Bump the all-pip-updates group across 3 directories with 42 updates by dependabot[bot] · Pull Request #69977 · saltstack/salt

dependabot · 2026-08-08T21:11:54Z

Updates the requirements on pip, aiohttp, certifi, cffi, croniter, cryptography, gitpython, jaraco-functools, jaraco-context, jaraco-text, msgpack, multidict, opentelemetry-api, opentelemetry-sdk, opentelemetry-exporter-otlp-proto-http, opentelemetry-exporter-prometheus, xxhash, packaging, psutil, pyasn1, pyopenssl, requests, tornado, truststore, virtualenv, filelock, zipp, setuptools-scm, build, docker, pytest, boto3, pygit2, mercurial, pylint, ansible, python-telegram-bot, botocore, kubernetes, pynacl, vcert and xmldiff to permit the latest version.
Updates pip from 25.2 to 26.2.1

Changelog

Sourced from pip's changelog.

26.2.1 (2026-08-04)

Bug Fixes

Reallow keyring installed in a (non-activated) virtual environment to be be used via the import provider method while installing build dependencies. ([#14227](https://github.com/pypa/pip/issues/14227) <https://github.com/pypa/pip/issues/14227>_)

26.2 (2026-07-29)

Deprecations and Removals

Newly published packages will no longer be immediately visible to pip if the index uses caching. To install a newly published package, use --refresh-package. ([#13680](https://github.com/pypa/pip/issues/13680) <https://github.com/pypa/pip/issues/13680>_)

Drop support for detecting legacy, non-:pep:405, virtualenv (< 20) environments. ([#14062](https://github.com/pypa/pip/issues/14062) <https://github.com/pypa/pip/issues/14062>_)

Constraints files, including PIP_CONSTRAINT, no longer affect isolated build environments. Use --build-constraint or the PIP_BUILD_CONSTRAINT environment variable to constrain build dependencies instead.

The --use-feature=build-constraint flag is now always enabled and has no effect. ([#14094](https://github.com/pypa/pip/issues/14094) <https://github.com/pypa/pip/issues/14094>_)

Features

Declare support for Python 3.15 ([#14208](https://github.com/pypa/pip/issues/14208) <https://github.com/pypa/pip/issues/14208>_)

Support self-referential extras officially. pip has supported this by accident since version 21.2. ([#11296](https://github.com/pypa/pip/issues/11296) <https://github.com/pypa/pip/issues/11296>_)

Add --only-deps flag to instruct pip to select only the dependencies of supplied packages. It cannot be used with --no-deps, -r, --group, or --requirements-from-script. ([#11440](https://github.com/pypa/pip/issues/11440) <https://github.com/pypa/pip/issues/11440>_)

Cache simple responses in accordance to their Cache-Control header instead of always revalidating on every request. To refresh cached package index responses and ensure newly published packages are found, use --refresh-package <package>. ([#13680](https://github.com/pypa/pip/issues/13680) <https://github.com/pypa/pip/issues/13680>_)

Add --no-require-hashes to disable automatic enablement of --require-hashes when encountering a requirement with hashes. ([#14169](https://github.com/pypa/pip/issues/14169) <https://github.com/pypa/pip/issues/14169>_)

Honor --only-final when sourcing requirements with -r pylock.toml. ([#13950](https://github.com/pypa/pip/issues/13950) <https://github.com/pypa/pip/issues/13950>_)

Add support for pylock.toml upload-time field, so --uploaded-prior-to works with -r pylock.toml. ([#14168](https://github.com/pypa/pip/issues/14168) <https://github.com/pypa/pip/issues/14168>_)

Better error messages in case of conflicts with requirements from -r pylock.toml. ([#13963](https://github.com/pypa/pip/issues/13963) <https://github.com/pypa/pip/issues/13963>_)

Add experimental support for isolating build subprocesses by creating standard virtual environments. This will fix most (if not all) subtle isolation issues that can lead to broken builds exclusive to pip. The feature can be enabled via --use-feature=venv-isolation and will be enabled by default in a future release.

Note that the feature has limited compatibility with --use-feature=inprocess-build-deps.

... (truncated)

Commits

634a6ec Bump for release
ae2eb4f Revert build dependency installer isolation for legacy build environment (#14...
6236392 Merge pull request #14213 from pypa/release/26.2
da4b2cc Bump for development
4b6ae5c Bump for release
50b6d3c Update AUTHORS.txt
dbddfbd Tweak news entries for pip 26.2 (#14212)
6576b75 Merge pull request #14165 from sbidoul/refactor-pylock-hanling-sbi
0090e00 Address a variety of typos detected in code review
e12ddd9 Add support for --uploaded-prior-to with -r pylock.toml
Additional commits viewable in compare view

Updates aiohttp to 3.14.3

Changelog

Sourced from aiohttp's changelog.

3.14.3 (2026-07-22)

Bug fixes

Fixed the client dropping only the first Authorization, Cookie and Proxy-Authorization header when a redirect crossed an origin -- by :user:arshsmith1.

Related issues and pull requests on GitHub: :issue:13180.

Fixed error message construction in the C HTTP parser -- by :user:bdraco.

Related issues and pull requests on GitHub: :issue:13222.

3.14.2 (2026-07-20)

Bug fixes

Fixed :py:attr:~aiohttp.web.StreamResponse.last_modified rounding a :class:datetime.datetime with a fractional second down.

Related issues and pull requests on GitHub: :issue:5303.

Fixed resolving localhost on Windows to fall back without AI_ADDRCONFIG when the first lookup fails, so localhost still works without an active network.

Related issues and pull requests on GitHub: :issue:5357.

... (truncated)

Commits

5e392ce Release v3.14.3 (#13225)
49f65d5 [PR #13222/f4866933 backport][3.14] Build C parser error message from bounded...
240099e [PR #13180/ee53d655 backport][3.14] drop every copy of credential headers on ...
d93f30a Bump version (#13202)
c1b9212 Release v3.14.2 (#13201)
380d4b5 [PR #13054/ed8b040c backport][3.14] escape backslashes in digest auth quoted-...
e1e1bee Make llhttp method array size dynamic (#13174) (#13196)
aa4cf29 [PR #13170/2b906869 backport][3.14] Fix StreamResponse.last_modified rounding...
71b57b4 [PR #13172/a57747ed backport][3.14] Fix C parser folding fragment into query_...
64a03fb [PR #13169/1adc0cd7 backport][3.14] Upgrade http:// to https:// in README.rst...
Additional commits viewable in compare view

Updates certifi to 2026.7.22

Commits

f4bc676 2026.07.22 (#428)
4c91f9c Bump actions/setup-python from 6.3.0 to 7.0.0 (#427)
01a66c5 Bump actions/checkout from 7.0.0 to 7.0.1 (#426)
eb355f4 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#425)
474e6fc Include tests in the source distribution (#424)
a31ef39 Bump actions/setup-python from 6.2.0 to 6.3.0 (#420)
98eb2c7 Bump actions/checkout from 6.0.3 to 7.0.0 (#419)
d0ac52f 2026.06.17 (#418)
d46de62 Bump actions/checkout from 6.0.2 to 6.0.3 (#417)
6c183ec fix: update Requests docs link to canonical URL (#415)
Additional commits viewable in compare view

Updates cffi to 2.1.1

Release notes

Sourced from cffi's releases.

v2.1.1

What's Changed

Minimize internal Python API usage for interpreter and thread state sampling where possible. Avoids breaking ABI change in Python >= 3.15.0b4 (python-cffi/cffi#269).

Full Changelog: python-cffi/cffi@v2.1.0...v2.1.1

Commits

fd33e77 New release 2.1.1
56a7876 Use PyGILState_Ensure to avoid accessing CPython internals (#269) (#270)
d9f6f70 New release 2.1.0
02a7b0e Misc pre-2.1 release/packaging cleanup (#253)
1362e5d Move cffi-gen-src release note to 2.1.0 notes
a797055 Make error message when embedding version test fails more friendly
f1f40a8 Update changelog
dc62c93 Delete missed cp39 Windows builds
a341180 Update version numbers to prepare for v2.1 release
9f04d85 Mark test using inet_ntoa as thread-unsafe
Additional commits viewable in compare view

Updates croniter to 6.2.4

Release notes

Sourced from croniter's releases.

6.2.4

croniter 6.2.4

Bugfixes

Fix expand_from_start_time day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (isoweekday() % 7 instead of weekday() + 1). (#239, thanks @alhudz)

Packaging

Bump pinned GitHub Actions via dependabot. (#238, #240)

Install: pip install croniter==6.2.4 · PyPI

Changelog

Sourced from croniter's changelog.

6.2.4 (2026-07-10)

Bugfixes

- Fix ``expand_from_start_time`` day-of-week low bound so Sunday wraps correctly for stepped day-of-week ranges (``isoweekday() % 7`` instead of ``weekday() + 1``). [44e3090, [#239](https://github.com/pallets-eco/croniter/issues/239), @alhudz]
Packaging

Bump pinned GitHub Actions via dependabot. [fd13d2e, #240; 5cd2e46, #238]

6.2.3 (2026-07-02)

Features and Improvements

- Fix quadratic expansion of comma-separated range lists for a large speed-up on expressions with many ranges. [1d79fc6, [#231](https://github.com/pallets-eco/croniter/issues/231), @alhudz]
Bugfixes
- Reject a zero step (e.g. ``5-5/0``) in equal and reversed cron ranges instead of silently accepting it. [ab27767, [#232](https://github.com/pallets-eco/croniter/issues/232), @alhudz]
- Fix ``expand_from_start_time`` month low-bound off-by-one so stepped month ranges start on the correct month. [f329964, [#235](https://github.com/pallets-eco/croniter/issues/235), @alhudz]
Packaging



Fix zizmor-reported security findings in GitHub Actions workflows. [ed19f94, #230]
Bump pinned build and CI dependencies via dependabot.
Upgrade locked development and build dependencies (uv lock --upgrade).

6.2.2 (2026-03-15)
Packaging
- Switch build backend from ``flit_core`` to ``hatchling`` with pinned dependencies. [4cce160]
- Add PEP 639 license expression (``license = &quot;MIT&quot;``) to project metadata. [4cce160]
- Pin all GitHub Actions to SHA hashes across CI workflows. [4cce160]
- Add dependabot for automated dependency updates. [4cce160]
- Add zizmor workflow for CI security scanning. [4cce160]
6.2.1 (2026-03-15)
Bugfixes
- Fix ``get_prev`` skipping Feb 29 on leap years for day-of-month expressions. [441a0b5, [#203](https://github.com/pallets-eco/croniter/issues/203), @Souls-R]

&amp;lt;/tr&amp;gt;&amp;lt;/table&amp;gt; 
&lt;/code&gt;&lt;/pre&gt;
&lt;/blockquote&gt;
&lt;p&gt;... (truncated)&lt;/p&gt;
&lt;/details&gt;
&lt;details&gt;
&lt;summary&gt;Commits&lt;/summary&gt;

&lt;ul&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/58534997eb4634344f00d407fb199d4d1bd057e7&quot;&gt;&lt;code&gt;5853499&lt;/code&gt;&lt;/a&gt; Prepare for release 6.2.4 (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/241&quot;&gt;#241&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/fd13d2ec447efd854806638cb5f71a2a3a90a0b5&quot;&gt;&lt;code&gt;fd13d2e&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/240&quot;&gt;#240&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/44e3090ae47ccf72e4027ed6fabf6a31eca42f85&quot;&gt;&lt;code&gt;44e3090&lt;/code&gt;&lt;/a&gt; wrap sunday in expand_from_start_time day-of-week low bound (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/239&quot;&gt;#239&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/5cd2e4611e8ebea446a9d0edef3f9d8e1f30c0e3&quot;&gt;&lt;code&gt;5cd2e46&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/238&quot;&gt;#238&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/f1eeddd7b9057b66406d162d04879258b29601d5&quot;&gt;&lt;code&gt;f1eeddd&lt;/code&gt;&lt;/a&gt; Prepare for 6.2.4 development (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/237&quot;&gt;#237&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/22b59e05f5ca485c45596b2a9b580fddffbf753f&quot;&gt;&lt;code&gt;22b59e0&lt;/code&gt;&lt;/a&gt; Prepare for release 6.2.3 (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/236&quot;&gt;#236&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/ab277671adc8e446e8dc7f1e939eabf024b6199e&quot;&gt;&lt;code&gt;ab27767&lt;/code&gt;&lt;/a&gt; reject zero step in equal and reversed cron ranges (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/232&quot;&gt;#232&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/f329964223eeb29e7788b1a9d615b525148fec96&quot;&gt;&lt;code&gt;f329964&lt;/code&gt;&lt;/a&gt; fix expand_from_start_time month low bound off-by-one (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/235&quot;&gt;#235&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/9810279c20030954e2f1ed2cf5f1d34b98c6b07f&quot;&gt;&lt;code&gt;9810279&lt;/code&gt;&lt;/a&gt; Bump the github-actions group with 2 updates (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/233&quot;&gt;#233&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;&lt;a href=&quot;https://github.com/pallets-eco/croniter/commit/d051aaf6342fbe9c559b9fcd99e6fb6f3bb63cb7&quot;&gt;&lt;code&gt;d051aaf&lt;/code&gt;&lt;/a&gt; Bump hatchling from 1.29.0 to 1.30.1 in the pip-dependencies group (&lt;a href=&quot;https://redirect.github.com/pallets-eco/croniter/issues/234&quot;&gt;#234&lt;/a&gt;)&lt;/li&gt;
&lt;li&gt;Additional commits viewable in &lt;a href=&quot;https://github.com/pallets-eco/croniter/compare/6.2.2...6.2.4&quot;&gt;compare view&lt;/a&gt;&lt;/li&gt;
&lt;/ul&gt;
&lt;/details&gt;

&lt;br /&gt;</code></pre>

Updates `cryptography` to 50.0.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst">cryptography's changelog</a>.</em></p>
<blockquote>
<p>50.0.0 - 2026-07-31</p>
<pre><code>
* **SECURITY ISSUE**:
  :func:`~cryptography.hazmat.primitives.serialization.pkcs7.pkcs7_decrypt_der`
  and its PEM and S/MIME variants no longer expose distinguishable errors or
  timing when unwrapping a ``RecipientInfo``'s ``encryptedKey``, which could
  act as a Bleichenbacher oracle for callers that decrypt untrusted messages.
  A random key is now substituted on failure, as described in :rfc:`3218`.
  Credit to **@X1AOxiang** for reporting the issue. **CVE-2026-69247**
* Deprecated Diffie-Hellman key exchange over finite fields (FFDH).
  Everything FFDH is deprecated, including the types in
  ``cryptography.hazmat.primitives.asymmetric.dh`` and loading FFDH keys or
  parameters with the key loading APIs. Users should migrate to a more
  modern key exchange algorithm.
* Added ``xof()`` class methods to
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE128` and
  :class:`~cryptography.hazmat.primitives.hashes.SHAKE256` for constructing
  algorithm instances configured for use with
  :class:`~cryptography.hazmat.primitives.hashes.XOFHash`.
* The :mod:`X.509 verification &lt;cryptography.x509.verification&gt;` APIs are now
  considered stable and are subject to our API stability policy.
* Added the :doc:`/cobblestone` recipe, an implementation of the
  Cobblestone-128 and Cobblestone-256 instantiations of the `C2SP
  chunked-encryption specification
  &lt;https://c2sp.org/chunked-encryption&gt;`_ for streaming authenticated
  encryption of large messages.
* Parsing a Signed Certificate Timestamp list now rejects encodings that
  carry trailing bytes after the list or after an individual SCT, instead of
  silently ignoring them.
* Added support for using :class:`~cryptography.x509.Name` as a field type in
  the :doc:`/hazmat/asn1/index` module.
* Loading a public key or an EC private key now rejects DER where the
  ``subjectPublicKey`` (or EC ``publicKey``) ``BIT STRING`` declares a non-zero
  number of unused bits, instead of silently ignoring it.
* Parsing a CRL entry's ``InvalidityDate`` extension now rejects a
  ``GeneralizedTime`` that carries fractional seconds or another non-DER form,
  matching the strict encoding already required for every other X.509 time
  field.
* :func:`~cryptography.x509.ocsp.load_der_ocsp_request` and
  :func:`~cryptography.x509.ocsp.load_der_ocsp_response` now reject a request
  or response whose ``version`` field is not ``v1``, the only version defined
  by RFC 6960, matching the version validation already performed when loading
  certificates, CSRs and CRLs.
* :class:`~cryptography.hazmat.primitives.hashes.XOFHash` is now supported
  when building against AWS-LC.
* HMAC (and therefore PBKDF2-HMAC) with SHA-3 hashes is now supported when
  building against AWS-LC.
* Diffie-Hellman (:doc:`/hazmat/primitives/asymmetric/dh`) is now supported
  when building against AWS-LC.
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pyca/cryptography/commit/dcb7050b807b00392fa9fe2eac7cb362fcf355cc"><code>dcb7050</code></a> Prepare for 50.0.0 release (<a href="https://redirect.github.com/pyca/cryptography/issues/15372">#15372</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/53fccd93413a8d7f07d6d8999681f27b75cffa3f"><code>53fccd9</code></a> Don't leak how PKCS#7 encryptedKey decryption failed (<a href="https://redirect.github.com/pyca/cryptography/issues/15369">#15369</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/d472f978470fbefa521b86d98b2ecccbbb4d1dd8"><code>d472f97</code></a> Add <code>from __future__ import annotations</code> to all src/ Python files (<a href="https://redirect.github.com/pyca/cryptography/issues/15371">#15371</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/908773d53829fb1466c6db364b31321c3cd8eb9a"><code>908773d</code></a> Bump downstream dependencies in CI (<a href="https://redirect.github.com/pyca/cryptography/issues/15368">#15368</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/2cc07cc948948211899bcb0cddd1fddf86e95812"><code>2cc07cc</code></a> Bump BoringSSL, OpenSSL, AWS-LC in CI (<a href="https://redirect.github.com/pyca/cryptography/issues/15367">#15367</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/c94ede9f040fa44942f7139772603419000acf66"><code>c94ede9</code></a> chore(deps): bump ruff from 0.16.0 to 0.16.1 (<a href="https://redirect.github.com/pyca/cryptography/issues/15366">#15366</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/67a8308dc9ea4cce6056e0f1438f903c208c3f35"><code>67a8308</code></a> chore(deps): bump virtualenv from 21.7.0 to 21.7.1 (<a href="https://redirect.github.com/pyca/cryptography/issues/15365">#15365</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/95018ffcdbbc510fd92fc872e3a3e80aa6e58596"><code>95018ff</code></a> Release the GIL in one-shot AEAD encrypt/decrypt (<a href="https://redirect.github.com/pyca/cryptography/issues/15361">#15361</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/6954733eaf55a0074abf88f06f7242dfca3a5d02"><code>6954733</code></a> Release the GIL during DH and DSA parameter generation (<a href="https://redirect.github.com/pyca/cryptography/issues/15364">#15364</a>)</li>
<li><a href="https://github.com/pyca/cryptography/commit/6893b94c33e948f6240082461424cfb5da2dacc6"><code>6893b94</code></a> Import _serialization instead of serialization in x509/extensions (<a href="https://redirect.github.com/pyca/cryptography/issues/15363">#15363</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pyca/cryptography/compare/48.0.0...50.0.0">compare view</a></li>
</ul>
</details>
<br />

Updates `gitpython` to 3.1.58
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/gitpython-developers/GitPython/releases">gitpython's releases</a>.</em></p>
<blockquote>
<h2>Security and Fixes</h2>
<h2>What's Changed</h2>
<ul>
<li>test: allow Python startup before timeout by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2195">gitpython-developers/GitPython#2195</a></li>
<li>Resolve Windows hook Bash through PATH by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2199">gitpython-developers/GitPython#2199</a></li>
<li>Revert &quot;Resolve Windows hook Bash through PATH&quot; by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2200">gitpython-developers/GitPython#2200</a></li>
<li>test: focus pytest summary on unexpected failures by <a href="https://github.com/raisulchowdhury"><code>@raisulchowdhury</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2203">gitpython-developers/GitPython#2203</a></li>
<li>Validate submodule names before filesystem operations by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2202">gitpython-developers/GitPython#2202</a></li>
<li>Handle invalid submodule names during recursive updates by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2205">gitpython-developers/GitPython#2205</a></li>
<li>Fix Windows path handling on Python 3.13+ by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2196">gitpython-developers/GitPython#2196</a></li>
<li>fixup 2202 by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2206">gitpython-developers/GitPython#2206</a></li>
<li>Correct Windows hook Bash precedence by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2201">gitpython-developers/GitPython#2201</a></li>
<li>Harden config and Git option validation by <a href="https://github.com/Byron"><code>@Byron</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2204">gitpython-developers/GitPython#2204</a></li>
<li>Skip tests that need symlink privileges instead of erroring by <a href="https://github.com/Cyrus580529"><code>@Cyrus580529</code></a> in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2197">gitpython-developers/GitPython#2197</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/raisulchowdhury"><code>@raisulchowdhury</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2203">gitpython-developers/GitPython#2203</a></li>
<li><a href="https://github.com/Cyrus580529"><code>@Cyrus580529</code></a> made their first contribution in <a href="https://redirect.github.com/gitpython-developers/GitPython/pull/2197">gitpython-developers/GitPython#2197</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.57...3.1.58">https://github.com/gitpython-developers/GitPython/compare/3.1.57...3.1.58</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/30be45d786e95023e23c616fec5cbabca861b44c"><code>30be45d</code></a> prepare changelog for upcoming release</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/fc2f02cc15af0457896f40a8a72b9f1866d75788"><code>fc2f02c</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2197">#2197</a> from Cyrus580529/shared-symlink-guard</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/b10e2501438e31cbc1220c4879fc3747c34dccdb"><code>b10e250</code></a> test: use the shared guard instead of local copies</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/e3e5da8476d9e184ebc729d2d85ea035e582d467"><code>e3e5da8</code></a> test: skip tests that need symlink privileges</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/30d05e30c0b7f28bed7e10cb17b10b68e0708af9"><code>30d05e3</code></a> test: add a shared symlink capability guard</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/9a8f6fef579912bc8b10ab513c33ca6ea1f687ef"><code>9a8f6fe</code></a> Merge pull request <a href="https://redirect.github.com/gitpython-developers/GitPython/issues/2204">#2204</a> from gitpython-developers/security-fixes</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/f2550b65bf60ca087190981e2c7b6865e201f40c"><code>f2550b6</code></a> Guard pathspec file inputs in high-level commands</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/d9ddb55bdc66ffe8c9932fe460e6b8c8211e47c7"><code>d9ddb55</code></a> Guard unsafe git init options</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/9b5dcaf85da5946dbf69dcd53f9edba08f760b32"><code>9b5dcaf</code></a> Guard read-tree index output paths</li>
<li><a href="https://github.com/gitpython-developers/GitPython/commit/96a888f4d782cb2f80452148e48e60ce4af6d541"><code>96a888f</code></a> Check joined short-option values before Git execution</li>
<li>Additional commits viewable in <a href="https://github.com/gitpython-developers/GitPython/compare/3.1.50...3.1.58">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-functools` to 4.6.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst">jaraco-functools's changelog</a>.</em></p>
<blockquote>
<h1>v4.6.0</h1>
<h2>Features</h2>
<ul>
<li>Add <code>signed</code> wrapper to render a value with an explicit sign.</li>
</ul>
<h1>v4.5.0</h1>
<h2>Features</h2>
<ul>
<li><code>bypass_when</code> and <code>bypass_unless</code> now accept callable checks and evaluate
them on each invocation instead of binding only at decoration time. (<a href="https://redirect.github.com/jaraco/jaraco.functools/issues/36">#36</a>)</li>
</ul>
<h1>v4.4.0</h1>
<h2>Features</h2>
<ul>
<li>Add noop.</li>
</ul>
<h1>v4.3.0</h1>
<h2>Features</h2>
<ul>
<li>Add none_as function.</li>
</ul>
<h1>v4.2.1</h1>
<p>No significant changes.</p>
<h1>v4.2.0</h1>
<h2>Features</h2>
<ul>
<li>Add 'passthrough' function.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/f7f4f3bcac8f70e01064dee9a8bde6cc8f997a17"><code>f7f4f3b</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/1b615071613da21818c3f20f5696c1ec6e1eeb3d"><code>1b61507</code></a> Merge pull request <a href="https://redirect.github.com/jaraco/jaraco.functools/issues/38">#38</a> from jaraco/feature/signed</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/ec615a584e5938420245a58616d6db8dd9c5f2ae"><code>ec615a5</code></a> Add news fragment.</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/016937453ab0e4342c45c9872c07c8d2fa98d97e"><code>0169374</code></a> Add signed, a wrapper to render a value's formatter with an explicit sign</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/0e89d963ab0a2d6d0755df2424e5e3d5b983cf98"><code>0e89d96</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/4df0abd88dc7c36897b4f40abebda9ae7b24d33e"><code>4df0abd</code></a> Merge pull request <a href="https://redirect.github.com/jaraco/jaraco.functools/issues/36">#36</a> from jaraco/copilot/enhance-bypass-decorators-callables</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/e3ad23e72c049950d79d4c1c702a9b7e286d6983"><code>e3ad23e</code></a> 👹 Feed the hobgoblins (delint).</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/9ed118eb092ba639e925578576192d0da823d93f"><code>9ed118e</code></a> Merge branch 'main' into copilot/enhance-bypass-decorators-callables</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/d3cdfdf173d8f073d3c51f7d452e3860d783e283"><code>d3cdfdf</code></a> 👹 Feed the hobgoblins (delint).</li>
<li><a href="https://github.com/jaraco/jaraco.functools/commit/dfc27da53d5b17d1d3b9b04459933f9054a1e3a2"><code>dfc27da</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.functools/compare/v4.4.0...v4.6.0">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-context` to 6.1.2
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst">jaraco-context's changelog</a>.</em></p>
<blockquote>
<h1>v6.1.2</h1>
<p>No significant changes.</p>
<h1>v6.1.1</h1>
<p>No significant changes.</p>
<h1>v6.1.0</h1>
<h2>Features</h2>
<ul>
<li>In tarfile.context, ensure that the default filter honors the data filter to avoid path traversal vulnerabilities.</li>
</ul>
<h1>v6.0.2</h1>
<p>No significant changes.</p>
<h1>v6.0.1</h1>
<h2>Bugfixes</h2>
<ul>
<li>Removed type declarations as suggested by Gemini. (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/13">#13</a>)</li>
</ul>
<h1>v6.0.0</h1>
<h2>Bugfixes</h2>
<ul>
<li>Fixed bug in repo_context where standard output from git would not be hidden (because git emits standard output on the stderr stream).</li>
</ul>
<h2>Deprecations and Removals</h2>
<ul>
<li>Removed deprecated 'tarball_context', 'infer_compression', and 'null' contexts.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.context/commit/098f39c911d4504b2c718f2ff483ae24f1c4d378"><code>098f39c</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/926a20e42307a2b5d87b058f2df42345fba61ad4"><code>926a20e</code></a> Fix condition for skipping safety test on Python 3.12 (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/20">#20</a>)</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/19f1cbbcf4811fec84c2fee47e51c1a823b7d368"><code>19f1cbb</code></a> Strict type checking and re-enable mypy (<a href="https://redirect.github.com/jaraco/jaraco.context/issues/16">#16</a>)</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/256995fa4d2bcaf5513d7d14204045de94b4957d"><code>256995f</code></a> Suppress coverage errors.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/0190667b24bd7b7f5f199ec36dc6e974fa31aab2"><code>0190667</code></a> Suppress type errors in test_safety.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/bc0dc8a641a0ef9539bd7b193c961f8de05344e0"><code>bc0dc8a</code></a> Suppress type errors with new property.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/8eee4d0bbf99ee75163865b150e638378e5a0b46"><code>8eee4d0</code></a> Modernize with ruff</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/825171649ef9d312b6f9740d235d206c0e927c3e"><code>8251716</code></a> Merge branch 'main' into Strict-type-checking-and-re-enable-mypy</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/7df1443e0d81d0f7a781231ab05e00fc4173672e"><code>7df1443</code></a> Restore expression algebra.</li>
<li><a href="https://github.com/jaraco/jaraco.context/commit/616e2d6153eea558d0acf971adefc4d2c9dd6fc9"><code>616e2d6</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.context/compare/v6.1.1...v6.1.2">compare view</a></li>
</ul>
</details>
<br />

Updates `jaraco-text` to 4.3.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/jaraco/jaraco.text/blob/main/NEWS.rst">jaraco-text's changelog</a>.</em></p>
<blockquote>
<h1>v4.3.0</h1>
<h2>Features</h2>
<ul>
<li>Added <code>strip_ansi</code> for removing ANSI escape sequences (e.g. SGR color codes) from a string.</li>
</ul>
<h1>v4.2.0</h1>
<h2>Features</h2>
<ul>
<li>Replaced <code>autocommand</code> usage with <code>Typer</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/25">#25</a>)</li>
</ul>
<h2>Bugfixes</h2>
<ul>
<li>Fixed <code>join_continuation</code>'s parameter type annotation -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/28">#28</a>)</li>
</ul>
<h1>v4.1.0</h1>
<h2>Features</h2>
<ul>
<li>Complete annotations and add <code>py.typed</code> marker -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
<li>Add support for <code>start</code> and <code>end</code> in <code>jaraco.text.FoldedCase.index</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
<li>Support <code>None</code> <code>splitter</code> argument in <code>jaraco.text.FoldedCase.split</code> -- by :user:<code>Avasam</code> (<a href="https://redirect.github.com/jaraco/jaraco.text/issues/17">#17</a>)</li>
</ul>
<h1>v4.0.0</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>Made 'inflect' an optional dependency. The show-newlines script now will crash unless jaraco.text[inflect] is installed.</li>
</ul>
<h1>v3.14.0</h1>
<h2>Features</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/jaraco/jaraco.text/commit/8c5892111b3dac47030bcdc7a34dcef3ce7828ef"><code>8c58921</code></a> Finalize</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/981b230f6027eb03be8124e4b268225b3565a299"><code>981b230</code></a> Satisfy updated ruff and mypy.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/263edcb940aab5c8a30a09cad16aa8dab240e8c3"><code>263edcb</code></a> Ruff fixes.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/6ba69221bf7e54cf39f2101c1e6eb15366c70daf"><code>6ba6922</code></a> Add strip_ansi for removing ANSI escape sequences from a string.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/1683d5ab470d6ed57475a546cdf399ffaf6b6e6b"><code>1683d5a</code></a> Merge <a href="https://github.com/jaraco/skeleton">https://github.com/jaraco/skeleton</a></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/684a3157eae9988cdd8e95969efa9a79a70f69f6"><code>684a315</code></a> Bump badge for 2026.</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/606a7a5f999e6a43480015460be604a77f16ce68"><code>606a7a5</code></a><code>jaraco/skeleton#194</code></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/07389c4c4609a49826ea9ed510419c2e32eccee9"><code>07389c4</code></a><code>jaraco/skeleton#193</code></li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/16fb289d38af0d510e39afcbbd43bace2d6d8dd9"><code>16fb289</code></a> Bump <code>pytest-checkdocs</code> to <code>&gt;= 2.14</code> to resolve deprecation warnings (jaraco/...</li>
<li><a href="https://github.com/jaraco/jaraco.text/commit/d9b029be3925b99d3b0d2ef529d79d0a1b9d2c52"><code>d9b029b</code></a> Don't install (nor run) mypy on PyPy (librt build failures) (jaraco/skeleton#...</li>
<li>Additional commits viewable in <a href="https://github.com/jaraco/jaraco.text/compare/v4.2.0...v4.3.0">compare view</a></li>
</ul>
</details>
<br />

Updates `msgpack` to 1.2.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/releases">msgpack's releases</a>.</em></p>
<blockquote>
<h2>v1.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump pypa/cibuildwheel from 4.0.0 to 4.1.0 in the all-dependencies group by <a href="https://github.com/dependabot"><code>@dependabot</code></a>[bot] in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/694">msgpack/msgpack-python#694</a></li>
<li>release v1.2.1 by <a href="https://github.com/methane"><code>@methane</code></a> in <a href="https://redirect.github.com/msgpack/msgpack-python/pull/698">msgpack/msgpack-python#698</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/msgpack/msgpack-python/compare/v1.2.0...v1.2.1">https://github.com/msgpack/msgpack-python/compare/v1.2.0...v1.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md">msgpack's changelog</a>.</em></p>
<blockquote>
<h1>1.2.1</h1>
<p>Release Date: 2026-06-19</p>
<p>Fix a segfault when calling <code>Unpacker.unpack()</code> or <code>Unpacker.skip()</code> after an unpacking failure.
But note that reusing the same <code>Unpacker</code> instance after an unpacking failure is not supported.
Please create a new <code>Unpacker</code> instance instead. GHSA-6v7p-g79w-8964</p>
<h1>1.2.0</h1>
<p>Release Date: 2026-06-11</p>
<ul>
<li>Support free threaded Python. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/654">#654</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/686">#686</a></li>
<li>Dropped support for Python 3.9. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/656">#656</a></li>
<li>Fix missing error checks in C code. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/665">#665</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/666">#666</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/667">#667</a>, <a href="https://redirect.github.com/msgpack/msgpack-python/issues/672">#672</a></li>
<li>Fix <code>strict_map_key</code> option didn't work for <code>object_pairs_hook</code>. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/673">#673</a></li>
<li>Increase DEFAULT_RECURSE_LIMIT of Unpacker to 1024. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/676">#676</a></li>
<li>Fix memory leak when Unpacker returns error for invalid input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/671">#671</a></li>
<li>Fix <code>Packer.pack_ext_type()</code> ignored <code>autoreset</code> option. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/663">#663</a></li>
<li>Fix <code>Timestamp.from_datetime()</code> returning wrong value for pre-epoch datetimes. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/662">#662</a></li>
<li>Fix use-after-free in <code>unpackb()</code> and <code>Unpacker.unpack()</code> for non-contiguous input. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/677">#677</a></li>
<li>Fix possible memory leak when calling <code>Unpacker.__init__()</code> several times. <a href="https://redirect.github.com/msgpack/msgpack-python/issues/687">#687</a></li>
</ul>
<h1>1.1.2</h1>
<p>Release Date: 2025-10-08</p>
<p>This release does not change source code. It updates only building
wheels:</p>
<ul>
<li>Update Cython to v3.1.4</li>
<li>Update cibuildwheel to v3.2.0</li>
<li>Drop Python 3.8</li>
<li>Add Python 3.14</li>
<li>Add windows-arm</li>
</ul>
<h1>1.1.1</h1>
<p>Release Date: 2025-06-13</p>
<ul>
<li>No change from 1.1.1rc1.</li>
</ul>
<h1>1.1.1rc1</h1>
<p>Release Date: 2025-06-06</p>
<ul>
<li>Update Cython to 3.1.1 and cibuildwheel to 2.23.3.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/msgpack/msgpack-python/commit/448d43f5dcca7b3a2b0810e161af0a6431d90071"><code>448d43f</code></a> release v1.2.1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/698">#698</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/2c56ddb5d0025ed481d962c0f5d62d19dec7476d"><code>2c56ddb</code></a> Merge commit from fork</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/0f4f350b6f3e80f24750422673424cce5d96e15d"><code>0f4f350</code></a> Bump pypa/cibuildwheel from 4.0.0 to 4.1.0 in the all-dependencies group (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/694">#694</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/11ed0a5110c1920b85b7d24d9414f480983e0f16"><code>11ed0a5</code></a> release v1.2.0 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/692">#692</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/c410a388c58d55091736e510cad064977a12cb8b"><code>c410a38</code></a> Bump pypa/cibuildwheel from 3.4.1 to 4.0.0 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/691">#691</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/97ba6ca0d29c1e8a5b30112f13f37a4d6b3c4492"><code>97ba6ca</code></a> skip ci: remove unneeded CIBW_SKIP option</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/cdde1b0d6336caff4e82310c3c7d2b4c73f22d59"><code>cdde1b0</code></a> Wheels CI hangs for MacOS Intel (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/689">#689</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/5eb57e15455f5dd25001e97a7ef1170911dee104"><code>5eb57e1</code></a> release v1.2.0rc1 (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/681">#681</a>)</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/77395c19a50061238306df5ea10e67c5312ceff0"><code>77395c1</code></a> Harden <code>Unpacker.__init__</code> re-entry cleanup to prevent buffer/context leaks (...</li>
<li><a href="https://github.com/msgpack/msgpack-python/commit/7df7136e20933fd3a498bd58bff7975a24790516"><code>7df7136</code></a> Guard <code>Packer</code> buffer protocol hooks with Cython critical sections (<a href="https://redirect.github.com/msgpack/msgpack-python/issues/686">#686</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/msgpack/msgpack-python/compare/v1.1.2...v1.2.1">compare view</a></li>
</ul>
</details>
<br />

Updates `multidict` to 6.7.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/aio-libs/multidict/releases">multidict's releases</a>.</em></p>
<blockquote>
<h2>6.7.1</h2>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed slow memory leak caused by identity by adding <code>Py_DECREF</code> to identity value before leaving <code>md_pop_one</code> on success
-- by :user:<code>Vizonex</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a href="https://redirect.github.com/aio-libs/multidict/issues/1284">#1284</a>.</p>
</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/aio-libs/multidict/blob/master/CHANGES.rst">multidict's changelog</a>.</em></p>
<blockquote>
<h1>6.7.1</h1>
<p><em>(2026-01-25)</em></p>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed slow memory leak caused by identity by adding <code>Py_DECREF</code> to identity value before leaving <code>md_pop_one</code> on success
-- by :user:<code>Vizonex</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1284</code>.</p>
</li>
</ul>
<hr />
<h1>6.7.0</h1>
<p><em>(2025-10-05)</em></p>
<h2>Contributor-facing changes</h2>
<ul>
<li>
<p>Updated tests and added CI for CPython 3.14 -- by :user:<code>kumaraditya303</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1235</code>.</p>
</li>
</ul>
<hr />
<h1>6.6.4</h1>
<p><em>(2025-08-11)</em></p>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed <code>MutliDict</code> &amp; <code>CIMultiDict</code> memory leak when deleting values or clearing them
-- by :user:<code>Vizonex</code></p>
<p><em>Related issues and pull requests on GitHub:</em></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/aio-libs/multidict/commit/39d3c322f6a9e824beee9b6f178e3166205f0f59"><code>39d3c32</code></a> Release 6.7.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1289">#1289</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/77bb95e83c226c3557015d055a1ce4a29889d49e"><code>77bb95e</code></a> Fix memory leak caused by identity when default value is inplace (<a href="https://redirect.github.com/aio-libs/multidict/issues/1284">#1284</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/87dd4a49a5e8d5b01a8d801cac0c92984726f411"><code>87dd4a4</code></a> Bump dependabot/fetch-metadata from 2.4.0 to 2.5.0 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1287">#1287</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/6c764124a79da8f700faa1e3638311c58828947e"><code>6c76412</code></a> Bump actions/cache from 4 to 5 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1275">#1275</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/b91a033a29f360e76a8a24b92d50120d9cd08065"><code>b91a033</code></a> Bump actions/upload-artifact from 4 to 6 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1277">#1277</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/84bf82c0e2ec68919e7f3b7c5c7388a82f4737ee"><code>84bf82c</code></a> Bump psutil from 7.1.3 to 7.2.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1279">#1279</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/3f7b3cec6a5c23a100d972a667e7f67b84809bb3"><code>3f7b3ce</code></a> Bump pypa/cibuildwheel from 3.3.0 to 3.3.1 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1280">#1280</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/bbae9027cc99e23fc1ab98d97ed0adcd644c32c8"><code>bbae902</code></a> Bump sigstore/gh-action-sigstore-python from 3.1.0 to 3.2.0 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1274">#1274</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/000b5b0d25b3fc672c4226615f52a7d0cd6c2c96"><code>000b5b0</code></a> Remove follow_untyped_imports for mypy-sphinx (<a href="https://redirect.github.com/aio-libs/multidict/issues/1286">#1286</a>)</li>
<li><a href="https://github.com/aio-libs/multidict/commit/3d2d63044c98c8ede9204e8a9685921763cc0d4e"><code>3d2d630</code></a> Bump actions/download-artifact from 6 to 7 (<a href="https://redirect.github.com/aio-libs/multidict/issues/1276">#1276</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/aio-libs/multidict/compare/v6.6.0...v6.7.1">compare view</a></li>
</ul>
</details>
<br />

Updates `opentelemetry-api` to 1.44.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md">opentelemetry-api's changelog</a>.</em></p>
<blockquote>
<h2>Version 1.44.0/0.65b0 (2026-07-16)</h2>
<h3>Added</h3>
<ul>
<li><code>opentelemetry-docker-tests</code>: Refactor Docker tests to properly validate
contents of exported telemetry
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5220">#5220</a>)</li>
<li><code>opentelemetry-exporter-otlp-common</code>: add shared package for common OTLP
utilities
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5252">#5252</a>)</li>
<li><code>opentelemetry-sdk</code>: add <code>MissingDependencyError</code> exception for declarative
configuration and use it for missing optional dependency errors
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5265">#5265</a>)</li>
<li><code>opentelemetry-sdk</code>: Add ability to refresh process dependent Resource
attributes
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5280">#5280</a>)</li>
<li><code>opentelemetry-sdk</code>: add <code>force_flush</code> method to <code>LogRecordExporter</code> ABC
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5294">#5294</a>)</li>
<li><code>opentelemetry-sdk</code>: Make it possible to limit the size of stored spans in
InMemorySpanExporter
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5296">#5296</a>)</li>
<li><code>opentelemetry-sdk</code>: add log record limits environment variables
<code>OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT</code> and
<code>OTEL_LOGRECORD_ATTRIBUTE_VALUE_LENGTH_LIMIT</code>
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5300">#5300</a>)</li>
<li><code>opentelemetry-sdk</code>: add support for file exporter with declarative config
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5311">#5311</a>)</li>
<li><code>opentelemetry-sdk</code>: expose <code>SynchronousMultiLogRecordProcessor</code> and
<code>ConcurrentMultiLogRecordProcessor</code> publicly
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5327">#5327</a>)</li>
<li><code>opentelemetry-sdk</code>: point the declarative configuration package README at
the shared <a href="https://github.com/open-telemetry/opentelemetry-configuration/blob/main/language-support-status.md#python">language support status
matrix</a>
in the <code>opentelemetry-configuration</code> repo, so Python conformance status lives
alongside the other languages instead of being duplicated per language SDK.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5347">#5347</a>)</li>
<li><code>opentelemetry-sdk</code>: document that Python-implementation extensions
(<code>OTEL_PYTHON_*</code> variables) are bypassed when <code>OTEL_CONFIG_FILE</code> is set. The
env-var initialisation path is skipped entirely in favour of the declarative
file; honouring these alongside a config file is tracked as a follow-up.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5353">#5353</a>)</li>
<li><code>opentelemetry-sdk</code>: wire id_generator from declarative configuration to
TracerProvider
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5363">#5363</a>)</li>
<li><code>opentelemetry-sdk</code>: Add support for activating instrumentors from a
declarative configuration file via the <code>instrumentation/development.python</code>
section. Instrumentors can declare a <code>configuration</code> attribute to have their
options validated through the same type-coercion pipeline used for SDK
component configuration.
(<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/pull/5372">#5372</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/53a5a40c9604583c501bcf13970a635f00e62df4"><code>53a5a40</code></a> Prepare release 1.44.0/0.65b0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5422">#5422</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/d9f34e7edef892afbd0c77eb81f88bb53566ad67"><code>d9f34e7</code></a> Fixup eachdist.py handling of package names (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5417">#5417</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/d10f47243e8bd2c699f0176c273eef3fd5fc19c0"><code>d10f472</code></a> opentelemetry-semantic-conventions: Bump to 1.43.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5413">#5413</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/ae8feeb7af9957434c1d68d07a1819d69213fd5d"><code>ae8feeb</code></a> Update otelbot token workflows to use client IDs (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5404">#5404</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/67a2abdce59ef44a1e0d42b1565c0b73c522a255"><code>67a2abd</code></a> Fix Context in-place mutability bypass via inherited dict methods (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5399">#5399</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/87baad9c527ac49b6aa5cc64ef16746db2fab01a"><code>87baad9</code></a> Bump semconv to 1.42.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5410">#5410</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/23dc0b22525ff579c89dd083918f938018b7f6a8"><code>23dc0b2</code></a> opentelemetry-sdk: add 'force_flush' method to LogRecordExporter ABC (<a href="https://redirect.github.com/open-telemetry/opentelemetry-python/issues/5294">#5294</a>)</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/bec55fdc657d06ec629d7dff638da9106601bb65"><code>bec55fd</code></a> opentelemetry-sdk: expose SynchronousMultiLogRecordProcessor and ConcurrentMu...</li>
<li><a href="https://github.com/open-telemetry/opentelemetry-python/commit/55d0b7a1fbf0d36ff168c0dabd5b01232066de6c"><code>55d0b7a</code></a> opentelemetry-sdk: Add ability to refresh process sensitive Resource att...

_Description has been truncated_

Updates the requirements on [pip](https://github.com/pypa/pip), [aiohttp](https://github.com/aio-libs/aiohttp), [certifi](https://github.com/certifi/python-certifi), [cffi](https://github.com/python-cffi/cffi), [croniter](https://github.com/pallets-eco/croniter), [cryptography](https://github.com/pyca/cryptography), [gitpython](https://github.com/gitpython-developers/GitPython), [jaraco-functools](https://github.com/jaraco/jaraco.functools), [jaraco-context](https://github.com/jaraco/jaraco.context), [jaraco-text](https://github.com/jaraco/jaraco.text), [msgpack](https://github.com/msgpack/msgpack-python), [multidict](https://github.com/aio-libs/multidict), [opentelemetry-api](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-sdk](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-otlp-proto-http](https://github.com/open-telemetry/opentelemetry-python), [opentelemetry-exporter-prometheus](https://github.com/open-telemetry/opentelemetry-python), [xxhash](https://github.com/ifduyue/python-xxhash), [packaging](https://github.com/pypa/packaging), [psutil](https://github.com/giampaolo/psutil), [pyasn1](https://github.com/pyasn1/pyasn1), [pyopenssl](https://github.com/pyca/pyopenssl), [requests](https://github.com/psf/requests), [tornado](https://github.com/tornadoweb/tornado), [truststore](https://github.com/sethmlarson/truststore), [virtualenv](https://github.com/pypa/virtualenv), [filelock](https://github.com/tox-dev/py-filelock), [zipp](https://github.com/jaraco/zipp), [setuptools-scm](https://github.com/pypa/setuptools-scm), [build](https://github.com/pypa/build), [docker](https://github.com/docker/docker-py), [pytest](https://github.com/pytest-dev/pytest), [boto3](https://github.com/boto/boto3), [pygit2](https://github.com/libgit2/pygit2), mercurial, [pylint](https://github.com/pylint-dev/pylint), [ansible](https://github.com/ansible-community/ansible-build-data), [python-telegram-bot](https://github.com/python-telegram-bot/python-telegram-bot), [botocore](https://github.com/boto/botocore), [kubernetes](https://github.com/kubernetes-client/python), [pynacl](https://github.com/pyca/pynacl), [vcert](https://github.com/Venafi/vcert-python) and [xmldiff](https://github.com/Shoobx/xmldiff) to permit the latest version. Updates `pip` from 25.2 to 26.2.1 - [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst) - [Commits](pypa/pip@25.2...26.2.1) Updates `aiohttp` to 3.14.3 - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3) Updates `certifi` to 2026.7.22 - [Commits](certifi/python-certifi@2026.05.20...2026.07.22) Updates `cffi` to 2.1.1 - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](python-cffi/cffi@v2.0.0...v2.1.1) Updates `croniter` to 6.2.4 - [Release notes](https://github.com/pallets-eco/croniter/releases) - [Changelog](https://github.com/pallets-eco/croniter/blob/main/CHANGELOG.rst) - [Commits](pallets-eco/croniter@6.2.2...6.2.4) Updates `cryptography` to 50.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.0...50.0.0) Updates `gitpython` to 3.1.58 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.50...3.1.58) Updates `jaraco-functools` to 4.6.0 - [Release notes](https://github.com/jaraco/jaraco.functools/releases) - [Changelog](https://github.com/jaraco/jaraco.functools/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.functools@v4.4.0...v4.6.0) Updates `jaraco-context` to 6.1.2 - [Release notes](https://github.com/jaraco/jaraco.context/releases) - [Changelog](https://github.com/jaraco/jaraco.context/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.context@v6.1.1...v6.1.2) Updates `jaraco-text` to 4.3.0 - [Release notes](https://github.com/jaraco/jaraco.text/releases) - [Changelog](https://github.com/jaraco/jaraco.text/blob/main/NEWS.rst) - [Commits](jaraco/jaraco.text@v4.2.0...v4.3.0) Updates `msgpack` to 1.2.1 - [Release notes](https://github.com/msgpack/msgpack-python/releases) - [Changelog](https://github.com/msgpack/msgpack-python/blob/main/CHANGELOG.md) - [Commits](msgpack/msgpack-python@v1.1.2...v1.2.1) Updates `multidict` to 6.7.1 - [Release notes](https://github.com/aio-libs/multidict/releases) - [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst) - [Commits](aio-libs/multidict@v6.6.0...v6.7.1) Updates `opentelemetry-api` to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0) Updates `opentelemetry-sdk` to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0) Updates `opentelemetry-exporter-otlp-proto-http` to 1.44.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-python@v1.41.1...v1.44.0) Updates `opentelemetry-exporter-prometheus` to 0.65b0 - [Release notes](https://github.com/open-telemetry/opentelemetry-python/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-python/blob/main/CHANGELOG.md) - [Commits](https://github.com/open-telemetry/opentelemetry-python/commits) Updates `xxhash` to 3.8.1 - [Release notes](https://github.com/ifduyue/python-xxhash/releases) - [Changelog](https://github.com/ifduyue/python-xxhash/blob/master/CHANGELOG.rst) - [Commits](ifduyue/python-xxhash@v3.7.0...v3.8.1) Updates `packaging` to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `psutil` to 7.2.2 - [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst) - [Commits](giampaolo/psutil@v5.0.0...v7.2.2) Updates `pyasn1` to 0.6.4 - [Release notes](https://github.com/pyasn1/pyasn1/releases) - [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst) - [Commits](pyasn1/pyasn1@v0.6.3...v0.6.4) Updates `pyopenssl` to 26.4.0 - [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst) - [Commits](pyca/pyopenssl@26.2.0...26.4.0) Updates `requests` to 2.34.2 - [Release notes](https://github.com/psf/requests/releases) - [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md) - [Commits](psf/requests@v0.2.0...v2.34.2) Updates `tornado` to 6.5.7 - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](tornadoweb/tornado@v6.5.6...v6.5.7) Updates `truststore` to 0.10.4 - [Release notes](https://github.com/sethmlarson/truststore/releases) - [Changelog](https://github.com/sethmlarson/truststore/blob/main/CHANGELOG.md) - [Commits](sethmlarson/truststore@v0.10.0...v0.10.4) Updates `virtualenv` to 21.7.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.4.2...21.7.1) Updates `filelock` to 3.32.2 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.29.1...3.32.2) Updates `zipp` to 4.1.0 - [Release notes](https://github.com/jaraco/zipp/releases) - [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst) - [Commits](jaraco/zipp@v3.23.1...v4.1.0) Updates `setuptools-scm` to 10.2.1 - [Release notes](https://github.com/pypa/setuptools-scm/releases) - [Changelog](https://github.com/pypa/setuptools-scm/blob/main/RELEASE_SYSTEM.md) - [Commits](pypa/setuptools-scm@0.1...setuptools-scm-v10.2.1) Updates `build` to 1.5.0 - [Release notes](https://github.com/pypa/build/releases) - [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst) - [Commits](pypa/build@1.4.4...1.5.0) Updates `docker` to 7.2.0 - [Release notes](https://github.com/docker/docker-py/releases) - [Commits](docker/docker-py@7.1.0...7.2.0) Updates `pytest` to 9.1.1 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.4.2...9.1.1) Updates `aiohttp` to 3.14.3 - [Changelog](https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst) - [Commits](aio-libs/aiohttp@v3.14.1...v3.14.3) Updates `cffi` to 2.1.1 - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](python-cffi/cffi@v2.0.0...v2.1.1) Updates `cryptography` to 50.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.0...50.0.0) Updates `gitpython` to 3.1.58 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.50...3.1.58) Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `virtualenv` to 21.7.1 - [Release notes](https://github.com/pypa/virtualenv/releases) - [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst) - [Commits](pypa/virtualenv@21.4.2...21.7.1) Updates `filelock` to 3.32.2 - [Release notes](https://github.com/tox-dev/py-filelock/releases) - [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst) - [Commits](tox-dev/filelock@3.29.1...3.32.2) Updates `docker` to 7.2.0 - [Release notes](https://github.com/docker/docker-py/releases) - [Commits](docker/docker-py@7.1.0...7.2.0) Updates `boto3` to 1.43.65 - [Release notes](https://github.com/boto/boto3/releases) - [Commits](boto/boto3@1.43.24...1.43.65) Updates `packaging` from 26.2 to 26.3 - [Release notes](https://github.com/pypa/packaging/releases) - [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst) - [Commits](pypa/packaging@26.2...26.3) Updates `pygit2` to 1.19.3 - [Release notes](https://github.com/libgit2/pygit2/releases) - [Changelog](https://github.com/libgit2/pygit2/blob/master/CHANGELOG.md) - [Commits](libgit2/pygit2@v1.19.2...v1.19.3) Updates `mercurial` to 7.2.3 Updates `pylint` to 3.3.9 - [Release notes](https://github.com/pylint-dev/pylint/releases) - [Commits](pylint-dev/pylint@v3.1.0...v3.3.9) Updates `ansible` to 14.2.0 - [Changelog](https://github.com/ansible-community/ansible-build-data/blob/main/docs/release-process.md) - [Commits](ansible-community/ansible-build-data@14.0.0...14.2.0) Updates `python-telegram-bot` to 22.8 - [Release notes](https://github.com/python-telegram-bot/python-telegram-bot/releases) - [Commits](python-telegram-bot/python-telegram-bot@v22.7...v22.8) Updates `botocore` to 1.43.65 - [Commits](boto/botocore@1.43.24...1.43.65) Updates `kubernetes` to 36.0.3 - [Release notes](https://github.com/kubernetes-client/python/releases) - [Changelog](https://github.com/kubernetes-client/python/blob/master/CHANGELOG.md) - [Commits](kubernetes-client/python@v36.0.2...v36.0.3) Updates `pynacl` to 1.6.2 - [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst) - [Commits](pyca/pynacl@1.5.0...1.6.2) Updates `vcert` to 0.9.1 - [Release notes](https://github.com/Venafi/vcert-python/releases) - [Commits](Venafi/vcert-python@v0.9.0...v0.9.1) Updates `xmldiff` to 3.0 - [Release notes](https://github.com/Shoobx/xmldiff/releases) - [Changelog](https://github.com/Shoobx/xmldiff/blob/master/CHANGES.rst) - [Commits](Shoobx/xmldiff@2.7.0...3.0) Updates `cryptography` to 50.0.0 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@48.0.0...50.0.0) Updates `pyopenssl` to 26.4.0 - [Changelog](https://github.com/pyca/pyopenssl/blob/main/CHANGELOG.rst) - [Commits](pyca/pyopenssl@26.2.0...26.4.0) --- updated-dependencies: - dependency-name: pip dependency-version: 26.2.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: all-pip-updates - dependency-name: aiohttp dependency-version: 3.14.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: certifi dependency-version: 2026.7.22 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cffi dependency-version: 2.1.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: croniter dependency-version: 6.2.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 50.0.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: gitpython dependency-version: 3.1.58 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: jaraco-functools dependency-version: 4.6.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: jaraco-context dependency-version: 6.1.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: jaraco-text dependency-version: 4.3.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: msgpack dependency-version: 1.2.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: multidict dependency-version: 6.7.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-api dependency-version: 1.44.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-sdk dependency-version: 1.44.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-exporter-otlp-proto-http dependency-version: 1.44.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: opentelemetry-exporter-prometheus dependency-version: 0.65b0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: xxhash dependency-version: 3.8.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: psutil dependency-version: 7.2.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pyasn1 dependency-version: 0.6.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pyopenssl dependency-version: 26.4.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: requests dependency-version: 2.34.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: tornado dependency-version: 6.5.7 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: truststore dependency-version: 0.10.4 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: virtualenv dependency-version: 21.7.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: filelock dependency-version: 3.32.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: zipp dependency-version: 4.1.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: setuptools-scm dependency-version: 10.2.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: build dependency-version: 1.5.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: docker dependency-version: 7.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pytest dependency-version: 9.1.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: aiohttp dependency-version: 3.14.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cffi dependency-version: 2.1.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 50.0.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: gitpython dependency-version: 3.1.58 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-updates - dependency-name: virtualenv dependency-version: 21.7.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: filelock dependency-version: 3.32.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: docker dependency-version: 7.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: boto3 dependency-version: 1.43.65 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: packaging dependency-version: '26.3' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-pip-updates - dependency-name: pygit2 dependency-version: 1.19.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: mercurial dependency-version: 7.2.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pylint dependency-version: 3.3.9 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: ansible dependency-version: 14.2.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: python-telegram-bot dependency-version: '22.8' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: botocore dependency-version: 1.43.65 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: kubernetes dependency-version: 36.0.3 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pynacl dependency-version: 1.6.2 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: vcert dependency-version: 0.9.1 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: xmldiff dependency-version: '3.0' dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: cryptography dependency-version: 50.0.0 dependency-type: direct:production dependency-group: all-pip-updates - dependency-name: pyopenssl dependency-version: 26.4.0 dependency-type: direct:production dependency-group: all-pip-updates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added the test:full Run the full test suite label Aug 8, 2026

dependabot Bot requested a review from a team as a code owner August 8, 2026 21:11

dependabot Bot added the test:full Run the full test suite label Aug 8, 2026

dependabot Bot temporarily deployed to workflow-restart August 8, 2026 21:11 Inactive

dependabot Bot had a problem deploying to ci August 8, 2026 21:11 Error

dependabot Bot had a problem deploying to ci August 8, 2026 21:12 Error

Automated requirement synchronization

82c39c0

salt-pr-bot Bot temporarily deployed to workflow-restart August 8, 2026 21:13 Inactive

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 21:13 Inactive

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 21:26 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 21:26 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 21:26 Inactive

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 21:51 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 21:51 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 21:51 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 22:22 Failure

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 22:26 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 22:26 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 22:31 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 22:36 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 22:36 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 22:36 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 22:40 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 22:43 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 22:43 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 22:43 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 22:48 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 22:51 Inactive

salt-pr-bot Bot had a problem deploying to ci August 8, 2026 22:51 Failure

salt-pr-bot Bot temporarily deployed to ci August 8, 2026 22:51 Inactive

Navigation Menu

Uh oh!

Bump the all-pip-updates group across 3 directories with 42 updates - #69977

Bump the all-pip-updates group across 3 directories with 42 updates#69977
dependabot[bot] wants to merge 2 commits into
3007.xfrom
dependabot/pip/3007.x/all-pip-updates-53b80f1483

dependabot Bot commented on behalf of github Aug 8, 2026

6.2.2 (2026-03-15)

6.2.1 (2026-03-15)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 8, 2026

26.2.1 (2026-08-04)

Bug Fixes

26.2 (2026-07-29)

Deprecations and Removals

Features

3.14.3 (2026-07-22)

Bug fixes

3.14.2 (2026-07-20)

Bug fixes

v2.1.1

What's Changed

6.2.4

croniter 6.2.4

Bugfixes

Packaging

6.2.4 (2026-07-10)

6.2.3 (2026-07-02)

6.2.2 (2026-03-15)

6.2.1 (2026-03-15)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants