Skip to content

Bump the all group with 20 updates - #623

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/all-09d04d29a9
Jul 27, 2026
Merged

Bump the all group with 20 updates#623
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/all-09d04d29a9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the all group with 20 updates:

Package From To
pre-commit 4.6.0 4.6.1
aiohttp 3.9.1 3.14.3
aiosignal 1.3.1 1.4.0
async-timeout 4.0.3 5.0.1
colorlog 6.11.0 6.12.0
frozenlist 1.4.0 1.8.0
idna 3.15 3.18
multidict 6.0.4 6.7.1
pytz 2026.2 2026.3.post1
yarl 1.9.4 1.24.5
annotated-types 0.7.0 0.8.0
certifi 2026.6.17 2026.7.22
fastjsonschema 2.21.2 2.22.0
filelock 3.31.1 3.32.0
mistune 3.3.3 3.3.4
platformdirs 4.10.1 4.11.0
prompt-toolkit 3.0.52 3.0.53
python-discovery 1.4.4 1.5.0
soupsieve 2.9 2.9.1
virtualenv 21.6.1 21.7.0

Updates pre-commit from 4.6.0 to 4.6.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.6.1

Fixes

Changelog

Sourced from pre-commit's changelog.

4.6.1 - 2026-07-21

Fixes

Commits
  • 242ce8a v4.6.1
  • 766e550 Merge pull request #3727 from pre-commit/dedupe
  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
  • 8a1c47a avoid duplicate files in --all-files during conflict
  • 2e01c99 faster check of rev existing locally as a commit
  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
  • 1d811d9 Return an error for invalid --repo
  • 374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
  • 1e7994f set JULIA_DEPOT_PATH
  • b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
  • Additional commits viewable in compare view

Updates aiohttp from 3.9.1 to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

  • Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

    Related issues and pull requests on GitHub: :issue:13180.

  • Fixed error message construction in the C HTTP parser -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:13222.

3.14.2 (2026-07-20)

Bug fixes

  • Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

    Related issues and pull requests on GitHub: :issue:5303.

  • Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

    Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

Updates aiosignal from 1.3.1 to 1.4.0

Release notes

Sourced from aiosignal's releases.

1.4.0

Features

  • Added decorator functionality to Signal as a convenient way to add a callback -- by @Vizonex. [#699](https://github.com/aio-libs/aiosignal/issues/699) <https://github.com/aio-libs/aiosignal/pulls/699>_

  • Improved type safety by allowing callback parameters to be type checked (typing-extensions is now required for Python <3.13). Parameters for a Signal callback should now be defined like Signal[int, str] -- by @​Vizonex and @​Dreamsorcerer. [#699](https://github.com/aio-libs/aiosignal/issues/699) <https://github.com/aio-libs/aiosignal/pulls/699>, [#710](https://github.com/aio-libs/aiosignal/issues/710) <https://github.com/aio-libs/aiosignal/pulls/710>

Misc

  • Removed the sphinxcontrib-asyncio documentation dependency. [#528](https://github.com/aio-libs/aiosignal/issues/528) <https://github.com/aio-libs/aiosignal/pull/528>_

1.3.2

Deprecations and Removals

  • Dropped Python 3.7 support. (#413)

  • Dropped Python 3.8 support. (#645)

Misc

Changelog

Sourced from aiosignal's changelog.

1.4.0 (2025-07-03)

Features

  • Added decorator functionality to Signal as a convenient way to add a callback -- by @Vizonex. [#699](https://github.com/aio-libs/aiosignal/issues/699) <https://github.com/aio-libs/aiosignal/pulls/699>_

  • Improved type safety by allowing callback parameters to be type checked (typing-extensions is now required for Python <3.13). Parameters for a Signal callback should now be defined like Signal[int, str] -- by @​Vizonex and @​Dreamsorcerer. [#699](https://github.com/aio-libs/aiosignal/issues/699) <https://github.com/aio-libs/aiosignal/pulls/699>, [#710](https://github.com/aio-libs/aiosignal/issues/710) <https://github.com/aio-libs/aiosignal/pulls/710>

Misc

  • Removed the sphinxcontrib-asyncio documentation dependency. [#528](https://github.com/aio-libs/aiosignal/issues/528) <https://github.com/aio-libs/aiosignal/pull/528>_

1.3.2 (2024-12-13)

Deprecations and Removals

  • Dropped Python 3.7 support. [#413](https://github.com/aio-libs/aiosignal/issues/413) <https://github.com/aio-libs/aiosignal/issues/413>_

  • Dropped Python 3.8 support. [#645](https://github.com/aio-libs/aiosignal/issues/645) <https://github.com/aio-libs/aiosignal/issues/645>_

Misc

  • [#362](https://github.com/aio-libs/aiosignal/issues/362) <https://github.com/aio-libs/aiosignal/issues/362>_
Commits
  • 1cf8014 Fix deploy
  • 892494c Release v1.4 (#718)
  • fa36082 [pre-commit.ci] pre-commit autoupdate (#719)
  • b7f68f1 [pre-commit.ci] pre-commit autoupdate (#717)
  • 2b1acac Build(deps): Bump sigstore/gh-action-sigstore-python from 3.0.0 to 3.0.1 (#716)
  • 17456ed Build(deps): Bump tox from 4.26.0 to 4.27.0 (#715)
  • 4c23690 Build(deps): Bump pytest from 8.4.0 to 8.4.1 (#714)
  • 7be2f68 Build(deps): Bump mypy from 1.16.0 to 1.16.1 (#713)
  • 5d62945 Build(deps): Bump coverage from 7.9.0 to 7.9.1 (#712)
  • a6d85c1 Build(deps): Bump dependabot/fetch-metadata from 2.3.0 to 2.4.0 (#694)
  • Additional commits viewable in compare view

Updates async-timeout from 4.0.3 to 5.0.1

Release notes

Sourced from async-timeout's releases.

5.0.1

Misc

  • [#423](https://github.com/aio-libs/async-timeout/issues/423) <https://github.com/aio-libs/async-timeout/issues/423>_

5.0.0

Features

  • Make asyncio_timeout fully compatible with the standard asyncio.Timeout but keep backward compatibility with existing asyncio_timeout.Timeout API. ([#422](https://github.com/aio-libs/async-timeout/issues/422) <https://github.com/aio-libs/async-timeout/issues/422>_)

Improved Documentation

  • On the CHANGES/README.rst <https://github.com/aio-libs/async-timeout/tree/master/CHANGES/README.rst>_ page, a link to the Towncrier philosophy has been fixed. ([#388](https://github.com/aio-libs/async-timeout/issues/388) <https://github.com/aio-libs/async-timeout/issues/388>_)

Deprecations and Removals

  • Drop deprecated sync context manager support, use async with timeout(...): ... instead. ([#421](https://github.com/aio-libs/async-timeout/issues/421) <https://github.com/aio-libs/async-timeout/issues/421>_)
Changelog

Sourced from async-timeout's changelog.

5.0.1 (2024-11-06)

Misc

  • [#423](https://github.com/aio-libs/async-timeout/issues/423) <https://github.com/aio-libs/async-timeout/issues/423>_

5.0.0 (2024-10-31)

Features

  • Make asyncio_timeout fully compatible with the standard asyncio.Timeout but keep backward compatibility with existing asyncio_timeout.Timeout API. ([#422](https://github.com/aio-libs/async-timeout/issues/422) <https://github.com/aio-libs/async-timeout/issues/422>_)

Improved Documentation

  • On the CHANGES/README.rst <https://github.com/aio-libs/async-timeout/tree/master/CHANGES/README.rst>_ page, a link to the Towncrier philosophy has been fixed. ([#388](https://github.com/aio-libs/async-timeout/issues/388) <https://github.com/aio-libs/async-timeout/issues/388>_)

Deprecations and Removals

  • Drop deprecated sync context manager support, use async with timeout(...): ... instead. ([#421](https://github.com/aio-libs/async-timeout/issues/421) <https://github.com/aio-libs/async-timeout/issues/421>_)
Commits

Updates colorlog from 6.11.0 to 6.12.0

Release notes

Sourced from colorlog's releases.

v6.12.0

What's Changed

Full Changelog: borntyping/python-colorlog@v6.11.0...v6.12.0

Commits

Updates frozenlist from 1.4.0 to 1.8.0

Release notes

Sourced from frozenlist's releases.

1.8.0

Contributor-facing changes

  • The :file:reusable-cibuildwheel.yml workflow has been refactored to be more generic and :file:ci-cd.yml now holds all the configuration toggles -- by :user:webknjaz.

    Related issues and pull requests on GitHub: #668.

  • When building wheels, the source distribution is now passed directly to the cibuildwheel invocation -- by :user:webknjaz.

    Related issues and pull requests on GitHub: #669.

  • Builds and tests have been added to ci-cd.yml for arm64 Windows wheels -- by :user:finnagin.

    Related issues and pull requests on GitHub: #677.

  • Started building wheels for CPython 3.14 -- by :user:kumaraditya303.

    Related issues and pull requests on GitHub: #681, #682.

  • Removed --config-settings=pure-python=false from :file:requirements/dev.txt. Developers on CPython still get accelerated builds by default. To explicitly build a pure Python wheel, use pip install -e . --config-settings=pure-python=true -- by :user:bdraco.

    Related issues and pull requests on GitHub: #687.

1.7.0

Features

  • Added deepcopy support to FrozenList -- by :user:bdraco.

    Related issues and pull requests on GitHub: #659.

Packaging updates and notes for downstreams

... (truncated)

Changelog

Sourced from frozenlist's changelog.

v1.8.0

(2025-10-05)

Contributor-facing changes

  • The :file:reusable-cibuildwheel.yml workflow has been refactored to be more generic and :file:ci-cd.yml now holds all the configuration toggles -- by :user:webknjaz.

    Related issues and pull requests on GitHub: :issue:668.

  • When building wheels, the source distribution is now passed directly to the cibuildwheel invocation -- by :user:webknjaz.

    Related issues and pull requests on GitHub: :issue:669.

  • Builds and tests have been added to ci-cd.yml for arm64 Windows wheels -- by :user:finnagin.

    Related issues and pull requests on GitHub: :issue:677.

  • Started building wheels for CPython 3.14 -- by :user:kumaraditya303.

    Related issues and pull requests on GitHub: :issue:681, :issue:682.

  • Removed --config-settings=pure-python=false from :file:requirements/dev.txt. Developers on CPython still get accelerated builds by default. To explicitly build a pure Python wheel, use pip install -e . --config-settings=pure-python=true -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:687.

v1.7.0

(2025-06-09)

... (truncated)

Commits
  • 48324af Release 1.8.0 (#698)
  • 7e5eab0 Add windows arm64 support (#678)
  • a2c22c2 Build(deps): Bump sphinx from 7.2.6 to 7.4.7 (#691)
  • 752b80a Build(deps): Bump types-setuptools from 75.8.0.20250210 to 80.9.0.20250822 (#...
  • 6b9d557 Build(deps): Bump cython from 3.1.1 to 3.1.4 (#690)
  • 7c4ad20 Build(deps-dev): Bump tox from 4.11.4 to 4.30.3 (#693)
  • 65f35d6 Build(deps): Bump pre-commit from 3.5.0 to 4.3.0 (#697)
  • 1ad0263 Build(deps): Bump pytest from 7.4.3 to 8.4.2 (#694)
  • 884ee49 Build(deps): Bump aiohttp-theme from 0.1.6 to 0.1.7 (#689)
  • b2d6180 Fix dependabot updates (#687)
  • Additional commits viewable in compare view

Updates idna from 3.15 to 3.18

Changelog

Sourced from idna's changelog.

3.18 (2026-06-02)

  • When decoding a domain, add a display argument that will pass through invalid labels rather than raising an exception.

3.17 (2026-05-28)

  • Substantial 75% reduction in memory usage through new data structures and some optimization in processing speed.
  • Added a general 1024-character input length cap to the public validation, conversion, and codec entry points. This is well above any legitimate domain or label and guards against pathological inputs.

3.16 (2026-05-22)

  • Add a command-line interface (python -m idna, also available as the idna script). Encodes or decodes one or more domains supplied as arguments or on standard input, with options to select A-label or U-label output and control error handling.
  • Raise the minimum supported Python version to 3.9
  • Various code quality improvements
Commits
  • f39ea90 Release 3.18
  • 40f4e40 Pre-release 3.18rc0
  • 1a5bf80 Merge pull request #253 from kjd/lenient-decode
  • 5bbb26f Merge branch 'master' into lenient-decode
  • c532bae Rename decode() lenient= option to display= (issue #248)
  • 0b1758b Merge pull request #252 from kjd/release-3.17
  • f48619c Release 3.17
  • 7421ba8 Pre-release 3.17rc0
  • 22ebb73 Merge pull request #251 from kjd/structure-optimizations
  • 2a7ac0a Drop redundant parallel-arrays comment from uts46data
  • Additional commits viewable in compare view

Updates multidict from 6.0.4 to 6.7.1

Release notes

Sourced from multidict's releases.

6.7.1

Bug fixes

  • Fixed slow memory leak caused by identity by adding Py_DECREF to identity value before leaving md_pop_one on success -- by :user:Vizonex.

    Related issues and pull requests on GitHub: #1284.

6.7.0

Contributor-facing changes

  • Updated tests and added CI for CPython 3.14 -- by :user:kumaraditya303.

    Related issues and pull requests on GitHub: #1235.

6.6.4

Bug fixes

  • Fixed MutliDict & CIMultiDict memory leak when deleting values or clearing them -- by :user:Vizonex

    Related issues and pull requests on GitHub: #1233.

Contributor-facing changes

  • The type preciseness coverage report generated by MyPy <https://mypy-lang.org>__ is now uploaded to Coveralls <https://coveralls.io/github/aio-libs/multidict>__ and will not be included in the Codecov views <https://app.codecov.io/gh/aio-libs/multidict>__ going forward -- by :user:webknjaz.

    Related issues and pull requests on GitHub: #1122, #1231.

  • Added memory leak test for popping or deleting attributes from a multidict to prevent future issues or bogus claims.

... (truncated)

Changelog

Sourced from multidict's changelog.

6.7.1

(2026-01-25)

Bug fixes

  • Fixed slow memory leak caused by identity by adding Py_DECREF to identity value before leaving md_pop_one on success -- by :user:Vizonex.

    Related issues and pull requests on GitHub: :issue:1284.

6.7.0

(2025-10-05)

Contributor-facing changes

  • Updated tests and added CI for CPython 3.14 -- by :user:kumaraditya303.

    Related issues and pull requests on GitHub: :issue:1235.

6.6.4

(2025-08-11)

Bug fixes

  • Fixed MutliDict & CIMultiDict memory leak when deleting values or clearing them -- by :user:Vizonex

    Related issues and pull requests on GitHub:

... (truncated)

Commits

Updates pytz from 2026.2 to 2026.3.post1

Commits
  • 661bca9 Bump version numbers to 2026.3.post1 for python2 fix
  • 1e31a16 Log python version running tests, force python2
  • b3ca7c3 Unix line endings
  • b55039a Replace non-ASCII character in comment to fix build with Python 2
  • 5420ee2 Replace non-ASCII character in comment
  • 2c139e8 Merge branch 'fix/localize-overflow-at-datetime-extremes' of https://github.c...
  • c843864 Run zdump tests quietly
  • 518500c Reduce noise when collecting zdump info dumps
  • 081f935 Merge branch 'kytta-fix-dst' into 2026c
  • 8c9d69b Merge branch 'master' into 2026c
  • Additional commits viewable in compare view

Updates yarl from 1.9.4 to 1.24.5

Changelog

Sourced from yarl's changelog.

v1.24.5

(2026-07-19)

Contributor-facing changes

  • Restricted the exhaustive IDNA default-ignorable sweep test to a native Linux x86_64 runner. It iterates roughly 140,000 code points and its result does not depend on the architecture, so running it under emulated wheel builds only added minutes and intermittently crashed the test workers -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:1806.

v1.24.4

(2026-07-19)

Packaging updates and notes for downstreams

  • Stopped installing hypothesis in the wheel-build test environment. The property-based quoting tests that need it are skipped there already, and building it from source on architectures without a prebuilt wheel (such as armv7l musllinux, where the build pulls in a Rust toolchain) was failing the wheel jobs -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:1804.

v1.24.3

(2026-07-19)

... (truncated)

Commits
  • 0b30cb0 Release 1.24.5 (#1807)
  • 56150c8 Run the IDNA sweep test only on native Linux x86_64 (#1806)
  • 515adca Release 1.24.4 (#1805)
  • ab5dec2 Do not install hypothesis in the wheel-build test env (#1804)
  • f9d10fb Release 1.24.3 (#1803)
  • 058b7cb Test lone surrogate handling in encoded and parsed URL paths (#991)
  • a181cee Update hypothesis requirement from >=6.156.4 to >=6.157.0 in /requirements (#...
  • 28c1bcc Encode scheme-shaped path colon in relative-path builders (#1802)
  • 51e2802 Reject hosts with Unicode default-ignorable code points (#1801)
  • 3921a73 Drop lone surrogates that split a percent escape in the Cython quoter (#1752)
  • Additional commits viewable in compare view

Updates annotated-types from 0.7.0 to 0.8.0

Release notes

Sourced from annotated-types's releases.

v0.8.0

What's Changed

New Contributors

Full Changelog: annotated-types/annotated-types@v0.7.0...v0.8.0

Commits

Updates certifi from 2026.6.17 to 2026.7.22

Commits

Updates fastjsonschema from 2.21.2 to 2.22.0

Changelog

Sourced from fastjsonschema's changelog.

=== 2.22.0 (2026-07-25)

  • Fixed IPv4 validation (rejecting leading zeros)
  • Fixed empty items and patternProperties
  • Fixed protection from deeply nested schemas potentially causing denial of service
  • Fixed comparing values for enum and const validations
  • Fixed resolving plain-name ref fragments
  • Fixed not throwing when unknown format is used
  • Fixed compilation of not, if/then/else, items, additionalItems, propertyNames and schema dependencies when a subschema generates no validation code
  • Added option to get all the errors (set fast_fail to False)
  • Added basic type hints
  • Added support of duration and uuid formats from draft-2019
Commits
  • a2fb34c v2.22.0
  • 1fa8834 Merge pull request #209 from henryiii/fix-not-variable-leak
  • 606503d Merge branch 'master' into fix-not-variable-leak
  • 9c385ea Merge pull request #207 from chuenchen309/fix/ipv4-format-reject-leading-zeros
  • 2a8955c Merge pull request #206 from gaoflow/fix-empty-body-codegen
  • 10e952b fix: don't leak variables from not blocks into the outer scope
  • 5513da7 Reject IPv4 octets with leading zeros in the ipv4 format check
  • 1613848 Fixed compilation of subschemas that generate no validation code
  • 8f5c02e Add SECURITY.md
  • 0390842 Fixed empty object
  • Additional commits viewable in compare view

Updates filelock from 3.31.1 to 3.32.0

Release notes

Sourced from filelock's releases.

3.32.0

What's Changed

Full Changelog: tox-dev/filelock@3.31.2...3.32.0

3.31.2

What's Changed

Full Changelog: tox-dev/filelock@3.31.1...3.31.2

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

3.32.1 (2026-07-26)

  • Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat wedges every contender. :pr:686

3.32.0 (2026-07-21)

  • SoftReadWriteLock closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:685
  • Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:683
  • The source distribution ships the capability probes the tests import, and reading one no longer needs coverage installed, so the suite runs from an unpacked sdist instead of failing on a missing coverage_pragmas. :pr:685

3.31.2 (2026-07-21)

  • filelock imports again on runtimes whose errno omits ENOTSUP, such as GraalPy, where importing the package raised ImportError. It probes the code instead, preferring ENOTSUP, falling back to EOPNOTSUPP where that name is absent, and dropping to ENOSYS/EXDEV where neither exists. Platforms defining ENOTSUP keep their behavior. :pr:681

3.31.1 (2026-07-20...

Description has been truncated

@dependabot
Bump the all group with 20 updates
3871217 
Bumps the all group with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.1` |
| [aiohttp](https://github.com/aio-libs/aiohttp) | `3.9.1` | `3.14.3` |
| [aiosignal](https://github.com/aio-libs/aiosignal) | `1.3.1` | `1.4.0` |
| [async-timeout](https://github.com/aio-libs/async-timeout) | `4.0.3` | `5.0.1` |
| [colorlog](https://github.com/borntyping/python-colorlog) | `6.11.0` | `6.12.0` |
| [frozenlist](https://github.com/aio-libs/frozenlist) | `1.4.0` | `1.8.0` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [multidict](https://github.com/aio-libs/multidict) | `6.0.4` | `6.7.1` |
| [pytz](https://github.com/stub42/pytz) | `2026.2` | `2026.3.post1` |
| [yarl](https://github.com/aio-libs/yarl) | `1.9.4` | `1.24.5` |
| [annotated-types](https://github.com/annotated-types/annotated-types) | `0.7.0` | `0.8.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.6.17` | `2026.7.22` |
| [fastjsonschema](https://github.com/horejsek/python-fastjsonschema) | `2.21.2` | `2.22.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.31.1` | `3.32.0` |
| [mistune](https://github.com/lepture/mistune) | `3.3.3` | `3.3.4` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.10.1` | `4.11.0` |
| [prompt-toolkit](https://github.com/prompt-toolkit/python-prompt-toolkit) | `3.0.52` | `3.0.53` |
| [python-discovery](https://github.com/tox-dev/python-discovery) | `1.4.4` | `1.5.0` |
| [soupsieve](https://github.com/facelessuser/soupsieve) | `2.9` | `2.9.1` |
| [virtualenv](https://github.com/pypa/virtualenv) | `21.6.1` | `21.7.0` |


Updates `pre-commit` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1)

Updates `aiohttp` from 3.9.1 to 3.14.3
- [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiohttp@v3.9.1...v3.14.3)

Updates `aiosignal` from 1.3.1 to 1.4.0
- [Release notes](https://github.com/aio-libs/aiosignal/releases)
- [Changelog](https://github.com/aio-libs/aiosignal/blob/master/CHANGES.rst)
- [Commits](aio-libs/aiosignal@v1.3.1...v1.4.0)

Updates `async-timeout` from 4.0.3 to 5.0.1
- [Release notes](https://github.com/aio-libs/async-timeout/releases)
- [Changelog](https://github.com/aio-libs-abandoned/async-timeout/blob/master/CHANGES.rst)
- [Commits](aio-libs-abandoned/async-timeout@v4.0.3...v5.0.1)

Updates `colorlog` from 6.11.0 to 6.12.0
- [Release notes](https://github.com/borntyping/python-colorlog/releases)
- [Commits](borntyping/python-colorlog@v6.11.0...v6.12.0)

Updates `frozenlist` from 1.4.0 to 1.8.0
- [Release notes](https://github.com/aio-libs/frozenlist/releases)
- [Changelog](https://github.com/aio-libs/frozenlist/blob/master/CHANGES.rst)
- [Commits](aio-libs/frozenlist@v1.4.0...v1.8.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.15...v3.18)

Updates `multidict` from 6.0.4 to 6.7.1
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.0.4...v6.7.1)

Updates `pytz` from 2026.2 to 2026.3.post1
- [Release notes](https://github.com/stub42/pytz/releases)
- [Commits](stub42/pytz@release_2026.2...release_2026.3.post1)

Updates `yarl` from 1.9.4 to 1.24.5
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.9.4...v1.24.5)

Updates `annotated-types` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/annotated-types/annotated-types/releases)
- [Commits](annotated-types/annotated-types@v0.7.0...v0.8.0)

Updates `certifi` from 2026.6.17 to 2026.7.22
- [Commits](certifi/python-certifi@2026.06.17...2026.07.22)

Updates `fastjsonschema` from 2.21.2 to 2.22.0
- [Changelog](https://github.com/horejsek/python-fastjsonschema/blob/master/CHANGELOG.txt)
- [Commits](horejsek/python-fastjsonschema@v2.21.2...v2.22.0)

Updates `filelock` from 3.31.1 to 3.32.0
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.31.1...3.32.0)

Updates `mistune` from 3.3.3 to 3.3.4
- [Release notes](https://github.com/lepture/mistune/releases)
- [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst)
- [Commits](lepture/mistune@v3.3.3...v3.3.4)

Updates `platformdirs` from 4.10.1 to 4.11.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.10.1...4.11.0)

Updates `prompt-toolkit` from 3.0.52 to 3.0.53
- [Release notes](https://github.com/prompt-toolkit/python-prompt-toolkit/releases)
- [Changelog](https://github.com/prompt-toolkit/python-prompt-toolkit/blob/main/CHANGELOG)
- [Commits](prompt-toolkit/python-prompt-toolkit@3.0.52...3.0.53)

Updates `python-discovery` from 1.4.4 to 1.5.0
- [Release notes](https://github.com/tox-dev/python-discovery/releases)
- [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst)
- [Commits](tox-dev/python-discovery@1.4.4...1.5.0)

Updates `soupsieve` from 2.9 to 2.9.1
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.9...2.9.1)

Updates `virtualenv` from 21.6.1 to 21.7.0
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.6.1...21.7.0)

---
updated-dependencies:
- dependency-name: pre-commit
  dependency-version: 4.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: aiohttp
  dependency-version: 3.14.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: aiosignal
  dependency-version: 1.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: async-timeout
  dependency-version: 5.0.1
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: all
- dependency-name: colorlog
  dependency-version: 6.12.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: frozenlist
  dependency-version: 1.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: idna
  dependency-version: '3.18'
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: multidict
  dependency-version: 6.7.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: pytz
  dependency-version: 2026.3.post1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: yarl
  dependency-version: 1.24.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: annotated-types
  dependency-version: 0.8.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: certifi
  dependency-version: 2026.7.22
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: fastjsonschema
  dependency-version: 2.22.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: filelock
  dependency-version: 3.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: mistune
  dependency-version: 3.3.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: platformdirs
  dependency-version: 4.11.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: prompt-toolkit
  dependency-version: 3.0.53
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: python-discovery
  dependency-version: 1.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: soupsieve
  dependency-version: 2.9.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: virtualenv
  dependency-version: 21.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Jul 27, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) July 27, 2026 04:14
@github-actions
github-actions Bot merged commit fe02049 into main Jul 27, 2026
7 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/all-09d04d29a9 branch July 27, 2026 09:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@knyghty knyghty knyghty approved these changes

Assignees

@knyghty knyghty

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@knyghty