Commit 4a60ae2
authored
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?v=4&size=40){kind=avatar}
pip: bump the pip-updates group across 1 directory with 10 updates (#448)
Bumps the pip-updates group with 10 updates in the /api directory:
| Package | From | To |
| --- | --- | --- |
| [anyio](https://github.com/agronholm/anyio) | `4.10.0` | `4.11.0` |
| [asgiref](https://github.com/django/asgiref) | `3.9.1` | `3.10.0` |
| [attrs](https://github.com/sponsors/hynek) | `25.3.0` | `25.4.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.8.3` |
`2025.10.5` |
| [cryptography](https://github.com/pyca/cryptography) | `45.0.7` |
`46.0.2` |
| [django](https://github.com/django/django) | `5.1.7` | `5.2.7` |
| [docutils](https://github.com/rtfd/recommonmark) | `0.22` | `0.22.2` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` |
`3.0.3` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [whitenoise](https://github.com/evansd/whitenoise) | `6.10.0` |
`6.11.0` |
Updates `anyio` from 4.10.0 to 4.11.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/agronholm/anyio/releases">anyio's
releases</a>.</em></p>
<blockquote>
<h2>4.11.0</h2>
<ul>
<li>Added support for cancellation reasons (the <code>reason</code>
parameter to <code>CancelScope.cancel()</code>) (<a
href="https://redirect.github.com/agronholm/anyio/pull/975">#975</a>)</li>
<li>Bumped the minimum version of Trio to v0.31.0</li>
<li>Added the ability to enter the event loop from foreign (non-worker)
threads by passing the return value of
<code>anyio.lowlevel.current_token()</code> to
<code>anyio.from_thread.run()</code> and
<code>anyio.from_thread.run_sync()</code> as the <code>token</code>
keyword argument (<a
href="https://redirect.github.com/agronholm/anyio/issues/256">#256</a>)</li>
<li>Added pytest option (<code>anyio_mode = "auto"</code>) to
make the pytest plugin automatically handle all async tests (<a
href="https://redirect.github.com/agronholm/anyio/pull/971">#971</a>)</li>
<li>Added the <code>anyio.Condition.wait_for()</code> method for feature
parity with asyncio (<a
href="https://redirect.github.com/agronholm/anyio/pull/974">#974</a>)</li>
<li>Changed the default type argument of
<code>anyio.abc.TaskStatus</code> from <code>Any</code> to
<code>None</code> (<a
href="https://redirect.github.com/agronholm/anyio/pull/964">#964</a>)</li>
<li>Fixed TCP listener behavior to guarantee the same ephemeral port is
used for all socket listeners when <code>local_port=0</code> (<a
href="https://redirect.github.com/agronholm/anyio/issues/857">#857</a>;
PR by <a href="https://github.com/11kkw"><code>@11kkw</code></a> and <a
href="https://github.com/agronholm"><code>@agronholm</code></a>)</li>
<li>Fixed inconsistency between Trio and asyncio where a TCP stream that
previously raised a <code>BrokenResourceError</code> on
<code>send()</code> would still raise <code>BrokenResourceError</code>
after the stream was closed on asyncio, but
<code>ClosedResourceError</code> on Trio. They now both raise a
<code>ClosedResourceError</code> in this scenario. (<a
href="https://redirect.github.com/agronholm/anyio/issues/671">#671</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst">anyio's
changelog</a>.</em></p>
<blockquote>
<h1>Version history</h1>
<p>This library adheres to <code>Semantic Versioning 2.0
<http://semver.org/></code>_.</p>
<p><strong>UNRELEASED</strong></p>
<ul>
<li>Set <code>None</code> as the default type argument for
<code>anyio.abc.TaskStatus</code></li>
<li>Added support for <code>uvloop=True</code> on Windows via the
winloop_ implementation
(<code>[#960](agronholm/anyio#960)
<https://github.com/agronholm/anyio/pull/960></code>_; PR by <a
href="https://github.com/Vizonex"><code>@Vizonex</code></a>)</li>
</ul>
<p>.. _winloop: <a
href="https://github.com/Vizonex/Winloop">https://github.com/Vizonex/Winloop</a></p>
<p><strong>4.11.0</strong></p>
<ul>
<li>Added support for cancellation reasons (the <code>reason</code>
parameter to
<code>CancelScope.cancel()</code>)
(<code>[#975](agronholm/anyio#975)
<https://github.com/agronholm/anyio/pull/975></code>_)</li>
<li>Bumped the minimum version of Trio to v0.31.0</li>
<li>Added the ability to enter the event loop from foreign (non-worker)
threads by
passing the return value of <code>anyio.lowlevel.current_token()</code>
to
<code>anyio.from_thread.run()</code> and
<code>anyio.from_thread.run_sync()</code> as the <code>token</code>
keyword argument
(<code>[#256](agronholm/anyio#256)
<https://github.com/agronholm/anyio/issues/256></code>_)</li>
<li>Added pytest option (<code>anyio_mode = "auto"</code>) to
make the pytest plugin automatically
handle all async tests
(<code>[#971](agronholm/anyio#971)
<https://github.com/agronholm/anyio/pull/971></code>_)</li>
<li>Added the <code>anyio.Condition.wait_for()</code> method for feature
parity with asyncio
(<code>[#974](agronholm/anyio#974)
<https://github.com/agronholm/anyio/pull/974></code>_)</li>
<li>Changed the default type argument of
<code>anyio.abc.TaskStatus</code> from <code>Any</code> to
<code>None</code>
(<code>[#964](agronholm/anyio#964)
<https://github.com/agronholm/anyio/pull/964></code>_)</li>
<li>Fixed TCP listener behavior to guarantee the same ephemeral port is
used for all
socket listeners when <code>local_port=0</code>
(<code>[#857](agronholm/anyio#857)
<https://github.com/agronholm/anyio/issues/857></code>_; PR by <a
href="https://github.com/11kkw"><code>@11kkw</code></a> and <a
href="https://github.com/agronholm"><code>@agronholm</code></a>)</li>
<li>Fixed inconsistency between Trio and asyncio where a TCP stream that
previously
raised a <code>BrokenResourceError</code> on <code>send()</code> would
still raise
<code>BrokenResourceError</code> after the stream was closed on asyncio,
but
<code>ClosedResourceError</code> on Trio. They now both raise a
<code>ClosedResourceError</code> in this
scenario. (<code>[#671](agronholm/anyio#671)
<https://github.com/agronholm/anyio/issues/671></code>_)</li>
</ul>
<p><strong>4.10.0</strong></p>
<ul>
<li>
<p>Added the <code>feed_data()</code> method to the
<code>BufferedByteReceiveStream</code> class, allowing
users to inject data directly into the buffer</p>
</li>
<li>
<p>Added various class methods to wrap existing sockets as listeners or
socket streams:</p>
<ul>
<li><code>SocketListener.from_socket()</code></li>
<li><code>SocketStream.from_socket()</code></li>
<li><code>UNIXSocketStream.from_socket()</code></li>
<li><code>UDPSocket.from_socket()</code></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/agronholm/anyio/commit/08737af202f6610cdb8ba53fecaefd9c03269637"><code>08737af</code></a>
Bumped up the version</li>
<li><a
href="https://github.com/agronholm/anyio/commit/8bb9fe04a1c0a4b6615c843d4a88bba38a386059"><code>8bb9fe0</code></a>
Fixed the inconsistent exception on sending to a closed TCP stream (<a
href="https://redirect.github.com/agronholm/anyio/issues/980">#980</a>)</li>
<li><a
href="https://github.com/agronholm/anyio/commit/963709358a05ced66986e928b593b4bd82422981"><code>9637093</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/agronholm/anyio/issues/981">#981</a>)</li>
<li><a
href="https://github.com/agronholm/anyio/commit/f1bc6ee95a75007681ef9cb4eec0369838b390e9"><code>f1bc6ee</code></a>
Fixed changelog entry formatting</li>
<li><a
href="https://github.com/agronholm/anyio/commit/0b58964a26c68ca427b711bbe8536f61ed900133"><code>0b58964</code></a>
Mentioned the sub-interpreter support in the README</li>
<li><a
href="https://github.com/agronholm/anyio/commit/1ed112c65628d3cce312e7b6875b9f914d174a71"><code>1ed112c</code></a>
Ensure same port is used for IPv4/IPv6 when creating TCP listener with
local_...</li>
<li><a
href="https://github.com/agronholm/anyio/commit/aceeee09868642311a96626924f2f09c088a26c0"><code>aceeee0</code></a>
Re-enabled coverage reporting on macOS</li>
<li><a
href="https://github.com/agronholm/anyio/commit/6b890dc869f54b6237caff52a74e86382c076ad2"><code>6b890dc</code></a>
Reworded a changelog entry and added PR links to others</li>
<li><a
href="https://github.com/agronholm/anyio/commit/944257d2d59e8057dd00cd5cc96d8f73028031dd"><code>944257d</code></a>
Updated pre-commit modules</li>
<li><a
href="https://github.com/agronholm/anyio/commit/087975f44599471a84bea2077731143a346c276a"><code>087975f</code></a>
Fixed a documentation style (<a
href="https://redirect.github.com/agronholm/anyio/issues/976">#976</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/agronholm/anyio/compare/4.10.0...4.11.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `asgiref` from 3.9.1 to 3.10.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/django/asgiref/blob/main/CHANGELOG.txt">asgiref's
changelog</a>.</em></p>
<blockquote>
<h2>3.10.0 (2025-10-05)</h2>
<ul>
<li>Added AsyncSingleThreadContext context manager to ensure multiple
AsyncToSync
invocations use the same thread. (<a
href="https://redirect.github.com/django/asgiref/issues/511">#511</a>)</li>
</ul>
<h2>3.9.2 (2025-09-23)</h2>
<ul>
<li>
<p>Adds support for Python 3.14.</p>
</li>
<li>
<p>Fixes wsgi.errors file descriptor in WsgiToAsgi adapter.</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/django/asgiref/commit/f587b122af17bdba5749c30b96d2237bc1c2dfdf"><code>f587b12</code></a>
Releasing 3.10.0.</li>
<li><a
href="https://github.com/django/asgiref/commit/b08087c3b6df811a0524585c4d4dafdc6b12c222"><code>b08087c</code></a>
Added AsyncSingleThreadContext (<a
href="https://redirect.github.com/django/asgiref/issues/511">#511</a>)</li>
<li><a
href="https://github.com/django/asgiref/commit/3471a0c09bd043d61c299308c0c8519ab6c0f774"><code>3471a0c</code></a>
Releasing 3.9.2</li>
<li><a
href="https://github.com/django/asgiref/commit/4f892bd261cee9afe51d67333e9bc7cd98b39a35"><code>4f892bd</code></a>
Remove Python 3.8 from tox</li>
<li><a
href="https://github.com/django/asgiref/commit/83cd6f3c6f59a66999446c2893cdb3fcae3c03c5"><code>83cd6f3</code></a>
Run CI against Python 3.14</li>
<li><a
href="https://github.com/django/asgiref/commit/796b9f14fd92d3131c7c39fab308ddd986d271eb"><code>796b9f1</code></a>
Fix incorrect Trailer header (<a
href="https://redirect.github.com/django/asgiref/issues/531">#531</a>)</li>
<li><a
href="https://github.com/django/asgiref/commit/29b108b0a9a5eddae3e282ba33915412a855e529"><code>29b108b</code></a>
Fixed <a
href="https://redirect.github.com/django/asgiref/issues/529">#529</a>:
wsgi.errors should be a StringIO (<a
href="https://redirect.github.com/django/asgiref/issues/530">#530</a>)</li>
<li>See full diff in <a
href="https://github.com/django/asgiref/compare/3.9.1...3.10.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `attrs` from 25.3.0 to 25.4.0
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/sponsors/hynek/commits">compare view</a></li>
</ul>
</details>
<br />
Updates `certifi` from 2025.8.3 to 2025.10.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/certifi/python-certifi/commit/fb14ac49a976b1695d84b1ac1307276a20b3aac9"><code>fb14ac4</code></a>
2025.10.05 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/371">#371</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/2c7c7ee6b76a118191b685a4cc028d4241f22eb7"><code>2c7c7ee</code></a>
Add Python 3.14 classifier in setup.py</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/1a5cb7b3771bba256755f88b3dcf3ac13f064622"><code>1a5cb7b</code></a>
Bump actions/setup-python from 5.6.0 to 6.0.0 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/367">#367</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/dea59605ef2b266c2e0e67938e8c8535a04b1211"><code>dea5960</code></a>
Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/366">#366</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/83566b7c993eef772facdaff59c7bba105675329"><code>83566b7</code></a>
Bump actions/checkout from 4.2.2 to 5.0.0</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/ca2e121bdb304fd01f802d3b1ee6a65684f569f2"><code>ca2e121</code></a>
Bump actions/download-artifact from 4.3.0 to 5.0.0</li>
<li>See full diff in <a
href="https://github.com/certifi/python-certifi/compare/2025.08.03...2025.10.05">compare
view</a></li>
</ul>
</details>
<br />
Updates `cryptography` from 45.0.7 to 46.0.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's
changelog</a>.</em></p>
<blockquote>
<p>46.0.2 - 2025-09-30</p>
<pre><code>
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL
3.5.4.
<p>.. _v46-0-1:</p>
<p>46.0.1 - 2025-09-16<br />
</code></pre></p>
<ul>
<li>Fixed an issue where users installing via <code>pip</code> on Python
3.14 development
versions would not properly install a dependency.</li>
<li>Fixed an issue building the free-threaded macOS 3.14 wheels.</li>
</ul>
<p>.. _v46-0-0:</p>
<p>46.0.0 - 2025-09-16</p>
<pre><code>
* **BACKWARDS INCOMPATIBLE:** Support for Python 3.7 has been removed.
* Support for OpenSSL < 3.0 is deprecated and will be removed in the
next
release.
* Support for ``x86_64`` macOS (including publishing wheels) is
deprecated
and will be removed in two releases. We will switch to publishing an
``arm64`` only wheel for macOS.
* Support for 32-bit Windows (including publishing wheels) is deprecated
and will be removed in two releases. Users should move to a 64-bit
Python installation.
* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL
3.5.3.
* We now build ``ppc64le`` ``manylinux`` wheels and publish them to
PyPI.
* We now build ``win_arm64`` (Windows on Arm) wheels and publish them to
PyPI.
* Added support for free-threaded Python 3.14.
* Removed the deprecated ``get_attribute_for_oid`` method on
:class:`~cryptography.x509.CertificateSigningRequest`. Users should use
:meth:`~cryptography.x509.Attributes.get_attribute_for_oid` instead.
* Removed the deprecated ``CAST5``, ``SEED``, ``IDEA``, and ``Blowfish``
classes from the cipher module. These are still available in
:doc:`/hazmat/decrepit/index`.
* In X.509, when performing a PSS signature with a SHA-3 hash, it is now
encoded with the official NIST SHA3 OID.
<p>.. _v45-0-7:<br />
</code></pre></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pyca/cryptography/commit/99efe5ad150a56efadafacaffd0e3ee319373904"><code>99efe5a</code></a>
bump version for 46.0.2 (<a
href="https://redirect.github.com/pyca/cryptography/issues/13531">#13531</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/e735cfc27502320101c130335c556394a125ba52"><code>e735cfc</code></a>
release 46.0.1 (<a
href="https://redirect.github.com/pyca/cryptography/issues/13450">#13450</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/4e457ffba43a6d87efc63c33041e2081438dd8a4"><code>4e457ff</code></a>
Explicitly specify python in mac uv build invocation (<a
href="https://redirect.github.com/pyca/cryptography/issues/13447">#13447</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/2726efdb6d67f1c90cf9c6062d9fe051965586f8"><code>2726efd</code></a>
Depend on CFFI 2.0.0 or newer on Python > 3.8 (<a
href="https://redirect.github.com/pyca/cryptography/issues/13448">#13448</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/62230623d183706632c0eb7822c96ac95e3710a8"><code>6223062</code></a>
release 46.0.0 (<a
href="https://redirect.github.com/pyca/cryptography/issues/13446">#13446</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/563c4915b0931455706f761a4579c26698824eae"><code>563c491</code></a>
Update comment for pyopenssl-release tag (<a
href="https://redirect.github.com/pyca/cryptography/issues/13445">#13445</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/d2f6f7faced35b73277bc624ff496f8af696b172"><code>d2f6f7f</code></a>
Bump downstream dependencies in CI (<a
href="https://redirect.github.com/pyca/cryptography/issues/13439">#13439</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/e7ab02bd679d0b4f55d93486fe27e62554ef15d4"><code>e7ab02b</code></a>
we'll ship this with 3.5.3 why not (<a
href="https://redirect.github.com/pyca/cryptography/issues/13442">#13442</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/0b68a4bffb61202e4d4f5074cd30c2b9d15f429e"><code>0b68a4b</code></a>
Another pair of bump dependencies fix (<a
href="https://redirect.github.com/pyca/cryptography/issues/13444">#13444</a>)</li>
<li><a
href="https://github.com/pyca/cryptography/commit/e076d08ee42da5daa432d1d145b8bee2dc0d5b44"><code>e076d08</code></a>
Attempt to fix commit message for bump downstreams (<a
href="https://redirect.github.com/pyca/cryptography/issues/13440">#13440</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pyca/cryptography/compare/45.0.7...46.0.2">compare
view</a></li>
</ul>
</details>
<br />
Updates `django` from 5.1.7 to 5.2.7
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/django/django/commit/3cff3209e35a560f94801d428cf7f2a3ecb2a051"><code>3cff320</code></a>
[5.2.x] Bumped version for 5.2.7 release.</li>
<li><a
href="https://github.com/django/django/commit/ed8fc39d77465eddbde1191a054ae965f6a8a584"><code>ed8fc39</code></a>
[5.2.x] Fixed CVE-2025-59682 -- Fixed potential partial
directory-traversal v...</li>
<li><a
href="https://github.com/django/django/commit/52fbae0a4dbbe5faa59827f8f05694a0065cc135"><code>52fbae0</code></a>
[5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(),
aggre...</li>
<li><a
href="https://github.com/django/django/commit/1794cbf961f9ea54715fb094fe8adc80a5054947"><code>1794cbf</code></a>
[5.2.x] Made cosmetic edits to 5.2.7 release notes.</li>
<li><a
href="https://github.com/django/django/commit/81625a141e1feaaea877fc18876fdd7b6394442c"><code>81625a1</code></a>
[5.2.x] Fixed <a
href="https://redirect.github.com/django/django/issues/36587">#36587</a>
-- Clarified usage of <code>list.insert()</code> for upload
handlers.</li>
<li><a
href="https://github.com/django/django/commit/6f3813e4b6e3db7fa3cc612c78f898142468bca9"><code>6f3813e</code></a>
[5.2.x] Fixed <a
href="https://redirect.github.com/django/django/issues/35877">#35877</a>,
Refs <a
href="https://redirect.github.com/django/django/issues/36128">#36128</a>
-- Documented unique constraint when migrat...</li>
<li><a
href="https://github.com/django/django/commit/10a2d3b837c5d8c1ac0cabd399ad7edcc66bfa8e"><code>10a2d3b</code></a>
[5.2.x] Added stub release notes and release date for 5.2.7, 5.1.13, and
4.2.25.</li>
<li><a
href="https://github.com/django/django/commit/b2773a39a34f0f0ca768fa1daaf8bf72fca56e06"><code>b2773a3</code></a>
[5.2.x] Refs <a
href="https://redirect.github.com/django/django/issues/25508">#25508</a>
-- Used QuerySet.<strong>repr</strong> in
docs/ref/contrib/postgres/se...</li>
<li><a
href="https://github.com/django/django/commit/7554c54e5f02566520dee81c8b95f47429f1b553"><code>7554c54</code></a>
[5.2.x] Fixed <a
href="https://redirect.github.com/django/django/issues/36581">#36581</a>
-- Updated serialization examples from XML to JSON.</li>
<li><a
href="https://github.com/django/django/commit/2a2936c3e6444a0f37156773ca405cedaf28dea7"><code>2a2936c</code></a>
[5.2.x] Updated translations from Transifex.</li>
<li>Additional commits viewable in <a
href="https://github.com/django/django/compare/5.1.7...5.2.7">compare
view</a></li>
</ul>
</details>
<br />
Updates `docutils` from 0.22 to 0.22.2
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/rtfd/recommonmark/commits">compare
view</a></li>
</ul>
</details>
<br />
Updates `markupsafe` from 3.0.2 to 3.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pallets/markupsafe/releases">markupsafe's
releases</a>.</em></p>
<blockquote>
<h2>3.0.3</h2>
<p>This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does
not otherwise change behavior and should not result in breaking changes
compared to the latest feature release.</p>
<p>PyPI: <a
href="https://pypi.org/project/MarkupSafe/3.0.3/">https://pypi.org/project/MarkupSafe/3.0.3/</a>
Changes: <a
href="https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3">https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3</a>
Milestone: <a
href="https://github.com/pallets/markupsafe/milestone/15?closed=1">https://github.com/pallets/markupsafe/milestone/15?closed=1</a></p>
<ul>
<li><code>__version__</code> raises <code>DeprecationWarning</code>
instead of <code>UserWarning</code>. <a
href="https://redirect.github.com/pallets/markupsafe/issues/487">#487</a></li>
<li>Adopt multi-phase initialization PEP 489 for the C extension. <a
href="https://redirect.github.com/pallets/markupsafe/issues/494">#494</a></li>
<li>Build Windows ARM64 wheels. <a
href="https://redirect.github.com/pallets/markupsafe/issues/485">#485</a></li>
<li>Build Python 3.14 wheels. <a
href="https://redirect.github.com/pallets/markupsafe/issues/503">#503</a></li>
<li>Build riscv64 wheels. <a
href="https://redirect.github.com/pallets/markupsafe/issues/505">#505</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pallets/markupsafe/blob/main/CHANGES.rst">markupsafe's
changelog</a>.</em></p>
<blockquote>
<h2>Version 3.0.3</h2>
<p>Released 2025-09-27</p>
<ul>
<li><code>__version__</code> raises <code>DeprecationWarning</code>
instead of <code>UserWarning</code>.
:issue:<code>487</code></li>
<li>Adopt multi-phase initialisation (:pep:<code>489</code>) for the C
extension.
:issue:<code>494</code></li>
<li>Build Windows ARM64 wheels. :issue:<code>485</code></li>
<li>Build Python 3.14 wheels. :issue:<code>503</code></li>
<li>Build riscv64 wheels. :issue:<code>505</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pallets/markupsafe/commit/297fc8e356e6836a62087949245d09a28e9f1b13"><code>297fc8e</code></a>
release version 3.0.3</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/7e4e6ce249107c5f27fa6fe890e29da7a8dc8f0c"><code>7e4e6ce</code></a>
Free-threading: run with pytest-run-paralell (<a
href="https://redirect.github.com/pallets/markupsafe/issues/507">#507</a>)</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/6100b9c0d466495a08d55b33cb172d7b5d8e9aa1"><code>6100b9c</code></a>
enable riscv64 wheels (<a
href="https://redirect.github.com/pallets/markupsafe/issues/506">#506</a>)</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/c9d5ecfc7eec6f611b19cdc8e1cde1aaa65cb8eb"><code>c9d5ecf</code></a>
enable riscv64 wheels</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/2f9b33753052e7c6df1464a7c900787d04ae9daf"><code>2f9b337</code></a>
tox for 3.14</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/78d951a9549dee9fc901c55fc79a74a5f01e96fc"><code>78d951a</code></a>
update dev dependencies</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/bb6744e392e79611b110c5ba022238eb1b855cc2"><code>bb6744e</code></a>
add entry</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/65c4134ab16a3faccbcac2cba90da0db2b799542"><code>65c4134</code></a>
upgrade cibuildwheel, add <code>cp314</code> wheels and test on CPython
3.14 (<a
href="https://redirect.github.com/pallets/markupsafe/issues/504">#504</a>)</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/3a9bd88b84c9edba8b922bb12b84a59feed98788"><code>3a9bd88</code></a>
add cp314 wheels</li>
<li><a
href="https://github.com/pallets/markupsafe/commit/aafe44d87bd7974bc82af8c4010dea9938441edf"><code>aafe44d</code></a>
remove slsa provenance (<a
href="https://redirect.github.com/pallets/markupsafe/issues/501">#501</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pallets/markupsafe/compare/3.0.2...3.0.3">compare
view</a></li>
</ul>
</details>
<br />
Updates `pyyaml` from 6.0.2 to 6.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/yaml/pyyaml/releases">pyyaml's
releases</a>.</em></p>
<blockquote>
<h2>6.0.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Support for Python 3.14 and free-threading (experimental).</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3">https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES">pyyaml's
changelog</a>.</em></p>
<blockquote>
<p>6.0.3 (2025-09-25)</p>
<ul>
<li><a
href="https://redirect.github.com/yaml/pyyaml/pull/864">yaml/pyyaml#864</a>
-- Support for Python 3.14 and free-threading (experimental)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/yaml/pyyaml/commit/49790e73684bebad1df05ef8d828fa12f685bffb"><code>49790e7</code></a>
Release 6.0.3 (<a
href="https://redirect.github.com/yaml/pyyaml/issues/889">#889</a>)</li>
<li>See full diff in <a
href="https://github.com/yaml/pyyaml/compare/6.0.2...6.0.3">compare
view</a></li>
</ul>
</details>
<br />
Updates `whitenoise` from 6.10.0 to 6.11.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/evansd/whitenoise/blob/main/docs/changelog.rst">whitenoise's
changelog</a>.</em></p>
<blockquote>
<h2>6.11.0 (2025-09-18)</h2>
<ul>
<li>Support Django 6.0.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/evansd/whitenoise/commit/c9c06e9382b92fc959ffdfc3e2ec63057de82561"><code>c9c06e9</code></a>
Version 6.11.0</li>
<li><a
href="https://github.com/evansd/whitenoise/commit/051c4e997a07fd3ae5e9f3ec092080102ab89d93"><code>051c4e9</code></a>
Support Django 6.0 (<a
href="https://redirect.github.com/evansd/whitenoise/issues/665">#665</a>)</li>
<li>See full diff in <a
href="https://github.com/evansd/whitenoise/compare/6.10.0...6.11.0">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>1 parent 8b1eb6f commit 4a60ae2
1 file changed
+10
-10
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
1 | | - | |
2 | | - | |
3 | | - | |
4 | | - | |
| 1 | + | |
| 2 | + | |
| 3 | + | |
| 4 | + | |
5 | 5 | | |
6 | 6 | | |
7 | | - | |
8 | | - | |
| 7 | + | |
| 8 | + | |
9 | 9 | | |
10 | 10 | | |
11 | 11 | | |
12 | | - | |
| 12 | + | |
13 | 13 | | |
14 | 14 | | |
15 | 15 | | |
| |||
23 | 23 | | |
24 | 24 | | |
25 | 25 | | |
26 | | - | |
| 26 | + | |
27 | 27 | | |
28 | 28 | | |
29 | 29 | | |
30 | 30 | | |
31 | 31 | | |
32 | 32 | | |
33 | 33 | | |
34 | | - | |
| 34 | + | |
35 | 35 | | |
36 | 36 | | |
37 | 37 | | |
| |||
44 | 44 | | |
45 | 45 | | |
46 | 46 | | |
47 | | - | |
| 47 | + | |
0 commit comments