[dependabot]

Bumps the python group with 3 updates in the / directory: apprise, rapidocr and ruff.

Updates apprise from 2.0.0 to 2.0.1

Release notes

Sourced from apprise's releases.

Apprise v2.0.1

What's Changed

Since the release of v2.0.0 there were some issues raised that I feel were major enough to to warrant a small update release. The big one is the handlng of markdown text.

I had merged a few enhancements too; so they're thrown in this mini release as well.

🐞 Bugfixes

• Escape unmatched markup characters for Telegram Markdown v1 by @​SulimanAbdulrazzaq in caronc/apprise#1751
• fix(matrix): accept HTTP 202 Accepted status code for Matrix responses by @​szhu25 in caronc/apprise#1754
• fix(matrix): preserve title/body separation in rich notifications by @​coder6955 in caronc/apprise#1756
• fixed html issue with flock in caronc/apprise#1757
• v2 Format Conversion Regression in caronc/apprise#1761

💡 Features

• Rewrite spush:// for the new Simplepush API with tasks, attachments, ... by @​tymm in caronc/apprise#1759
• feat: support Nextcloud Talk bot authentication by @​beemines in caronc/apprise#1758
• Telegram photo and video album support in caronc/apprise#1762

❤️ Life-Cycle Support

• BulkSMS reference updates user -> token, pass -> secret in caronc/apprise#1766
• Update LoC badge by @​github-actions[bot] in caronc/apprise#1752
• Run the test suite in parallel with pytest-xdist in caronc/apprise#1763
• Only load PyYAML when YAML configuration is used in caronc/apprise#1765

Installation

Apprise is available on PyPI through pip:

# Install Apprise v2.0.1 from PyPI
pip install apprise==2.0.1

If you use uv:

# Install the apprise command
uv tool install apprise==2.0.1

New Contributors

• @​szhu25 made their first contribution in caronc/apprise#1754
• @​coder6955 made their first contribution in caronc/apprise#1756
• @​tymm made their first contribution in caronc/apprise#1759
• @​beemines made their first contribution in caronc/apprise#1758

Full Changelog: caronc/apprise@v2.0.0...v2.0.1

Commits

• 81739e9 bumped version to v2.0.1
• 6f58026 Only load PyYAML when YAML configuration is used (#1765)
• b7d5d31 BulkSMS reference updates user -> token, pass -> secret (#1766)
• c6817af Run the test suite in parallel with pytest-xdist (#1763)
• 5203e93 v2 Format Conversion Regression (#1761)
• fb47256 Telegram photo and video album support (#1762)
• 57f05ee Support Nextcloud Talk bot authentication (#1758)
• fe93b0d Updates to spush:// for the new Simplepush API with tasks + attachments (#1759)
• bfbf659 fixed html issue with flock (#1757)
• ab9e23f fix(matrix): preserve title/body separation in rich notifications (#1756)
• Additional commits viewable in compare view

Updates rapidocr from 3.9.2 to 3.10.0

Release notes

Sourced from rapidocr's releases.

Release v3.10.0

🚀 Features

• (model-routing) centralize routes in YAML and expose supported languages (#741) by SWHL in 75946b1
• (models) add multilingual model routing and licensing metadata. (issue #739) by SWHL in 4a3070f
• support loading raw memory image buffers with format and stride metadata by SWHL in deea2a0
• support decoding images from memory addresses (issue #738) by SWHL in 64b1c68
• validate python-bidi before initializing Arabic OCR (issue #719) by SWHL in 0e629c8

🐛 Bug Fixes

• (det) honour limit_side_len when limit_type is max (issue #740) (#742) by Mohammad Hijjawi in f65c7da
• (mnn) use getNumpyData() instead of getData() for output extraction (#717) by Horatiu George Todoran in 667d04c
• (nrtr) let generate_square_subsequent_mask take the device it is given (#731) by Tai An in 09f4e3b
• (pytorch) require PyTorch 1.13+ for secure model loading by SWHL in e7edb01
• (rec) honour model_root_dir for the rec dict and str paths in torch engine (#752) by Rett Wilson in 332b4fc
• correct model SHA256 by SWHL in bd941da
• load torch weights with weights_only=True to prevent code execution (#728) by Patrick Chilton in 1087d4a
• lock lazy model load so first use constructs once (#725) by Yuzhong Zhang in 486ec53
• update star-history chart by SWHL in dd48f2d

💼 Other

• (python) make OpenCV headless by default with optional GUI support (issue #737) by SWHL in c1ec605

📚 Documentation

• add Backer by SWHL in 549847d
• add Backer by SWHL in 8eb4aae

⚡ Performance

• lazily initialize OCR models by SWHL in 0ad7c04

⚙️ Miscellaneous Tasks

• remove optional OpenCV dependency by SWHL in d6e304b
• update sponsor way by SWHL in 9936171
• ignore bundled OCR model files by SWHL in cbea36a
• update pre-commit configuration by SWHL in 9ceb342
• update star-tracker range by SWHL in 3efd66a

🎉 Contributors

• @​SWHL
• @​RettWilson22
• @​MohammadHijjawi97
• @​Anai-Guo
• @​chpatrick
• @​BetterAndBetterII

... (truncated)

Commits

• bd941da fix: correct model SHA256
• deea2a0 feat: support loading raw memory image buffers with format and stride metadata
• d6e304b chore: remove optional OpenCV dependency
• 75946b1 feat(model-routing): centralize routes in YAML and expose supported l… (#741)
• 332b4fc fix(rec): honour model_root_dir for the rec dict and str paths in torch engin...
• f65c7da fix(det): honour limit_side_len when limit_type is max (issue #740) (#742)
• 9936171 chore: update sponsor way
• 549847d docs: add Backer
• 8eb4aae docs: add Backer
• 64b1c68 feat: support decoding images from memory addresses (issue #738)
• Additional commits viewable in compare view

Updates ruff from 0.16.10 to 0.17.0

Release notes

Sourced from ruff's releases.

0.17.0

Release Notes

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

• Update the default and latest Python versions for 3.15 (#28792)

  Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15 instead of 3.14.

• Update the default rule set (#28786)

  Several of the flake8-datetimez rules (DTZ001, DTZ005, DTZ006, DTZ007, DTZ011, DTZ012, and DTZ901) are no longer enabled by default, while undefined-local-with-nested-import-star-usage (F406), which corresponds to a syntax error, is now enabled by default.

• Update Rust crate quick-junit to 0.8.0 (#27295)

  JUnit output now uses a skipped attribute instead of disabled on <testsuite> elements and includes a skipped attribute on the root <testsuites> element.

• [flake8-import-conventions] Add datetime as dt as a conventional alias (ICN001) (#28790)

• Support Unicode dummy variable names (#28722)

  The default lint.dummy-variable-rgx now recognizes underscore-prefixed Unicode names, such as _次, as dummy variables.

• Update to Unicode 17 (#21229, #28784)

  Ruff now uses Unicode 17 data for identifier normalization and named character escapes ("\N{...}").

• Always show unsafe and display-only fixes in the CLI (#27810)

  The default full output format now shows unsafe fixes and suggestions requiring manual review, regardless of the unsafe-fixes setting. Actually applying unsafe fixes still requires explicit opt-in.

• Remove the Python dependency from conda-forge builds (conda-forge/ruff-feedstock#361)

  The conda-forge build no longer depends on Python, now supports linux-riscv64, win-arm64, and linux-ppc64le platforms, and now includes shell completions. However, no longer depending on Python means that python -m ruff and import ruff will no longer work. Use ruff directly from PATH instead. PyPI installations and those from the standalone installer are unaffected.

• Remove support for ruff-lsp (#28750)

  Support for ruff-lsp, the legacy Python language server deprecated in Ruff v0.9.5, has been removed. The Ruff VS Code extension now always uses the native language server; ruff.nativeServer is deprecated and ignored. See the migration guide.

Stabilization

The following rules have been stabilized and are no longer in preview:

• lazy-import-mismatch (TID254)
• lazy-import-immediately-resolved (TID255)
• os-path-commonprefix (RUF071)

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.0

Released on 2026-10-09.

The executables in our macOS and Windows release archives and ruff wheels are now code-signed. macOS executables are signed with an Apple Developer ID certificate and notarized by Apple. Windows executables have timestamped Authenticode signatures from Azure Artifact Signing. This enables verification of the release publisher and binary integrity, supports publisher-based allowlisting, and should reduce security warnings and antivirus false positives.

Breaking changes

• Update the default and latest Python versions for 3.15 (#28792)

  Ruff now defaults to Python 3.11 instead of 3.10 when no Python version is configured through target-version or requires-python. When checking for syntax errors without a configured Python version, Ruff now defaults to Python 3.15 instead of 3.14.

• Update the default rule set (#28786)

  Several of the flake8-datetimez rules (DTZ001, DTZ005, DTZ006, DTZ007, DTZ011, DTZ012, and DTZ901) are no longer enabled by default, while undefined-local-with-nested-import-star-usage (F406), which corresponds to a syntax error, is now enabled by default.

• Update Rust crate quick-junit to 0.8.0 (#27295)

  JUnit output now uses a skipped attribute instead of disabled on <testsuite> elements and includes a skipped attribute on the root <testsuites> element.

• [flake8-import-conventions] Add datetime as dt as a conventional alias (ICN001) (#28790)

• Support Unicode dummy variable names (#28722)

  The default lint.dummy-variable-rgx now recognizes underscore-prefixed Unicode names, such as _次, as dummy variables.

• Update to Unicode 17 (#21229, #28784)

  Ruff now uses Unicode 17 data for identifier normalization and named character escapes ("\N{...}").

• Always show unsafe and display-only fixes in the CLI (#27810)

... (truncated)

Commits

• 5b27c1c Bump version to 0.17.0 (#29259)
• 8f362bf Integrate vendored Unicode names into Ruff
• 88a50d6 Revert upstream Unicode loose matching
• 276832a Revert upstream Unicode alias normalization
• 26911ca Vendor unicode_names2 from upstream
• 27e3797 [ruff] Stabilize os-path-commonprefix (RUF071) (#28764)
• bbb52c1 [flake8-tidy-imports] Stabilize lazy-import-immediately-resolved (`TID255...
• 5aa9cbd [flake8-tidy-imports] Stabilize lazy-import-mismatch (TID254) (#28760)
• dba1bc8 [flake8-import-conventions] Add datetime as dt as a conventional alias (`...
• ef23c9c Update default and latest Python versions for 3.15 (#28792)
• Additional commits viewable in compare view

[cloudflare-workers-and-pages]

Deploying posteryard with    Cloudflare Pages

Latest commit:	60c623f
Status:	✅  Deploy successful!
Preview URL:	https://151ae2fe.posteryard.pages.dev
Branch Preview URL:	https://dependabot-uv-python-f7c9e36.posteryard.pages.dev

View logs