Skip to content

pip(deps): bump the pip-patch-and-minor group across 1 directory with 11 updates - #17

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-patch-and-minor-8384f820ec
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/pip-patch-and-minor-8384f820ec

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 21, 2026 •

Copy link
Copy Markdown

Bumps the pip-patch-and-minor group with 11 updates in the / directory:

Package From To
aiogram 3.30.0 3.31.0
sqlalchemy 2.0.51 2.0.54
greenlet 3.5.5 3.5.6
idna 3.18 3.20
multidict 6.7.1 6.9.0
propcache 0.5.2 0.5.4
pydantic 2.13.4 2.13.5
pydantic-core 2.46.4 2.49.0
python-dotenv 1.2.2 1.2.3
typing-inspection 0.4.3 0.4.4
yarl 1.24.5 1.25.1

Updates aiogram from 3.30.0 to 3.31.0

Release notes

Sourced from aiogram's releases.

Telegram Bot API 10.3

What's Changed

New Contributors

Full Changelog: aiogram/aiogram@v3.30.0...v3.31.0

Changelog

Sourced from aiogram's changelog.

3.31.0 (2026-08-26)

Bugfixes

  • Fixed :class:aiogram.utils.i18n.SimpleI18nMiddleware never resolving territory-specific locales: a Telegram language_code like pt-br now selects an available pt_BR translations directory (falling back to the bare language when only it exists), instead of always resolving to the bare language and missing the territory directory. [#1755](https://github.com/aiogram/aiogram/issues/1755) <https://github.com/aiogram/aiogram/issues/1755>_

  • Fixed :code:Message.content_type returning :code:photo for Live Photo messages. Telegram sends a regular :code:photo alongside :code:live_photo, so :code:live_photo is now checked first and :code:ContentType.LIVE_PHOTO is returned. :code:Message.send_copy also copies such messages via :class:aiogram.methods.send_live_photo.SendLivePhoto instead of sending a static photo. [#1841](https://github.com/aiogram/aiogram/issues/1841) <https://github.com/aiogram/aiogram/issues/1841>_

  • Fixed missing dispatcher contextual argument for filters, handlers and middlewares when updates are fed via webhook (:class:aiogram.webhook.aiohttp_server.SimpleRequestHandler, :class:aiogram.webhook.aiohttp_server.TokenBasedRequestHandler) or direct :meth:aiogram.dispatcher.dispatcher.Dispatcher.feed_update calls. Previously it was only injected by start_polling, so a callback declaring a required dispatcher parameter worked in polling mode but failed with TypeError in webhook mode, aborting event propagation for sibling handlers as well. [#1855](https://github.com/aiogram/aiogram/issues/1855) <https://github.com/aiogram/aiogram/issues/1855>_

  • Improved import performance by reusing the type namespace when rebuilding Telegram object models. [#1861](https://github.com/aiogram/aiogram/issues/1861) <https://github.com/aiogram/aiogram/issues/1861>_

  • Fixed bot-level parse_mode default not being applied to recently added methods and types. sendGift, giftPremiumSubscription, sendPaidMedia, sendLivePhoto, sendMessageDraft, postStory, editStory, editEphemeralMessageText, editEphemeralMessageCaption, :class:aiogram.types.input_checklist.InputChecklist, :class:aiogram.types.input_checklist_task.InputChecklistTask, :class:aiogram.types.input_media_live_photo.InputMediaLivePhoto and :class:aiogram.types.input_media_voice_note.InputMediaVoiceNote were missing the Default("parse_mode") sentinel, so Bot(default=DefaultBotProperties(parse_mode=...)) was silently ignored and captions were sent unformatted. [#1873](https://github.com/aiogram/aiogram/issues/1873) <https://github.com/aiogram/aiogram/issues/1873>_

  • Fixed bot-level defaults being ignored by ten generated entities.

    :code:Bot(default=DefaultBotProperties(protect_content=..., show_caption_above_media=..., link_preview=...)) was silently dropped by :class:aiogram.methods.copy_messages.CopyMessages, :class:aiogram.methods.forward_messages.ForwardMessages, :class:aiogram.methods.post_story.PostStory, :class:aiogram.methods.repost_story.RepostStory, :class:aiogram.methods.send_checklist.SendChecklist, :class:aiogram.methods.send_live_photo.SendLivePhoto, :class:aiogram.methods.send_paid_media.SendPaidMedia, :class:aiogram.methods.send_rich_message.SendRichMessage, :class:aiogram.methods.edit_ephemeral_message_text.EditEphemeralMessageText and

... (truncated)

Commits
  • 97cfe79 Bump changelog
  • 4d281df fix(i18n): resolve territory-specific locales from Telegram language_code (#1...
  • 8a4f322 Rewrite the 2.x -> 3.x migration guide: fix factual errors, cover silent brea...
  • c2af7b3 Added full support for the Bot API 10.3 (#1888)
  • bea6716 Add Claude agent skills for pre-PR reviews, testing, codegen, and FSM dispatc...
  • 7a7c350 Fix bot-level parse_mode default not applied to recently added entities (#1873)
  • aaac433 Bump vulnerable dependencies to patched versions (#1872)
  • ba098a5 Fix missing dispatcher contextual argument on webhook feed path (#1855) (#1856)
  • c0c48ed Reuse type namespace when rebuilding models (#1861)
  • fc6e5bc Fix content type detection for live photos (#1871)
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.51 to 2.0.54

Release notes

Sourced from sqlalchemy's releases.

2.0.54

Released: September 15, 2026

platform

  • [platform] [change] Binary wheels are no longer built for Python 3.7. PyPI now rejects wheel files whose filename does not begin with the normalized project name, and the packaging tools that can be installed on Python 3.7 do not produce such a filename. As a result, SQLAlchemy 2.0.44 was the last release to publish Python 3.7 wheels to PyPI, and releases 2.0.45 and later have been available on Python 3.7 only as a source distribution; the wheel builds for Python 3.7 are now removed. Python 3.7 remains supported by the 2.0 series.

  • [platform] [bug] Fixed issue where the Cython extensions were compiled without the freethreading_compatible directive, so that they did not declare themselves as safe to run without the GIL. On a free-threaded Python interpreter such as Python 3.13t or 3.14t, importing SQLAlchemy would cause the interpreter to re-enable the GIL, emitting a RuntimeWarning. The directive is now set when building for Python 3.13 and above, and a test has been added which confirms that importing SQLAlchemy on a free-threaded build does not enable the GIL.

    References: #13592

2.0.53

Released: September 14, 2026

orm

  • [orm] [bug] Fixed issue where an expression passed to _orm.with_expression() that embedded a _sql.select(), such as a correlated _sql.exists(), would fail to populate the attribute correctly on the second and subsequent executions of an otherwise identical statement, when the _orm.query_expression() attribute was loaded by a relationship loader that emits a second query, i.e. _orm.selectinload(), _orm.lazyload() or _orm.immediateload().

    References: #13560

  • [orm] [bug] Fixed memory issue where mapped classes, along with their Table and _orm.Mapper objects, would not be garbage collected after the _orm.registry in which they were mapped had been disposed and dereferenced. The issue would occur for mappings that made use of _orm.relationship() together with constructs such as an

... (truncated)

Commits

Updates greenlet from 3.5.5 to 3.5.6

Changelog

Sourced from greenlet's changelog.

3.5.6 (2026-09-14)

  • Correct a race condition that could lead to garbage collection unintentionally being disabled. See PR 529 <https://github.com/python-greenlet/greenlet/pull/529>_ by Yurii.
Commits
  • abfe740 Preparing release 3.5.6
  • e23e3e4 Change note for #529
  • 8de830f Merge pull request #529 from Georggi/patch-1
  • 72d7cac Merge pull request #530 from python-greenlet/dependabot/github_actions/github...
  • ac01b7d Bump github/codeql-action in the github-actions group
  • e18f5a6 Simplify GCDisabledGuard constructor
  • 6aaf3af Back to development: 3.5.6
  • See full diff in compare view

Updates idna from 3.18 to 3.20

Release notes

Sourced from idna's releases.

v3.20

  • Update to Unicode 18.0.0.
  • Better enforcement of the domain length limit in the incremental codec.
  • Add support for Python 3.15.

v3.19

  • Restore the std3_rules option, which had no effect since changes to UTS #46 processing in Unicode 16. Note that uts46_remap() defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again.
  • Performance improvements to UTS #46 mapping, particularly for ASCII-only domains.
  • Test on free-threaded CPython with the GIL disabled and document thread safety.
  • Expose the Unicode version of the generated tables as idna.unicode_version, and show it in idna --version.
  • Add code, text, codepoint and position attributes to IDNAError so that the failed rule and the offending character can be identified without parsing the exception message.
  • The deprecated transitional argument to encode() and uts46_remap() is now completely ignored, and gives a deprecation warning for the latter.
  • Reject A-labels that are not the canonical Punycode encoding of their U-label.
  • Fix CONTEXTJ violations raising IDNAError instead of InvalidCodepointContext.
  • Consistently raise IDNAError for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec.
  • Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output.
  • Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release.

