Skip to content

fix(deps): update python dependencies#3641

Closed
renovate[bot] wants to merge 1 commit intomainfrom
renovate/python
Closed

fix(deps): update python dependencies#3641
renovate[bot] wants to merge 1 commit intomainfrom
renovate/python

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 25, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
CacheControl 0.14.0 → 0.14.4 age confidence
MarkupSafe (changelog) 2.1.1 → 2.1.5 age confidence
attrs (changelog) 24.2.0 → 24.3.0 age confidence
blinker 1.8.2 → 1.9.0 age confidence
cachetools 5.5.0 → 5.5.2 age confidence
certifi 2024.8.30 → 2024.12.14 age confidence
charset-normalizer (changelog) 3.3.2 → 3.4.4 age confidence
click (changelog) 8.1.7 → 8.3.1 age confidence
google-auth 2.28.2 → 2.48.0 age confidence
google-cloud-core 2.4.3 → 2.5.0 age confidence
google-cloud-pubsub 2.29.0 → 2.35.0 age confidence
google-cloud-storage 3.0.0 → 3.9.0 age confidence
googleapis-common-protos (source) 1.63.0 → 1.72.0 age confidence
idna (changelog) 3.7 → 3.11 age confidence
itsdangerous (changelog) 2.1.2 → 2.2.0 age confidence
jsonschema (changelog) 4.17.3 → 4.26.0 age confidence
launchdarkly-server-sdk 9.5.0 → 9.15.0 age confidence
msgpack (changelog) 1.0.8 → 1.1.2 age confidence
pyasn1 (changelog) 0.6.0 → 0.6.2 age confidence
pyasn1_modules (changelog) 0.4.0 → 0.4.2 age confidence
pylint (changelog) 3.2.3 → 3.3.9 age confidence
pytest (changelog) 8.1.1 → 8.4.2 age confidence
pytest-asyncio (changelog) 0.21.0 → 0.26.0 age confidence
pytest-asyncio (changelog) 0.18.3 → 0.26.0 age confidence
pytest-asyncio (changelog) ^0.23.8 → ^0.26.0 age confidence
pytest-env ^0.6.2 → ^0.8.0 age confidence
requests (source, changelog) 2.32.4 → 2.32.5 age confidence
rsa 4.9 → 4.9.1 age confidence
ruff (source, changelog) ^0.14.1 → ^0.15.0 age confidence
semver (changelog) 3.0.2 → 3.0.4 age confidence
six 1.16.0 → 1.17.0 age confidence
sqlalchemy-utils ^0.41.2 → ^0.42.0 age confidence
thrift 0.20.0 → 0.22.0 age confidence
zipp 3.19.1 → 3.23.0 age confidence

Release Notes

psf/cachecontrol (CacheControl)

v0.14.4

Compare Source

What's Changed

New Contributors

Full Changelog: psf/cachecontrol@v0.14.3...v0.14.4

v0.14.3

Compare Source

  • Drop support for Python 3.8.

v0.14.2

Compare Source

  • Eliminate a race condition when overwriting cache entries.
  • Fix a requests object leak when doing caching on a streamed response

v0.14.1

Compare Source

What's Changed

New Contributors

Full Changelog: psf/cachecontrol@v0.14.0...v0.14.1

pallets/markupsafe (MarkupSafe)

v2.1.5

Compare Source

Released 2024-02-02

  • Fix striptags not collapsing spaces. :issue:417

v2.1.4

Compare Source

Released 2024-01-19

  • Don't use regular expressions for striptags, avoiding a performance
    issue. :pr:413

v2.1.3

Compare Source

Released 2023-06-02

  • Implement format_map, casefold, removeprefix, and removesuffix
    methods. :issue:370
  • Fix static typing for basic str methods on Markup. :issue:358
  • Use Self for annotating return types. :pr:379

v2.1.2

Compare Source

Released 2023-01-17

  • Fix striptags not stripping tags containing newlines.
    :issue:310
python-attrs/attrs (attrs)

v24.3.0

Compare Source

Backwards-incompatible Changes
Changes
  • Introduce attrs.NothingType, for annotating types consistent with attrs.NOTHING.
    #​1358
  • Allow mutating __suppress_context__ and __notes__ on frozen exceptions.
    #​1365
  • attrs.converters.optional() works again when taking attrs.converters.pipe() or another Converter as its argument.
    #​1372
  • attrs instances now support copy.replace().
    #​1383
  • attrs.validators.instance_of()'s type hints now allow for union types.
    For example: instance_of(str | int)
    #​1385
pallets-eco/blinker (blinker)

v1.9.0

Compare Source

Released 2024-11-08

  • Drop support for Python 3.8. :pr:175
  • Remove previously deprecated __version__, receiver_connected,
    Signal.temporarily_connected_to and WeakNamespace. :pr:172
  • Skip weakref signal cleanup if the interpreter is shutting down.
    :issue:173
certifi/python-certifi (certifi)

v2024.12.14

Compare Source

jawah/charset_normalizer (charset-normalizer)

v3.4.4

Compare Source

Changed
  • Bound setuptools to a specific constraint setuptools>=68,<=81.
  • Raised upper bound of mypyc for the optional pre-built extension to v1.18.2
Removed
  • setuptools-scm as a build dependency.
Misc
  • Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
  • Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  • Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

v3.4.3

Compare Source

Changed
  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#​595) (#​583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#​391)
Added
  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14
Fixed
  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#​633)
Misc
  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes.
    Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

v3.4.2

Compare Source

Fixed
  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#​591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#​605) (#​587)
Changed
  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

v3.4.1

Compare Source

Changed
  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
  • Enforce annotation delayed loading for a simpler and consistent types in the project.
  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8
Added
  • pre-commit configuration.
  • noxfile.
Removed
  • build-requirements.txt as per using pyproject.toml native build configuration.
  • bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
  • setup.cfg in favor of pyproject.toml metadata configuration.
  • Unused utils.range_scan function.
Fixed
  • Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#​572)
  • Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+

v3.4.0

Compare Source

Added
  • Argument --no-preemptive in the CLI to prevent the detector to search for hints.
  • Support for Python 3.13 (#​512)
Fixed
  • Relax the TypeError exception thrown when trying to compare a CharsetMatch with anything else than a CharsetMatch.
  • Improved the general reliability of the detector based on user feedbacks. (#​520) (#​509) (#​498) (#​407) (#​537)
  • Declared charset in content (preemptive detection) not changed when converting to utf-8 bytes. (#​381)
pallets/click (click)

v8.3.1

Compare Source

Released 2025-11-15

  • Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039
    :pr:3055
  • Replace Sentinel.UNSET default values by None as they're passed through
    the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect
    behavior for multiple parameters using the same name. :issue:3071 :pr:3079
  • Hide Sentinel.UNSET values as None when looking up for other parameters
    through the context inside parameter callbacks. :issue:3136 :pr:3137
  • Fix rendering when prompt and confirm parameter prompt_suffix is
    empty. :issue:3019 :pr:3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to
    type_cast_value. :issue:3069 :pr:3090

v8.3.0

Compare Source

Released 2025-09-17

  • Improved flag option handling: Reworked the relationship between flag_value
    and default parameters for better consistency:

    • The default parameter value is now preserved as-is and passed directly
      to CLI functions (no more unexpected transformations)
    • Exception: flag options with default=True maintain backward compatibility
      by defaulting to their flag_value
    • The default parameter can now be any type (bool, None, etc.)
    • Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610
      :issue:3024 :pr:3030

  • Allow default to be set on Argument for nargs = -1. :issue:2164
    :pr:3030

  • Show correct auto complete value for nargs option in combination with flag
    option :issue:2813

  • Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

  • Lazily import shutil. :pr:3023

  • Properly forward exception information to resources registered with
    click.core.Context.with_resource(). :issue:2447 :pr:3058

  • Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

v8.2.2

Compare Source

Released 2025-07-31

  • Fix reconciliation of default, flag_value and type parameters for
    flag options, as well as parsing and normalization of environment variables.
    :issue:2952 :pr:2956
  • Fix typing issue in BadParameter and MissingParameter exceptions for the
    parameter param_hint that did not allow for a sequence of string where the
    underlying function _join_param_hints allows for it. :issue:2777 :pr:2990
  • Use the value of Enum choices to render their default value in help
    screen. Refs :issue:2911 :pr:3004
  • Fix completion for the Z shell (zsh) for completion items containing
    colons. :issue:2703 :pr:2846
  • Don't include envvar in error hint when not configured. :issue:2971 :pr:2972
  • Fix a rare race in click.testing.StreamMixer's finalization that manifested
    as a ValueError on close in a multi-threaded test session.
    :issue:2993 :pr:2991

v8.2.1

Compare Source

Released 2025-05-20

  • Fix flag value handling for flag options with a provided type. :issue:2894
    :issue:2897 :pr:2930
  • Fix shell completion for nested groups. :issue:2906 :pr:2907
  • Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
  • Fix EOF handling for stdin input in CliRunner. :issue:2787

v8.2.0

Compare Source

Released 2025-05-10

  • Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893

  • Use modern packaging metadata with pyproject.toml instead of setup.cfg.
    :pr:2438

  • Use flit_core instead of setuptools as build backend. :pr:2543

  • Deprecate the __version__ attribute. Use feature detection, or
    importlib.metadata.version("click"), instead. :issue:2598

  • BaseCommand is deprecated. Command is the base class for all
    commands. :issue:2589

  • MultiCommand is deprecated. Group is the base class for all group
    commands. :issue:2590

  • The current parser and related classes and methods, are deprecated.
    :issue:2205

    • OptionParser and the parser module, which is a modified copy of
      optparse in the standard library.
    • Context.protected_args is unneeded. Context.args contains any
      remaining arguments while parsing.
    • Parameter.add_to_parser (on both Argument and Option) is
      unneeded. Parsing works directly without building a separate parser.
    • split_arg_string is moved from parser to shell_completion.

  • Enable deferred evaluation of annotations with
    from __future__ import annotations. :pr:2270

  • When generating a command's name from a decorated function's name, the
    suffixes _command, _cmd, _group, and _grp are removed.
    :issue:2322

  • Show the types.ParamType.name for types.Choice options within
    --help message if show_choices=False is specified.
    :issue:2356

  • Do not display default values in prompts when Option.show_default is
    False. :pr:2509

  • Add get_help_extra method on Option to fetch the generated extra
    items used in get_help_record to render help text. :issue:2516
    :pr:2517

  • Keep stdout and stderr streams independent in CliRunner. Always
    collect stderr output and never raise an exception. Add a new
    output stream to simulate what the user sees in its terminal. Removes
    the mix_stderr parameter in CliRunner. :issue:2522 :pr:2523

  • Option.show_envvar now also shows environment variable in error messages.
    :issue:2695 :pr:2696

  • Context.close will be called on exit. This results in all
    Context.call_on_close callbacks and context managers added via
    Context.with_resource to be closed on exit as well. :pr:2680

  • Add ProgressBar(hidden: bool) to allow hiding the progressbar. :issue:2609

  • A UserWarning will be shown when multiple parameters attempt to use the
    same name. :issue:2396

  • When using Option.envvar with Option.flag_value, the flag_value
    will always be used instead of the value of the environment variable.
    :issue:2746 :pr:2788

  • Add Choice.get_invalid_choice_message method for customizing the
    invalid choice message. :issue:2621 :pr:2622

  • If help is shown because no_args_is_help is enabled (defaults to True
    for groups, False for commands), the exit code is 2 instead of 0.
    :issue:1489 :pr:1489

  • Contexts created during shell completion are closed properly, fixing
    a ResourceWarning when using click.File. :issue:2644 :pr:2800
    :pr:2767

  • click.edit(filename) now supports passing an iterable of filenames in
    case the editor supports editing multiple files at once. Its return type
    is now also typed: AnyStr if text is passed, otherwise None.
    :issue:2067 :pr:2068

  • Specialized typing of progressbar(length=...) as ProgressBar[int].
    :pr:2630

  • Improve echo_via_pager behaviour in face of errors.
    :issue:2674

    • Terminate the pager in case a generator passed to echo_via_pager
      raises an exception.
    • Ensure to always close the pipe to the pager process and wait for it
      to terminate.
    • echo_via_pager will not ignore KeyboardInterrupt anymore. This
      allows the user to search for future output of the generator when
      using less and then aborting the program using ctrl-c.

  • deprecated: bool | str can now be used on options and arguments. This
    previously was only available for Command. The message can now also be
    customised by using a str instead of a bool. :issue:2263 :pr:2271

    • Command.deprecated formatting in --help changed from
      (Deprecated) help to help (DEPRECATED).
    • Parameters cannot be required nor prompted or an error is raised.
    • A warning will be printed when something deprecated is used.

  • Add a catch_exceptions parameter to CliRunner. If
    catch_exceptions is not passed to CliRunner.invoke, the value
    from CliRunner is used. :issue:2817 :pr:2818

  • Option.flag_value will no longer have a default value set based on
    Option.default if Option.is_flag is False. This results in
    Option.default not needing to implement __bool__. :pr:2829

  • Incorrect click.edit typing has been corrected. :pr:2804

  • Choice is now generic and supports any iterable value.
    This allows you to use enums and other non-str values. :pr:2796
    :issue:605

  • Fix setup of help option's defaults when using a custom class on its
    decorator. Removes HelpOption. :issue:2832 :pr:2840

v8.1.8

Compare Source

Released 2024-12-19

  • Fix an issue with type hints for click.open_file(). :issue:2717
  • Fix issue where error message for invalid click.Path displays on
    multiple lines. :issue:2697
  • Fixed issue that prevented a default value of "" from being displayed in
    the help for an option. :issue:2500
  • The test runner handles stripping color consistently on Windows.
    :issue:2705
  • Show correct value for flag default when using default_map.
    :issue:2632
  • Fix click.echo(color=...) passing color to coloroma so it can be
    forced on Windows. :issue:2606.
  • More robust bash version check, fixing problem on Windows with git-bash.
    :issue:2638
  • Cache the help option generated by the help_option_names setting to
    respect its eagerness. :pr:2811
  • Replace uses of os.system with subprocess.Popen. :issue:1476
  • Exceptions generated during a command will use the context's color
    setting when being displayed. :issue:2193
  • Error message when defining option with invalid name is more descriptive.
    :issue:2452
  • Refactor code generating default --help option to deduplicate code.
    :pr:2563
  • Test CLIRunner resets patched _compat.should_strip_ansi.
    :issue:2732
googleapis/google-auth-library-python (google-auth)

v2.48.0

Compare Source

Features
Bug Fixes

v2.47.0

Compare Source

Features
Bug Fixes

v2.46.0

Compare Source

Documentation
Features
Bug Fixes

v2.45.0

Compare Source

Features

v2.44.0

Compare Source

Features
Bug Fixes

v2.43.0

Compare Source

Features
  • Add public wrapper for _mtls_helper.check_use_client_cert which enables mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert sources detected (#​1859) Add public wrapper for check_use_client_cert which enables mTLS if
    GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, when the MWID/X.509 cert
    sources detected. Also, fix check_use_client_cert to return boolean
    value.
    Change #​1848 added the check_use_client_cert method that helps know if
    client cert should be used for mTLS connection. However, that was in a
    private class, thus, created a public wrapper of the same function so
    that it can be used by python Client Libraries. Also, updated
    check_use_client_cert to return a boolean value instead of existing
    string value for better readability and future scope.
    --------- (1535eccbff0ad8f3fd6a9775316ac8b77dca66ba)
  • Enable mTLS if GOOGLE_API_USE_CLIENT_CERTIFICATE is not set, if the MWID/X.509 cert sources detected (#​1848) The Python SDK will use a hybrid approach for mTLS enablement:
  • If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is set
    (either true or false), the SDK will respect that setting. This is
    necessary for test scenarios and users who need to explicitly control
    mTLS behavior.
  • If the GOOGLE_API_USE_CLIENT_CERTIFICATE environment variable is not
    set, the SDK will automatically enable mTLS only if it detects Managed
    Workload Identity (MWID) or X.509 Workforce Identity Federation (WIF)
    certificate sources. In other cases where the variable is not set, mTLS
    will remain disabled.
    ** This change also adds the helper method check_use_client_cert and
    it's unit test, which will be used for checking the criteria for setting
    the mTLS to true
    ** This change is only for Auth-Library, other changes will be created
    for Client-Library use-cases.
    --------- (395e405b64b56ddb82ee639958c2e8056ad2e82b)

v2.42.1

Compare Source

Bug Fixes

v2.42.0

Compare Source

Features
Bug Fixes

v2.41.1

Compare Source

Bug Fixes

v2.41.0

Compare Source

Features
Bug Fixes
Documentation

v2.40.3

Compare Source

Bug Fixes

v2.40.2

Compare Source

Bug Fixes
  • Remove sync response logs in AuthorizedSession (97ed1c8)
  • Update test to consider new error message from cryptography (#​1765) (44e38b6)

v2.40.1

Compare Source

Bug Fixes

v2.40.0

Compare Source

Features
Bug Fixes
  • Correct webauthn JSON parsing to be compliant with standard. (#​1658) (0c5ef36)

v2.39.0

Compare Source

Features
  • Adds GA support for X.509 workload identity federation (#​1695) (7495960)
Bug Fixes

v2.38.0

Compare Source

Features

Configuration

📅 Schedule: Branch creation - "before 6am every weekday" in timezone America/Vancouver, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested review from Jxio, ochiu and seeker25 as code owners February 25, 2026 12:07
@renovate
Copy link
Contributor Author

renovate bot commented Feb 25, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: queue_services/account-mailer/poetry.lock
Updating dependencies
Resolving dependencies...

Creating virtualenv account-mailer-UhBhHzHu-py3.12 in /home/ubuntu/.cache/pypoetry/virtualenvs

[BUG] auth-api (3.0.10) @ git+https://github.com/seeker25/sbc-auth.git@32356#subdirectory=auth-api is not satisfied.

@sonarqubecloud
Copy link

sonarqubecloud bot commented Feb 25, 2026

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@seeker25 seeker25 closed this Feb 26, 2026
@renovate renovate bot deleted the renovate/python branch February 27, 2026 13:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Jxio Jxio Awaiting requested review from Jxio Jxio is a code owner

@seeker25 seeker25 Awaiting requested review from seeker25 seeker25 is a code owner

@ochiu ochiu Awaiting requested review from ochiu ochiu is a code owner

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@seeker25