fix(deps): update python (non-major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aiosignal	==1.3.2 -> ==1.4.0
certifi	==2025.1.31 -> ==2025.8.3
charset-normalizer (changelog)	==3.4.1 -> ==3.4.3
click (changelog)	==8.1.8 -> ==8.2.1
coverage	7.7.1 -> 7.10.6
exceptiongroup (changelog)	==1.2.2 -> ==1.3.0
frozenlist	==1.5.0 -> ==1.7.0
gitpython	3.1.44 -> 3.1.45
gitpython	==3.1.44 -> ==3.1.45
google-auth	==2.38.0 -> ==2.40.3
kopf	1.37.5 -> 1.38.0
kopf	==1.37.5 -> ==1.38.0
multidict	==6.2.0 -> ==6.6.4
mypy (changelog)	1.15.0 -> 1.18.1
oauthlib	==3.2.2 -> ==3.3.1
propcache	==0.3.0 -> ==0.3.2
pyasn1-modules (changelog)	==0.4.1 -> ==0.4.2
pylint (changelog)	3.3.6 -> 3.3.8
pytest (changelog)	8.3.5 -> 8.4.2
python-gnupg	0.5.4 -> 0.5.5
python-gnupg	==0.5.4 -> ==0.5.5
rsa	==4.9 -> ==4.9.1
typing-extensions (changelog)	==4.12.2 -> ==4.15.0
yarl	==1.18.3 -> ==1.20.1

---

Release Notes

aio-libs/aiosignal (aiosignal)

v1.4.0

Compare Source

==================

Features

• Added decorator functionality to Signal as a convenient way to add a callback -- by @Vizonex.
  #&#8203;699 <https://github.com/aio-libs/aiosignal/pulls/699>_

• Improved type safety by allowing callback parameters to be type checked (typing-extensions is now required for Python <3.13).
  Parameters for a Signal callback should now be defined like Signal[int, str] -- by @​Vizonex and @​Dreamsorcerer.
  #&#8203;699 <https://github.com/aio-libs/aiosignal/pulls/699>, #&#8203;710 <https://github.com/aio-libs/aiosignal/pulls/710>

Misc

• Removed the sphinxcontrib-asyncio documentation dependency.
  #&#8203;528 <https://github.com/aio-libs/aiosignal/pull/528>_

---

certifi/python-certifi (certifi)

v2025.8.3

Compare Source

v2025.7.14

Compare Source

v2025.7.9

Compare Source

v2025.6.15

Compare Source

v2025.4.26

Compare Source

jawah/charset_normalizer (charset-normalizer)

v3.4.3

Compare Source

Changed

• mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#​595) (#​583)
• automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#​391)

Added

• Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
• Support for Python 3.14

Fixed

• sdist archive contained useless directories.
• automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#​633)

Misc

• SBOM are automatically published to the relevant GitHub release to comply with regulatory changes.
  Each published wheel comes with its SBOM. We choose CycloneDX as the format.
• Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

v3.4.2

Compare Source

Fixed

• Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#​591)
• Improved the overall reliability of the detector with CJK Ideographs. (#​605) (#​587)

Changed

• Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

pallets/click (click)

v8.2.1

Compare Source

Released 2025-05-20

• Fix flag value handling for flag options with a provided type. :issue:2894
  :issue:2897 :pr:2930
• Fix shell completion for nested groups. :issue:2906 :pr:2907
• Flush sys.stderr at the end of CliRunner.invoke. :issue:2682
• Fix EOF handling for stdin input in CliRunner. :issue:2787

v8.2.0

Compare Source

Released 2025-05-10

• Drop support for Python 3.7, 3.8, and 3.9. :pr:2588 :pr:2893

• Use modern packaging metadata with pyproject.toml instead of setup.cfg.
  :pr:2438

• Use flit_core instead of setuptools as build backend. :pr:2543

• Deprecate the __version__ attribute. Use feature detection, or
  importlib.metadata.version("click"), instead. :issue:2598

• BaseCommand is deprecated. Command is the base class for all
  commands. :issue:2589

• MultiCommand is deprecated. Group is the base class for all group
  commands. :issue:2590

• The current parser and related classes and methods, are deprecated.
  :issue:2205

  • OptionParser and the parser module, which is a modified copy of
    optparse in the standard library.
  • Context.protected_args is unneeded. Context.args contains any
    remaining arguments while parsing.
  • Parameter.add_to_parser (on both Argument and Option) is
    unneeded. Parsing works directly without building a separate parser.
  • split_arg_string is moved from parser to shell_completion.

• Enable deferred evaluation of annotations with
  from __future__ import annotations. :pr:2270

• When generating a command's name from a decorated function's name, the
  suffixes _command, _cmd, _group, and _grp are removed.
  :issue:2322

• Show the types.ParamType.name for types.Choice options within
  --help message if show_choices=False is specified.
  :issue:2356

• Do not display default values in prompts when Option.show_default is
  False. :pr:2509

• Add get_help_extra method on Option to fetch the generated extra
  items used in get_help_record to render help text. :issue:2516
  :pr:2517

• Keep stdout and stderr streams independent in CliRunner. Always
  collect stderr output and never raise an exception. Add a new
  output stream to simulate what the user sees in its terminal. Removes
  the mix_stderr parameter in CliRunner. :issue:2522 :pr:2523

• Option.show_envvar now also shows environment variable in error messages.
  :issue:2695 :pr:2696

• Context.close will be called on exit. This results in all
  Context.call_on_close callbacks and context managers added via
  Context.with_resource to be closed on exit as well. :pr:2680

• Add ProgressBar(hidden: bool) to allow hiding the progressbar. :issue:2609

• A UserWarning will be shown when multiple parameters attempt to use the
  same name. :issue:2396

• When using Option.envvar with Option.flag_value, the flag_value
  will always be used instead of the value of the environment variable.
  :issue:2746 :pr:2788

• Add Choice.get_invalid_choice_message method for customizing the
  invalid choice message. :issue:2621 :pr:2622

• If help is shown because no_args_is_help is enabled (defaults to True
  for groups, False for commands), the exit code is 2 instead of 0.
  :issue:1489 :pr:1489

• Contexts created during shell completion are closed properly, fixing
  a ResourceWarning when using click.File. :issue:2644 :pr:2800
  :pr:2767

• click.edit(filename) now supports passing an iterable of filenames in
  case the editor supports editing multiple files at once. Its return type
  is now also typed: AnyStr if text is passed, otherwise None.
  :issue:2067 :pr:2068

• Specialized typing of progressbar(length=...) as ProgressBar[int].
  :pr:2630

• Improve echo_via_pager behaviour in face of errors.
  :issue:2674

  • Terminate the pager in case a generator passed to echo_via_pager
    raises an exception.
  • Ensure to always close the pipe to the pager process and wait for it
    to terminate.
  • echo_via_pager will not ignore KeyboardInterrupt anymore. This
    allows the user to search for future output of the generator when
    using less and then aborting the program using ctrl-c.

• deprecated: bool | str can now be used on options and arguments. This
  previously was only available for Command. The message can now also be
  customised by using a str instead of a bool. :issue:2263 :pr:2271

  • Command.deprecated formatting in --help changed from
    (Deprecated) help to help (DEPRECATED).
  • Parameters cannot be required nor prompted or an error is raised.
  • A warning will be printed when something deprecated is used.

• Add a catch_exceptions parameter to CliRunner. If
  catch_exceptions is not passed to CliRunner.invoke, the value
  from CliRunner is used. :issue:2817 :pr:2818

• Option.flag_value will no longer have a default value set based on
  Option.default if Option.is_flag is False. This results in
  Option.default not needing to implement __bool__. :pr:2829

• Incorrect click.edit typing has been corrected. :pr:2804

• Choice is now generic and supports any iterable value.
  This allows you to use enums and other non-str values. :pr:2796
  :issue:605

• Fix setup of help option's defaults when using a custom class on its
  decorator. Removes HelpOption. :issue:2832 :pr:2840

nedbat/coveragepy (coverage)

v7.10.6

Compare Source

• Fix: source directories were not properly communicated to subprocesses
  that ran in different directories, as reported in issue 1499_. This is now
  fixed.

• Performance: Alex Gaynor continues fine-tuning <pull 2038_>_ the speed of
  combination, especially with many contexts.

.. _issue 1499: #​1499
.. _pull 2038: #​2038

.. _changes_7-10-5:

v7.10.5

Compare Source

• Big speed improvements for coverage combine: it's now about twice as
  fast! Huge thanks to Alex Gaynor for pull requests 2032 <pull 2032_>,
  2033 <pull 2033_>, and 2034 <pull 2034_>_.

.. _pull 2032: #​2032
.. _pull 2033: #​2033
.. _pull 2034: #​2034

.. _changes_7-10-4:

v7.10.4

Compare Source

• Added patch = fork for times when the built-in forking support is
  insufficient.

• Fix: patch = execv also inherits the entire coverage configuration now.

.. _changes_7-10-3:

v7.10.3

Compare Source

• Fixes for patch = subprocess:

  • If subprocesses spawned yet more subprocesses simultaneously, some coverage
    could be missed. This is now fixed, closing issue 2024_.

  • If subprocesses were created in other directories, their data files were
    stranded there and not combined into the totals, as described in issue 2025_. This is now fixed.

  • On Windows (or maybe only some Windows?) the patch would fail with a
    ModuleNotFound error trying to import coverage. This is now fixed,
    closing issue 2022_.

  • Originally only options set in the coverage configuration file would apply
    to subprocesses. Options set on the coverage run command line (such as
    --branch) wouldn't be communicated to the subprocesses. This could
    lead to combining failures, as described in issue 2021_. Now the entire
    configuration is used in subprocesses, regardless of its origin.

  • Added debug=patch to help diagnose problems.

• Fix: really close all SQLite databases, even in-memory ones. Closes issue 2017_.

.. _issue 2017: #​2017
.. _issue 2021: #​2021
.. _issue 2022: #​2022
.. _issue 2024: #​2024
.. _issue 2025: #​2025

.. _changes_7-10-2:

v7.10.2

Compare Source

• Fix: some code with NOP bytecodes could report missing branches that are
  actually executed. This is now fixed, closing issue 1999_. Python 3.9
  still shows the problem.

.. _issue 1999: #​1999

.. _changes_7-10-1:

v7.10.1

Compare Source

• Fix: the exclusion for if TYPE_CHECKING: was wrong: it marked the branch
  as partial, but it should have been a line exclusion so the entire clause
  would be excluded. Improves issue 831_.

• Fix: changed where .pth files are written for patch = subprocess, closing
  issue 2006_.

.. _issue 2006: #​2006

.. _changes_7-10-0:

v7.10.0

Compare Source

• A new configuration option: ":ref:config_run_patch" specifies named patches
  to work around some limitations in coverage measurement. These patches are
  available:

  • patch = _exit lets coverage save its data even when :func:os._exit() <python:os._exit> is used to abruptly end the process. This closes
    long-standing issue 310_ as well as its duplicates: issue 312, issue 1673, issue 1845, and issue 1941.

  • patch = subprocess measures coverage in Python subprocesses created
    with :mod:subprocess, :func:os.system, or one of the :func:execv <python:os.execl> or :func:spawnv <python:os.spawnl> family of
    functions. Closes old issue 367, its duplicate issue 378 and old
    issue 689_.

  • patch = execv adjusts the :func:execv <python:os.execl> family of
    functions to save coverage data before ending the current program and
    starting the next. Not available on Windows. Closes issue 43_ after 15
    years!

• The HTML report now dimly colors subsequent lines in multi-line statements.
  They used to have no color. This gives a better indication of the amount of
  code missing in the report. Closes issue 1308_.

• Two new exclusion patterns are part of the defaults: ... is automatically
  excluded as a line and if TYPE_CHECKING: is excluded as a branch. Closes
  issue 831_.

• A new command-line option: --save-signal=USR1 specifies a signal that
  coverage.py will listen for. When the signal is sent, the coverage data will
  be saved. This makes it possible to save data from within long-running
  processes. Thanks, Arkady Gilinsky <pull 1998_>_.

• A new configuration option: ":ref:config_report_partial_also" is a list of
  regexes to add as pragmas for partial branches. This parallels the
  ":ref:config_report_exclude_also" setting for adding line exclusion
  patterns.

• A few file path configuration settings didn't allow for tilde expansion:
  :ref:config_json_output, :ref:config_lcov_output and
  :ref:config_run_debug_file. This is now fixed.

• Wheels are included for 3.14 now that 3.14 rc1 is available.

• We no longer ship a PyPy-specific wheel. PyPy will install the pure-Python
  wheel. Closes issue 2001_.

• In the very unusual situation of not having a current frame, coverage no
  longer crashes when using the sysmon core, fixing issue 2005_.

.. _issue 43: #​43
.. _issue 310: #​310
.. _issue 312: #​312
.. _issue 367: #​367
.. _issue 378: #​378
.. _issue 689: #​689
.. _issue 831: #​831
.. _issue 1308: #​1308
.. _issue 1673: #​1673
.. _issue 1845: #​1845
.. _issue 1941: #​1941
.. _pull 1998: #​1998
.. _issue 2001: #​2001
.. _issue 2005: #​2005

.. _changes_7-9-2:

v7.9.2

Compare Source

• Fix: complex conditionals within a line might cause a KeyError when using
  sys.monitoring, as reported in issue 1991_. This is now fixed.

• Fix: we can now measure coverage for code in Python archive (.par) files.
  Thanks, Itamer Oren <pull 1984_>_.

.. _pull 1984: #​1984
.. _issue 1991: #​1991

.. _changes_7-9-1:

v7.9.1

Compare Source

• The "no-ctracer" warning is not issued for Python pre-release versions.
  Coverage doesn't ship compiled wheels for those versions, so this was far too
  noisy.

• On Python 3.14+, the "sysmon" core is now the default if it's supported for
  your configuration. Plugins and dynamic contexts are still not supported
  with it.

.. _changes_7-9-0:

v7.9.0

Compare Source

• Added a [run] core configuration setting to specify the measurement core,
  which was previously only available through the COVERAGE_CORE environment
  variable. Finishes issue 1746_.

• Fixed incorrect rendering of f-strings with doubled braces, closing issue 1980_.

• If the C tracer core can't be imported, a warning ("no-ctracer") is issued
  with the reason.

• The C tracer core extension module now conforms to PEP 489, closing issue 1977. Thanks, Adam Turner <pull 1978_>_.

• Fixed a "ValueError: min() arg is an empty sequence" error caused by strange
  empty modules, found by oss-fuzz_.

.. _issue 1746: #​1746
.. _issue 1977: #​1977
.. _pull 1978: #​1978
.. _issue 1980: #​1980
.. _PEP 489: https://peps.python.org/pep-0489
.. _oss-fuzz: https://google.github.io/oss-fuzz/

.. _changes_7-8-2:

v7.8.2

Compare Source

• Wheels are provided for Windows ARM64 on Python 3.11, 3.12, and 3.13.
  Thanks, Finn Womack <pull 1972_>_.

.. _issue 1971: #​1971
.. _pull 1972: #​1972

.. _changes_7-8-1:

v7.8.1

Compare Source

• A number of EncodingWarnings were fixed that could appear if you've enabled
  PYTHONWARNDEFAULTENCODING, fixing issue 1966. Thanks, Henry Schreiner <pull 1967_>.

• Fixed a race condition when using sys.monitoring with free-threading Python,
  closing issue 1970_.

.. _issue 1966: #​1966
.. _pull 1967: #​1967
.. _issue 1970: #​1970

.. _changes_7-8-0:

v7.8.0

Compare Source

• Added a new source_dirs setting for symmetry with the existing
  source_pkgs setting. It's preferable to the existing source setting,
  because you'll get a clear error when directories don't exist. Fixes issue 1942. Thanks, Jeremy Fleischman <pull 1943_>.

• Fix: the PYTHONSAFEPATH environment variable new in Python 3.11 is properly
  supported, closing issue 1696. Thanks, Philipp A. <pull 1700_>. This
  works properly except for a detail when using the coverage command on
  Windows. There you can use python -m coverage instead if you need exact
  emulation.

.. _issue 1696: #​1696
.. _pull 1700: #​1700
.. _issue 1942: #​1942
.. _pull 1943: #​1943

.. _changes_7-7-1:

agronholm/exceptiongroup (exceptiongroup)

v1.3.0

Compare Source

• Added **kwargs to function and method signatures as appropriate to match the signatures in the standard library
• In line with the stdlib typings in typeshed, updated (Base)ExceptionGroup generic types to define defaults for their generic arguments (defaulting to BaseExceptionGroup[BaseException] and ExceptionGroup[Exception]) (PR by @​mikenerone)
• Changed BaseExceptionGroup.__init__() to directly call BaseException.__init__() instead of the superclass __init__() in order to emulate the CPython behavior (broken or not) (PR by @​cfbolz)
• Changed the exceptions attribute to always return the same tuple of exceptions, created from the original exceptions sequence passed to BaseExceptionGroup to match CPython behavior (#​143)

aio-libs/frozenlist (frozenlist)

v1.7.0

Compare Source

======

(2025-06-09)

Features

• Added deepcopy support to FrozenList -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:659.

Packaging updates and notes for downstreams

• Fixed an issue where frozenlist binary wheels would be built with debugging symbols and line tracing enabled, which significantly impacted performance. Line tracing is now disabled by default and can only be enabled explicitly -- by :user:bdraco.

  This change ensures that production builds are optimized for performance. Developers who need line tracing for debugging purposes can still enable it by:

  1. Setting the FROZENLIST_CYTHON_TRACING environment variable
  2. Using the --config-setting=with-cython-tracing=true option with pip

  Related issues and pull requests on GitHub:
  :issue:660.

• Enabled PIP_CONSTRAINT environment variable in the build configuration to ensure the pinned Cython version from requirements/cython.txt is used during wheel builds.

  Related issues and pull requests on GitHub:
  :issue:661.

---

v1.6.2

Compare Source

======

(2025-06-03)

No significant changes.

---

v1.6.1

Compare Source

======

(2025-06-02)

Bug fixes

• Correctly use cimport for including PyBool_FromLong -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:653.

Packaging updates and notes for downstreams

• Exclude _frozenlist.cpp from bdists/wheels -- by :user:musicinmybrain.

  Related issues and pull requests on GitHub:
  :issue:649.

• Updated to use Cython 3.1 universally across the build path -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:654.

---

v1.6.0

Compare Source

======

(2025-04-17)

Bug fixes

• Stopped implicitly allowing the use of Cython pre-release versions when
  building the distribution package -- by :user:ajsanchezsanz and
  :user:markgreene74.

  Related commits on GitHub:
  :commit:41591f2.

Features

• Implemented support for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:618.

• Started building armv7l wheels -- by :user:bdraco.

  Related issues and pull requests on GitHub:
  :issue:642.

Packaging updates and notes for downstreams

• Stopped implicitly allowing the use of Cython pre-release versions when
  building the distribution package -- by :user:ajsanchezsanz and
  :user:markgreene74.

  Related commits on GitHub:
  :commit:41591f2.

• Started building wheels for the free-threaded build of CPython 3.13 -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:618.

• The packaging metadata switched to including an SPDX license identifier introduced in :pep:639 -- by :user:cdce8p.

  Related issues and pull requests on GitHub:
  :issue:639.

Contributor-facing changes

• GitHub Actions CI/CD is now configured to manage caching pip-ecosystem
  dependencies using re-actors/cache-python-deps_ -- an action by
  :user:webknjaz that takes into account ABI stability and the exact
  version of Python runtime.

  .. _re-actors/cache-python-deps:
  https://github.com/marketplace/actions/cache-python-deps

  Related issues and pull requests on GitHub:
  :issue:633.

• Organized dependencies into test and lint dependencies so that no
  unnecessary ones are installed during CI runs -- by :user:lysnikolaou.

  Related issues and pull requests on GitHub:
  :issue:636.

---

gitpython-developers/GitPython (gitpython)

v3.1.45

Compare Source

What's Changed

• Fix various version-related CI breakages by @​EliahKagan in #​1987
• Do some CI cleanup to make reports clearer and future changes easier by @​EliahKagan in #​1989
• Affirm that gitdb and smmap advisories can also be created by @​EliahKagan in #​1991
• Fix links to gitdb and smmap SECURITY.md files by @​EliahKagan in #​1992
• Test Python 3.13 regularly on Ubuntu and macOS on CI by @​EliahKagan in #​1990
• Repo.rev_parse: Handle ^{commit} correctly by @​flichtenheld in #​1996
• Fuzzing: Fix Broken Fuzz Test for Git Submodule Handling by @​DaveLak in #​1997
• Work around Cygwin CI failure #​2004, except for test_installation by @​EliahKagan in #​2007
• Mark test_installation xfail on Cygwin CI by @​EliahKagan in #​2009
• IndexFile._to_relative_path - fix case where absolute path gets stripped of trailing slash by @​kamilkozik7 in #​2012
• Use WSL1 on CI by @​EliahKagan in #​2010
• Test free-threaded Python (but only on Linux) by @​EliahKagan in #​2011
• Use property decorator to support typing by @​Andrej730 in #​2015
• Fix some incorrect sphinx markups in the docstrings by @​koyuki7w in #​2018
• replace quansight-labs/setup-python with actions/setup-python by @​ngoldbaum in #​2019
• remove type assertions from util.py by @​gcmarx in #​2028
• correctly handle uname-cmd that doesn't point to an executable file by @​gcmarx in #​2026
• Use newer ruff style by @​EliahKagan in #​2031
• Have CodeQL scan GitHub Actions workflows as well as Python code by @​EliahKagan in #​2032
• Specify explicit contents: read workflow permissions by @​EliahKagan in #​2033
• Fix GitConfigParser not removing quotes from values by @​betaboon in #​2035
• Preserve quoted leading and trailing single-line config var whitespace by @​EliahKagan in #​2036
• Refactor Git.{AutoInterrupt,CatFileContentStream} nesting by @​EliahKagan in #​2037
• Fix Git.{AutoInterrupt,CatFileContentStream} static typing by @​EliahKagan in #​2039
• Fix CI mypy command on free-threaded Python by @​EliahKagan in #​2040
• Split Cygwin CI into non-performance and performance test jobs by @​EliahKagan in #​2042
• Express conditional setuptools requirement statically by @​EliahKagan in #​2043
• Fix ambiguous _safer_popen_windows comment by @​EliahKagan in #​2044
• Clarify USE_SHELL warning helper signature by @​EliahKagan in #​2045
• Test ConfigParser with whitespace outside the value by @​EliahKagan in #​2046
• Remove explicit empty "" handling in ConfigParser by @​EliahKagan in #​2047
• Various style improvements by @​EliahKagan in #​2049
• Don't remove quotes if \ or " are present inside by @​EliahKagan in #​2048
• fix updating submodules with relative urls by @​david0 in #​2051
• Run cat_file.py fixture without site customizations by @​EliahKagan in #​2052
• Fix Cygwin installation on CI for pip by @​EliahKagan in #​2053
• Fail test_installation on warnings, and remove deprecated license classifier by @​EliahKagan in #​2054
• Add clearer error version for unsupported index error by @​tombedor in #​2055
• Fix name collision by @​NMertsch in #​2060
• Allow relative path url in submodules for submodule_update by @​t-webber in #​2062

New Contributors

• @​flichtenheld made their first contribution in #​1996
• @​kamilkozik7 made their first contribution in #​2012
• @​koyuki7w made their first contribution in #​2018
• @​ngoldbaum made their first contribution in #​2019
• @​gcmarx made their first contribution in #​2028
• @​betaboon made their first contribution in #​2035
• @​david0 made their first contribution in #​2051
• @​tombedor made their first contribution in #​2055
• @​NMertsch made their first contribution in #​2060
• @​t-webber made their first contribution in #​2062

Full Changelog: gitpython-developers/GitPython@3.1.44...3.1.45

googleapis/google-auth-library-python (google-auth)

v2.40.3

Compare Source

Bug Fixes

• Auth fetch token from default endpoint (#​1779) (88891cc)
• Remove unnecessary call to mds service (#​1769) (7c61c7d)
• Retry 504 errors (#​1767) (554f967)

v2.40.2

Compare Source

Bug Fixes

• Remove sync response logs in AuthorizedSession (97ed1c8)
• Update test to consider new error message from cryptography (#​1765) (44e38b6)

v2.40.1

Compare Source

Bug Fixes

• Disable logging response body for async logs (#​1756) (2f0ddfe)

v2.40.0

Compare Source

Features

• Add request response logging to auth (#​1678) (77ad53e)

Bug Fixes

• Correct webauthn JSON parsing to be compliant with standard. (#​1658) (0c5ef36)

v2.39.0

Compare Source

Features

• Adds GA support for X.509 workload identity federation (#​1695) (7495960)

Bug Fixes

• Add impersonated SA via local ADC support for fetch_id_token (#​1740) (f249764)
• Add missing packaging dependency for feature requiring urllib3 (#​1732) (221f4a8)
• Add request timeout for MDS requests (#​1699) (9f7d3fa)
• Explicitly declare support for Python 3.13 (#​1741) (6fd04d5)

nolar/kopf (kopf)

v1.38.0

Compare Source

What's Changed

• Deprecate Python 3.8 & upgrade to Python 3.13 in CI by @​nolar in #​1164
• Upgrade MyPy to 1.15.0 by @​nolar in #​1163
• Convert to Python 3.9: all the basic syntax as per pyuprade by @​nolar in #​1165
• Fix the test failures in Python 3.13 due to not accepting name=… in tests by @​nolar in #​1173
• Work around changes in Click 8.2.0 by @​nolar in #​1174

Bugfixes

• Re-authenticate if the session is closed by a concurrent request by @​nolar in #​1031

Full Changelog: nolar/kopf@1.37.5...1.38.0

aio-libs/multidict (multidict)

v6.6.4

Compare Source

=====

(2025-08-11)

Bug fixes

• Fixed MutliDict & CIMultiDict memory leak when deleting values or clearing them
  -- by :user:Vizonex

  Related issues and pull requests on GitHub:
  :issue:1233.

Contributor-facing changes

• The type preciseness coverage report generated by MyPy <https://mypy-lang.org>__ is now uploaded to Coveralls <https://coveralls.io/github/aio-libs/multidict>__ and
  will not be included in the Codecov views <https://app.codecov.io/gh/aio-libs/multidict>__ going forward
  -- by :user:webknjaz.

  Related issues and pull requests on GitHub:
  :issue:1122, :issue:1231.

• Added memory leak test for popping or deleting attributes from a multidict to prevent future issues or bogus claims.
  -- by :user:Vizonex

  Related issues and pull requests on GitHub:
  :issue:1233.

---

v6.6.3

[Compare Source](https://redirect.github.com/aio-libs/multidict/c

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.