Skip to content

chore(deps): bump the weekly-batch group across 1 directory with 35 updates - #238

Open
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/weekly-batch-54d3cb6ffa
Open

chore(deps): bump the weekly-batch group across 1 directory with 35 updates#238
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/weekly-batch-54d3cb6ffa

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 28, 2026

Copy link
Copy Markdown
Contributor

Bumps the weekly-batch group with 35 updates in the / directory:

Package From To
boto3 1.43.97 1.43.118
werkzeug 3.1.8 3.1.9
python-dotenv 1.2.3 1.2.4
roc-validator 0.11.4 0.13.0
amqp 5.3.1 5.4.1
billiard 4.3.0 4.3.1
botocore 1.43.97 1.43.118
cattrs 26.2.0 26.2.1
certifi 2026.7.22 2026.10.23
charset-normalizer 3.5.1 3.5.2
click-repl 0.4.0 0.4.1
dnspython 2.8.0 2.9.0
enum-tools 0.12.0 0.13.0
importlib-metadata 9.0.1 10.1.0
markupsafe 3.0.3 3.0.4
platformdirs 4.11.10 4.13.5
pydantic 2.13.5 2.14.1
pydantic-core 2.46.5 2.50.1
pyparsing 3.3.2 3.3.3
python-dateutil 2.9.0.post0 3.0.0
rich 13.9.4 15.0.0
s3transfer 0.19.2 0.19.3
tzdata 2026.4 2026.5
tzlocal 5.4.4 5.4.5
url-normalize 3.0.0 3.0.1
wcwidth 0.8.4 0.9.4
zipp 4.1.0 4.1.2
cryptography 50.0.1 50.0.2
iniconfig 2.3.0 2.3.1
moto 5.2.3 5.2.4
pip-tools 7.6.1 7.6.2
pluggy 1.6.0 1.7.0
pycparser 3.0 3.12
pytest-mock 3.15.1 3.17.0
ruff 0.16.8 0.17.2

Updates boto3 from 1.43.97 to 1.43.118

Commits

Updates werkzeug from 3.1.8 to 3.1.9

Release notes

Sourced from werkzeug's releases.

3.1.9

This is the Werkzeug 3.1.9 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Werkzeug/3.1.9/ Changes: https://werkzeug.palletsprojects.com/page/changes/#version-3-1-9 Milestone: https://github.com/pallets/werkzeug/milestone/46?closed=1

  • safe_join on Windows does not allow special devices names with empty ADS markers on NTFS. GHSA-g6x2-hccm-hh4m
  • ProfilerMiddleware uses profiling.tracing on Python 3.15. #3207
  • uri_to_iri and iri_to_uri preserve empty username, password, and port 0. #3189
  • Improve performance of parse_options_header. #3231
  • Improve performance of parse_etags. #3231
  • Improve performance of parse_cookie. #3231
  • get_host also checks that the port is in the valid range. #3236
  • The int URL converter returns a 404 instead of 500 error when the value is longer than sys.get_int_max_str_digits(). #3237
  • Improve debugger PIN generation from cgroup data inside Podman. #3245
  • Authorization parsing basic auth disallows non-base64 characters. #3248
  • application/x-www-form-urlencoded form data is no longer limited to max_form_memory_size, only max_content_length. #3251
  • LimitedStream.readinto does not resize the buffer when it reads less than the remaining size. #3253
  • Rules with 10 or more converters in a single part assign matched values correctly. #3254
  • The invalid Range suffix length -0 is no longer accepted. #3255
Changelog

Sourced from werkzeug's changelog.

Version 3.1.9

Released 2026-09-27

  • safe_join on Windows does not allow special devices names with empty ADS markers on NTFS. :ghsa:g6x2-hccm-hh4m
  • ProfilerMiddleware uses profiling.tracing on Python 3.15. :issue:3207
  • uri_to_iri and iri_to_uri preserve empty username, password, and port 0. :issue:3189
  • Improve performance of parse_options_header. :pr:3231
  • Improve performance of parse_etags. :pr:3231
  • Improve performance of parse_cookie. :pr:3231
  • get_host also checks that the port is in the valid range. :pr:3236
  • The int URL converter returns a 404 instead of 500 error when the value is longer than sys.get_int_max_str_digits(). :issue:3237
  • Improve debugger PIN generation from cgroup data inside Podman. :issue:3245
  • Authorization parsing basic auth disallows non-base64 characters. :pr:3248
  • application/x-www-form-urlencoded form data is no longer limited to max_form_memory_size, only max_content_length. :pr:3251
  • LimitedStream.readinto does not resize the buffer when it reads less than the remaining size. :pr:3253
  • Rules with 10 or more converters in a single part assign matched values correctly. :pr:3254
  • The invalid Range suffix length -0 is no longer accepted. :pr:3255
Commits

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698
Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698
Commits
  • a565c2c Bump version: 1.2.3 → 1.2.4
  • 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
  • f215c02 fix: dotenv get exits 0 for empty string values (#700)
  • 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
  • e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
  • a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
  • f5485a6 fix: parse empty unquoted value with inline comment as empty string
  • See full diff in compare view

Updates roc-validator from 0.11.4 to 0.13.0

Release notes

Sourced from roc-validator's releases.

0.13.0

What's Changed

New Contributors

Full Changelog: crs4/rocrate-validator@0.12.2...0.13.0

0.12.2

What's Changed

Full Changelog: crs4/rocrate-validator@0.12.1...0.12.2

0.12.1

What's Changed

Full Changelog: crs4/rocrate-validator@0.12.0...0.12.1

0.12.0

What's Changed

Full Changelog: crs4/rocrate-validator@0.11.4...0.12.0

Changelog

Sourced from roc-validator's changelog.

[0.13.0] - 2026-10-21

Full changelog: kikkomep/rocrate-validator@0.12.2...0.13.0

✨ Added

  • Profile detection now explains suggested profiles and lets users confirm them before validation (2b0cbaae).
  • Opt-in extra checks extend validation beyond the standard profile rules (e3ef940b, 8b0d1fcd).
  • Automatic package-type detection and CLI selection distinguish attached and detached crates; reports show the package type and validation scope (bebee42b, 06c29319, 595fcc8e).
  • Dictionary metadata can be validated against files in a local package root (86a84ea5).
  • Reusable validation preparation avoids repeating setup across validation calls (6bd45817).
  • Workflow Run Crate checks require an action using the main entity as its instrument and support additional action types (d88a1ce8, 57a1413f).

🐛 Fixed

  • Reusing prepared profiles across crates preserves absolute IRIs, relative identifiers, URI paths, and SHACL class targets (dc258c3a, 5edb72e4, 230856a1).
  • Package checks handle attached metadata-only inputs and dictionary metadata consistently; reports identify the local package root (858a0d3c, 0c9967c0, 545e7448).
  • Malformed profile hints and invalid JSON produce clearer messages, while unexpected detection errors are no longer hidden (756dbb4e, 7a95271f).
  • Removed duplicate extra-check tables from CLI output (9d7d4b76).
  • Fixed Sphinx crashes when including README sections and improved dark-mode readability (153efa65, f9b8822d).

📚 Documentation

  • Redesigned documentation with the Shibuya theme, clearer navigation, and live preview with

... (truncated)

Commits
  • 8dd0c74 release: 🔖 version 0.13.0
  • 60f8de7 chore(release): 🔖 bump version to 0.13.0
  • 61da28e chore: 🔖 update changelog (v0.13.0)
  • 70a1271 chore(deps): 🔧 update dependencies in poetry.lock (v0.13.0)
  • 4dd9a3b Merge pull request #232 from kikkomep/fix/issue-228-conforms-to-string-profil...
  • 9aba92e Merge pull request #231 from kikkomep/feat/issue-226-diagnostic-checks
  • 5224f5b chore(validation,tests,docs): 🧹 apply lint and terminology fixes
  • 8b0d1fc refactor(validation,tests,docs): 🔎 rename diagnostic checks to extra checks
  • 585fef3 docs(validation): 📝 clarify profile suggestions and JSON syntax errors
  • bb709b9 test(validation): 🧪 cover profile suggestions and invalid JSON
  • Additional commits viewable in compare view

Updates amqp from 5.3.1 to 5.4.1

Release notes

Sourced from amqp's releases.

v5.4.1

What's Changed

New Contributors

Full Changelog: celery/py-amqp@v5.4.0...v5.4.1

v5.4.0

What's Changed

New Contributors

Full Changelog: celery/py-amqp@v5.3.1...v5.4.0

Changelog

Sourced from amqp's changelog.

5.4.1

:release-date: 2026-10-05 :release-by: Asif Saif Uddin (@​auvipy)

  • Fix signedness of byte fields in AMQP tables - #472

.. _version-5.4.0:

5.4.0

:release-date: 2026-09-19 :release-by: Asif Saif Uddin (@​auvipy)

  • Replace deprecated datetime.datetime.utcfromtimestamp (#448)
  • Remove Python 3.8, 3.9 support
  • Update CI workflow to exclude Python 3.9 (#454)
  • Add null check for connection to prevent AttributeError on drain_events (#457)
  • Fix prevent channel revival during intentional close to fix shutdown crash (#458)
  • Add Python 3.14 support
  • Support limiting tls version (#463)
  • Decode AMQP field-table type l as signed 64-bit (#465)
  • Treat basic_publish write timeouts as connection errors (#464)
  • Serialize frame_writer() writes with a lock (#466)
  • Decode AMQP field-table type 's' as signed 16-bit (#469)

.. _version-5.3.1:

Commits
  • b850b07 Bump version: 5.4.0 → 5.4.1
  • 3b401be added changelog for v5.4.1 release
  • d03ced3 Decode AMQP field-table types 'b' and 'B' with the right signedness (#473)
  • c6117db Fix signedness of byte fields in AMQP tables
  • 31b0b58 Bump version: 5.3.1 → 5.4.0
  • de36b55 added changelog for v5.4.0 release
  • f3d82f1 Decode AMQP field-table type 's' as signed 16-bit (#469)
  • c2012cc Drop unused python version check (#468)
  • 9517a4d Update Python version requirements in setup.py (#467)
  • 3082466 Serialize frame_writer() writes with a lock (#466)
  • Additional commits viewable in compare view

Updates billiard from 4.3.0 to 4.3.1

Release notes

Sourced from billiard's releases.

v4.3.1

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.3.0...v4.3.1

Changelog

Sourced from billiard's changelog.

4.3.1 - 2026-10-05

  • Reject bool for Pool numeric args (processes, timeouts, limits) - #460
  • Reject fewer than one pool process - #462
  • Reject a non-positive maxtasksperchild in Pool - #465
  • Refuse to close a Process that is still running -(#467)
  • Raise ValueError when using a closed Queue (#466)
  • Do not report a shutdown SystemExit as the job's result (#464)
Commits
  • 5a4a12d Bump version: 4.3.0 → 4.3.1
  • 158e5b3 added changelog for v4.3.1 release
  • 24af5db Do not report a shutdown SystemExit as the job's result (#464)
  • 5b0531b Raise ValueError when using a closed Queue (#466)
  • e51ef3d Refuse to close a Process that is still running (#467)
  • 941ca3c Reject a non-positive maxtasksperchild in Pool
  • 7fb0abe Reject fewer than one pool process
  • c59f1e5 Update CI runner to Ubuntu 24.04
  • ef3461a Reject bool for Pool numeric args (processes, timeouts, limits)
  • See full diff in compare view

Updates botocore from 1.43.97 to 1.43.118

Commits
  • 444e17a Merge branch 'release-1.43.118'
  • e6a2aa0 Bumping version to 1.43.118
  • f704c6a Update endpoints model
  • f623757 Update to latest models
  • 9313a4d Backfill 1.43.117 changelog entry for CA bundle fix (#3839)
  • ece3056 Merge branch 'release-1.43.117'
  • 9dc596d Merge branch 'release-1.43.117' into develop
  • 5c706c0 Bumping version to 1.43.117
  • 27fc40e Update to latest models
  • 0a6c7b6 Remove Comodo AAA root from vendored cert bundle (#3838)
  • Additional commits viewable in compare view

Updates cattrs from 26.2.0 to 26.2.1

Release notes

Sourced from cattrs's releases.

v26.2.1

What's Changed

  • Fix heterogeneous tuples and NamedTuples with a member type containing a quote in its repr, like tuple[Literal["a"], int], crashing structuring code generation with SyntaxError; the index note is now embedded with repr. (#777)
  • Fix transform_error listing the extra keys of a ForbiddenExtraKeysError in set iteration order, which made the message differ between runs; the keys are now sorted, like the error's own __str__ already sorts them. (#776)

New Contributors

Full Changelog: python-attrs/cattrs@v26.2.0...v26.2.1

Changelog

Sourced from cattrs's changelog.

26.2.1 (2026-09-26)

  • Honor field renaming overrides when selecting literal discriminators for unions, so renamed union members can be structured from their serialized keys. (#778)
  • Fix heterogeneous tuples and NamedTuples with a member type containing a quote in its repr, like tuple[Literal["a"], int], crashing structuring code generation with SyntaxError; the index note is now embedded with repr. (#777)
  • Fix {func}transform_error <cattrs.transform_error> listing the extra keys of a ForbiddenExtraKeysError in set iteration order, which made the message differ between runs; the keys are now sorted, like the error's own __str__ already sorts them. (#776)
Commits
  • 995d66a v26.2.1
  • 5bf7c97 Escape the index note when structuring heterogeneous tuples
  • bc34a46 Sort extra keys when formatting ForbiddenExtraKeysError (#776)
  • See full diff in compare view

Updates certifi from 2026.7.22 to 2026.10.23

Commits

Updates charset-normalizer from 3.5.1 to 3.5.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.2

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Changelog

Sourced from charset-normalizer's changelog.

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Commits
  • 935c29a Release 3.5.2 (#805)
  • 9d3238a test: disable traefik in downstream niquests
  • b4c0368 docs: write changelog entry for 3.5.2
  • 717da31 chore: bump version to 3.5.2
  • 264895d chore: update pypa/cibuildwheel and pypa/gh-action-pypi-publish
  • 41e28b6 chore: raise Cython upper bound to 3.3
  • b130b7d Fix valid UTF-8 Chinese JSON misdetected as PTCP154 (#796)
  • f6afd31 Make the IANA_NO_ALIASES encodings resolvable by name (#800)
  • See full diff in compare view

Updates click-repl from 0.4.0 to 0.4.1

Release notes

Sourced from click-repl's releases.

0.4.1

What's Changed

New Contributors

Full Changelog: click-contrib/click-repl@0.4.0...0.4.1

Changelog

Sourced from click-repl's changelog.

0.4.1

:release-date: 05 Oct, 2026 :release-by: Asif Saif Uddin

  • Guard click-repl import when stdin is unavailable (#140)

.. _version-0.4.0:

Commits

Updates dnspython from 2.8.0 to 2.9.0

Release notes

Sourced from dnspython's releases.

dnspython 2.9.0

This release fixes a potential excessive CPU consumption issue. Thanks to Evgenios Gkritsis, Constantinos Patsakis, and George Stergiopoulos, for discovering and reporting this issue.

See What's New for details.

The minimum supported version of Python is 3.11.

My thanks to the many people who have contributed to this release. Also thanks to my co-maintainers: Nicki Křížek, Petr Špaček, and Brian Wellington.

This release was published to PyPI using Trusted Publishing.

Changelog

Sourced from dnspython's changelog.

2.9.0

  • Decompression chain length is limited to 16. Prior to this change, a maliciously crafted DNS message could cause dns.name.from_wire_parser() to use excessive CPU for DNS name decompression. Applications which processed untrusted DNS wire form messages with dnspython could be degraded or DoS'd by the extra CPU use required.

    Thanks to Evgenios Gkritsis, Constantinos Patsakis, and George Stergiopoulos for finding and reporting this issue.

    See GHSA-45c3-73f7-pv4m

  • Httpx2 has replaced httpx for HTTPS TCP connections.

  • The minimum supported Python version is now 3.11.

  • DNSSEC now supports ML-DSA-44, a post-quantum signature algorithm.

  • The NSEC3 Next Hashed Owner Name in presentation format is now decoded as base32hex (RFC 5155 Section 1.3, RFC 4648 Extended Hex Alphabet). The letters W, X, Y, and Z are not in that alphabet; they used to be accepted and silently decoded to a different owner name, so to_text of the result did not match the input. They are now rejected.

  • The NID and L64 node/locator ids in presentation format are now rejected when a group contains anything other than hex digits. A sign or underscore, which int() silently accepts, produced a record whose text form did not parse back the same way (RFC 6742).

  • Rdata of a known type in the generic \# syntax, such as an NS record in a zone file, no longer fails to parse when it contains a name under the origin. Its names are relativized as in the type's own text form.

  • The SVCB and HTTPS ech parameter value must now be an ECHConfigList with a correct length prefix and at least 4 octets of content (RFC 9848, RFC 9849). The individual ECHConfig structures are not checked.

  • SVCB and HTTPS SvcParamKeys in presentation format, including those listed in mandatory, must now be spelled as RFC 9460 requires: 1-63 lowercase letters, digits, or hyphens. Uppercase keys such as ALPN and keys with underscores such as no_default_alpn are rejected.

  • SVCB and HTTPS presentation format parsing now follows the escaping rules of RFC 9460. SvcParamKeys may not contain escapes (e.g. \097lpn=h2), and in comma-separated values (alpn, docpath) only \, and \\ are valid escapes after character-string decoding (e.g. alpn="h2\\x" is rejected).

... (truncated)

Commits

@dependabot
chore(deps): bump the weekly-batch group across 1 directory with 35 u…
8d18931 
…pdates

Bumps the weekly-batch group with 35 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.97` | `1.43.118` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.8` | `3.1.9` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` |
| [roc-validator](https://github.com/crs4/rocrate-validator) | `0.11.4` | `0.13.0` |
| [amqp](https://github.com/celery/py-amqp) | `5.3.1` | `5.4.1` |
| [billiard](https://github.com/celery/billiard) | `4.3.0` | `4.3.1` |
| [botocore](https://github.com/boto/botocore) | `1.43.97` | `1.43.118` |
| [cattrs](https://github.com/python-attrs/cattrs) | `26.2.0` | `26.2.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.7.22` | `2026.10.23` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.5.1` | `3.5.2` |
| [click-repl](https://github.com/click-contrib/click-repl) | `0.4.0` | `0.4.1` |
| [dnspython](https://github.com/rthalley/dnspython) | `2.8.0` | `2.9.0` |
| [enum-tools](https://github.com/domdfcoding/enum_tools) | `0.12.0` | `0.13.0` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `9.0.1` | `10.1.0` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.3` | `3.0.4` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.11.10` | `4.13.5` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.1` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.5` | `2.50.1` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.3.2` | `3.3.3` |
| [python-dateutil](https://github.com/dateutil/dateutil) | `2.9.0.post0` | `3.0.0` |
| [rich](https://github.com/Textualize/rich) | `13.9.4` | `15.0.0` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.19.2` | `0.19.3` |
| [tzdata](https://github.com/python/tzdata) | `2026.4` | `2026.5` |
| [tzlocal](https://github.com/regebro/tzlocal) | `5.4.4` | `5.4.5` |
| [url-normalize](https://github.com/niksite/url-normalize) | `3.0.0` | `3.0.1` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.8.4` | `0.9.4` |
| [zipp](https://github.com/jaraco/zipp) | `4.1.0` | `4.1.2` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.1` | `50.0.2` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.3.0` | `2.3.1` |
| [moto](https://github.com/getmoto/moto) | `5.2.3` | `5.2.4` |
| [pip-tools](https://github.com/jazzband/pip-tools) | `7.6.1` | `7.6.2` |
| [pluggy](https://github.com/pytest-dev/pluggy) | `1.6.0` | `1.7.0` |
| [pycparser](https://github.com/eliben/pycparser) | `3.0` | `3.12` |
| [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.15.1` | `3.17.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.8` | `0.17.2` |



Updates `boto3` from 1.43.97 to 1.43.118
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.97...1.43.118)

Updates `werkzeug` from 3.1.8 to 3.1.9
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.8...3.1.9)

Updates `python-dotenv` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.3...v1.2.4)

Updates `roc-validator` from 0.11.4 to 0.13.0
- [Release notes](https://github.com/crs4/rocrate-validator/releases)
- [Changelog](https://github.com/crs4/rocrate-validator/blob/develop/CHANGELOG.md)
- [Commits](crs4/rocrate-validator@0.11.4...0.13.0)

Updates `amqp` from 5.3.1 to 5.4.1
- [Release notes](https://github.com/celery/py-amqp/releases)
- [Changelog](https://github.com/celery/py-amqp/blob/main/Changelog)
- [Commits](celery/py-amqp@v5.3.1...v5.4.1)

Updates `billiard` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/celery/billiard/releases)
- [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt)
- [Commits](celery/billiard@v4.3.0...v4.3.1)

Updates `botocore` from 1.43.97 to 1.43.118
- [Commits](boto/botocore@1.43.97...1.43.118)

Updates `cattrs` from 26.2.0 to 26.2.1
- [Release notes](https://github.com/python-attrs/cattrs/releases)
- [Changelog](https://github.com/python-attrs/cattrs/blob/main/HISTORY.md)
- [Commits](python-attrs/cattrs@v26.2.0...v26.2.1)

Updates `certifi` from 2026.7.22 to 2026.10.23
- [Commits](certifi/python-certifi@2026.07.22...2026.10.23)

Updates `charset-normalizer` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.5.1...3.5.2)

Updates `click-repl` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/click-contrib/click-repl/releases)
- [Changelog](https://github.com/click-contrib/click-repl/blob/master/Changelog.rst)
- [Commits](click-contrib/click-repl@0.4.0...0.4.1)

Updates `dnspython` from 2.8.0 to 2.9.0
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/main/doc/whatsnew.rst)
- [Commits](rthalley/dnspython@v2.8.0...v2.9.0)

Updates `enum-tools` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/domdfcoding/enum_tools/releases)
- [Commits](domdfcoding/enum_tools@v0.12.0...v0.13.0)

Updates `importlib-metadata` from 9.0.1 to 10.1.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v9.0.1...v10.1.0)

Updates `markupsafe` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.3...3.0.4)

Updates `platformdirs` from 4.11.10 to 4.13.5
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.11.10...4.13.5)

Updates `pydantic` from 2.13.5 to 2.14.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.5...v2.14.1)

Updates `pydantic-core` from 2.46.5 to 2.50.1
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.46.5...core-v2.50.1)

Updates `pyparsing` from 3.3.2 to 3.3.3
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.3.2...3.3.3)

Updates `python-dateutil` from 2.9.0.post0 to 3.0.0
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@2.9.0.post0...3.0.0)

Updates `rich` from 13.9.4 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](Textualize/rich@v13.9.4...v15.0.0)

Updates `s3transfer` from 0.19.2 to 0.19.3
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.19.2...0.19.3)

Updates `tzdata` from 2026.4 to 2026.5
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2026.4...2026.5)

Updates `tzlocal` from 5.4.4 to 5.4.5
- [Changelog](https://github.com/regebro/tzlocal/blob/master/CHANGES.txt)
- [Commits](regebro/tzlocal@5.4.4...5.4.5)

Updates `url-normalize` from 3.0.0 to 3.0.1
- [Release notes](https://github.com/niksite/url-normalize/releases)
- [Changelog](https://github.com/niksite/url-normalize/blob/master/CHANGELOG.md)
- [Commits](niksite/url-normalize@v3.0.0...v3.0.1)

Updates `wcwidth` from 0.8.4 to 0.9.4
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst)
- [Commits](jquast/wcwidth@0.8.4...0.9.4)

Updates `zipp` from 4.1.0 to 4.1.2
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v4.1.0...v4.1.2)

Updates `cryptography` from 50.0.1 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

Updates `iniconfig` from 2.3.0 to 2.3.1
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.3.0...v2.3.1)

Updates `moto` from 5.2.3 to 5.2.4
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.3...5.2.4)

Updates `pip-tools` from 7.6.1 to 7.6.2
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/pypa/pip-tools/blob/main/CHANGELOG.md)
- [Commits](pypa/pip-tools@v7.6.1...v7.6.2)

Updates `pluggy` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.6.0...1.7.0)

Updates `pycparser` from 3.0 to 3.12
- [Release notes](https://github.com/eliben/pycparser/releases)
- [Commits](eliben/pycparser@release_v3.00...release_v3.12)

Updates `pytest-mock` from 3.15.1 to 3.17.0
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-mock@v3.15.1...v3.17.0)

Updates `ruff` from 0.16.8 to 0.17.2
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.8...0.17.2)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.118
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: werkzeug
  dependency-version: 3.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: roc-validator
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: amqp
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: billiard
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: botocore
  dependency-version: 1.43.118
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cattrs
  dependency-version: 26.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: charset-normalizer
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: click-repl
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: dnspython
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: enum-tools
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: importlib-metadata
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: markupsafe
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: platformdirs
  dependency-version: 4.13.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic-core
  dependency-version: 2.50.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pyparsing
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: python-dateutil
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: s3transfer
  dependency-version: 0.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: tzdata
  dependency-version: '2026.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: tzlocal
  dependency-version: 5.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: url-normalize
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: wcwidth
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: zipp
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: iniconfig
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: moto
  dependency-version: 5.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pip-tools
  dependency-version: 7.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pluggy
  dependency-version: 1.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pycparser
  dependency-version: '3.12'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pytest-mock
  dependency-version: 3.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: ruff
  dependency-version: 0.17.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 28, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants