ^^^^^^^^^^^^^

• Discard prepared statements upon :sql:ALTER * or DISCARD * (:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).
• Fix !ProgrammingError when dumping non-!None values with no !NoneType dumper registered in python implementation (:ticket:[#1325](https://github.com/psycopg/psycopg/issues/1325)).
• Fix !wait_selector wait function to not raise !KeyError (:ticket:[#1327](https://github.com/psycopg/psycopg/issues/1327)).
• Fix !DataError messages leaking the literal {...} placeholder instead of the offending value when loading a pre-year-1 :sql:timestamp or a malformed binary :sql:jsonb value (:ticket:[#1372](https://github.com/psycopg/psycopg/issues/1372)).
• Raise !DataError instead of !ValueError when ~psycopg.rows.namedtuple_row receives duplicate column names (:ticket:[#1348](https://github.com/psycopg/psycopg/issues/1348)).
• Raise !DataError on inconsistent copy data (:tickets:[#1359](https://github.com/psycopg/psycopg/issues/1359), [#1360](https://github.com/psycopg/psycopg/issues/1360)).
• Handle client encodings aliases (:ticket:[#1363](https://github.com/psycopg/psycopg/issues/1363)).
• Fix building C extension with Cython 3.3.

Psycopg 3.3.4

... (truncated)

Commits

• ea542c9 chore: bump psycopg package version to 3.3.5
• 8d31e47 chore(deps): bump the actions group across 1 directory with 4 updates
• 268f863 Merge pull request #1370 from Sanjays2402/fix/truncated-binary-copy-error
• a412fa4 docs: put together different issues fixed around copy parsing
• f757307 fix: clearer error messages according to truncated copy message part
• b1f17c4 test: move existing COPY format parsing tests into a single module
• 21eba57 test: drop useless parametrization of copy binary parsigh test
• 6780e17 fix(copy): handle truncated binary row headers
• 2f2fcfb Merge pull request #1364 from DylanYoung/fix_client_encoding_aliases
• ccc351e refactor: don't store the encodings raw table as a dict
• Additional commits viewable in compare view

Updates psycopg-binary from 3.3.4 to 3.3.5

Changelog

Sourced from psycopg-binary's changelog.

.. currentmodule:: psycopg

.. index:: single: Release notes single: News

psycopg release notes

Future releases

Psycopg 3.3.6 (unreleased) ^^^^^^^^^^^^^^^^^^^^^^^^^^

• Add support for Python 3.15 (:ticket:[#1245](https://github.com/psycopg/psycopg/issues/1245)).
• Don't wait forever for a query to terminate after interrupting it, for instance if the server is unresponsive. The fix requires libpq 17 or newer (:ticket:[#1371](https://github.com/psycopg/psycopg/issues/1371)).
• Cancel a running query upon receiving !SystemExit (:ticket:[#1384](https://github.com/psycopg/psycopg/issues/1384)).
• Report !None instead of 65535 as the Column.precision of an :sql:interval column declared with a fields restriction and no explicit precision, such as e.g. :sql:interval day to second (:ticket:[#1397](https://github.com/psycopg/psycopg/issues/1397)).
• Fix dumping of nested subclasses of lists as arrays (:ticket:[#1398](https://github.com/psycopg/psycopg/issues/1398)).
• Discard prepared statements upon :sql:DEALLOCATE ALL (:ticket:[#1408](https://github.com/psycopg/psycopg/issues/1408)).

Current release

Psycopg 3.3.5 ^^^^^^^^^^^^^

• Discard prepared statements upon :sql:ALTER * or DISCARD * (:ticket:[#1307](https://github.com/psycopg/psycopg/issues/1307)).
• Fix !ProgrammingError when dumping non-!None values with no !NoneType dumper registered in python implementation (:ticket:[#1325](https://github.com/psycopg/psycopg/issues/1325)).
• Fix !wait_selector wait function to not raise !KeyError (:ticket:[#1327](https://github.com/psycopg/psycopg/issues/1327)).
• Fix !DataError messages leaking the literal {...} placeholder instead of the offending value when loading a pre-year-1 :sql:timestamp or a malformed binary :sql:jsonb value (:ticket:[#1372](https://github.com/psycopg/psycopg/issues/1372)).
• Raise !DataError instead of !ValueError when ~psycopg.rows.namedtuple_row receives duplicate column names (:ticket:[#1348](https://github.com/psycopg/psycopg/issues/1348)).
• Raise !DataError on inconsistent copy data (:tickets:[#1359](https://github.com/psycopg/psycopg/issues/1359), [#1360](https://github.com/psycopg/psycopg/issues/1360)).
• Handle client encodings aliases (:ticket:[#1363](https://github.com/psycopg/psycopg/issues/1363)).
• Fix building C extension with Cython 3.3.

Psycopg 3.3.4

... (truncated)

Commits

• ea542c9 chore: bump psycopg package version to 3.3.5
• 8d31e47 chore(deps): bump the actions group across 1 directory with 4 updates
• 268f863 Merge pull request #1370 from Sanjays2402/fix/truncated-binary-copy-error
• a412fa4 docs: put together different issues fixed around copy parsing
• f757307 fix: clearer error messages according to truncated copy message part
• b1f17c4 test: move existing COPY format parsing tests into a single module
• 21eba57 test: drop useless parametrization of copy binary parsigh test
• 6780e17 fix(copy): handle truncated binary row headers
• 2f2fcfb Merge pull request #1364 from DylanYoung/fix_client_encoding_aliases
• ccc351e refactor: don't store the encodings raw table as a dict
• Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

• Allow reuse of validators when plugins are set by @​Viicos in #13535
• Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
• Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
• Count validated model fields once in smart unions by @​tamird in #13731

Commits

• 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
• 558379f Bump twine to v7.0.0
• 2cfd5d3 Do not check for docs build
• a735bee Fix more Clippy lints
• 7eed4a1 Fix Clippy 0.1.95 warnings
• b353bbb Prepare release v2.13.5
• 63d2ccc Count validated model fields once in smart unions
• a53ec2e Speed up PyPy CI tests
• d65e0f9 Workaround circular import error in Mypy
• 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
• Additional commits viewable in compare view

Updates s3transfer from 0.17.0 to 0.19.2

Changelog

Sourced from s3transfer's changelog.

0.19.2

• bugfix:TLS: Return a configuration error when the CA bundle value (ca_bundle, AWS_CA_BUNDLE, REQUESTS_CA_BUNDLE, or verify) resolves to an empty or whitespace-only string.

0.19.1

• bugfix:s3: Only pin VersionId if supplied by caller instead of automatically using value from HeadObject response

0.19.0

• feature:s3: Update multi-part copy logic to match single-part behavior for TaggingDirective and AnnotationDirective
• enhancement:s3: Warn when Metadata or Tagging is supplied to a copy without the corresponding directive set to REPLACE, in which case the supplied value is silently ignored. This matches the CopyObject behavior.

0.18.0

• feature:Copy: By default, preserve source object metadata during multipart copies to match single CopyObject behavior.

0.17.1

• enhancement:s3: Skip the HEAD request during S3 downloads when the client is configured with response_checksum_validation='when_required', reducing latency for small-object transfers. The HEAD request remains in place by default to enable full-object checksum validation.

Commits

• 467a752 Merge branch 'release-0.19.2'
• 3c4a70b Bumping version to 0.19.2
• 43e2978 Raise error on empty CA bundle value (#410)
• 992085b Bump the github-actions group with 3 updates (#409)
• 70d5f8b Bump https://github.com/astral-sh/ruff-pre-commit (#408)
• 71bdbb7 Merge branch 'release-0.19.1'
• 30b8295 Merge branch 'release-0.19.1' into develop
• b51243d Bumping version to 0.19.1
• 9be530d Don't use VersionId from HeadObject for multipart copies (#407)
• 314b559 Bump https://github.com/astral-sh/ruff-pre-commit (#404)
• Additional commits viewable in compare view

Updates semver from 3.0.4 to 3.1.0

Release notes

Sourced from semver's releases.

3.1.0

What's Changed

• Fix #463: Remove duplicate code Version.bump_build by @​tomschr in python-semver/python-semver#464
• Fix #460 Improve bump_prerelease to alway get a newer version by @​Learloj in python-semver/python-semver#462
• 441 update pydantic section of docs by @​jbkroner in python-semver/python-semver#442
• Fix #448: Remove Python 3.7-3.9 (EOL) by @​tomschr in python-semver/python-semver#470
• fix: replace semver.parse() with semver.Version.parse() in docstrings by @​koteshyelamati in python-semver/python-semver#471
• fix: next_version should bump version for build-only versions by @​binggao1230 in python-semver/python-semver#469
• fix(next_version): reset prerelease when token changes (#339) by @​Mukller in python-semver/python-semver#472
• Bump cryptography from 49.0.0 to 50.0.0 by @​dependabot[bot] in python-semver/python-semver#473
• Declare support for Python 3.15 by @​edgarrmondragon in python-semver/python-semver#475
• Add optional native parser backend (minimal adapter) by @​lowmiaq-gmail in python-semver/python-semver#476
• Reject non-ASCII digits and trailing newlines in version parsing by @​Str0k in python-semver/python-semver#478
• Fix bump_build() silently returning an unchanged version for digitless build metadata by @​Str0k in python-semver/python-semver#480
• Handle malformed collection operands in Version comparisons by @​Str0k in python-semver/python-semver#479
• Change version to 3.1.0 by @​tomschr in python-semver/python-semver#481

New Contributors

• @​Learloj made their first contribution in python-semver/python-semver#462
• @​jbkroner made their first contribution in python-semver/python-semver#442
• @​koteshyelamati made their first contribution in python-semver/python-semver#471
• @​binggao1230 made their first contribution in python-semver/python-semver#469
• @​Mukller made their first contribution in python-semver/python-semver#472
• @​dependabot[bot] made their first contribution in python-semver/python-semver#473
• @​edgarrmondragon made their first contribution in python-semver/python-semver#475
• @​lowmiaq-gmail made their first contribution in python-semver/python-semver#476
• @​Str0k made their first contribution in python-semver/python-semver#478

Full Changelog: python-semver/python-semver@3.0.4...3.1.0 Documentation: https://python-semver.readthedocs.io/en/latest/

Changelog

Sourced from semver's changelog.

Version 3.1.0

:Released: 2026-09-12 :Maintainer: Tom Schraitle

Bug Fixes

• :pr:478: Version.parse() and Version.is_valid() now reject non-ASCII digits and trailing newlines, in accordance with the SemVer grammar. Optional minor and patch parsing applies the same character restrictions.

• :pr:479: Comparing a :class:~semver.Version with a dict, tuple, or list that cannot construct a valid version (for example, an empty collection, wrong number of parts, non-numeric parts, or unknown keys) no longer raises internal errors from Version.__init__. The comparison operators now return :py:const:NotImplemented for such operands, following the general rule for invalid comparison operand types: equality evaluates to False and ordering raises Python's standard :py:exc:TypeError (for example, '>' not supported between instances of 'Version' and 'dict').

• :pr:480: (:meth:~semver.version.Version.bump_build) will now add .0 to an existing build when the last segment of the current build metadata, split by dots (.), is not numeric. This is to ensure the bumped version contains a raised build instead of silently returning an unchanged version. For example, 1.2.3+alpha is bumped to 1.2.3+alpha.0. This mirrors the corresponding fix for the prerelease part (:gh:460). Related to :gh:466.

• :gh:460: :meth:~semver.version.Version.bump_prerelease will now add .0 to an existing prerelease when the last segment of the current prerelease, split by dots (.), is not numeric. This is to ensure the new prerelease is considered higher than the previous one.

  :meth:~semver.version.Version.bump_prerelease now also support an argument bump_when_empty which will bump the patch version if there is no existing prerelease, to ensure the resulting version is considered a higher version than the previous one.

Features

• :pr:476: Added optional [native] extra to accelerate parsing on CPython via the fast-semver-rs-backend package. The pure-Python parser remains the default; the native backend is opt-in and only available on CPython.

Internal Changes

: Update GitHub Actions for astral-sh/setup-uv (version 0.10.1), github/codeql-action (version 4)

Trivial Changes

• :gh:463: Remove double code in :meth:Version.bump_build

... (truncated)

Commits

• 642d1bc Change version to 3.1.0 (#481)
• 2a2cf63 Suppress deprecation warnings in test suite
• a62477b Improve comparisons and fix test coverage.
• 0aa17a3 Handle malformed collection operands in Version comparisons (#479)
• 1b7350c Improve test coverage to 100% (Rust backend)
• ea2524a Fix bump_build() silently returning an unchanged version for digitless build ...
• 1e87579 Reject non-ASCII digits and trailing newlines in version parsing (#478)
• 0f18aa0 Add optional native parser backend (minimal adapter) (#476)
• 873a675 Declare support for Python 3.15 (#475)
• 99d2032 Bump cryptography from 49.0.0 to 50.0.0 (#473)
• Additional commits viewable in compare view

Updates typing-extensions from 4.15.0 to 4.16.0

Release notes

Sourced from typing-extensions's releases.

4.16.0

No changes since 4.16.0rc2.

Changes since 4.15.0:

• Make typing_extensions.TypeAliasType's __module__ attribute writable. Backport of CPython PR #149172.
• Fix setting of __required_keys__ and __optional_keys__ when inheriting keys with the same name.
• Add support for AsyncIterator, io.Reader, io.Writer and os.PathLike protocols as bases for other protocols.
• Fix incorrect behaviour on Python 3.9 and Python 3.10 that meant that calling isinstance with typing_extensions.Concatenate[...] or typing_extensions.Unpack[...] as the first argument could have a different result in some situations depending on whether or not a profiling function had been set using sys.setprofile. This affected both CPython and PyPy implementations. Patch by Brian Schubert.
• Fix __init_subclass__() behavior in the presence of multiple inheritance involving an @deprecated-decorated base class. Backport of CPython PR #138210 by Brian Schubert.
• Raise TypeError when attempting to subclass typing_extensions.ParamSpec on Python 3.9. The typing implementation has always raised an error, and the typing_extensions implementation has raised an error on Python 3.10+ since typing_extensions v4.6.0. Patch by Brian Schubert.
• Add the bound, covariant, contravariant, and infer_variance parameters to TypeVarTuple.
• Officially support the bound, covariant, contravariant and infer_variance parameters to ParamSpec. Improve the validation of these parameters at runtime.
• Rename typing_extensions.Sentinel to typing_extensions.sentinel, following the name that has been adopted for builtins.sentinel on Python 3.15. typing_extensions.Sentinel is retained as a soft-deprecated alias for backwards compatibility.
• Add support for pickling sentinels.
• Sentinels now preserve their identity when copied or deep-copied.
• Deprecate passing name as a keyword argument or repr as a positional argument to the sentinel constructor.
• The default repr of a sentinel X = sentinel("X") is now X rather than <X>.
• Deprecate arbitrary attribute assignments to sentinels.
• Deprecate subclassing sentinels.
• Add support for Python 3.15.
• Avoid a DeprecationWarning when deprecated is applied to a coroutine function on Python 3.14.0.

4.16.0rc2

Changes since 4.16.0rc1:

• Avoid a DeprecationWarning when deprecated is applied to a coroutine function on Python 3.14.0.

Changes since 4.15.0:

• Make typing_extensions.TypeAliasType's __module__ attribute writable. Backport of CPython PR #149172.
• Fix setting of __required_keys__ and __optional_keys__ when inheriting keys with the same name.
• Add support for AsyncIterator, io.Reader, io.Writer and os.PathLike protocols as bases for other protocols.
• Fix incorrect behaviour on Python 3.9 and Python 3.10 that meant that calling isinstance with typing_extensions.Concatenate[...] or typing_extensions.Unpack[...] as the first argument could have a different result in some situations depending on whether or not a profiling function had been set using sys.setprofile. This affected both CPython and PyPy implementations. Patch by Brian Schubert.
• Fix __init_subclass__() behavior in the presence of multiple inheritance involving an @deprecated-decorated base class. Backport of CPython PR #138210 by Brian Schubert.
• Raise TypeError when attempting to subclass typing_extensions.ParamSpec on Python 3.9. The typing implementation has always raised an error, and the typing_extensions implementation has raised an error on Python 3.10+ since typing_extensions v4.6.0. Patch by Brian Schubert.
• Add the bound, covariant, contravariant, and infer_variance parameters to TypeVarTuple.
• Officially support the bound, covariant, contravariant and infer_variance parameters to ParamSpec. Improve the validation of these parameters at runtime.
• Rename typing_extensions.Sentinel to typing_extensions.sentinel, following the name that has been adopted for builtins.sentinel on Python 3.15. typing_extensions.Sentinel is retained as a soft-deprecated alias for backwards compatibility.
• Add support for pickling sentinels.
• Sentinels now preserve their identity when copied or deep-copied.
• Deprecate passing name as a keyword argument or repr as a positional argument to the sentinel constructor.
• The default repr of a sentinel X = sentinel("X") is now X rather than <X>.
• Deprecate arbitrary attribute assignments to sentinels.
• Deprecate subclassing sentinels.
• Add support for Python 3.15.

4.16.0rc1

• Make typing_extensions.TypeAliasType's __module__ attribute writable. Backport of CPython PR #149172.
• Fix setting of __required_keys__ and __optional_keys__ when inheriting keys with the same name.

... (truncated)

Changelog

Sourced from typing-extensions's changelog.

Release 4.16.0 (July 2, 2025)

No user-facing changes since 4.16.0rc2.

Release 4.16.0rc2 (June 25, 2026)

• Avoid a DeprecationWarning when deprecated is applied to a coroutine function on Python 3.14.0.

Release 4.16.0rc1 (June 24, 2026)

• Make typing_extensions.TypeAliasType's __module__ attribute writable. Backport of CPython PR #149172.
• Fix setting of __required_keys__ and __optional_keys__ when inheriting keys with the same name.
• Add support for AsyncIterator, io.Reader, io.Writer and os.PathLike protocols as bases for other protocols.
• Fix incorrect behaviour on Python 3.9 and Python 3.10 that meant that calling isinstance with typing_extensions.Concatenate[...] or typing_extensions.Unpack[...] as the first argument could have a different result in some situations depending on whether or not a profiling function had bee...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.