Changelog

Sourced from idna's changelog.

3.20 (2026-09-17)

  • Update to Unicode 18.0.0.
  • Better enforcement of the domain length limit in the incremental codec.
  • Add support for Python 3.15.

3.19 (2026-08-18)

  • Restore the std3_rules option, which had no effect since changes to UTS #46 processing in Unicode 16. Note that uts46_remap() defaults to enabling STD3 rules, so direct callers will see input containing non-LDH ASCII characters rejected again.
  • Performance improvements to UTS #46 mapping, particularly for ASCII-only domains.
  • Test on free-threaded CPython with the GIL disabled and document thread safety.
  • Expose the Unicode version of the generated tables as idna.unicode_version, and show it in idna --version.
  • Add code, text, codepoint and position attributes to IDNAError so that the failed rule and the offending character can be identified without parsing the exception message.
  • The deprecated transitional argument to encode() and uts46_remap() is now completely ignored, and gives a deprecation warning for the latter.
  • Reject A-labels that are not the canonical Punycode encoding of their U-label.
  • Fix CONTEXTJ violations raising IDNAError instead of InvalidCodepointContext.
  • Consistently raise IDNAError for empty labels and non-ASCII bytes passed to label helper functions and the incremental codec.
  • Add property-based tests, extended fuzzing targets, coverage measurement, and CI checks that the data tables match the generator output.
  • Various code quality and tooling improvements.

Thanks to stefan6419846, LouieLuNZ, and Salvatore Corvaglia for contributions to this release.

Commits
  • d55e65e Release 3.20
  • 0c0824a Pre-release 3.20rc0
  • bd7c316 Note Python 3.15 support in the 3.20 changelog
  • b6cce85 Merge pull request #276 from kjd/unicode-18
  • 9a4bc59 Update to Unicode 18.0.0
  • dfab5a0 Merge branch 'python-3.15'
  • 417c354 Read the latest Unicode version from the DerivedAge.txt header instead of the...
  • cd17392 Merge pull request #274 from kjd/fix-decode-length-check
  • c5796d7 Skip the decode round-trip check for domains past encode's length limit
  • d6ee690 Update to Python 3.15 release candidate in CI and add trove classifier
  • Additional commits viewable in compare view

Updates multidict from 6.7.1 to 6.9.0

Release notes

Sourced from multidict's releases.

6.9.0

Bug fixes

  • Protected repr() of MultiDict, MultiDictProxy, and their views in the C extension with a critical section, avoiding data races on the free-threaded build of CPython -- by :user:asvetlov.

    Related issues and pull requests on GitHub: #1431.

  • Guarded repr() of MultiDictProxy in the C extension and of KeysView in both the C extension and the pure-Python implementation against infinite recursion on self-referential containers, matching the existing guard on MultiDict, ItemsView, and ValuesView -- by :user:asvetlov.

    Related issues and pull requests on GitHub: #1431.

  • Protected MultiDict.update(), .extend(), .merge(), .clear(), .copy(), and the MultiDict/CIMultiDict constructors in the C extension with a critical section, using the two-object form when a second multidict, multidict proxy, or plain dict instance is involved, avoiding data races and a segmentation fault on the free-threaded build of CPython. .clear() now also publishes the empty table before releasing any entry's references, so a concurrent caller can never observe a partially-cleared multidict even if releasing a value runs arbitrary Python code that suspends the held critical section -- by :user:asvetlov.

    Related issues and pull requests on GitHub: #1433.

  • Protected MultiDict.add(), __setitem__/__delitem__, get()/getone()/__getitem__, __contains__, getall(), setdefault(), pop()/popone()/popall()/popitem(), __eq__, iteration, and the &/|/-/^/in/ isdisjoint() operations on .keys() and .items() views in the C extension with a critical section, avoiding data races and use-after-free crashes on the free-threaded build of CPython -- by :user:asvetlov.

    Related issues and pull requests on GitHub: #1438.

  • Fixed a data race on the free-threaded build where MultiDictObject.used was written non-atomically while len() read it with a relaxed atomic load -- by :user:asvetlov.

... (truncated)

Changelog

Sourced from multidict's changelog.

6.9.0

(2026-09-18)

Bug fixes

  • Protected repr() of MultiDict, MultiDictProxy, and their views in the C extension with a critical section, avoiding data races on the free-threaded build of CPython -- by :user:asvetlov.

    Related issues and pull requests on GitHub: :issue:1431.

