chore(deps): update indirect python dependencies #1023
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==4.9.0->==4.10.0==2025.7.14->==2025.8.3==3.4.2->==3.4.3==9.8.0->==9.9.0==7.10.1->==7.10.3==45.0.5->==45.0.6==8.5.0->==8.6.0==0.21.2->==0.22==2.6.12->==2.6.13==1.4.8->==1.4.9==0.4.2->==0.5.0==6.6.3->==6.6.4==2.2.6->==2.3.2==3.11.1->==3.11.2==4.2.0->==4.3.0==2.33.2->==2.39.0==26.3.0->==26.4.0==6.2.0->==6.4.0==0.25.7->==0.25.8==0.14.9->==0.15.0==0.26.0->==0.27.0==0.12.7->==0.12.8==6.0.12.20250516->==6.0.12.20250809==5.2.0.20250516->==5.2.0.20250809==2.32.4.20250611->==2.32.4.20250809==20.32.0->==20.34.0==1.17.2->==1.17.3Release Notes
agronholm/anyio (anyio)
v4.10.0Compare Source
feed_data()method to theBufferedByteReceiveStreamclass, allowing users to inject data directly into the bufferSocketListener.from_socket()SocketStream.from_socket()UNIXSocketStream.from_socket()UDPSocket.from_socket()ConnectedUDPSocket.from_socket()UNIXDatagramSocket.from_socket()ConnectedUNIXDatagramSocket.from_socket()anyio.ContextManagerMixinandanyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups (#905; PR by @agronholm and @tapetersen)start_blocking_portal()(#818; PR by @davidbrochart)anyio.notify_closingto allow wakinganyio.wait_readableandanyio.wait_writablebefore closing a socket. Among other things, this prevents an OSError on theProactorEventLoop. (#896; PR by @graingert)to_interpretersmodule to use the publicconcurrent.interpretersAPI on Python 3.14 or lateranyio.Path.copy()andanyio.Path.copy_into()failing on Python 3.14.0a7__aexit__on async context managers. CMs which can suppress exceptions should returnbool, orNoneotherwise. (#913; PR by @Enegg)SpooledTemporaryFileso that rollover only occurs when the buffer size exceedsmax_size(#915; PR by @11kkw)anyio.to_interpreterwith Python 3.14.0b2 (#926; PR by @hroncok)SyntaxWarningon Python 3.14 aboutreturninfinally(#816)BrokenWorkerIntepreterexception toBrokenWorkerInterpreter. The old name is available as a deprecated alias. (#938; PR by @ayussh-verma)CapacityLimiteron asyncio where a task, waiting to acquire a limiter gets cancelled and is subsequently granted a token from the limiter, but before the cancellation is delivered, and then fails to notify the next waiting task (#947)certifi/python-certifi (certifi)
v2025.8.3Compare Source
jawah/charset_normalizer (charset-normalizer)
v3.4.3Compare Source
Changed
CHARSET_NORMALIZER_USE_MYPYCisn't set to1. (#595) (#583)detectoutput legacy function. (#391)Added
Fixed
Misc
Each published wheel comes with its SBOM. We choose CycloneDX as the format.
copier-org/copier (copier)
v9.9.0Compare Source
Feat
Fix
core.fsmonitor=true(#2151)nedbat/coveragepy (coverage)
v7.10.3Compare Source
Fixes for
patch = subprocess:If subprocesses spawned yet more subprocesses simultaneously, some coverage
could be missed. This is now fixed, closing
issue 2024_.If subprocesses were created in other directories, their data files were
stranded there and not combined into the totals, as described in
issue 2025_. This is now fixed.On Windows (or maybe only some Windows?) the patch would fail with a
ModuleNotFounderror trying to import coverage. This is now fixed,closing
issue 2022_.Originally only options set in the coverage configuration file would apply
to subprocesses. Options set on the
coverage runcommand line (such as--branch) wouldn't be communicated to the subprocesses. This couldlead to combining failures, as described in
issue 2021_. Now the entireconfiguration is used in subprocesses, regardless of its origin.
Added
debug=patchto help diagnose problems.Fix: really close all SQLite databases, even in-memory ones. Closes
issue 2017_... _issue 2017:https://github.com/nedbat/coveragepy/issues/20177
.. _issue 2021https://github.com/nedbat/coveragepy/issues/202121
.. _issue 202https://github.com/nedbat/coveragepy/issues/2022022
.. _issue 20https://github.com/nedbat/coveragepy/issues/20242024
.. _issue 2https://github.com/nedbat/coveragepy/issues/2025/2025
.. _changes_7-10-2:
v7.10.2Compare Source
actually executed. This is now fixed, closing
issue 1999_. Python 3.9still shows the problem.
.. _issue 1999:https://github.com/nedbat/coveragepy/issues/19999
.. _changes_7-10-1:
pyca/cryptography (cryptography)
v45.0.6Compare Source
pre-commit/identify (identify)
v2.6.13Compare Source
nucleic/kiwi (kiwisolver)
v1.4.9Compare Source
executablebooks/mdit-py-plugins (mdit-py-plugins)
v0.5.0Compare Source
aio-libs/multidict (multidict)
v6.6.4Compare Source
=====
(2025-08-11)
Bug fixes
Fixed
MutliDict&CIMultiDictmemory leak when deleting values or clearing them-- by :user:
VizonexRelated issues and pull requests on GitHub:
:issue:
1233.Contributor-facing changes
The type preciseness coverage report generated by
MyPy <https://mypy-lang.org>__ is now uploaded toCoveralls <https://coveralls.io/github/aio-libs/multidict>__ andwill not be included in the
Codecov views <https://app.codecov.io/gh/aio-libs/multidict>__ going forward-- by :user:
webknjaz.Related issues and pull requests on GitHub:
:issue:
1122, :issue:1231.Added memory leak test for popping or deleting attributes from a multidict to prevent future issues or bogus claims.
-- by :user:
VizonexRelated issues and pull requests on GitHub:
:issue:
1233.numpy/numpy (numpy)
v2.3.2: (Jul 24, 2025)Compare Source
NumPy 2.3.2 Release Notes
The NumPy 2.3.2 release is a patch release with a number of bug fixes
and maintenance updates. The highlights are:
This release supports Python versions 3.11-3.14
Contributors
A total of 9 people contributed to this release. People with a "+" by
their names contributed a patch for the first time.
Pull requests merged
A total of 16 pull requests were merged for this release.
np.char.arrayandnp.char.asarray...squareonarr \*\* 2(#29392)Checksums
MD5
SHA256
v2.3.1: (Jun 21, 2025)Compare Source
NumPy 2.3.1 Release Notes
The NumPy 2.3.1 release is a patch release with several bug fixes,
annotation improvements, and better support for OpenBSD. Highlights are:
matmulfor non-contiguous out kwarg parameternp.vectorizecasting errorsThis release supports Python versions 3.11-3.13, Python 3.14 will be
supported when it is released.
Contributors
A total of 9 people contributed to this release. People with a "+" by
their names contributed a patch for the first time.
Pull requests merged
A total of 12 pull requests were merged for this release.
np.vectorizecasting to legacy behavior (#29196)Checksums
MD5
SHA256
v2.3.0: (June 7, 2025)Compare Source
NumPy 2.3.0 Release Notes
The NumPy 2.3.0 release continues the work to improve free threaded
Python support and annotations together with the usual set of bug fixes.
It is unusual in the number of expired deprecations, code
modernizations, and style cleanups. The latter may not be visible to
users, but is important for code maintenance over the long term. Note
that we have also upgraded from manylinux2014 to manylinux_2_28.
Users running on a Mac having an M4 cpu might see various warnings about
invalid values and such. The warnings are a known problem with
Accelerate. They are annoying, but otherwise harmless. Apple promises to
fix them.
This release supports Python versions 3.11-3.13, Python 3.14 will be
supported when it is released.
Highlights
New functions
New function
numpy.strings.sliceThe new function
numpy.strings.slicewas added, which implements fastnative slicing of string arrays. It supports the full slicing API
including negative slice offsets and steps.
(gh-27789)
Deprecations
The
numpy.typing.mypy_pluginhas been deprecated in favor ofplatform-agnostic static type inference. Please remove
numpy.typing.mypy_pluginfrom thepluginssection of your mypyconfiguration. If this change results in new errors being reported,
kindly open an issue.
(gh-28129)
The
numpy.typing.NBitBasetype has been deprecated and will beremoved in a future version.
This type was previously intended to be used as a generic upper
bound for type-parameters, for example:
But in NumPy 2.2.0,
float64andcomplex128were changed toconcrete subtypes, causing static type-checkers to reject
x: np.float64 = f(np.complex128(42j)).So instead, the better approach is to use
typing.overload:(gh-28884)
Expired deprecations
Remove deprecated macros like
NPY_OWNDATAfrom Cython interfacesin favor of
NPY_ARRAY_OWNDATA(deprecated since 1.7)([gh-28254](https://redirect.git
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.