Skip to content

chore(deps): bump the weekly-batch group with 29 updates - #235

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/weekly-batch-e75c2a9f80
Open

chore(deps): bump the weekly-batch group with 29 updates#235
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/weekly-batch-e75c2a9f80

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps the weekly-batch group with 29 updates:

Package From To
boto3 1.43.97 1.43.111
werkzeug 3.1.8 3.1.9
python-dotenv 1.2.3 1.2.4
roc-validator 0.11.4 0.12.2
amqp 5.3.1 5.4.1
billiard 4.3.0 4.3.1
botocore 1.43.97 1.43.111
cattrs 26.2.0 26.2.1
charset-normalizer 3.5.1 3.5.2
click-repl 0.4.0 0.4.1
cryptography 50.0.1 50.0.2
dnspython 2.8.0 2.9.0
enum-tools 0.12.0 0.13.0
iniconfig 2.3.0 2.3.1
markupsafe 3.0.3 3.0.4
moto 5.2.3 5.2.4
pip-tools 7.6.1 7.6.2
platformdirs 4.11.10 4.13.0
pycparser 3.0 3.11
pydantic 2.13.5 2.14.1
pydantic-core 2.46.5 2.50.1
pyparsing 3.3.2 3.3.3
pytest-mock 3.15.1 3.16.0
rich 13.9.4 15.0.0
ruff 0.16.8 0.17.0
tzdata 2026.4 2026.5
url-normalize 3.0.0 3.0.1
wcwidth 0.8.4 0.9.2
zipp 4.1.0 4.1.1

Updates boto3 from 1.43.97 to 1.43.111

Commits

Updates werkzeug from 3.1.8 to 3.1.9

Release notes

Sourced from werkzeug's releases.

3.1.9

This is the Werkzeug 3.1.9 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Werkzeug/3.1.9/ Changes: https://werkzeug.palletsprojects.com/page/changes/#version-3-1-9 Milestone: https://github.com/pallets/werkzeug/milestone/46?closed=1

  • safe_join on Windows does not allow special devices names with empty ADS markers on NTFS. GHSA-g6x2-hccm-hh4m
  • ProfilerMiddleware uses profiling.tracing on Python 3.15. #3207
  • uri_to_iri and iri_to_uri preserve empty username, password, and port 0. #3189
  • Improve performance of parse_options_header. #3231
  • Improve performance of parse_etags. #3231
  • Improve performance of parse_cookie. #3231
  • get_host also checks that the port is in the valid range. #3236
  • The int URL converter returns a 404 instead of 500 error when the value is longer than sys.get_int_max_str_digits(). #3237
  • Improve debugger PIN generation from cgroup data inside Podman. #3245
  • Authorization parsing basic auth disallows non-base64 characters. #3248
  • application/x-www-form-urlencoded form data is no longer limited to max_form_memory_size, only max_content_length. #3251
  • LimitedStream.readinto does not resize the buffer when it reads less than the remaining size. #3253
  • Rules with 10 or more converters in a single part assign matched values correctly. #3254
  • The invalid Range suffix length -0 is no longer accepted. #3255
Changelog

Sourced from werkzeug's changelog.

Version 3.1.9

Released 2026-09-27

  • safe_join on Windows does not allow special devices names with empty ADS markers on NTFS. :ghsa:g6x2-hccm-hh4m
  • ProfilerMiddleware uses profiling.tracing on Python 3.15. :issue:3207
  • uri_to_iri and iri_to_uri preserve empty username, password, and port 0. :issue:3189
  • Improve performance of parse_options_header. :pr:3231
  • Improve performance of parse_etags. :pr:3231
  • Improve performance of parse_cookie. :pr:3231
  • get_host also checks that the port is in the valid range. :pr:3236
  • The int URL converter returns a 404 instead of 500 error when the value is longer than sys.get_int_max_str_digits(). :issue:3237
  • Improve debugger PIN generation from cgroup data inside Podman. :issue:3245
  • Authorization parsing basic auth disallows non-base64 characters. :pr:3248
  • application/x-www-form-urlencoded form data is no longer limited to max_form_memory_size, only max_content_length. :pr:3251
  • LimitedStream.readinto does not resize the buffer when it reads less than the remaining size. :pr:3253
  • Rules with 10 or more converters in a single part assign matched values correctly. :pr:3254
  • The invalid Range suffix length -0 is no longer accepted. :pr:3255
Commits

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698
Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698
Commits
  • a565c2c Bump version: 1.2.3 → 1.2.4
  • 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
  • f215c02 fix: dotenv get exits 0 for empty string values (#700)
  • 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
  • e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
  • a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
  • f5485a6 fix: parse empty unquoted value with inline comment as empty string
  • See full diff in compare view

Updates roc-validator from 0.11.4 to 0.12.2

Release notes

Sourced from roc-validator's releases.

0.12.2

What's Changed

Full Changelog: crs4/rocrate-validator@0.12.1...0.12.2

0.12.1

What's Changed

Full Changelog: crs4/rocrate-validator@0.12.0...0.12.1

0.12.0

What's Changed

Full Changelog: crs4/rocrate-validator@0.11.4...0.12.0

Changelog

Sourced from roc-validator's changelog.

[0.12.2] - 2026-10-05

Full changelog: kikkomep/rocrate-validator@0.12.1...0.12.2

🐛 Fixed

  • fix(profiles): handle absolute file URI Data Entity identifiers (afb7b0d2)
  • fix(profiles): accept declared compact IRIs in JSON-LD properties (050dd18a)

🔧 Changed

  • test(profiles): cover absolute file URI Data Entities (9f12712b)
  • test(jsonld): cover compact IRI prefixes across RO-Crate profiles (cdb6e04e)

[0.12.1] - 2026-10-01

Full changelog: kikkomep/rocrate-validator@0.12.0...0.12.1

🔧 Changed

  • chore(deps): group weekly dependency updates (088d7f43)
  • test(validation): cover metadata descriptor targeting across core versions (a09b795a)
  • ci(deps): configure weekly Dependabot updates for GitHub Actions (039f8f13)
  • ci(release): update Sigstore action to v3.5.0 (42896acd)
  • ci(typos): align CI and pre-commit on v1.50.3 (d531e457)
  • ci(actions): update setup-python to v7 (0b33ccf6)
  • ci(actions): update checkout to v7 (e0ccc19d)
  • ci: replace release check polling with native workflow dependency (54560d6a)
  • test(validation): verify effective overlay IDs in text reports (c51cf5de)
  • test(validation): cover profile Root Data Entity hasPart cases (865f39c7)

🐛 Fixed

  • fix(profiles): identify metadata descriptors by filename suffix (06f5520e)
  • fix: correct two check descriptions (e150f0dc)
  • fix(validation): show overlay check IDs in text reports (def3ded1)
  • fix(validation): report missing hasPart Data Entities accurately (6c065b84)

[0.12.0] - 2026-09-30

Full changelog: kikkomep/rocrate-validator@0.11.4...0.12.0

⚠️ Breaking Changes

  • The default validation profile is now ro-crate-1.3 (previously ro-crate-1.1). Since 1.3 is self-contained, validation now applies 95 requirements instead of 30; crates declaring the 1.1 context fail the ro-crate-1.3_2.2 check under the default profile. This primarily affects API users when profile_identifier is omitted. CLI auto-detection is unchanged unless no profile is detected or --no-auto-profile is used. To keep the previous behaviour, explicitly select ro-crate-1.1 with profile_identifier or -p ro-crate-1.1

... (truncated)

Commits
  • 7f9c9ba release: 🔖 version 0.12.2
  • 36b98e3 chore(release): 🔖 bump version to 0.12.2
  • afaf98d chore: 🔖 update changelog (v0.12.2)
  • 763223f Merge pull request #223 from kikkomep/fix/file-uri-data-entities
  • 13b1304 Merge pull request #222 from kikkomep/fix/jsonld-compact-iri-prefixes
  • 9f12712 test(profiles): 🧪 cover absolute file URI Data Entities
  • cdb6e04 fix(profiles): 🐛 handle absolute file URI Data Entity identifiers
  • afb7b0d test(jsonld): 🧪 cover compact IRI prefixes across RO-Crate profiles
  • 050dd18 fix(profiles): 🐛 accept declared compact IRIs in JSON-LD properties
  • 82d6105 release: 🔖 version 0.12.1
  • Additional commits viewable in compare view

Updates amqp from 5.3.1 to 5.4.1

Release notes

Sourced from amqp's releases.

v5.4.1

What's Changed

New Contributors

Full Changelog: celery/py-amqp@v5.4.0...v5.4.1

v5.4.0

What's Changed

New Contributors

Full Changelog: celery/py-amqp@v5.3.1...v5.4.0

Changelog

Sourced from amqp's changelog.

5.4.1

:release-date: 2026-10-05 :release-by: Asif Saif Uddin (@​auvipy)

  • Fix signedness of byte fields in AMQP tables - #472

.. _version-5.4.0:

5.4.0

:release-date: 2026-09-19 :release-by: Asif Saif Uddin (@​auvipy)

  • Replace deprecated datetime.datetime.utcfromtimestamp (#448)
  • Remove Python 3.8, 3.9 support
  • Update CI workflow to exclude Python 3.9 (#454)
  • Add null check for connection to prevent AttributeError on drain_events (#457)
  • Fix prevent channel revival during intentional close to fix shutdown crash (#458)
  • Add Python 3.14 support
  • Support limiting tls version (#463)
  • Decode AMQP field-table type l as signed 64-bit (#465)
  • Treat basic_publish write timeouts as connection errors (#464)
  • Serialize frame_writer() writes with a lock (#466)
  • Decode AMQP field-table type 's' as signed 16-bit (#469)

.. _version-5.3.1:

Commits
  • b850b07 Bump version: 5.4.0 → 5.4.1
  • 3b401be added changelog for v5.4.1 release
  • d03ced3 Decode AMQP field-table types 'b' and 'B' with the right signedness (#473)
  • c6117db Fix signedness of byte fields in AMQP tables
  • 31b0b58 Bump version: 5.3.1 → 5.4.0
  • de36b55 added changelog for v5.4.0 release
  • f3d82f1 Decode AMQP field-table type 's' as signed 16-bit (#469)
  • c2012cc Drop unused python version check (#468)
  • 9517a4d Update Python version requirements in setup.py (#467)
  • 3082466 Serialize frame_writer() writes with a lock (#466)
  • Additional commits viewable in compare view

Updates billiard from 4.3.0 to 4.3.1

Release notes

Sourced from billiard's releases.

v4.3.1

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.3.0...v4.3.1

Changelog

Sourced from billiard's changelog.

4.3.1 - 2026-10-05

  • Reject bool for Pool numeric args (processes, timeouts, limits) - #460
  • Reject fewer than one pool process - #462
  • Reject a non-positive maxtasksperchild in Pool - #465
  • Refuse to close a Process that is still running -(#467)
  • Raise ValueError when using a closed Queue (#466)
  • Do not report a shutdown SystemExit as the job's result (#464)
Commits
  • 5a4a12d Bump version: 4.3.0 → 4.3.1
  • 158e5b3 added changelog for v4.3.1 release
  • 24af5db Do not report a shutdown SystemExit as the job's result (#464)
  • 5b0531b Raise ValueError when using a closed Queue (#466)
  • e51ef3d Refuse to close a Process that is still running (#467)
  • 941ca3c Reject a non-positive maxtasksperchild in Pool
  • 7fb0abe Reject fewer than one pool process
  • c59f1e5 Update CI runner to Ubuntu 24.04
  • ef3461a Reject bool for Pool numeric args (processes, timeouts, limits)
  • See full diff in compare view

Updates botocore from 1.43.97 to 1.43.111

Commits

Updates cattrs from 26.2.0 to 26.2.1

Release notes

Sourced from cattrs's releases.

v26.2.1

What's Changed

  • Fix heterogeneous tuples and NamedTuples with a member type containing a quote in its repr, like tuple[Literal["a"], int], crashing structuring code generation with SyntaxError; the index note is now embedded with repr. (#777)
  • Fix transform_error listing the extra keys of a ForbiddenExtraKeysError in set iteration order, which made the message differ between runs; the keys are now sorted, like the error's own __str__ already sorts them. (#776)

New Contributors

Full Changelog: python-attrs/cattrs@v26.2.0...v26.2.1

Changelog

Sourced from cattrs's changelog.

26.2.1 (2026-09-26)

  • Honor field renaming overrides when selecting literal discriminators for unions, so renamed union members can be structured from their serialized keys. (#778)
  • Fix heterogeneous tuples and NamedTuples with a member type containing a quote in its repr, like tuple[Literal["a"], int], crashing structuring code generation with SyntaxError; the index note is now embedded with repr. (#777)
  • Fix {func}transform_error <cattrs.transform_error> listing the extra keys of a ForbiddenExtraKeysError in set iteration order, which made the message differ between runs; the keys are now sorted, like the error's own __str__ already sorts them. (#776)
Commits
  • 995d66a v26.2.1
  • 5bf7c97 Escape the index note when structuring heterogeneous tuples
  • bc34a46 Sort extra keys when formatting ForbiddenExtraKeysError (#776)
  • See full diff in compare view

Updates charset-normalizer from 3.5.1 to 3.5.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.2

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Changelog

Sourced from charset-normalizer's changelog.

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Commits
  • 935c29a Release 3.5.2 (#805)
  • 9d3238a test: disable traefik in downstream niquests
  • b4c0368 docs: write changelog entry for 3.5.2
  • 717da31 chore: bump version to 3.5.2
  • 264895d chore: update pypa/cibuildwheel and pypa/gh-action-pypi-publish
  • 41e28b6 chore: raise Cython upper bound to 3.3
  • b130b7d Fix valid UTF-8 Chinese JSON misdetected as PTCP154 (#796)
  • f6afd31 Make the IANA_NO_ALIASES encodings resolvable by name (#800)
  • See full diff in compare view

Updates click-repl from 0.4.0 to 0.4.1

Release notes

Sourced from click-repl's releases.

0.4.1

What's Changed

New Contributors

Full Changelog: click-contrib/click-repl@0.4.0...0.4.1

Changelog

Sourced from click-repl's changelog.

0.4.1

:release-date: 05 Oct, 2026 :release-by: Asif Saif Uddin

  • Guard click-repl import when stdin is unavailable (#140)

.. _version-0.4.0:

Commits

Updates cryptography from 50.0.1 to 50.0.2

Changelog

Sourced from cryptography's changelog.

50.0.2 - 2026-09-30


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.3.
* Added ``abi3.abi3t`` wheels for free-threaded CPython 3.15 and later.
* Updated to PyO3 0.29.2, which fixes building ``cryptography`` on Cygwin and
  MSYS2.

.. _v50-0-1:

Commits

Updates dnspython from 2.8.0 to 2.9.0

Release notes

Sourced from dnspython's releases.

dnspython 2.9.0

This release fixes a potential excessive CPU consumption issue. Thanks to Evgenios Gkritsis, Constantinos Patsakis, and George Stergiopoulos, for discovering and reporting this issue.

See What's New for details.

The minimum supported version of Python is 3.11.

My thanks to the many people who have contributed to this release. Also thanks to my co-maintainers: Nicki Křížek, Petr Špaček, and Brian Wellington.

This release was published to PyPI using Trusted Publishing.

Changelog

Sourced from dnspython's changelog.

2.9.0

  • Decompression chain length is limited to 16. Prior to this change, a maliciously crafted DNS message could cause dns.name.from_wire_parser() to use excessive CPU for DNS name decompression. Applications which processed untrusted DNS wire form messages with dnspython could be degraded or DoS'd by the extra CPU use required.

    Thanks to Evgenios Gkritsis, Constantinos Patsakis, and George Stergiopoulos for finding and reporting this issue.

    See GHSA-45c3-73f7-pv4m

  • Httpx2 has replaced httpx for HTTPS TCP connections.

  • The minimum supported Python version is now 3.11.

  • DNSSEC now supports ML-DSA-44, a post-quantum signature algorithm.

  • The NSEC3 Next Hashed Owner Name in presentation format is now decoded as base32hex (RFC 5155 Section 1.3, RFC 4648 Extended Hex Alphabet). The letters W, X, Y, and Z are not in that alphabet; they used to be accepted and silently decoded to a different owner name, so to_text of the result did not match the input. They are now rejected.

  • The NID and L64 node/locator ids in presentation format are now rejected when a group contains anything other than hex digits. A sign or underscore, which int() silently accepts, produced a record whose text form did not parse back the same way (RFC 6742).

  • Rdata of a known type in the generic \# syntax, such as an NS record in a zone file, no longer fails to parse when it contains a name under the origin. Its names are relativized as in the type's own text form.

  • The SVCB and HTTPS ech parameter value must now be an ECHConfigList with a correct length prefix and at least 4 octets of content (RFC 9848, RFC 9849). The individual ECHConfig structures are not checked.

  • SVCB and HTTPS SvcParamKeys in presentation format, including those listed in mandatory, must now be spelled as RFC 9460 requires: 1-63 lowercase letters, digits, or hyphens. Uppercase keys such as ALPN and keys with underscores such as no_default_alpn are rejected.

  • SVCB and HTTPS presentation format parsing now follows the escaping rules of RFC 9460. SvcParamKeys may not contain escapes (e.g. \097lpn=h2), and in comma-separated values (alpn, docpath) only \, and \\ are valid escapes after character-string decoding (e.g. alpn="h2\\x" is rejected).

... (truncated)

Commits

Updates enum-tools from 0.12.0 to 0.13.0

Release notes

Sourced from enum-tools's releases.

Version 0.13.0

Automatically copied from PyPI.

Powered by OctoCheese
📝 docs | :octocat: repo | 🐇 issues | 🥚 marketplace

Commits

@dependabot
chore(deps): bump the weekly-batch group with 29 updates
14d985a 
Bumps the weekly-batch group with 29 updates:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.97` | `1.43.111` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.8` | `3.1.9` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` |
| [roc-validator](https://github.com/crs4/rocrate-validator) | `0.11.4` | `0.12.2` |
| [amqp](https://github.com/celery/py-amqp) | `5.3.1` | `5.4.1` |
| [billiard](https://github.com/celery/billiard) | `4.3.0` | `4.3.1` |
| [botocore](https://github.com/boto/botocore) | `1.43.97` | `1.43.111` |
| [cattrs](https://github.com/python-attrs/cattrs) | `26.2.0` | `26.2.1` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.5.1` | `3.5.2` |
| [click-repl](https://github.com/click-contrib/click-repl) | `0.4.0` | `0.4.1` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.1` | `50.0.2` |
| [dnspython](https://github.com/rthalley/dnspython) | `2.8.0` | `2.9.0` |
| [enum-tools](https://github.com/domdfcoding/enum_tools) | `0.12.0` | `0.13.0` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.3.0` | `2.3.1` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.3` | `3.0.4` |
| [moto](https://github.com/getmoto/moto) | `5.2.3` | `5.2.4` |
| [pip-tools](https://github.com/jazzband/pip-tools) | `7.6.1` | `7.6.2` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.11.10` | `4.13.0` |
| [pycparser](https://github.com/eliben/pycparser) | `3.0` | `3.11` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.1` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.5` | `2.50.1` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.3.2` | `3.3.3` |
| [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.15.1` | `3.16.0` |
| [rich](https://github.com/Textualize/rich) | `13.9.4` | `15.0.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.8` | `0.17.0` |
| [tzdata](https://github.com/python/tzdata) | `2026.4` | `2026.5` |
| [url-normalize](https://github.com/niksite/url-normalize) | `3.0.0` | `3.0.1` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.8.4` | `0.9.2` |
| [zipp](https://github.com/jaraco/zipp) | `4.1.0` | `4.1.1` |


Updates `boto3` from 1.43.97 to 1.43.111
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.97...1.43.111)

Updates `werkzeug` from 3.1.8 to 3.1.9
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.8...3.1.9)

Updates `python-dotenv` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.3...v1.2.4)

Updates `roc-validator` from 0.11.4 to 0.12.2
- [Release notes](https://github.com/crs4/rocrate-validator/releases)
- [Changelog](https://github.com/crs4/rocrate-validator/blob/develop/CHANGELOG.md)
- [Commits](crs4/rocrate-validator@0.11.4...0.12.2)

Updates `amqp` from 5.3.1 to 5.4.1
- [Release notes](https://github.com/celery/py-amqp/releases)
- [Changelog](https://github.com/celery/py-amqp/blob/main/Changelog)
- [Commits](celery/py-amqp@v5.3.1...v5.4.1)

Updates `billiard` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/celery/billiard/releases)
- [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt)
- [Commits](celery/billiard@v4.3.0...v4.3.1)

Updates `botocore` from 1.43.97 to 1.43.111
- [Commits](boto/botocore@1.43.97...1.43.111)

Updates `cattrs` from 26.2.0 to 26.2.1
- [Release notes](https://github.com/python-attrs/cattrs/releases)
- [Changelog](https://github.com/python-attrs/cattrs/blob/main/HISTORY.md)
- [Commits](python-attrs/cattrs@v26.2.0...v26.2.1)

Updates `charset-normalizer` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.5.1...3.5.2)

Updates `click-repl` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/click-contrib/click-repl/releases)
- [Changelog](https://github.com/click-contrib/click-repl/blob/master/Changelog.rst)
- [Commits](click-contrib/click-repl@0.4.0...0.4.1)

Updates `cryptography` from 50.0.1 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

Updates `dnspython` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/main/doc/whatsnew.rst)
- [Commits](rthalley/dnspython@v2.8.0...v2.9.0)

Updates `enum-tools` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/domdfcoding/enum_tools/releases)
- [Commits](domdfcoding/enum_tools@v0.12.0...v0.13.0)

Updates `iniconfig` from 2.3.0 to 2.3.1
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.3.0...v2.3.1)

Updates `markupsafe` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.3...3.0.4)

Updates `moto` from 5.2.3 to 5.2.4
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.3...5.2.4)

Updates `pip-tools` from 7.6.1 to 7.6.2
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/pypa/pip-tools/blob/main/CHANGELOG.md)
- [Commits](pypa/pip-tools@v7.6.1...v7.6.2)

Updates `platformdirs` from 4.11.10 to 4.13.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.11.10...4.13.0)

Updates `pycparser` from 3.0 to 3.11
- [Release notes](https://github.com/eliben/pycparser/releases)
- [Commits](eliben/pycparser@release_v3.00...release_v3.11)

Updates `pydantic` from 2.13.5 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.5...v2.14.1)

Updates `pydantic-core` from 2.46.5 to 2.50.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.46.5...core-v2.50.1)

Updates `pyparsing` from 3.3.2 to 3.3.3
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.3.2...3.3.3)

Updates `pytest-mock` from 3.15.1 to 3.16.0
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-mock@v3.15.1...v3.16.0)

Updates `rich` from 13.9.4 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](Textualize/rich@v13.9.4...v15.0.0)

Updates `ruff` from 0.16.8 to 0.17.0
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.8...0.17.0)

Updates `tzdata` from 2026.4 to 2026.5
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2026.4...2026.5)

Updates `url-normalize` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/niksite/url-normalize/releases)
- [Changelog](https://github.com/niksite/url-normalize/blob/master/CHANGELOG.md)
- [Commits](niksite/url-normalize@v3.0.0...v3.0.1)

Updates `wcwidth` from 0.8.4 to 0.9.2
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst)
- [Commits](jquast/wcwidth@0.8.4...0.9.2)

Updates `zipp` from 4.1.0 to 4.1.1
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v4.1.0...v4.1.1)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.111
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: werkzeug
  dependency-version: 3.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: roc-validator
  dependency-version: 0.12.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: amqp
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: billiard
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: botocore
  dependency-version: 1.43.111
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cattrs
  dependency-version: 26.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: charset-normalizer
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: click-repl
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: dnspython
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: enum-tools
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: iniconfig
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: markupsafe
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: moto
  dependency-version: 5.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pip-tools
  dependency-version: 7.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: platformdirs
  dependency-version: 4.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pycparser
  dependency-version: '3.11'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic-core
  dependency-version: 2.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pyparsing
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pytest-mock
  dependency-version: 3.16.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: ruff
  dependency-version: 0.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: tzdata
  dependency-version: '2026.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: url-normalize
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: wcwidth
  dependency-version: 0.9.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: zipp
  dependency-version: 4.1.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 14, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants