chore(deps): update all dependencies

[renovate-bot]

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/checkout	action	major	v4 -> v5
aiohttp		patch	==3.12.14 -> ==3.12.15
cachetools		major	==5.5.2 -> ==6.2.0
certifi		minor	==2025.4.26 -> ==2025.8.3
charset-normalizer (changelog)		patch	==3.4.2 -> ==3.4.3
click (changelog)		minor	==8.1.8 -> ==8.2.1
frozenlist		minor	==1.6.0 -> ==1.7.0
google-api-core		minor	==2.24.2 -> ==2.25.1
google-auth		patch	==2.40.1 -> ==2.40.3
grpcio (source)		minor	==1.71.0 -> ==1.74.0
libcst (changelog)		minor	==1.7.0 -> ==1.8.2
multidict		minor	==6.4.3 -> ==6.6.4
propcache		patch	==0.3.1 -> ==0.3.2
protobuf		minor	==6.31.1 -> ==6.32.0
pytest (changelog)		minor	==8.3.5 -> ==8.4.1
pytest-asyncio (changelog)		major	==0.26.0 -> ==1.1.0
python	uses-with	minor	3.10 -> 3.13
rules_cc	http_archive	minor	0.1.1 -> 0.2.2
typing-extensions (changelog)		minor	==4.13.2 -> ==4.15.0
ubuntu	github-runner	major	22.04 -> 24.04
yarl		patch	==1.20.0 -> ==1.20.1

---

Release Notes

actions/checkout (actions/checkout)

v5

Compare Source

aio-libs/aiohttp (aiohttp)

v3.12.15

Compare Source

====================

Bug fixes

• Fixed :class:~aiohttp.DigestAuthMiddleware to preserve the algorithm case from the server's challenge in the authorization response. This improves compatibility with servers that perform case-sensitive algorithm matching (e.g., servers expecting algorithm=MD5-sess instead of algorithm=MD5-SESS)
  -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:11352.

Improved documentation

• Remove outdated contents of aiohttp-devtools and aiohttp-swagger
  from Web_advanced docs.
  -- by :user:Cycloctane

  Related issues and pull requests on GitHub:
  :issue:11347.

Packaging updates and notes for downstreams

• Started including the llhttp :file:LICENSE file in wheels by adding vendor/llhttp/LICENSE to license-files in :file:setup.cfg -- by :user:threexc.

  Related issues and pull requests on GitHub:
  :issue:11226.

Contributor-facing changes

• Updated a regex in test_aiohttp_request_coroutine for Python 3.14.

  Related issues and pull requests on GitHub:
  :issue:11271.

---

tkem/cachetools (cachetools)

v6.2.0

Compare Source

===================

• Improve general RRCache performance by storing cache keys in an
  additional sequence container. Note that this will increase memory
  consumption.

• Add more unit tests.

v6.1.0

Compare Source

===================

• Improve LFUCache insertion performance by switching to an
  implementation based on the cacheing <https://pypi.org/project/cacheing/>_ library.

• Update CI environment.

v6.0.0

Compare Source

===================

• Require Python 3.9 or later (breaking change).

• Remove MRUCache and the @func.mru_cache decorator (breaking
  change).

• Add an optional condition parameter to the @cached and
  @cachedmethod decorators, which, when used with a
  threading.Condition instance, should improve cache stampede <https://en.wikipedia.org/wiki/Cache_stampede>_ issues in massively
  parallel environments. Note that this will inflict some performance
  penalty, and therefore has to be enabled explicitly.

• Convert the cachetools.func decorators to use a
  threading.Condition instance to deal with cache stampede <https://en.wikipedia.org/wiki/Cache_stampede>_ issues. Note that
  this may result in a noticable performance degradation, depending
  on your actual use case.

• Deprecate support for cache(self) returning None to suppress
  caching with the @cachedmethod decorator.

• Improve documentation.

• Update CI environment.

certifi/python-certifi (certifi)

v2025.8.3

Compare Source

v2025.7.14

Compare Source

v2025.7.9

Compare Source

v2025.6.15

Compare Source

jawah/charset_normalizer (charset-normalizer)

v3.4.3

Compare Source

Changed

• mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#​595) (#​583)
• automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#​391)

Added

• Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
• Support for Python 3.14

Fixed

• sdist archive contained useless directories.
• automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#​633)

Misc

• SBOM are automatically published to the relevant GitHub release to comply with regulatory changes.
  Each published wheel comes with its SBOM. We choose CycloneDX as the format.
• Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

pallets/click (click)

v8.2.1

Compare Source

Released 2025-05-20

• Fix flag value handling for flag options with a provided type. :issue:2894
  :issue:2897 :pr:2930
• Fix shell completion for nested groups. :issue:2906 :pr:2907
• Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
• Fix EOF handling for stdin input in CliRunner. :issue:2787

v8.2.0

Compare Source

Released 2025-05-10

• Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893

• Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  :pr:2438

• Use flit_core instead of setuptools as build backend. :pr:2543

• Deprecate the __version__ attribute. Use feature detection, or
  importlib.metadata.version("click"), instead. :issue:2598

• BaseCommand is deprecated. Command is the base class for all
  commands. :issue:2589

• MultiCommand is deprecated. Group is the base class for all group
  commands. :issue:2590

• The current parser and related classes and methods, are deprecated.
  :issue:2205

  • OptionParser and the parser module, which is a modified copy of
    optparse in the standard library.
  • Context.protected_args is unneeded. Context.args contains any
    remaining arguments while parsing.
  • Parameter.add_to_parser (on both Argument and Option) is
    unneeded. Parsing works directly without building a separate parser.
  • split_arg_string is moved from parser to shell_completion.

• Enable deferred evaluation of annotations with
  from __future__ import annotations. :pr:2270

• When generating a command's name from a decorated function's name, the
  suffixes _command, _cmd, _group, and _grp are removed.
  :issue:2322

• Show the types.ParamType.name for types.Choice options within
  --help message if show_choices=False is specified.
  :issue:2356

• Do not display default values in prompts when Option.show_default is
  False. :pr:2509

• Add get_help_extra method on Option to fetch the generated extra
  items used in get_help_record to render help text. :issue:2516
  :pr:2517

• Keep stdout and stderr streams independent in CliRunner. Always
  collect stderr output and never raise an exception. Add a new
  output stream to simulate what the user sees in its terminal. Removes
  the mix_stderr parameter in CliRunner. :issue:2522 :pr:2523

• Option.show_envvar now also shows environment variable in error messages.
  :issue:2695 :pr:2696

• Context.close will be called on exit. This results in all
  Context.call_on_close callbacks and context managers added via
  Context.with_resource to be closed on exit as well. :pr:2680

• Add ProgressBar(hidden: bool) to allow hiding the progressbar. :issue:2609

• A UserWarning will be shown when multiple parameters attempt to use the
  same name. :issue:2396

• When using Option.envvar with Option.flag_value, the flag_value
  will always be used instead of the value of the environment variable.
  :issue:2746 :pr:2788

• Add Choice.get_invalid_choice_message method for customizing the
  invalid choice message. :issue:2621 :pr:2622

• If help is shown because no_args_is_help is enabled (defaults to True
  for groups, False for commands), the exit code is 2 instead of 0.
  :issue:1489 :pr:1489

• Contexts created during shell completion are closed properly, fixing
  a ResourceWarning when using click.File. :issue:2644 :pr:2800
  :pr:2767

• click.edit(filename) now supports passing an iterable of filenames in
  case the editor supports editing multiple files at once. Its return type
  is now also typed: AnyStr if text is passed, otherwise None.
  :issue:2067 :pr:2068

• Specialized typing of progressbar(length=...) as ProgressBar[int].
  :pr:2630

• Improve echo_via_pager behaviour in face of errors.
  :issue:2674

  • Terminate the pager in case a generator passed to echo_via_pager
    raises an exception.
  • Ensure to always close the pipe to the pager process and wait for it
    to terminate.
  • echo_via_pager will not ignore KeyboardInterrupt anymore. This
    allows the user to search for future output of the generator when
    using less and then aborting the program using ctrl-c.

• deprecated: bool | str can now be used on options and arguments. This
  previously was only available for Command. The message can now also be
  customised by using a str instead of a bool. :issue:2263 :pr:2271

  • Command.deprecated formatting in --help changed from
    (Deprecated) help to help (DEPRECATED).
  • Parameters cannot be required nor prompted or an error is raised.
  • A warning will be printed when something deprecated is used.

• Add a catch_exceptions parameter to CliRunner. If
  catch_exceptions is not passed to CliRunner.invoke, the value
  from CliRunner is used. :issue:2817 :pr:2818

• Option.flag_value will no longer have a default value set based on
  Option.default if Option.is_flag is False. This results in
  Option.default not needing to implement __bool__. :pr:2829

• Incorrect click.edit typing has been corrected. :pr:2804

• Choice is now generic and supports any iterable value.
  This allows you to use enums and other non-str values. :pr:2796
  :issue:605

• Fix setup of help option's defaults when using a custom class on its
  decorator. Removes HelpOption. :issue:2832 :pr:2840

aio-libs/frozenlist (frozenlist)

v1.7.0

======

(2025-06-09)

Features

• Added deepcopy support to FrozenList -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:659.

Packaging updates and notes for downstreams

• Fixed an issue where frozenlist binary wheels would be built with debugging symbols and line tracing enabled, which significantly impacted performance. Line tracing is now disabled by default and can only be enabled explicitly -- by :user:bdraco.

  This change ensures that production builds are optimized for performance. Developers who need line tracing for debugging purposes can still enable it by:

  1. Setting the FROZENLIST_CYTHON_TRACING environment variable
  2. Using the --config-setting=with-cython-tracing=true option with pip

  Related issues and pull requests on GitHub:
  :issue:660.

• Enabled PIP_CONSTRAINT environment variable in the build configuration to ensure the pinned Cython version from requirements/cython.txt is used during wheel builds.

  Related issues and pull requests on GitHub:
  :issue:661.

---

v1.6.2

======

(2025-06-03)

No significant changes.

---

v1.6.1

======

(2025-06-02)

Bug fixes

• Correctly use cimport for including PyBool_FromLong -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:653.

Packaging updates and notes for downstreams

• Exclude _frozenlist.cpp from bdists/wheels -- by :user:musicinmybrain.

  Related issues and pull requests on GitHub:
  :issue:649.

• Updated to use Cython 3.1 universally across the build path -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:654.

---

googleapis/python-api-core (google-api-core)

v2.25.1

Compare Source

Bug Fixes

• Allow BackgroundConsumer To Inform Caller of Fatal Exceptions with Optional Callback (3206c01)

v2.25.0

Compare Source

Features

• Add protobuf runtime version to x-goog-api-client header (#​812) (118bd96)
• Support dynamic retry backoff values (#​793) (70697a3)

Bug Fixes

• Resolve issue where pre-release versions of dependencies are installed (#​808) (1ca7973)

googleapis/google-auth-library-python (google-auth)

v2.40.3

Compare Source

Bug Fixes

• Auth fetch token from default endpoint (#​1779) (88891cc)
• Remove unnecessary call to mds service (#​1769) (7c61c7d)
• Retry 504 errors (#​1767) (554f967)

v2.40.2

Compare Source

Bug Fixes

• Remove sync response logs in AuthorizedSession (97ed1c8)
• Update test to consider new error message from cryptography (#​1765) (44e38b6)

grpc/grpc (grpcio)

v1.74.0

Compare Source

This is release 1.74.0 (gee) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [OTel C++, Posix EE] Plumb TCP write timestamps and metrics to OTel tracers. (#​39946)
• [EventEngine] Fix Python reconnect issues: use iomgr backup poller when EE is disabled. (#​39894)
• [Python] Upgrade Pytype (Part - 1). (#​39816)
• [Python] Upgrade black. (#​39774)
• [event_engine] Implement fork support in Posix Event Engine. (#​38980)
• [http2] Fix GRPC_ARG_HTTP2_STREAM_LOOKAHEAD_BYTES for when BDP is disabled. (#​39585)

Objective-C

• [dep] Upgrade Protobuf Version 31.1. (#​39916)

PHP

• [PHP] Fully qualify stdClass with global namespace. (#​39996)
• [php] Fix PHPDoc so that UnaryCall defines the proper return type. (#​37563)
• fix typing of nullable parameters. (#​39199)

Python

• Fix gRPC Python docs website layout - use spaces optimally. (#​40073)

Ruby

• [Ruby] Add rubygems support for linux-gnu and linux-musl platforms . (#​40174)
• [ruby] enable EE fork support. (#​39786)
• [ruby] Return nil for c functions expected to return a VALUE. (#​39214)
• [ruby] remove connectivity state watch thread, fix cancellations from spurious signals. (#​39409)
• [ruby] Drop Ruby 3.0 support. (#​39607)

v1.73.1

Compare Source

This is release 1.73.1 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

• [Backport of #​39894 to v1.73.x] Fix the issue with gRPC Python Client not reconnecting in certain situations: #​38290, #​39113, #​39631 (#​39950).

v1.73.0

Compare Source

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

• [Dep] Update Protobuf to v31.0. (#​39392)
• [Core] Added GPR_DISABLE_ABSEIL_SYNC. (#​39562)
• [xds_override_host] pass through per-endpoint args when creating subchannels. (#​39532)
• Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#​39297)
• [URI] fix parsing of user_info in proxy settings. (#​39004)
• [EventEngine] Fix busy loop in thread pool when shutting down. (#​39258)
• [Dep] Added a flag to build with openssl instead of boringssl. (#​39188)
• [EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#​39079)

C++

• [OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#​39554)

Python

• [Python] Pin Cython to 3.1.1. (#​39609)
• [Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#​39586)

Ruby

• [Ruby] add remove_unused_artifacts to opt build. (#​39593)

v1.72.2

Compare Source

This is release 1.72.2 (gusto) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Python

• [Backport of #​39894 to v1.72.x] Fix the issue with gRPC Python Client not reconnecting in certain situations: #​38290, #​39113, #​39631. (#​39949)

v1.72.1

Compare Source

This is release gRPC Core 1.72.1 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

C++

• [Backport of #​39266 to v1.71.x] Protect grpc generated sources from unwanted system macros (#​39484).

Python

• [Backport of #​39609 to v1.71.x] Pin Cython to 3.1.1 (#​39632). This addresses several issues:
  • #​39588 Using inconsistent Cython version in released platform-specific wheels within the same grpcio release.
  • cython/cython#6878 Several published grpcio wheels were built with Cython 3.1.0 and are affected by Cython memory leak issue when using AsyncIO APIs (grpc.aio.*).
• [Backport of #​39418 to v1.71.x] Fix Python 3.12 MacOS universal release artifact (#​39504).

v1.72.0

Compare Source

This is release gRPC Core 1.72.0 (gusto).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

v1.71.2

Compare Source

This is release 1.71.2 (gears) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

C++

• [Backport of #​39266 to v1.71.x] Protect grpc generated sources from unwanted system macros (#​39484).

Python

• [Backport of #​39894 to v1.71.x] Fix the issue with gRPC Python Client not reconnecting in certain situations: #​38290, #​39113, #​39631 (#​39948).
• [Backport of #​39609 to v1.71.x] Pin Cython to 3.1.1 (#​39636). This addresses several issues:
  • #​39588 Using inconsistent Cython version in released platform-specific wheels within the same grpcio release.
  • cython/cython#6878 Several published grpcio wheels were built with Cython 3.1.0 and are affected by Cython memory leak issue when using AsyncIO APIs (grpc.aio.*).

Instagram/LibCST (libcst)

v1.8.2

Compare Source

v1.8.1

Compare Source

Added

• add helper to convert nodes to matchers by @​zsol in #​1351

Updated

• Avoid raising bare Exception by @​zaicruvoir1rominet in #​1168
• Upgrade PyYAML-ft version and use new module name by @​lysnikolaou in #​1353

New Contributors

• @​lysnikolaou made their first contribution in #​1353

Full Changelog: Instagram/LibCST@v1.8.0...v1.8.1

v1.8.0

Compare Source

Added

• Allow configuring empty formatter lists in codemod CLI by @​ngoldbaum in #​1319
• Publish several new binary wheels
  • macos intel by @​hadialqattan in #​1316
  • windows arm64 by @​zsol in #​1304
  • 3.13 CPython free-threaded by @​zsol in #​1333
  • (only on test.pypi.org) 3.14 and 3.14 CPython free-threaded by @​amyreese and @​zsol in #​1345 and #​1331
• Enable support for free-threaded CPython by @​zsol in #​1295 and #​1335

Updated

• update pyo3 to 0.25 by @​ngoldbaum in #​1324
• Replace multiprocessing with ProcessPoolExecutor by @​zsol in #​1294
• Support pipe syntax for Union types in codegen by @​zsol in #​1336

New Contributors

• @​hadialqattan made their first contribution in #​1316

Full Changelog: Instagram/LibCST@v1.7.0...v1.8.0

aio-libs/multidict (multidict)

v6.6.4

=====

(2025-08-11)

Bug fixes

• Fixed MutliDict & CIMultiDict memory leak when deleting values or clearing them
  -- by :user:Vizonex

  Related issues and pull requests on GitHub:
  :issue:1233.

Contributor-facing changes

• The type preciseness coverage report generated by MyPy <https://mypy-lang.org>__ is now uploaded to Coveralls <https://coveralls.io/github/aio-libs/multidict>__ and
  will not be included in the Codecov views <https://app.codecov.io/gh/aio-libs/multidict>__ going forward
  -- by :user:webknjaz.

  Related issues and pull requests on GitHub:
  :issue:1122, :issue:1231.

• Added memory leak test for popping or deleting attributes from a multidict to prevent future issues or bogus claims.
  -- by :user:Vizonex

  Related issues and pull requests on GitHub:
  :issue:1233.

---

v6.6.3

Compare Source

=====

(2025-06-30)

Bug fixes

• Fixed inconsistencies generated by the C implementation of _md_shrink() which might later lead to assertion failures and crash -- by :user:Romain-Geissler-1A.

  Related issues and pull requests on GitHub:
  :issue:1229.

---

v6.6.2

=====

(2025-06-28)

Bug fixes

• Fixed a memory corruption issue in the C implementation of _md_shrink() that could lead to segmentation faults and data loss when items were deleted from a :class:~multidict.MultiDict. The issue was an edge case in the pointer arithmetic during the compaction phase -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1221, :issue:1222.

• Fixed format string compilation errors in debug builds on 32-bit platforms by using portable %zd format specifiers for Py_ssize_t values instead of %ld -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1225, :issue:1226.

Packaging updates and notes for downstreams

• Re-enabled 32-bit Linux wheel builds that were disabled by default in cibuildwheel 3.0.0 -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1225, :issue:1227.

---

v6.6.1

=====

(2025-06-28)

Bug fixes

• If :meth:multidict.MultiDict.extend, :meth:multidict.MultiDict.merge, or :meth:multidict.MultiDict.update raises an exception, now the multidict internal state is correctly restored.
  Patch by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1215.

Contributor-facing changes

• Fixed setuptools deprecation warning about the license specification -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1216.

• Fix compiler warnings and convert them to errors -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1217.

---

v6.6.0

Compare Source

=====

(2025-06-27)

Features

• Added :meth:multidict.MultiDict.merge which copies all items from arguments if its key
  not exist in the dictionary -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:292.

• Stopped reallocating memory for the internal htkeys_t structure when inserting new items if the
  multidict has deleted items and it could be collapsed in-place. Removal of
  malloc()/free() improves the performance slightly.

  The change affects C implementation only, pure Python code is not changed.

  Patch by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1200.

• C implementation of :class:multidict.MultiDict.getall now is slightly faster if it returns nothing -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1212.

Improved documentation

• Replaced docstring for :meth:multidict.MultiDict.update to don't use RST/markdown markup.

  Related issues and pull requests on GitHub:
  :issue:1203.

• Improved documentation for :meth:multidict.MultiDict.extend and :meth:multidict.MultiDict.update -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1205.

Contributor-facing changes

• When building wheels, the source distribution is now passed directly
  to the cibuildwheel invocation -- by :user:webknjaz.

  Related issues and pull requests on GitHub:
  :issue:1199.

• Set up PYTHONHASHSEED for benchmarks execution to make measured times stable -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1202.

---

v6.5.1

=====

(2025-06-24)

Bug fixes

• Fixed a bug in C implementation when multidict is resized and it has deleted slots.

  The bug was introduced by multidict 6.5.0 release.

  Patch by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1195.

Contributor-facing changes

• A pair of code formatters for Python and C have been configured in the pre-commit tool.

  Related issues and pull requests on GitHub:
  :issue:1123.

• Shorted fixture parametrization ids.

  For example, test_keys_view_xor[case-insensitive-pure-python-module] becomes test_keys_view_xor[ci-py] -- by :user:asvetlov.

  Related issues and pull requests on GitHub:
  :issue:1192.

• The :file:reusable-cibuildwheel.yml workflow has been refactored to
  be more generic and :file:ci-cd.yml now holds all the configuration
  toggles -- by :user:webknjaz.

  Related issues and pull requests on GitHub:
  :issue:1193.

---

v6.5.0

Compare Source

=====

(2025-06-17)

.. note::

The release was yanked because of :issue:1195, multidict 6.5.1 should be used
instead.

Features

• Replace internal implementation from an array of items to hash table.
  algorithmic complexity for lookups is switched from O(N) to O(1).

  The hash table is very similar to :class:dict from CPython but it allows keys duplication.

  The benchmark shows 25-50% boost for single lookups, x2-x3 for bulk updates, and x20 for
  some multidict view operations. The gain is not for free:
  :class:~multidict.MultiDict.add and :class:~multidict.MultiDict.extend are 25-50%
  slower now. We consider it as acceptable because the lookup is much more common
  operation that addition for the library domain.

  Related issues and pull requests on GitHub:
  :issue:1128.

Contributor-facing changes

• Builds have been added for arm64 Windows
  wheels and the reusable-build-wheel.yml
  template has been modified to allow for
  an os value (windows-11-arm) which
  does not end with the -latest postfix.

  Related issues and pull requests on GitHub:
  :issue:1167.

---

v6.4.4

=====

(2025-05-19)

Bug fixes

• Fixed a segmentation fault when calling :py:meth:multidict.MultiDict.setdefault with a single argument -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:1160.

• Fixed a segmentation fault when attempting to directly instantiate view objects
  (multidict._ItemsView, multidict._KeysView, multidict._ValuesView) -- by :user:bdraco.

  View objects now raise a proper :exc:TypeError with the message "cannot create '...' instances directly"
  when direct instantiation is attempted.

  View objects should only be created through the proper methods: :py:meth:multidict.MultiDict.items,
  :py:meth:multidict.MultiDict.keys, and :py:meth:multidict.MultiDict.values.

  Related issues and pull requests on GitHub:
  :issue:1164.

Miscellaneous internal changes

• :class:multidict.MultiDictProxy was refactored to rely only on
  :class:multidict.MultiDict public interface and don't touch any implementation
  details.

  Related issues and pull requests on GitHub:
  :issue:1150.

• Multidict views were refactored to rely only on
  :class:multidict.MultiDict API and don't touch any implementation
  details.

  Related issues and pull requests on GitHub:
  :issue:1152.

• Dropped internal _Impl class from pure Python implementation, both pure Python and C
  Extension follows the same design internally now.

  Related issues and pull requests on GitHub:
  :issue:1153.

---

aio-libs/propcache (propcache)

v0.3.2

=====

(2025-06-09)

Improved documentation

• Fixed incorrect decorator usage in the :func:~propcache.api.under_cached_property example code -- by :user:meanmail.

  Related issues and pull requests on GitHub:
  :issue:109.

Packaging updates and notes for downstreams

• Updated to use Cython 3.1 universally across the build path -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:117.

• Made Cython line tracing opt-in via the with-cython-tracing build config setting -- by :user:bdraco.

  Previously, line tracing was enabled by default in :file:pyproject.toml, which caused build issues for some users and made wheels nearly twice as slow.

  Now line tracing is only enabled when explicitly requested via pip install . --config-setting=with-cython-tracing=true or by setting the PROPCACHE_CYTHON_TRACING environment variable.

  Related issues and pull requests on GitHub:
  :issue:118.

---

pytest-dev/pytest (pytest)

v8.4.1

Compare Source

pytest 8.4.1 (2025-06-17)

Bug fixes

• #​13461: Corrected _pytest.terminal.TerminalReporter.isatty to support
  being called as a method. Before it was just a boolean which could
  break correct code when using -o log_cli=true).

• #​13477: Reintroduced pytest.PytestReturnNotNoneWarning{.interpreted-text role="class"} which was removed by accident in pytest [8.4]{.title-ref}.

  This warning is raised when a test functions returns a value other than None, which is often a mistake made by beginners.

  See return-not-none{.interpreted-text role="ref"} for more information.

• #​13497: Fixed compatibility with Twisted 25+.

Improved documentation

• #​13492: Fixed outdated warning about faulthandler not working on Windows.

v8.4.0

Compare Source

pytest 8.4.0 (2025-06-02)

Removals and backward incompatible breaking changes

• #​11372: Async tests will now fail, instead of warning+skipping, if you don't have any suitable plugin installed.

• #​12346: Tests will now fail, instead of raising a warning, if they return any value other than None.

• #​12874: We dropped support for Python 3.8 following its end of life (2024-10-07).

• #​12960: Test functions containing a yield now cause an explicit error. They have not been run since pytest 4.0, and were previously marked as an expected failure and deprecation warning.

  See the docs <yield tests deprecated>{.interpreted-text role="ref"} for more information.

Deprecations (removal in next major release)

• #​10839: Requesting an asynchronous fixture without a [pytest_fixture_setup]{.title-ref} hook that resolves it will now give a DeprecationWarning. This most commonly happens if a sync test requests an async fixture. This should have no effect on a majority of users with async tests or fixtures using async pytest plugins, but may affect non-standard hook setups or autouse=True. For guidance on how to work around this warning see sync-test-async-fixture{.interpreted-text role="ref"}.

New features

• #​11538: Added pytest.RaisesGroup{.interpreted-text role="class"} as an equivalent to pytest.raises{.interpreted-text role="func"} for expecting ExceptionGroup{.interpreted-text role="exc"}. Also adds pytest.RaisesExc{.interpreted-text role="class"} which is now the logic behind pytest.raises{.interpreted-text role="func"} and used as parameter to pytest.RaisesGroup{.interpreted-text role="class"}. RaisesGroup includes the ability to specify multiple different expected exceptions, the structure of nested exception groups, and flags for emulating except* <except_star>{.interpreted-text role="ref"}. See assert-matching-exception-groups{.interpreted-text role="ref"} and docstrings for more information.

• #​12081: Added capteesys{.interpreted-text role="fixture"} to capture AND pass output to next handler set by --capture=.

• #​12504: pytest.mark.xfail{.interpreted-text role="func"} now accepts pytest.RaisesGroup{.interpreted-text role="class"} for the raises parameter when you expect an exception group. You can also pass a pytest.RaisesExc{.interpreted-text role="class"} if you e.g. want to make use of the check parameter.

• #​12713: New [--force-short-summary]{.title-ref} option to force condensed summary output regardless of verbosity level.

  This lets users still see condensed summary output of failures for quick reference in log files from job outputs, being especially useful if non-condensed output is very verbose.

• #​12749: pytest traditionally collects classes/functions in the test module namespace even if they are imported from another file.

  For example:

contents of src/domain.py

class Testament: ...

contents of tests/test_testament.py

from domain import Testament

def test_testament(): ...
```

In this scenario with the default options, pytest will collect the class [Testament]{.title-ref} from [tests/test_testament.py]{.title-ref} because it starts with [Test]{.title-ref}, even though in this case it is a production class being imported in the test module namespace.

This behavior can now be prevented by setting the new `collect_imported_tests`{.interpreted-text role="confval"} configuration option to `false`, which will make pytest collect classes/functions from test files **only** if they are defined in that file.

\-- by `FreerGit`{.interpreted-text role="user"}

• #​12765: Thresholds to trigger snippet truncation can now be set with truncation_limit_lines{.interpreted-text role="confval"} and truncation_limit_chars{.interpreted-text role="confval"}.

  See `tru

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.