Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 2, 2025

Bumps the all-dependencies group with 20 updates in the / directory:

Package From To
alembic 1.16.2 1.16.5
fastapi 0.115.14 0.116.1
sqlalchemy 2.0.41 2.0.43
coverage 7.9.1 7.10.6
freezegun 1.5.2 1.5.5
greenlet 3.2.3 3.2.4
mypy 1.16.1 1.17.1
pre-commit 4.2.0 4.3.0
pytest-asyncio 1.0.0 1.1.0
ruff 0.12.1 0.12.11
anyio 4.9.0 4.10.0
certifi 2025.6.15 2025.8.3
distlib 0.3.9 0.4.0
email-validator 2.2.0 2.3.0
filelock 3.18.0 3.19.1
identify 2.6.12 2.6.13
platformdirs 4.3.8 4.4.0
starlette 0.46.2 0.47.3
typing-extensions 4.14.0 4.15.0
virtualenv 20.31.2 20.34.0

Updates alembic from 1.16.2 to 1.16.5

Release notes

Sourced from alembic's releases.

1.16.5

Released: August 27, 2025

bug

  • [bug] [mysql] Fixed Python-side autogenerate rendering of index expressions in MySQL dialect by aligning it with SQLAlchemy's MySQL index expression rules. Pull request courtesy david-fed.

    References: #1492

  • [bug] [config] Fixed issue where new pyproject.toml config would fail to parse the integer value used for the truncate_slug_length parameter. Pull request courtesy Luís Henrique Allebrandt Schunemann.

    References: #1709

1.16.4

Released: July 10, 2025

bug

  • [bug] [config] Fixed issue in new pyproject.toml support where boolean values, such as those used for the recursive_version_locations and sourceless configuration parameters, would not be accepted.

    References: #1694

1.16.3

Released: July 8, 2025

usecase

  • [usecase] [commands] Added new pyproject_async template, combining the new pyproject template with the async template. Pull request courtesy Alc-Alc.

    References: #1683

  • [usecase] [autogenerate] Add "module" post-write hook. This hook type is almost identical to the console_scripts hook, except it's running python -m black instead of using black's console_script. It is mainly useful for tools without console scripts (e.g. ruff), but has semantics closer to the console_scripts hook in that it finds the ruff module available to the running interpreter instead of finding an executable by path. Pull request

... (truncated)

Commits

Updates fastapi from 0.115.14 to 0.116.1

Release notes

Sourced from fastapi's releases.

0.116.1

Upgrades

  • ⬆️ Upgrade Starlette supported version range to >=0.40.0,<0.48.0. PR #13884 by @​tiangolo.

Docs

  • 📝 Add notification about impending changes in Translations to docs/en/docs/contributing.md. PR #13886 by @​YuriiMotov.

Internal

0.116.0

Features

  • ✨ Add support for deploying to FastAPI Cloud with fastapi deploy. PR #13870 by @​tiangolo.

Installing fastapi[standard] now includes fastapi-cloud-cli.

This will allow you to deploy to FastAPI Cloud with the fastapi deploy command.

If you want to install fastapi with the standard dependencies but without fastapi-cloud-cli, you can install instead fastapi[standard-no-fastapi-cloud-cli].

Translations

Internal

Commits
  • 3137234 🔖 Release version 0.116.1
  • 095dab0 📝 Update release notes
  • cad6880 ⬆️ Upgrade Starlette supported version range to >=0.40.0,<0.48.0 (#13884)
  • a6e79e6 📝 Update release notes
  • 2c13b1b 📝 Add notification about impending changes in Translations to `docs/en/docs/c...
  • 7179d48 📝 Update release notes
  • 07bcb18 ⬆ [pre-commit.ci] pre-commit autoupdate (#13871)
  • bd8f358 🔖 Release version 0.116.0
  • 18eb7a7 📝 Update release notes
  • dd906a9 📝 Update release notes
  • Additional commits viewable in compare view

Updates sqlalchemy from 2.0.41 to 2.0.43

Release notes

Sourced from sqlalchemy's releases.

2.0.43

Released: August 11, 2025

orm

  • [orm] [bug] Fixed issue where using the post_update feature would apply incorrect "pre-fetched" values to the ORM objects after a multi-row UPDATE process completed. These "pre-fetched" values would come from any column that had an Column.onupdate callable or a version id generator used by orm.Mapper.version_id_generator; for a version id generator that delivered random identifiers like timestamps or UUIDs, this incorrect data would lead to a DELETE statement against those same rows to fail in the next step.

    References: #12748

  • [orm] [bug] Fixed issue where _orm.mapped_column.use_existing_column parameter in _orm.mapped_column() would not work when the _orm.mapped_column() is used inside of an Annotated type alias in polymorphic inheritance scenarios. The parameter is now properly recognized and processed during declarative mapping configuration.

    References: #12787

  • [orm] [bug] Improved the implementation of the _orm.selectin_polymorphic() inheritance loader strategy to properly render the IN expressions using chunks of 500 records each, in the same manner as that of the _orm.selectinload() relationship loader strategy. Previously, the IN expression would be arbitrarily large, leading to failures on databases that have limits on the size of IN expressions including Oracle Database.

    References: #12790

engine

  • [engine] [usecase] Added new parameter create_engine.skip_autocommit_rollback which provides for a per-dialect feature of preventing the DBAPI .rollback() from being called under any circumstances, if the connection is detected as being in "autocommit" mode. This improves upon a critical performance issue identified in MySQL dialects where the network overhead of the .rollback() call remains prohibitive even if autocommit mode is set.

    References: #12784

postgresql

... (truncated)

Commits

Updates coverage from 7.9.1 to 7.10.6

Changelog

Sourced from coverage's changelog.

Version 7.10.6 — 2025-08-29

  • Fix: source directories were not properly communicated to subprocesses that ran in different directories, as reported in issue 1499_. This is now fixed.

  • Performance: Alex Gaynor continues fine-tuning <pull 2038_>_ the speed of combination, especially with many contexts.

.. _issue 1499: nedbat/coveragepy#1499 .. _pull 2038: nedbat/coveragepy#2038

.. _changes_7-10-5:

Version 7.10.5 — 2025-08-23

  • Big speed improvements for coverage combine: it's now about twice as fast! Huge thanks to Alex Gaynor for pull requests 2032 <pull 2032_>, 2033 <pull 2033_>, and 2034 <pull 2034_>_.

.. _pull 2032: nedbat/coveragepy#2032 .. _pull 2033: nedbat/coveragepy#2033 .. _pull 2034: nedbat/coveragepy#2034

.. _changes_7-10-4:

Version 7.10.4 — 2025-08-16

  • Added patch = fork for times when the built-in forking support is insufficient.

  • Fix: patch = execv also inherits the entire coverage configuration now.

.. _changes_7-10-3:

Version 7.10.3 — 2025-08-10

  • Fixes for patch = subprocess:

    • If subprocesses spawned yet more subprocesses simultaneously, some coverage could be missed. This is now fixed, closing issue 2024_.

    • If subprocesses were created in other directories, their data files were

... (truncated)

Commits
  • 88c55ff docs: sample HTML for 7.10.6
  • 01d8995 docs: prep for 7.10.6
  • 9b0c24f docs: thanks Alex #2038
  • 66d6910 fix: make source paths absolute where they exist. #1499
  • bb3382f build: no need for the combine/html times now
  • 9ea349a lab: warn_executed.py
  • 808c9b4 build: changing metacov.ini should trigger metacov
  • 384f5f2 build: oops, some 'if's are really line pragmas
  • a7224af perf: pre-compute the mapping between other_db.context and main.context (#2038)
  • 5c00c5b chore: bump the action-dependencies group with 3 updates (#2039)
  • Additional commits viewable in compare view

Updates freezegun from 1.5.2 to 1.5.5

Changelog

Sourced from freezegun's changelog.

1.5.5

  • Allow parametrized arguments called 'func' (Broken in 1.5.4)

1.5.4

  • Fix: Ability to yield fixtures (broken in 1.5.3)

1.5.3

  • Fix compatibility with pytest 8.4.0 when using fixtures
  • Add (back) class-decorator overload to guarantee Pytype understands it
Commits
  • c9bf52c Increase version number
  • 0f2bd7e Merge pull request #582 from spulec/fixture-called-func
  • a608055 Allow parametrized arguments with name 'func'
  • 2bb4711 Increase version number
  • 7599eee Add 1.5.4 release notes
  • 0d00e7d Merge pull request #579 from zsh8/decorate_generator
  • 10c93f2 fix: preserve functionality in pytest yield fixtures
  • d2e0a00 Increase version number
  • 6229e27 Add 1.5.3 release notes
  • 3111775 Merge pull request #576 from spulec/support-fixtures-pytest-840
  • Additional commits viewable in compare view

Updates greenlet from 3.2.3 to 3.2.4

Changelog

Sourced from greenlet's changelog.

3.2.4 (2025-08-07)

.. note::

The 3.2.x series will be the last to support Python 3.9.

  • Various small build/test changes for less common configurations (e.g., building CPython with assertions enabled but NOT debugging), contributed by Michał Górny. Note that while greenlet will BUILD in a free-threaded Python, it will cause the GIL to be allocated and used, and memory may leak. Also note that these configurations are not tested by this project's CI.
  • Fix an assertion error on debug builds of Python 3.14 when using the experimental JIT. See :issue:460 <https://github.com/python-greenlet/greenlet/issues/460>_.
Commits
  • 65f8da8 Preparing release 3.2.4
  • b2c6559 Update CHANGES for release.
  • b2aa1aa Merge pull request #462 from python-greenlet/issue460
  • a1990d8 Python3.14/JIT: Save and restore the PyThreadState current_executor object.
  • 68af251 Py3.14 w/JIT: Fix leakchecks.
  • 74a65bd Various free-threaded fixes; bump tested Python version.
  • e3e2953 Merge pull request #459 from mgorny/py314-debug-build-failure
  • bdb5f44 Merge pull request #456 from mgorny/setuptools-test-dep
  • b288f43 Merge pull request #457 from mgorny/fix-assert-test-skips
  • 739cc55 Fix py312+ crash test skips to correctly check for assertions
  • Additional commits viewable in compare view

Updates mypy from 1.16.1 to 1.17.1

Changelog

Sourced from mypy's changelog.

Mypy 1.17.1

  • Retain None as constraints bottom if no bottoms were provided (Stanislav Terliakov, PR 19485)
  • Fix "ignored exception in hasattr" in dmypy (Stanislav Terliakov, PR 19428)
  • Prevent a crash when InitVar is redefined with a method in a subclass (Stanislav Terliakov, PR 19453)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

  • Alexey Makridenko
  • Brian Schubert
  • Chad Dombrova
  • Chainfire
  • Charlie Denton
  • Charulata
  • Christoph Tyralla
  • CoolCat467
  • Donal Burns
  • Guy Wilson
  • Ivan Levkivskyi
  • johnthagen
  • Jukka Lehtosalo
  • Łukasz Kwieciński
  • Marc Mueller
  • Michael J. Sullivan
  • Mikhail Golubev
  • Sebastian Rittau
  • Shantanu
  • Stanislav Terliakov
  • wyattscarpenter

I’d also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 1.16

We’ve just uploaded mypy 1.16 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Different Property Getter and Setter Types

Mypy now supports using different types for a property getter and setter:

class A:
    _value: int
</tr></table> 

... (truncated)

Commits
  • acb2983 Bump version to 1.17.1
  • 933c913 Retain None as constraints bottom if no bottoms were provided (#19485)
  • 5f4428f Fix "ignored exception in hasattr" in dmypy (#19428)
  • 88fdeaa Prevent a crash when InitVar is redefined with a method in a subclass (#19453)
  • e44d14f Bump version to 1.17.1+dev
  • 0260991 Update version string
  • 3901aa2 Updates to 1.17 changelog (#19436)
  • 7d13396 Initial changelog for 1.17 release (#19427)
  • a182dec Combine the revealed types of multiple iteration steps in a more robust manne...
  • ab4fd57 Improve the handling of "iteration dependent" errors and notes in finally cla...
  • Additional commits viewable in compare view

Updates pre-commit from 4.2.0 to 4.3.0

Release notes

Sourced from pre-commit's releases.

pre-commit v4.3.0

Features

Changelog

Sourced from pre-commit's changelog.

4.3.0 - 2025-08-09

Features

Commits
  • b74a22d v4.3.0
  • cc899de Merge pull request #3507 from bc-lee/dart-fix
  • 2a0bcea Downgrade Dart SDK version installed in the CI
  • f1cc7a4 Make Dart pre-commit hook compatible with the latest Dart SDKs
  • 72a3b71 Merge pull request #3504 from pre-commit/pre-commit-ci-update-config
  • c8925a4 [pre-commit.ci] pre-commit autoupdate
  • a5fe6c5 Merge pull request #3496 from ericphanson/eph/jl-startup
  • 6f1f433 Julia language: skip startup.jl file
  • c681721 Merge pull request #3499 from pre-commit/pre-commit-ci-update-config
  • 4fd4537 [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates pytest-asyncio from 1.0.0 to 1.1.0

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio 1.1.0

Added

  • Propagation of ContextVars from async fixtures to other fixtures and tests on Python 3.10 and older (#127)
  • Cancellation of tasks when the loop_scope ends (#200)
  • Warning when the current event loop is closed by a test

Fixed

  • Error about missing loop when calling functions requiring a loop in the finally clause of a task (#878)
  • An error that could cause duplicate warnings to be issued

Notes for Downstream Packagers

pytest-asyncio 1.1.0a1

1.1.0a1 - 2025-06-30

Added

  • Propagation of ContextVars from async fixtures to other fixtures and tests on Python 3.10 and older (#127)
  • Cancellation of tasks when the loop_scope ends (#200)
  • Warning when the current event loop is closed by a test

Fixed

  • Error about missing loop when calling functions requiring a loop in the finally clause of a task (#878)
  • An error that could cause duplicate warnings to be issued

Notes for Downstream Packagers

Commits
  • ce06c07 chore: Prepare release of v1.1.0.
  • d9a8dcc ci: Workaround missing Tag annotation during release.
  • d66e12f [pre-commit.ci] pre-commit autoupdate
  • 9e5e25f Build(deps): Bump certifi in /dependencies/docs
  • 0e63423 Build(deps): Bump hypothesis in /dependencies/default
  • bd4551c Build(deps): Bump ncipollo/release-action from 1.16.0 to 1.18.0
  • 8e20305 Build(deps): Bump hypothesis in /dependencies/default
  • b7a8ab5 Build(deps): Bump coverage from 7.9.1 to 7.9.2 in /dependencies/default
  • 8cc378d Build(deps): Bump typing-extensions in /dependencies/default
  • fb6bfbf [pre-commit.ci] pre-commit autoupdate
  • Additional commits viewable in compare view

Updates ruff from 0.12.1 to 0.12.11

Release notes

Sourced from ruff's releases.

0.12.11

Release Notes

Preview features

  • [airflow] Extend AIR311 and AIR312 rules (#20082)
  • [airflow] Replace wrong path airflow.io.storage with airflow.io.store (AIR311) (#20081)
  • [flake8-async] Implement blocking-http-call-httpx-in-async-function (ASYNC212) (#20091)
  • [flake8-logging-format] Add auto-fix for f-string logging calls (G004) (#19303)
  • [flake8-use-pathlib] Add autofix for PTH211 (#20009)
  • [flake8-use-pathlib] Make PTH100 fix unsafe because it can change behavior (#20100)

Bug fixes

  • [pyflakes, pylint] Fix false positives caused by __class__ cell handling (F841, PLE0117) (#20048)
  • [pyflakes] Fix allowed-unused-imports matching for top-level modules (F401) (#20115)
  • [ruff] Fix false positive for t-strings in default-factory-kwarg (RUF026) (#20032)
  • [ruff] Preserve relative whitespace in multi-line expressions (RUF033) (#19647)

Rule changes

  • [ruff] Handle empty t-strings in unnecessary-empty-iterable-within-deque-call (RUF037) (#20045)

Documentation

  • Fix incorrect D413 links in docstrings convention FAQ (#20089)
  • [flake8-use-pathlib] Update links to the table showing the correspondence between os and pathlib (#20103)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

Commits
  • c2bc15b Bump 0.12.11 (#20136)
  • e586f6d [ty] Benchmarks for problematic implicit instance attributes cases (#20133)
  • 76a6b7e [pyflakes] Fix allowed-unused-imports matching for top-level modules (`F4...
  • 1ce6571 Move GitLab output rendering to ruff_db (#20117)
  • d9aaacd [ty] Evaluate reachability of non-definitely-bound to Ambiguous (#19579)
  • 18eaa65 [ty] Introduce a representation for the top/bottom materialization of an inva...
  • af259fa [flake8-async] Implement blocking-http-call-httpx (ASYNC212) (#20091)
  • d75ef38 [ty] print diagnostics with fully qualified name to disambiguate some cases (...
  • 89ca493 [ruff] Preserve relative whitespace in multi-line expressions (RUF033) (#...
  • 4b80f5f [ty] Optimize TDD atom ordering (#20098)
  • Additional commits viewable in compare view

Updates anyio from 4.9.0 to 4.10.0

Release notes

Sourced from anyio's releases.

4.10.0

  • Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer
  • Added various class methods to wrap existing sockets as listeners or socket streams:
    • SocketListener.from_socket()
    • SocketStream.from_socket()
    • UNIXSocketStream.from_socket()
    • UDPSocket.from_socket()
    • ConnectedUDPSocket.from_socket()
    • UNIXDatagramSocket.from_socket()
    • ConnectedUNIXDatagramSocket.from_socket()
  • Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects
  • Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups (#905; PR by @​agronholm and @​tapetersen)
  • Added the ability to specify the thread name in start_blocking_portal() (#818; PR by @​davidbrochart)
  • Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. (#896; PR by @​graingert)
  • Incorporated several documentation improvements from the EuroPython 2025 sprint (special thanks to the sprinters: Emmanuel Okedele, Jan Murre, Euxenia Miruna Goia and Christoffer Fjord)
  • Added a documentation page explaining why one might want to use AnyIO's APIs instead of asyncio's
  • Updated the to_interpreters module to use the public concurrent.interpreters API on Python 3.14 or later
  • Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7
  • Fixed return annotation of __aexit__ on async context managers. CMs which can suppress exceptions should return bool, or None otherwise. (#913; PR by @​Enegg)
  • Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size (#915; PR by @​11kkw)
  • Migrated testing and documentation dependencies from extras to dependency groups
  • Fixed compatibility of anyio.to_interpreter with Python 3.14.0b2 (#926; PR by @​hroncok)
  • Fixed SyntaxWarning on Python 3.14 about return in finally (#816)
  • Fixed RunVar name conflicts. RunVar instances with the same name should not share storage (#880; PR by @​vimfu)
  • Renamed the BrokenWorkerIntepreter exception to BrokenWorkerInterpreter. The old name is available as a deprecated alias. (#938; PR by @​ayussh-verma)
  • Fixed an edge case in CapacityLimiter on asyncio where a task, waiting to acquire a limiter gets cancelled and is subsequently granted a token from the limiter, but before the cancellation is delivered, and then fails to notify the next waiting task (#947)
Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

  • Set None as the default type argument for anyio.abc.TaskStatus

4.10.0

  • Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer

  • Added various class methods to wrap existing sockets as listeners or socket streams:

    • SocketListener.from_socket()
    • SocketStream.from_socket()
    • UNIXSocketStream.from_socket()
    • UDPSocket.from_socket()
    • ConnectedUDPSocket.from_socket()
    • UNIXDatagramSocket.from_socket()
    • ConnectedUNIXDatagramSocket.from_socket()
  • Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects

  • Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups ([#905](https://github.com/agronholm/anyio/issues/905) <https://github.com/agronholm/anyio/pull/905>_; PR by @​agronholm and @​tapetersen)

  • Added the ability to specify the thread name in start_blocking_portal() ([#818](https://github.com/agronholm/anyio/issues/818) <https://github.com/agronholm/anyio/issues/818>_; PR by @​davidbrochart)

  • Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. ([#896](https://github.com/agronholm/anyio/issues/896) <https://github.com/agronholm/anyio/pull/896>_; PR by @​graingert)

  • Incorporated several documentation improvements from the EuroPython 2025 sprint (special thanks to the sprinters: Emmanuel Okedele, Jan Murre, Euxenia Miruna Goia and Christoffer Fjord)

  • Added a documentation page explaining why one might want to use AnyIO's APIs instead of asyncio's

  • Updated the to_interpreters module to use the public concurrent.interpreters API on Python 3.14 or later

  • Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7

  • Fixed return annotation of __aexit__ on async context managers. CMs which can suppress exceptions should return bool, or None otherwise. ([#913](https://github.com/agronholm/anyio/issues/913) <https://github.com/agronholm/anyio/pull/913>_; PR by @​Enegg)

  • Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size ([#915](https://github.com/agronholm/anyio/issues/915) <https://github.com/agronholm/anyio/pull/915>_; PR by @​11kkw)

  • Migrated testing and documentation dependencies from extras to dependency groups

... (truncated)

Commits
  • 0cf55b8 Bumped up the version
  • b029df5 Updated the to_interpreter module to use the public API on Python 3.14 (#956)
  • 01f02cf Incorporated EP2025 sprint feedback and added a new section (#955)
  • d896480 [pre-commit.ci] pre-commit autoupdate (#954)
  • 0282b81 Added the BufferedByteReceiveStream.feed_data() method (#945)
  • 19e5477 Fixed a cancellation edge case for asyncio CapacityLimiter (#952)
  • 4666df3 [pre-commit.ci] pre-commit autoupdate (#946)
  • 38c2567 [pre-commit.ci] pre-commit autoupdate (#942)
  • 3db73ac Add missing imports for Readcting to cancellation in worker threads example (...
  • 2eda004 Added an example on how to use move_on_after() with shielding
  • Additional commits viewable in compare view

Updates certifi from 2025.6.15 to 2025.8.3

Commits

Updates distlib from 0.3.9 to 0.4.0

Changelog

Sourced from distlib's changelog.

0.4.0


Released: 2025-07-17
  • markers

    • Add the interpret_parsed function.
  • wheel

    • Fix #238: Add build tag to wheel metadata if specified.

    • Fix #243: Update to support free-threading version of Python (3.13t).

    • Fix #246: Support subdirectories in the dist-info directory. Thanks to Pieter P for the patch.

    • Fix #248: Fix path normalisation issue caused by the fix for #246.

    • Move import in script wrapper to "if name == 'main'" clause.

  • tests

    • Fix #245: Skip test_package_data if a SKIP_EXT_PACKAGE_DATA environment variable is present.
Commits
  • aff2cbb Finalise version.
  • 3716c4b Update change log, widen exception catching in test.
  • 660bd33 Changes for 0.4.0.
  • 56b4ad9 Guard script wrapper entrypoint import with if main (#242)
  • fe57366 docs: update coverage results link (#250)
  • c3286e5 Temporarily exclude 3.13t on windows-latest.
  • e6b83d3 Normalize archive paths in dist-info (#248)
  • 93baffe Skip no-longer-relevant test.
  • 83f6568 Support subdirectories in .dist-info (fixes #246) (#247)
  • f918abd Update test_wheel.WheelTestCase.test_abi for freethreading (#244)
  • Additional commits viewable in compare view

Updates email-validator from 2.2.0 to 2.3.0

Release notes

Sourced from email-validator's releases.

v2.3.0

  • The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.
  • The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new strict=True parameter, and the overall 254 character email address length limit is still in place.
  • New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.
  • When using allow_display_name=True, display names are now returned with Unicode NFC normalization.
  • TypeError is now raised if something other than str (or bytes) is passed as the email address.
Changelog

Sourced from email-validator's changelog.

2.3.0 (August 26, 2025)

  • The package name is changed from using an underscore (email_validator) to a dash (email-validator) to match PyPi's normalized package name.
  • The library no longer checks that the local part is at most 64 characters because a more careful reading of RFC 5321 indicates the limit is optional and such email addresses have been found in the wild. However the check can be restored using a new strict=True parameter, and the overall 254 character email address length limit is still in place.
  • New EmailSyntaxError messages are used for some exiting syntax errors related to @-sign homoglyphs and invalid characters in internationalized domains.
  • When using allow_display_name=True, display names are now returned with Unicode NFC normalization.
  • TypeError is now raised if something other than str (or bytes) is passed as the email address.
Commits
  • 030a63a Version 2.3.0
  • e943a0f Raise TypeError when an invalid argument is passed for email, closes #155
  • f90d256 Remove local part length check unless new strict flag is given, fixes #158
  • 98800ba Add explicit checks for internationalized domain name characters invalid unde...
  • 936aead Fix final syntax checks on normalized internationalized domains checking the ...
  • 8043de4 NFC-normalize display names per UTS #39
  • bc08faa Add one-off error messages for full-width-at and small-commercial-at which ar...
  • a1c90ab Split exceptions_types.py into exceptions.py and types.py
  • dbcf07c Change package name from using underscore to dash to match PyPi normalized pa...
  • 7c22208 Support ALLOW_DISPLAY_NAME and ALLOW_EMPTY_LOCAL in the CLI (#145)
  • Additional commits viewable in

Bumps the all-dependencies group with 20 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [alembic](https://github.com/sqlalchemy/alembic) | `1.16.2` | `1.16.5` |
| [fastapi](https://github.com/fastapi/fastapi) | `0.115.14` | `0.116.1` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.41` | `2.0.43` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.9.1` | `7.10.6` |
| [freezegun](https://github.com/spulec/freezegun) | `1.5.2` | `1.5.5` |
| [greenlet](https://github.com/python-greenlet/greenlet) | `3.2.3` | `3.2.4` |
| [mypy](https://github.com/python/mypy) | `1.16.1` | `1.17.1` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.3.0` |
| [pytest-asyncio](https://github.com/pytest-dev/pytest-asyncio) | `1.0.0` | `1.1.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.12.1` | `0.12.11` |
| [anyio](https://github.com/agronholm/anyio) | `4.9.0` | `4.10.0` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.6.15` | `2025.8.3` |
| [distlib](https://github.com/pypa/distlib) | `0.3.9` | `0.4.0` |
| [email-validator](https://github.com/JoshData/python-email-validator) | `2.2.0` | `2.3.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.18.0` | `3.19.1` |
| [identify](https://github.com/pre-commit/identify) | `2.6.12` | `2.6.13` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.3.8` | `4.4.0` |
| [starlette](https://github.com/encode/starlette) | `0.46.2` | `0.47.3` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.14.0` | `4.15.0` |
| [virtualenv](https://github.com/pypa/virtualenv) | `20.31.2` | `20.34.0` |



Updates `alembic` from 1.16.2 to 1.16.5
- [Release notes](https://github.com/sqlalchemy/alembic/releases)
- [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/alembic/commits)

Updates `fastapi` from 0.115.14 to 0.116.1
- [Release notes](https://github.com/fastapi/fastapi/releases)
- [Commits](fastapi/fastapi@0.115.14...0.116.1)

Updates `sqlalchemy` from 2.0.41 to 2.0.43
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `coverage` from 7.9.1 to 7.10.6
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](nedbat/coveragepy@7.9.1...7.10.6)

Updates `freezegun` from 1.5.2 to 1.5.5
- [Release notes](https://github.com/spulec/freezegun/releases)
- [Changelog](https://github.com/spulec/freezegun/blob/master/CHANGELOG)
- [Commits](spulec/freezegun@1.5.2...1.5.5)

Updates `greenlet` from 3.2.3 to 3.2.4
- [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst)
- [Commits](python-greenlet/greenlet@3.2.3...3.2.4)

Updates `mypy` from 1.16.1 to 1.17.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](python/mypy@v1.16.1...v1.17.1)

Updates `pre-commit` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.3.0)

Updates `pytest-asyncio` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases)
- [Commits](pytest-dev/pytest-asyncio@v1.0.0...v1.1.0)

Updates `ruff` from 0.12.1 to 0.12.11
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.12.1...0.12.11)

Updates `anyio` from 4.9.0 to 4.10.0
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Changelog](https://github.com/agronholm/anyio/blob/master/docs/versionhistory.rst)
- [Commits](agronholm/anyio@4.9.0...4.10)

Updates `certifi` from 2025.6.15 to 2025.8.3
- [Commits](certifi/python-certifi@2025.06.15...2025.08.03)

Updates `distlib` from 0.3.9 to 0.4.0
- [Release notes](https://github.com/pypa/distlib/releases)
- [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst)
- [Commits](pypa/distlib@0.3.9...0.4.0)

Updates `email-validator` from 2.2.0 to 2.3.0
- [Release notes](https://github.com/JoshData/python-email-validator/releases)
- [Changelog](https://github.com/JoshData/python-email-validator/blob/main/CHANGELOG.md)
- [Commits](JoshData/python-email-validator@v2.2.0...v2.3.0)

Updates `filelock` from 3.18.0 to 3.19.1
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.18.0...3.19.1)

Updates `identify` from 2.6.12 to 2.6.13
- [Commits](pre-commit/identify@v2.6.12...v2.6.13)

Updates `platformdirs` from 4.3.8 to 4.4.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst)
- [Commits](tox-dev/platformdirs@4.3.8...4.4.0)

Updates `starlette` from 0.46.2 to 0.47.3
- [Release notes](https://github.com/encode/starlette/releases)
- [Changelog](https://github.com/encode/starlette/blob/master/docs/release-notes.md)
- [Commits](Kludex/starlette@0.46.2...0.47.3)

Updates `typing-extensions` from 4.14.0 to 4.15.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.14.0...4.15.0)

Updates `virtualenv` from 20.31.2 to 20.34.0
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.31.2...20.34.0)

---
updated-dependencies:
- dependency-name: alembic
  dependency-version: 1.16.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: fastapi
  dependency-version: 0.116.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sqlalchemy
  dependency-version: 2.0.43
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: coverage
  dependency-version: 7.10.6
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: freezegun
  dependency-version: 1.5.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: greenlet
  dependency-version: 3.2.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: mypy
  dependency-version: 1.17.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pre-commit
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pytest-asyncio
  dependency-version: 1.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: ruff
  dependency-version: 0.12.11
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: anyio
  dependency-version: 4.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: certifi
  dependency-version: 2025.8.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: distlib
  dependency-version: 0.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: email-validator
  dependency-version: 2.3.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: filelock
  dependency-version: 3.19.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: identify
  dependency-version: 2.6.13
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: platformdirs
  dependency-version: 4.4.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: starlette
  dependency-version: 0.47.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: typing-extensions
  dependency-version: 4.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: virtualenv
  dependency-version: 20.34.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Sep 2, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants