fix(deps): update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
authlib	1.5.2 -> 1.6.0			dependencies	minor	1.6.1
flask (changelog)	3.1.0 -> 3.1.1			dependencies	patch
flask-compress	1.17 -> 1.18			dependencies	minor
flask-cors	6.0.0 -> 6.0.1			dependencies	patch
gevent (changelog)	25.4.2 -> 25.5.1			dependencies	minor
pycodestyle (changelog)	2.13.0 -> 2.14.0			dev-dependencies	minor
python	3.11 -> 3.13			uses-with	minor
python-keycloak (changelog)	5.5.0 -> 5.7.0			dependencies	minor

---

Release Notes

authlib/authlib (authlib)

v1.6.0: Version 1.6.0

Compare Source

• Fix issue when RFC9207 is enabled and the authorization endpoint response is not a redirection. pull request #​733
• Fix missing state parameter in authorization error responses. issue #​525
• Support for acr and amr claims in id_token. issue #​734
• Support for the none JWS algorithm.
• Fix response_types strict order during dynamic client registration. issue #​760
• Implement RFC9101 The OAuth 2.0 Authorization Framework: JWT-Secured Authorization Request (JAR). issue #​723
• OIDC UserInfo endpoint support. issue #​459

pallets/flask (flask)

v3.1.1

Compare Source

Released 2025-05-13

• Fix signing key selection order when key rotation is enabled via
  SECRET_KEY_FALLBACKS. :ghsa:4grg-w6v8-c28g
• Fix type hint for cli_runner.invoke. :issue:5645
• flask --help loads the app and plugins first to make sure all commands
  are shown. :issue:5673
• Mark sans-io base class as being able to handle views that return
  AsyncIterable. This is not accurate for Flask, but makes typing easier
  for Quart. :pr:5659

colour-science/flask-compress (flask-compress)

v1.18

Compare Source

• Support, and test against, Python 3.14, see #​61 by @​kurtmckee
• Migrate from zstandard to pyzstd, which is now included in the Python 3.14 standard library, also part of #​61
• Restore flask_compress.DictCache() that is needed to configure Flask-Compress with caching, without relying on Flask-Caching

corydolphin/flask-cors (flask-cors)

v6.0.1

Compare Source

What's Changed

• Invert regex sorting to make it correctly match the intent (sorting by specificity descending) #​391 by @​joshuamorton in https://github.com/corydolphin/flask-cors/pull/392
• Fix README file extension in pyproject.toml by @​lafrech in https://github.com/corydolphin/flask-cors/pull/386

New Contributors

• @​joshuamorton made their first contribution in https://github.com/corydolphin/flask-cors/pull/392
• @​lafrech made their first contribution in https://github.com/corydolphin/flask-cors/pull/386

Full Changelog: corydolphin/flask-cors@6.0.0...6.0.1

actions/python-versions (python)

v3.13.5: 3.13.5

Compare Source

Python 3.13.5

v3.13.4: 3.13.4

Compare Source

Python 3.13.4

v3.13.3: 3.13.3

Compare Source

Python 3.13.3

v3.13.2: 3.13.2

Compare Source

Python 3.13.2

v3.13.1: 3.13.1

Compare Source

Python 3.13.1

v3.13.0: 3.13.0

Compare Source

Python 3.13.0

v3.12.11: 3.12.11

Compare Source

Python 3.12.11

v3.12.10: 3.12.10

Compare Source

Python 3.12.10

v3.12.9: 3.12.9

Compare Source

Python 3.12.9

v3.12.8: 3.12.8

Compare Source

Python 3.12.8

v3.12.7: 3.12.7

Compare Source

Python 3.12.7

v3.12.6: 3.12.6

Compare Source

Python 3.12.6

v3.12.5: 3.12.5

Compare Source

Python 3.12.5

v3.12.4: 3.12.4

Compare Source

Python 3.12.4

v3.12.3: 3.12.3

Compare Source

Python 3.12.3

v3.12.2: 3.12.2

Compare Source

Python 3.12.2

v3.12.1: 3.12.1

Compare Source

Python 3.12.1

v3.12.0: 3.12.0

Compare Source

Python 3.12.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.