  • Guarded repr() of MultiDictProxy in the C extension and of KeysView in both the C extension and the pure-Python implementation against infinite recursion on self-referential containers, matching the existing guard on MultiDict, ItemsView, and ValuesView -- by :user:asvetlov.

    Related issues and pull requests on GitHub: :issue:1431.

  • Protected MultiDict.update(), .extend(), .merge(), .clear(), .copy(), and the MultiDict/CIMultiDict constructors in the C extension with a critical section, using the two-object form when a second multidict, multidict proxy, or plain dict instance is involved, avoiding data races and a segmentation fault on the free-threaded build of CPython. .clear() now also publishes the empty table before releasing any entry's references, so a concurrent caller can never observe a partially-cleared multidict even if releasing a value runs arbitrary Python code that suspends the held critical section -- by :user:asvetlov.

    Related issues and pull requests on GitHub: :issue:1433.

  • Protected MultiDict.add(), __setitem__/__delitem__, get()/getone()/__getitem__, __contains__, getall(), setdefault(), pop()/popone()/popall()/popitem(), __eq__, iteration, and the &/|/-/^/in/ isdisjoint() operations on .keys() and .items() views in the C extension with a critical section, avoiding data races and use-after-free crashes on the free-threaded build of CPython -- by :user:asvetlov.

    Related issues and pull requests on GitHub: :issue:1438.

... (truncated)

Commits

Updates propcache from 0.5.2 to 0.5.4

Release notes

Sourced from propcache's releases.

0.5.4

Packaging updates and notes for downstreams

  • Fixed the release wheels being compiled without optimization since version 0.5.0. The build backend set CFLAGS to add -ffile-prefix-map, which replaced the interpreter's own compiler flags instead of extending them, so -O3 and -DNDEBUG were dropped; the extra flags now go through CPPFLAGS, which is appended. Cached property reads are about 1.5x faster than in 0.5.3 -- by :user:bdraco.

    Related issues and pull requests on GitHub: #244, #302.


0.5.3

Bug fixes

  • Fixed a possible crash in the C implementation of cached_property and under_cached_property on free-threaded Python, where a cached value could be freed by another thread while it was being read; errors raised while looking up the cache are now propagated on all builds, and the computed value is no longer leaked if storing it fails -- by :user:bdraco.

    Related issues and pull requests on GitHub: #297.

Removals and backward incompatible breaking changes

  • Dropped support for free-threaded Python 3.13 -- by :user:Vizonex.

    Related issues and pull requests on GitHub: #223.

Improved documentation

  • Updated discussion links from the defunct Google Groups forum to GitHub Discussions -- by :user:gundalow.

    Related issues and pull requests on GitHub:

... (truncated)

Changelog

Sourced from propcache's changelog.

0.5.4

(2026-09-15)

Packaging updates and notes for downstreams

  • Fixed the release wheels being compiled without optimization since version 0.5.0. The build backend set CFLAGS to add -ffile-prefix-map, which replaced the interpreter's own compiler flags instead of extending them, so -O3 and -DNDEBUG were dropped; the extra flags now go through CPPFLAGS, which is appended. Cached property reads are about 1.5x faster than in 0.5.3 -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:244, :issue:302.


0.5.3

(2026-09-15)

Bug fixes

  • Fixed a possible crash in the C implementation of cached_property and under_cached_property on free-threaded Python, where a cached value could be freed by another thread while it was being read; errors raised while looking up the cache are now propagated on all builds, and the computed value is no longer leaked if storing it fails -- by :user:bdraco.

    Related issues and pull requests on GitHub: :issue:297.

Removals and backward incompatible breaking changes

  • Dropped support for free-threaded Python 3.13 -- by :user:Vizonex.

    Related issues and pull requests on GitHub:

... (truncated)

Commits

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

  • Allow reuse of validators when plugins are set by @​Viicos in #13535
  • Fix missing GC traversal on some pydantic-core struct fields by @​Viicos in #13624
  • Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @​Viicos in #13629
  • Count validated model fields once in smart unions by @​tamird in #13731
Commits
  • 001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
  • 558379f Bump twine to v7.0.0
  • 2cfd5d3 Do not check for docs build
  • a735bee Fix more Clippy lints
  • 7eed4a1 Fix Clippy 0.1.95 warnings
  • b353bbb Prepare release v2.13.5
  • 63d2ccc Count validated model fields once in smart unions
  • a53ec2e Speed up PyPy CI tests
  • d65e0f9 Workaround circular import error in Mypy
  • 47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
  • Additional commits viewable in compare view

Updates pydantic-core from 2.46.4 to 2.49.0

Commits

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

  • Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@​h1whelan] in #640
  • set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@​dchaudhari7177] in #680
  • dotenv run now prints a friendly error instead of a traceback when no command is given by [@​bbc2] in #606
  • Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@​ReinerBRO] in #638
Commits
  • 49515af Bump version: 1.2.2 → 1.2.3
  • 8ac846f chore: add release runbook (RELEASING.md) and make release target
  • bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
  • f7b18d9 fix: round-trip backslashes through set_key (#680)
  • 751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
  • f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
  • 45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
  • 72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
  • 72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
  • 078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
  • Additional commits viewable in compare view

Updates typing-inspection from 0.4.3 to 0.4.4

Changelog

Sourced from typing-inspection's changelog.

v0.4.4 (2026-08-12)

Commits

Updates yarl from 1.24.5 to 1.25.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… 11 updates

Bumps the pip-patch-and-minor group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aiogram](https://github.com/aiogram/aiogram) | `3.30.0` | `3.31.0` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.51` | `2.0.54` |
| [greenlet](https://github.com/python-greenlet/greenlet) | `3.5.5` | `3.5.6` |
| [idna](https://github.com/kjd/idna) | `3.18` | `3.20` |
| [multidict](https://github.com/aio-libs/multidict) | `6.7.1` | `6.9.0` |
| [propcache](https://github.com/aio-libs/propcache) | `0.5.2` | `0.5.4` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.4` | `2.49.0` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` |
| [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.3` | `0.4.4` |
| [yarl](https://github.com/aio-libs/yarl) | `1.24.5` | `1.25.1` |



Updates `aiogram` from 3.30.0 to 3.31.0
- [Release notes](https://github.com/aiogram/aiogram/releases)
- [Changelog](https://github.com/aiogram/aiogram/blob/dev-3.x/CHANGES.rst)
- [Commits](aiogram/aiogram@v3.30.0...v3.31.0)

Updates `sqlalchemy` from 2.0.51 to 2.0.54
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `greenlet` from 3.5.5 to 3.5.6
- [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst)
- [Commits](python-greenlet/greenlet@3.5.5...3.5.6)

Updates `idna` from 3.18 to 3.20
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](kjd/idna@v3.18...v3.20)

Updates `multidict` from 6.7.1 to 6.9.0
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.7.1...v6.9.0)

Updates `propcache` from 0.5.2 to 0.5.4
- [Release notes](https://github.com/aio-libs/propcache/releases)
- [Changelog](https://github.com/aio-libs/propcache/blob/master/CHANGES.rst)
- [Commits](aio-libs/propcache@v0.5.2...v0.5.4)

Updates `pydantic` from 2.13.4 to 2.13.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.4...v2.13.5)

Updates `pydantic-core` from 2.46.4 to 2.49.0
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits)

Updates `python-dotenv` from 1.2.2 to 1.2.3
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3)

Updates `typing-inspection` from 0.4.3 to 0.4.4
- [Release notes](https://github.com/pydantic/typing-inspection/releases)
- [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md)
- [Commits](pydantic/typing-inspection@v0.4.3...v0.4.4)

Updates `yarl` from 1.24.5 to 1.25.1
- [Release notes](https://github.com/aio-libs/yarl/releases)
- [Changelog](https://github.com/aio-libs/yarl/blob/master/CHANGES.rst)
- [Commits](aio-libs/yarl@v1.24.5...v1.25.1)

---
updated-dependencies:
- dependency-name: aiogram
  dependency-version: 3.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-and-minor
- dependency-name: sqlalchemy
  dependency-version: 2.0.54
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-and-minor
- dependency-name: greenlet
  dependency-version: 3.5.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-and-minor
- dependency-name: idna
  dependency-version: '3.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-and-minor
- dependency-name: multidict
  dependency-version: 6.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-and-minor
- dependency-name: propcache
  dependency-version: 0.5.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-and-minor
- dependency-name: pydantic
  dependency-version: 2.13.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-and-minor
- dependency-name: pydantic-core
  dependency-version: 2.49.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-and-minor
- dependency-name: python-dotenv
  dependency-version: 1.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-and-minor
- dependency-name: typing-inspection
  dependency-version: 0.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip-patch-and-minor
- dependency-name: yarl
  dependency-version: 1.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip-patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github

dependabot Bot commented on behalf of github Sep 28, 2026

Copy link
Copy Markdown
Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Sep 28, 2026
@dependabot
dependabot Bot deleted the dependabot/pip/pip-patch-and-minor-8384f820ec branch September 28, 2026 22:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants