chore(deps): update all non-major dependencies #434
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
==25.3.0
->==25.4.0
==25.1.0
->==25.9.0
==25.1.0
->==25.9.0
==2025.7.14
->==2025.10.5
==3.4.2
->==3.4.4
==8.2.1
->==8.3.0
==0.21.2
->==0.22.2
==2.2.0
->==2.2.1
==4.59.0
->==4.60.1
==2.0
->==2.1
==3.10
->==3.11
==9.4.0
->==9.6.0
==6.0.1
->==6.1.0
==6.0.1
->==6.1.0
==1.5.1
->==1.5.2
==1.4.8
->==1.4.9
==6.0.0
->==6.0.2
==3.0.2
->==3.0.3
==3.10.3
->==3.10.7
==2.3.2
->==2.3.4
==0.8.4
->==0.8.5
==4.3.8
->==4.5.0
==1.31.0
->==1.34.0
==3.0.51
->==3.0.52
==3.2.3
->==3.2.5
==8.4.1
->==8.4.2
3.13
->3.14
==2.32.4
->==2.32.5
==3.2.0
->==3.5.2
==0.2.13
->==0.2.14
Release Notes
python-attrs/attrs (attrs)
v25.4.0
Compare Source
Backwards-incompatible Changes
Class-level
kw_only=True
behavior is now consistent withdataclasses
.Previously, a class that sets
kw_only=True
makes all attributes keyword-only, including those from base classes.If an attribute sets
kw_only=False
, that setting is ignored, and it is still made keyword-only.Now, only the attributes defined in that class that doesn't explicitly set
kw_only=False
are made keyword-only.This shouldn't be a problem for most users, unless you have a pattern like this:
Here, we have a
kw_only=True
attrs class (Base
) with an attribute that setskw_only=False
and has a default (Base.b
), and then create a subclass (Subclass
) with required arguments (Subclass.c
).Previously this would work, since it would make
Base.b
keyword-only, but now this fails sinceBase.b
is positional, and we have a required positional argument (Subclass.c
) following another argument with defaults.#1457
Changes
Values passed to the
__init__()
method ofattrs
classes are now correctly passed to__attrs_pre_init__()
instead of their default values (in cases where kw_only was not specified).#1427
Added support for Python 3.14 and PEP 749.
#1446,
#1451
attrs.validators.deep_mapping()
now allows to leave out either key_validator xor value_validator.#1448
attrs.validators.deep_iterator()
andattrs.validators.deep_mapping()
now accept lists and tuples for all validators and wrap them into aattrs.validators.and_()
.#1449
Added a new experimental way to inspect classes:
attrs.inspect(cls)
returns the effective class-wide parameters that were used by attrs to construct the class.The returned class is the same data structure that attrs uses internally to decide how to construct the final class.
#1454
Fixed annotations for
attrs.field(converter=...)
.Previously, a
tuple
of converters was only accepted if it had exactly one element.#1461
The performance of
attrs.asdict()
has been improved by 45–260%.#1463
The performance of
attrs.astuple()
has been improved by 49–270%.#1469
The type annotation for
attrs.validators.or_()
now allows for different types of validators.This was only an issue on Pyright.
#1474
psf/black (black)
v25.9.0
Compare Source
Highlights
await/async
as soft keywords/variable names(#4676)
Stable style
del
statement containing tuples (#4628)with
statements (#4630)
# fmt: skip
followed by a comment at the end of file (#4635)as
clause of awith
statement (#4634)with
statement (#4646)\
followed by a\r
followed by a comment (#4663)\\r\n
(#4673)await ...
(where...
is a literalEllipsis
) (#4676)(#4670)
Preview style
# fmt: skip
would stillbe formatted (#4552)
multiline_string_handling
with ternaries and dictionaries (#4657)string_processing
would not split f-strings directly afterexpressions (#4680)
in
clause of comprehensions across lines if necessary (#4699)except
andexcept*
withoutas
. (#4720)\r
style newlines to the potential newlines to normalize file newlines both fromand to (#4710)
Parser
parameter bounds and defaults. (#4602)
Performance
Integrations
psf/black
to read Black version from an additional section inpyproject.toml:
[project.dependency-groups]
(#4606)Documentation
certifi/python-certifi (certifi)
v2025.10.5
Compare Source
v2025.8.3
Compare Source
jawah/charset_normalizer (charset-normalizer)
v3.4.4
Compare Source
Changed
setuptools
to a specific constraintsetuptools>=68,<=81
.Removed
setuptools-scm
as a build dependency.Misc
dev-requirements.txt
and createdci-requirements.txt
for security purposes.multiple.intoto.jsonl
in GitHub releases in addition to individual attestation file per wheel.v3.4.3
Compare Source
Changed
CHARSET_NORMALIZER_USE_MYPYC
isn't set to1
. (#595) (#583)detect
output legacy function. (#391)Added
Fixed
Misc
Each published wheel comes with its SBOM. We choose CycloneDX as the format.
pallets/click (click)
v8.3.0
Compare Source
Released 2025-09-17
Improved flag option handling: Reworked the relationship between
flag_value
and
default
parameters for better consistency:default
parameter value is now preserved as-is and passed directlyto CLI functions (no more unexpected transformations)
default=True
maintain backward compatibilityby defaulting to their
flag_value
default
parameter can now be any type (bool
,None
, etc.)1992
:issue:2514
:issue:2610
:issue:
3024
:pr:3030
Allow
default
to be set onArgument
fornargs = -1
. :issue:2164
:pr:
3030
Show correct auto complete value for
nargs
option in combination with flagoption :issue:
2813
Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:
2995
:pr:3013
Lazily import
shutil
. :pr:3023
Properly forward exception information to resources registered with
click.core.Context.with_resource()
. :issue:2447
:pr:3058
Fix regression related to EOF handling in CliRunner. :issue:
2939
:pr:2940
v8.2.2
Compare Source
Released 2025-07-31
default
,flag_value
andtype
parameters forflag options, as well as parsing and normalization of environment variables.
:issue:
2952
:pr:2956
BadParameter
andMissingParameter
exceptions for theparameter
param_hint
that did not allow for a sequence of string where theunderlying function
_join_param_hints
allows for it. :issue:2777
:pr:2990
Enum
choices to render their default value in helpscreen. Refs :issue:
2911
:pr:3004
zsh
) for completion items containingcolons. :issue:
2703
:pr:2846
2971
:pr:2972
click.testing.StreamMixer
's finalization that manifestedas a
ValueError
on close in a multi-threaded test session.:issue:
2993
:pr:2991
alexmojaki/executing (executing)
v2.2.1
Compare Source
fonttools/fonttools (fonttools)
v4.60.1
Compare Source
UFOReader.getKerningGroupConversionRenameMaps
that broke compatibility with downstream projects like defcon (#3948, #3947, robotools/defcon#478).
getKerningGroupConversionRenameMaps
method (#3950).v4.60.0
Compare Source
[pointPen] Allow
reverseFlipped
parameter ofDecomposingPointPen
to take aReverseFlipped
enum value to control whether/how to reverse contour direction of flipped components, in addition to the existing True/False. This allows to setReverseFlipped.ON_CURVE_FIRST
to ensure that the decomposed outline starts with an on-curve point before being reversed, for better consistency with other segment-oriented contour transformations. The change is backward compatible, and the default behavior hasn't changed (#3934).[filterPen] Added
ContourFilterPointPen
, base pen for buffered contour operations, andOnCurveStartPointPen
filter to ensure contours start with an on-curve point (#3934).[cu2qu] Fixed difference in cython vs pure-python complex division by real number (#3930).
[varLib.avar] Refactored and added some new sub-modules and scripts (#3926).
varLib.avar.build
module to build avar (and a missing fvar) binaries into a possibly empty TTFont,varLib.avar.unbuild
module to print a .designspace snippet that would generate the same avar binary,varLib.avar.map
module to take TTFont and do the mapping, in user/normalized space,varLib.avar.plan
module moved fromvarLib.avarPlanner
.The bare
fonttools varLib.avar
script is deprecated, in favour offonttools varLib.avar.build
(orunbuild
).[interpolatable] Clarify
linear_sum_assignment
backend options and minimal dependency usage (#3927).[post] Speed up
build_psNameMapping
(#3923).[ufoLib] Added typing annotations to fontTools.ufoLib (#3875).
v4.59.2
Compare Source
USE_MY_METRICS
component flags when inconsistent across masters (#3912).dot()
product of perpendicular vectors not always returning exactly 0.0 in all Python implementations (#3911)avar2
fonts (#3909).VariableScalar
's axis locations (#3906, #3907).calc_intersect
for degenerate cubic curves where 3 to 4 control points are equal (#3904).v4.59.1
Compare Source
varLib.mutator
in favor ofvarLib.instancer
. The latter provides equivalent full (static font) instancing in addition to partial VF instancing.CLI users should replace
fonttools varLib.mutator
withfonttools varLib.instancer
. API users should migrate tofontTools.varLib.instancer.instantiateVariableFont
(#2680).geographiclib/geographiclib-python (geographiclib)
v2.1
Compare Source
kjd/idna (idna)
v3.11
Compare Source
ipython/ipython (ipython)
v9.6.0
Compare Source
v9.5.0
Compare Source
PyCQA/isort (isort)
v6.1.0
Compare Source
joblib/joblib (joblib)
v1.5.2
Compare Source
loky3.5.6
fixing the resource tracker for python 3.13.7+#1740
Memory:
nucleic/kiwi (kiwisolver)
v1.4.9
Compare Source
lxml/lxml (lxml)
v6.0.2
Compare Source
==================
Bugs fixed
LP#2125278: Compilation with libxml2 2.15.0 failed.
Original patch by Xi Ruoyao.
Setting
decompress=True
in the parser had no effect in libxml2 2.15.Binary wheels on Linux and macOS use the library version libxml2 2.14.6.
See https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.6
Test failures in libxml2 2.15.0 were fixed.
Other changes
Binary wheels for Py3.9-3.11 on the
riscv64
architecture were added.Error constants were updated to match libxml2 2.15.0.
Built using Cython 3.1.4.
v6.0.1
Compare Source
==================
Bugs fixed
LP#2116333:
lxml.sax._getNsTag()
could fail with an exception on malformed input.GH#467: Some test adaptations were made for libxml2 2.15.
Patch by Nick Wellnhofer.
LP2119510, GH#473: A Python compatibility test was fixed for Python 3.14+.
Patch by Lumír Balhar.
GH#471: Wheels for "riscv64" on recent Python versions were added.
Patch by ffgan.
GH#469: The wheel build no longer requires the
wheel
package unconditionally.Patch by Miro Hrončok.
Binary wheels use the library version libxml2 2.14.5.
See https://gitlab.gnome.org/GNOME/libxml2/-/releases/v2.14.5
Windows binary wheels continue to use a security patched library version libxml2 2.11.9.
pallets/markupsafe (markupsafe)
v3.0.3
Compare Source
Released 2025-09-27
__version__
raisesDeprecationWarning
instead ofUserWarning
.:issue:
487
489
) for the C extension.:issue:
494
485
503
505
matplotlib/matplotlib (matplotlib)
v3.10.7
: REL: v3.10.7Compare Source
This is the latest bugfix release in the 3.10.x series.
The most important update in this release is that the minimum version
of
pyparsing
has been updated to version 3.0.v3.10.6
: REL: v3.10.6Compare Source
This is a bugfix release in the 3.10.x series.
Highlights from this release include:
v3.10.5
: REL: v3.10.5Compare Source
This is the fourth bugfix release of the 3.10.x series.
Included in this release is distributed wheels for Python 3.14 (including freethreaded) and Windows ARM.
There are also several smaller bugfixes.
numpy/numpy (numpy)
v2.3.4
Compare Source
v2.3.3
: 2.3.3 (Sep 9, 2025)Compare Source
NumPy 2.3.3 Release Notes
The NumPy 2.3.3 release is a patch release split between a number of maintenance
updates and bug fixes. This release supports Python versions 3.11-3.14. Note
that the 3.14.0 final is currently expected in Oct, 2025. This release is based
on 3.14.0rc2.
Contributors
A total of 13 people contributed to this release. People with a "+" by their
names contributed a patch for the first time.
Pull requests merged
A total of 23 pull requests were merged for this release.
sorted
kwarg tounique
davidhalter/parso (parso)
v0.8.5
Compare Source
tox-dev/platformdirs (platformdirs)
v4.5.0
Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/platformdirs@4.4.0...4.5.0
v4.4.0
Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/platformdirs@4.3.8...4.4.0
prompt-toolkit/python-prompt-toolkit (prompt-toolkit)
v3.0.52
Compare Source
New features:
choice()
shortcut for selecting an option amongst a list of choices(see documentation for examples).
frame=...
option forprompt()
andchoice()
shortcuts to allow fordisplaying a frame around the input prompt.
Fixes:
pytest-dev/pytest (pytest)
v8.4.2
Compare Source
actions/python-versions (python)
v3.14.0
: 3.14.0Compare Source
Python 3.14.0
psf/requests (requests)
v2.32.5
Compare Source
Bugfixes
a new class of issues in Requests that have had negative impact across a number
of use cases. The Requests team has decided to revert this feature as long term
maintenance of it is proving to be unsustainable in its current iteration.
Deprecations
tox-dev/sphinx-autodoc-typehints (sphinx-autodoc-typehints)
v3.5.2
Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/sphinx-autodoc-typehints@3.5.1...3.5.2
v3.5.1
Compare Source
What's Changed
Full Changelog: tox-dev/sphinx-autodoc-typehints@3.5.0...3.5.1
v3.5.0
Compare Source
What's Changed
Full Changelog: tox-dev/sphinx-autodoc-typehints@3.4.0...3.5.0
v3.4.0
Compare Source
What's Changed
Full Changelog: tox-dev/sphinx-autodoc-typehints@3.3.0...3.4.0
v3.3.0
Compare Source
What's Changed
New Contributors
Full Changelog: tox-dev/sphinx-autodoc-typehints@3.2.0...3.3.0
jquast/wcwidth (wcwidth)
v0.2.14
Compare Source
0.2.14 2025-09-22
PR #146.
0.2.13 measured as 0. PR #149.
Full Changelog: jquast/wcwidth@0.2.13...0.2.14
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.