Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 16, 2025

Bumps the patch-update group with 16 updates:

Package From To
requests 2.32.3 2.32.5
einops 0.8.0 0.8.1
charset-normalizer 3.4.0 3.4.3
contourpy 1.3.0 1.3.3
evaluate 0.4.3 0.4.5
fastrlock 0.8.2 0.8.3
httpcore 1.0.6 1.0.9
jinja2 3.1.4 3.1.6
kiwisolver 1.4.7 1.4.9
mbstrdecoder 1.1.3 1.1.4
msgpack 1.1.0 1.1.1
pyparsing 3.2.0 3.2.4
pytablewriter 1.2.0 1.2.1
tabledata 1.3.3 1.3.4
tcolorpy 0.1.6 0.1.7
timm 1.0.11 1.0.19

Updates requests from 2.32.3 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

v2.32.4

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS. (#6926)
  • Dropped support for pypy 3.9 following its end of support. (#6926)
Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

  • The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

  • Added support for Python 3.14.
  • Dropped support for Python 3.8 following its end of support.

2.32.4 (2025-06-10)

Security

  • CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

  • Numerous documentation improvements

Deprecations

  • Added support for pypy 3.11 for Linux and macOS.
  • Dropped support for pypy 3.9 following its end of support.
Commits
  • b25c87d v2.32.5
  • 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
  • b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
  • 46e939b Update publish workflow to use artifact-id instead of name
  • 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
  • 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
  • 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
  • fec96cd Update Makefile rules (#6996)
  • d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
  • 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
  • Additional commits viewable in compare view

Updates einops from 0.8.0 to 0.8.1

Release notes

Sourced from einops's releases.

v0.8.1 Multiple improvements

What's Changed

TLDR:

  • ellipsis is added to EinMix
  • tests moved into the package
  • devcontainer provided
  • added backend for pyTensor
  • niceties: citation, docs, fixed broken links
  • this did not require any changes in einops, but array API is supported by more libs these days, and einops can operate on them

PRs:

New Contributors

Full Changelog: arogozhnikov/einops@v0.8.0...v0.8.1

Commits

Updates charset-normalizer from 3.4.0 to 3.4.3

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Version 3.4.2

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9

Version 3.4.1

🚀 We're still raising awareness around HTTP/2, and HTTP/3!

Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...] Using Requests today is the rough equivalent of using EOL Windows 8! We promptly invite Python developers to look at the first drop-in replacement for Requests, namely Niquests. Ship with native WebSocket, SSE, Happy Eyeballs, DNS over HTTPS, and so on[...] All of this while remaining compatible with all Requests prior plug-ins / add-ons.

It leverages charset-normalizer in a better way! Check it out, you will gain up to being 3X faster and get a real/respectable support with it.

3.4.1 (2024-12-24)

Changed

  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
  • Enforce annotation delayed loading for a simpler and consistent types in the project.
  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

  • pre-commit configuration.
  • noxfile.

Removed

... (truncated)

Changelog

Sourced from charset-normalizer's changelog.

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

3.4.1 (2024-12-24)

Changed

  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
  • Enforce annotation delayed loading for a simpler and consistent types in the project.
  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

  • pre-commit configuration.
  • noxfile.

Removed

  • build-requirements.txt as per using pyproject.toml native build configuration.
  • bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
  • setup.cfg in favor of pyproject.toml metadata configuration.
  • Unused utils.range_scan function.

Fixed

  • Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
  • Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+
Commits
  • 46f662d Release 3.4.3 (#638)
  • 1a059b2 🔧 skip building on freethreaded as we're not confident it is stable
  • 2275e3d 📝 final note in CHANGELOG.md
  • c96acdf 📝 update release date on CHANGELOG.md
  • 43e5460 📝 update README.md
  • f277074 🔧 automatically lower confidence on small bytes str on non Unicode res...
  • 15ae241 🐛 automatically fallback on valid UTF-16 or UTF-32 even if the md says it...
  • 37397c1 🔧 enable 3.14 in nox test_mypyc session
  • cb82537 ⏪ revert license due to compat python 3.7 issue setuptools
  • 6a2efeb 🎨 fix linter errors
  • Additional commits viewable in compare view

Updates contourpy from 1.3.0 to 1.3.3

Release notes

Sourced from contourpy's releases.

Version 1.3.3

ContourPy 1.3.3 is a compatibility release adding support for CPython 3.14 and Windows on ARM.

This release supports CPython 3.11 to 3.14, and PyPy 3.11.

Compatibility:

Code improvements:

  • Update type annotations for bokeh 3.7.3 (#475)
  • Support type annotation changes in numpy 2.3.0 (#480)

Build, testing and CI improvements:

  • Remove Python 3.13.3 pin (#487)
  • CI install numpy 2.3.2 wheels from PyPI for Python 3.14 and Windows ARM (#488)

Version 1.3.2

ContourPy 1.3.2 is a minor release to support changes in type annotations in Bokeh >= 3.7 and add support for PyPy 3.11.

This release supports CPython 3.10 to 3.13, and PyPy 3.10 to 3.11.

Compatibility:

  • Fix type annotations for Bokeh >= 3.7 (#471`

Build, testing and CI improvements:

  • Test on CPython 3.14 (#470`)
  • Test and build wheels for PyPy 3.11 (#464)
  • Test PyPy 3.10 on all 3 major OSes (#465)
  • Use ubuntu-24.04-arm runners (#459)

Version 1.3.1

ContourPy 1.3.1 is a compatibility release to support changes in bokeh, meson-python and pybind11.

This release supports Python 3.10 to 3.13.

Compatibility:

  • Drop support for Python 3.9 (#435)
  • Update to bokeh 3.6.0 (#444)
  • Update minimum pybind11 to 2.13.2 (#451)
  • Read meson-python version in recommended way (#452)

Code improvements:

... (truncated)

Changelog

Sourced from contourpy's changelog.

v1.3.3 (2025-07-26)

ContourPy 1.3.3 is a compatibility release adding support for CPython 3.14 and Windows on ARM.

This release supports CPython 3.11 to 3.14, and PyPy 3.11.

Compatibility:

  • Support Windows on ARM (:pr:476, :pr:477, :pr:483)
  • Bump minimum supported Python to 3.11 (:pr:[#478](https://github.com/contourpy/contourpy/issues/478))
  • Support Python 3.14 (:pr:479, :pr:485, :pr:490)

Code improvements:

  • Update type annotations for bokeh 3.7.3 (:pr:475)
  • Support type annotation changes in numpy 2.3.0 (:pr:480)

Build, testing and CI improvements:

  • Remove Python 3.13.3 pin (:pr:487)
  • CI install numpy 2.3.2 wheels from PyPI for Python 3.14 and Windows ARM (:pr:488)

v1.3.2 (2025-04-15)

ContourPy 1.3.2 is a minor release to support changes in type annotations in Bokeh >= 3.7 and add support for PyPy 3.11.

This release supports CPython 3.10 to 3.13, and PyPy 3.10 to 3.11.

Compatibility:

  • Fix type annotations for Bokeh >= 3.7 (:pr:471)

Build, testing and CI improvements:

  • Test on CPython 3.14 (:pr:470)
  • Test and build wheels for PyPy 3.11 (:pr:464)
  • Test PyPy 3.10 on all 3 major OSes (:pr:465)
  • Use ubuntu-24.04-arm runners (:pr:459)

v1.3.1 (2024-11-12)

ContourPy 1.3.1 is a compatibility release to support changes in bokeh, meson-python and pybind11.

This release supports Python 3.10 to 3.13.

... (truncated)

Commits

Updates evaluate from 0.4.3 to 0.4.5

Release notes

Sourced from evaluate's releases.

v0.4.5

What's Changed

Full Changelog: huggingface/evaluate@v0.4.4...v0.4.5

v0.4.4

Bug fixes

Other changes

New Contributors

Full Changelog: huggingface/evaluate@v0.4.3...v0.4.4

Commits

Updates fastrlock from 0.8.2 to 0.8.3

Changelog

Sourced from fastrlock's changelog.

0.8.3 (2024-12-17)

  • Rebuilt with Cython 3.0.11 to add Python 3.13 support.
Commits
  • 841e3de Prepare release of 0.8.3.
  • f89f0f0 Remove official Py2 support but keep building Linux wheels for it.
  • 375d793 Build: Remove Py3.7 which is EOL.
  • a799395 Build: Clean up artefact uploading for tool version v4.
  • 3f52f73 Build: Clean up artefact uploading. for tool version v4.
  • dd29298 Build: Use more recent and hopefully working macOS deployment target version.
  • 0043caa Improve function signatures for exception handling in recent Cython versions.
  • 5c74fe5 Build: Update targets, tools and dependencies.
  • 7a02e09 CI: Avoid duplicate builds.
  • 984bc48 CI: Split AArch64 targets to parallelise their build.
  • Additional commits viewable in compare view

Updates httpcore from 1.0.6 to 1.0.9

Release notes

Sourced from httpcore's releases.

Version 1.0.9 (April 24th, 2025)

Version 1.0.8 (April 11th, 2025)

  • Fix AttributeError when importing on Python 3.14. (#1005)

Version 1.0.7 (November 15th, 2024)

  • Support proxy=… configuration on ConnectionPool(). (#974)
Changelog

Sourced from httpcore's changelog.

Version 1.0.9 (April 24th, 2025)

Version 1.0.8 (April 11th, 2025)

  • Fix AttributeError when importing on Python 3.14. (#1005)

Version 1.0.7 (November 15th, 2024)

  • Support proxy=… configuration on ConnectionPool(). (#974)
Commits

Updates jinja2 from 3.1.4 to 3.1.6

Release notes

Sourced from jinja2's releases.

3.1.6

This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. GHSA-cpwx-vrp4-4pq7

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. #2032
  • Calling sync render for an async template uses asyncio.run. #1952
  • Avoid unclosed auto_aiter warnings. #1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. #1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. #1960
  • The runtime uses the correct concat function for the current environment when calling block references. #1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
  • |int filter handles OverflowError from scientific notation. #1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025
  • Fix copy/pickle support for the internal missing object. #2027
  • Environment.overlay(enable_async) is applied correctly. #2061
  • The error message from FileSystemLoader includes the paths that were searched. #1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705
  • Improve annotations for methods returning copies. #1880
  • urlize does not add mailto: to values like @a@b. #1870
  • Tests decorated with @pass_context can be used with the |select filter. #1624
  • Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413
  • Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253
Changelog

Sourced from jinja2's changelog.

Version 3.1.6

Released 2025-03-05

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

Version 3.1.5

Released 2024-12-21

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032
  • Calling sync render for an async template uses asyncio.run. :pr:1952
  • Avoid unclosed auto_aiter warnings. :pr:1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960
  • The runtime uses the correct concat function for the current environment when calling block references. :issue:1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781
  • |int filter handles OverflowError from scientific notation. :issue:1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025
  • Fix copy/pickle support for the internal missing object. :issue:2027
  • Environment.overlay(enable_async) is applied correctly. :pr:2061
  • The error message from FileSystemLoader includes the paths that were searched. :issue:1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705
  • Improve annotations for methods returning copies. :pr:1880
  • urlize does not add mailto: to values like @a@b. :pr:1870

... (truncated)

Commits

Updates kiwisolver from 1.4.7 to 1.4.9

Release notes

Sourced from kiwisolver's releases.

1.4.9

What's Changed

New Contributors

Full Changelog: nucleic/kiwi@1.4.8...1.4.9

1.4.8

What's Changed

New Contributors

Full Changelog: nucleic/kiwi@1.4.7...1.4.8

Changelog

Sourced from kiwisolver's changelog.

Wrappers 1.4.9 | Solver 1.4.2 | 10/08/2025

  • add support for Python 3.14 PR #196 #198
  • include Python.h, or headers including Python.h, before system headers

Wrappers 1.4.8 | Solver 1.4.2 | 24/12/2024

  • drop support for Python 3.8 and 3.9 PR #189
  • do not link to MSVCP on Windows and drop windows 32 bits support PR #189
  • add support for free-threaded builds on Python 3.13 PR #190 #191
Commits
  • 728f566 cut release 1.4.9 and update
  • a399bec Merge pull request #198 from nucleic/py314
  • b1691dd ci: enable 3.13 free threaded build on ARM windows
  • eb54bba ci: update release workflow and test on 3.14
  • 4d2c21e Merge pull request #196 from neutrinoceros/whl/pin-cibuildwheel
  • 0b7ab52 WHL: pin cibuildwheel 3.1.1, enable cp314 wheels
  • 80e76ba Merge pull request #193 from DWesl/patch-1
  • cb9ced4 Add a release note
  • 0710eff Include python-including headers first
  • f4b0ebe Include python-including headers first
  • Additional commits viewable in compare view

Updates mbstrdecoder from 1.1.3 to 1.1.4

Release notes

Sourced from mbstrdecoder's releases.

v1.1.4

  • Fix UnicodeDecodeError exception sending correctly
  • Add GitHub Actions workflow for building, publishing, and signing packages to PyPI
  • Remove deprecated tests_require from setup.py
  • Modify to use setuptools_scm for package build
  • Add support for Python 3.13
  • Drop support for Python 3.7/3.8
  • Add metadata attributes to the mbstrdecoder module
  • Improve type annotations

Full Changelog: thombashi/mbstrdecoder@v1.1.3...v1.1.4

Commits
  • 48661b8 Bump version to 1.1.4
  • 2424d5f Use Final for constants
  • b411aa9 Add GitHub Actions workflow for building, publishing, and signing packages to...
  • a0bf607 Rename lint and test workflow to CI
  • 060d424 Update lint and test workflow to ignore specific paths for push and pull requ...
  • f250349 Add permissions section to lint and test workflow
  • ea3c673 Add build package job to CI
  • 57bc8f6 Add GitHub Actions workflow for publishing to TestPyPI and signing with Sigstore
  • 89961be Refactor GitHub Actions workflow to improve test reporting and coverage uploa...
  • aa0629a Refactor the lint job
  • Additional commits v...

    Description has been truncated

warpmatrix and others added 4 commits September 16, 2025 17:13
Bumps the patch-update group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [requests](https://github.com/psf/requests) | `2.32.3` | `2.32.5` |
| [einops](https://github.com/arogozhnikov/einops) | `0.8.0` | `0.8.1` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.0` | `3.4.3` |
| [contourpy](https://github.com/contourpy/contourpy) | `1.3.0` | `1.3.3` |
| [evaluate](https://github.com/huggingface/evaluate) | `0.4.3` | `0.4.5` |
| [fastrlock](https://github.com/scoder/fastrlock) | `0.8.2` | `0.8.3` |
| [httpcore](https://github.com/encode/httpcore) | `1.0.6` | `1.0.9` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.6` |
| [kiwisolver](https://github.com/nucleic/kiwi) | `1.4.7` | `1.4.9` |
| [mbstrdecoder](https://github.com/thombashi/mbstrdecoder) | `1.1.3` | `1.1.4` |
| [msgpack](https://github.com/msgpack/msgpack-python) | `1.1.0` | `1.1.1` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.2.0` | `3.2.4` |
| [pytablewriter](https://github.com/thombashi/pytablewriter) | `1.2.0` | `1.2.1` |
| [tabledata](https://github.com/thombashi/tabledata) | `1.3.3` | `1.3.4` |
| [tcolorpy](https://github.com/thombashi/tcolorpy) | `0.1.6` | `0.1.7` |
| [timm](https://github.com/huggingface/pytorch-image-models) | `1.0.11` | `1.0.19` |


Updates `requests` from 2.32.3 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.3...v2.32.5)

Updates `einops` from 0.8.0 to 0.8.1
- [Release notes](https://github.com/arogozhnikov/einops/releases)
- [Commits](arogozhnikov/einops@v0.8.0...v0.8.1)

Updates `charset-normalizer` from 3.4.0 to 3.4.3
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.0...3.4.3)

Updates `contourpy` from 1.3.0 to 1.3.3
- [Release notes](https://github.com/contourpy/contourpy/releases)
- [Changelog](https://github.com/contourpy/contourpy/blob/main/docs/changelog.rst)
- [Commits](contourpy/contourpy@v1.3.0...v1.3.3)

Updates `evaluate` from 0.4.3 to 0.4.5
- [Release notes](https://github.com/huggingface/evaluate/releases)
- [Commits](huggingface/evaluate@v0.4.3...v0.4.5)

Updates `fastrlock` from 0.8.2 to 0.8.3
- [Release notes](https://github.com/scoder/fastrlock/releases)
- [Changelog](https://github.com/scoder/fastrlock/blob/master/CHANGES.rst)
- [Commits](scoder/fastrlock@v0.8.2...v0.8.3)

Updates `httpcore` from 1.0.6 to 1.0.9
- [Release notes](https://github.com/encode/httpcore/releases)
- [Changelog](https://github.com/encode/httpcore/blob/master/CHANGELOG.md)
- [Commits](encode/httpcore@1.0.6...1.0.9)

Updates `jinja2` from 3.1.4 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.4...3.1.6)

Updates `kiwisolver` from 1.4.7 to 1.4.9
- [Release notes](https://github.com/nucleic/kiwi/releases)
- [Changelog](https://github.com/nucleic/kiwi/blob/main/releasenotes.rst)
- [Commits](nucleic/kiwi@1.4.7...1.4.9)

Updates `mbstrdecoder` from 1.1.3 to 1.1.4
- [Release notes](https://github.com/thombashi/mbstrdecoder/releases)
- [Commits](thombashi/mbstrdecoder@v1.1.3...v1.1.4)

Updates `msgpack` from 1.1.0 to 1.1.1
- [Release notes](https://github.com/msgpack/msgpack-python/releases)
- [Changelog](https://github.com/msgpack/msgpack-python/blob/main/ChangeLog.rst)
- [Commits](msgpack/msgpack-python@v1.1.0...v1.1.1)

Updates `pyparsing` from 3.2.0 to 3.2.4
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.2.0...3.2.4)

Updates `pytablewriter` from 1.2.0 to 1.2.1
- [Release notes](https://github.com/thombashi/pytablewriter/releases)
- [Changelog](https://github.com/thombashi/pytablewriter/blob/master/CHANGELOG.md)
- [Commits](thombashi/pytablewriter@v1.2.0...v1.2.1)

Updates `tabledata` from 1.3.3 to 1.3.4
- [Release notes](https://github.com/thombashi/tabledata/releases)
- [Commits](thombashi/tabledata@v1.3.3...v1.3.4)

Updates `tcolorpy` from 0.1.6 to 0.1.7
- [Release notes](https://github.com/thombashi/tcolorpy/releases)
- [Changelog](https://github.com/thombashi/tcolorpy/blob/master/CHANGELOG.md)
- [Commits](thombashi/tcolorpy@v0.1.6...v0.1.7)

Updates `timm` from 1.0.11 to 1.0.19
- [Release notes](https://github.com/huggingface/pytorch-image-models/releases)
- [Commits](huggingface/pytorch-image-models@v1.0.11...v1.0.19)

---
updated-dependencies:
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: einops
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: charset-normalizer
  dependency-version: 3.4.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: contourpy
  dependency-version: 1.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: evaluate
  dependency-version: 0.4.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: fastrlock
  dependency-version: 0.8.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: httpcore
  dependency-version: 1.0.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: kiwisolver
  dependency-version: 1.4.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: mbstrdecoder
  dependency-version: 1.1.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: msgpack
  dependency-version: 1.1.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: pyparsing
  dependency-version: 3.2.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: pytablewriter
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: tabledata
  dependency-version: 1.3.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: tcolorpy
  dependency-version: 0.1.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: timm
  dependency-version: 1.0.19
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-update
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Sep 16, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 22, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 6, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant