You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@airflow.apache.org by "dependabot[bot] (via GitHub)" <gi...@apache.org> on 2026/04/24 16:59:59 UTC
[PR] Bump the pip-dependency-updates group across 2 directories with 8 updates [airflow]
dependabot[bot] opened a new pull request, #65803:
URL: https://github.com/apache/airflow/pull/65803
Updates the requirements on [filelock](https://github.com/tox-dev/py-filelock), [packaging](https://github.com/pypa/packaging), [virtualenv](https://github.com/pypa/virtualenv), [pytest](https://github.com/pytest-dev/pytest), [requests](https://github.com/psf/requests), [python-on-whales](https://github.com/gabrieldemarmiesse/python-on-whales), [click](https://github.com/pallets/click) and [jinja2](https://github.com/pallets/jinja) to permit the latest version.
Updates `filelock` from 3.25.2 to 3.29.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases">filelock's releases</a>.</em></p>
<blockquote>
<h2>3.29.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(async): use single-thread executor for lock consistency by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/533">tox-dev/filelock#533</a></li>
<li>✨ feat(soft): enable stale lock detection on Windows by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/534">tox-dev/filelock#534</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.28.0...3.29.0">https://github.com/tox-dev/filelock/compare/3.28.0...3.29.0</a></p>
<h2>3.28.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(ci): unbreak release workflow, publish to PyPI again by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/529">tox-dev/filelock#529</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.27.0...3.28.0">https://github.com/tox-dev/filelock/compare/3.27.0...3.28.0</a></p>
<h2>3.27.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>✨ feat(rw): add SoftReadWriteLock for NFS and HPC clusters by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/528">tox-dev/filelock#528</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.26.1...3.27.0">https://github.com/tox-dev/filelock/compare/3.26.1...3.27.0</a></p>
<h2>3.26.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(asyncio): add <strong>exit</strong> to BaseAsyncFileLock and fix <strong>del</strong> loop handling by <a href="https://github.com/naarob"><code>@naarob</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/518">tox-dev/filelock#518</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/naarob"><code>@naarob</code></a> made their first contribution in <a href="https://redirect.github.com/tox-dev/filelock/pull/518">tox-dev/filelock#518</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.26.0...3.26.1">https://github.com/tox-dev/filelock/compare/3.26.0...3.26.1</a></p>
<h2>3.26.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🔒 ci(workflows): add zizmor security auditing by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/517">tox-dev/filelock#517</a></li>
<li>🔧 fix(ci): restore git credentials for release job by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/520">tox-dev/filelock#520</a></li>
<li>✨ feat(soft): add PID inspection and lock breaking by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/524">tox-dev/filelock#524</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.25.2...3.26.0">https://github.com/tox-dev/filelock/compare/3.25.2...3.26.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst">filelock's changelog</a>.</em></p>
<blockquote>
<p>###########
Changelog
###########</p>
<hr />
<p>3.29.0 (2026-04-19)</p>
<hr />
<ul>
<li>✨ feat(soft): enable stale lock detection on Windows :pr:<code>534</code></li>
<li>🐛 fix(async): use single-thread executor for lock consistency :pr:<code>533</code></li>
<li>build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 :pr:<code>530</code> - by :user:<code>dependabot[bot]</code></li>
</ul>
<hr />
<p>3.28.0 (2026-04-14)</p>
<hr />
<ul>
<li>🐛 fix(ci): unbreak release workflow, publish to PyPI again :pr:<code>529</code></li>
</ul>
<hr />
<p>3.26.1 (2026-04-09)</p>
<hr />
<ul>
<li>🐛 fix(asyncio): add <strong>exit</strong> to BaseAsyncFileLock and fix <strong>del</strong> loop handling :pr:<code>518</code> - by :user:<code>naarob</code></li>
<li>build(deps): bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 :pr:<code>525</code> - by :user:<code>dependabot[bot]</code></li>
</ul>
<hr />
<p>3.26.0 (2026-04-06)</p>
<hr />
<ul>
<li>✨ feat(soft): add PID inspection and lock breaking :pr:<code>524</code></li>
<li>[pre-commit.ci] pre-commit autoupdate :pr:<code>523</code> - by :user:<code>pre-commit-ci[bot]</code></li>
<li>build(deps): bump astral-sh/setup-uv from 7.6.0 to 8.0.0 :pr:<code>522</code> - by :user:<code>dependabot[bot]</code></li>
<li>Remove persist-credentials: false from release job :pr:<code>520</code></li>
<li>[pre-commit.ci] pre-commit autoupdate :pr:<code>519</code> - by :user:<code>pre-commit-ci[bot]</code></li>
<li>🔒 ci(workflows): add zizmor security auditing :pr:<code>517</code></li>
<li>[pre-commit.ci] pre-commit autoupdate :pr:<code>516</code> - by :user:<code>pre-commit-ci[bot]</code></li>
<li>[pre-commit.ci] pre-commit autoupdate :pr:<code>514</code> - by :user:<code>pre-commit-ci[bot]</code></li>
</ul>
<hr />
<p>3.25.2 (2026-03-11)</p>
<hr />
<ul>
<li>🐛 fix(unix): suppress EIO on close in Docker bind mounts :pr:<code>513</code></li>
</ul>
<hr />
<p>3.25.1 (2026-03-09)</p>
<hr />
<ul>
<li>[pre-commit.ci] pre-commit autoupdate :pr:<code>510</code> - by :user:<code>pre-commit-ci[bot]</code></li>
<li>🐛 fix(win): restore best-effort lock file cleanup on release :pr:<code>511</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/tox-dev/filelock/commit/469b47f192b0a9f8c8b795d9b9f57212c716959b"><code>469b47f</code></a> Release 3.29.0</li>
<li><a href="https://github.com/tox-dev/filelock/commit/e85d07281987e0855ba67c03dfdef342ec1097d5"><code>e85d072</code></a> ✨ feat(soft): enable stale lock detection on Windows (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/534">#534</a>)</li>
<li><a href="https://github.com/tox-dev/filelock/commit/f5ee1712ced6916b2768812ee378183319339944"><code>f5ee171</code></a> 🐛 fix(async): use single-thread executor for lock consistency (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/533">#533</a>)</li>
<li><a href="https://github.com/tox-dev/filelock/commit/2a954588cdf462a786835eeb102240ce79fecc8b"><code>2a95458</code></a> build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/530">#530</a>)</li>
<li><a href="https://github.com/tox-dev/filelock/commit/55de20c0819652362881906fa289feff5a323c19"><code>55de20c</code></a> Release 3.28.0</li>
<li><a href="https://github.com/tox-dev/filelock/commit/476b0e4a92776fe530b5d993247342f039004174"><code>476b0e4</code></a> 🐛 fix(ci): unbreak release workflow, publish to PyPI again (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/529">#529</a>)</li>
<li><a href="https://github.com/tox-dev/filelock/commit/824713edc32b54efd66566907f97c1238502810e"><code>824713e</code></a> ✨ feat(rw): add SoftReadWriteLock for NFS and HPC clusters (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/528">#528</a>)</li>
<li><a href="https://github.com/tox-dev/filelock/commit/9879de9298db93ffba0a9f58d9de75e9e2a00fc1"><code>9879de9</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/527">#527</a>)</li>
<li><a href="https://github.com/tox-dev/filelock/commit/4cfab498b6916f89be46152efa4a72e9731be98f"><code>4cfab49</code></a> Release 3.26.1</li>
<li><a href="https://github.com/tox-dev/filelock/commit/734c9f26e8107ad24886129fc68865f0b46cf71f"><code>734c9f2</code></a> 🐛 fix(asyncio): add <strong>exit</strong> to BaseAsyncFileLock and fix <strong>del</strong> loop handli...</li>
<li>Additional commits viewable in <a href="https://github.com/tox-dev/py-filelock/compare/3.25.2...3.29.0">compare view</a></li>
</ul>
</details>
<br />
Updates `packaging` from 26.0 to 26.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pypa/packaging/releases">packaging's releases</a>.</em></p>
<blockquote>
<h2>26.1</h2>
<p>Features:</p>
<ul>
<li><del>PEP 783: add handling for Emscripten wheel tags by <a href="https://github.com/hoodmane"><code>@hoodmane</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/804">pypa/packaging#804</a></del> (old name used in implementation, will be fixed in next release)</li>
<li>PEP 803: add handling for the <code>abi3.abi3t</code> free-threading tag by <a href="https://github.com/ngoldbaum"><code>@ngoldbaum</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1099">pypa/packaging#1099</a></li>
<li>PEP 723: add <code>packaging.dependency_groups</code> module, based on the <code>dependency-groups</code> package by <a href="https://github.com/sirosen"><code>@sirosen</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1065">pypa/packaging#1065</a></li>
<li>Add the <code>packaging.direct_url</code> module by <a href="https://github.com/sbidoul"><code>@sbidoul</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/944">pypa/packaging#944</a></li>
<li>Add the <code>packaging.errors</code> module by <a href="https://github.com/henryiii"><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1071">pypa/packaging#1071</a></li>
<li>Add <code>SpecifierSet.is_unsatisfiable</code> using ranges (new internals that will be expanded in future versions) by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1119">pypa/packaging#1119</a></li>
<li>Add <code>create_compatible_tags_selector</code> to select compatible tags by <a href="https://github.com/sbidoul"><code>@sbidoul</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1110">pypa/packaging#1110</a></li>
<li>Add a <code>key</code> argument to <code>SpecifierSet.filter()</code> by <a href="https://github.com/frostming"><code>@frostming</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1068">pypa/packaging#1068</a></li>
<li>Support <code>&</code> and <code>|</code> for <code>Marker</code>'s by <a href="https://github.com/henryiii"><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1146">pypa/packaging#1146</a></li>
<li>Normalize <code>Version.__replace__</code> and add <code>Version.from_parts</code> by <a href="https://github.com/henryiii"><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1078">pypa/packaging#1078</a></li>
<li>Add an option to validate compressed tag set sort order in <code>parse_wheel_filename</code> by <a href="https://github.com/r266-tech"><code>@r266-tech</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1150">pypa/packaging#1150</a></li>
</ul>
<p>Behavior adaptations:</p>
<ul>
<li>Narrow exclusion of pre-releases for <code><V.postN</code> to match spec by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1140">pypa/packaging#1140</a></li>
<li>Narrow exclusion of post-releases for <code>>V</code> to match spec by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1141">pypa/packaging#1141</a></li>
<li>Rename <code>format_full_version</code> to <code>_format_full_version</code> to make it visibly private by <a href="https://github.com/r266-tech"><code>@r266-tech</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1125">pypa/packaging#1125</a></li>
<li>Restrict local version to ASCII by <a href="https://github.com/henryiii"><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1102">pypa/packaging#1102</a></li>
</ul>
<p>Pylock (PEP 751) updates:</p>
<ul>
<li>Add pylock <code>select</code> function by <a href="https://github.com/sbidoul"><code>@sbidoul</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1092">pypa/packaging#1092</a></li>
<li>Document pylock <code>select()</code> method and <code>PylockSelectError</code> by <a href="https://github.com/r266-tech"><code>@r266-tech</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1153">pypa/packaging#1153</a></li>
<li>Add <code>filename</code> property to <code>PackageSdist</code> and <code>PackageWheel</code>, more validation by <a href="https://github.com/sbidoul"><code>@sbidoul</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1095">pypa/packaging#1095</a></li>
<li>Give preference to path over url by <a href="https://github.com/sbidoul"><code>@sbidoul</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1128">pypa/packaging#1128</a></li>
<li>Validate name/version consistency in file names by <a href="https://github.com/sbidoul"><code>@sbidoul</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1114">pypa/packaging#1114</a></li>
</ul>
<p>Fixes:</p>
<ul>
<li>Fix <code>></code> comparison for versions with dev+local segments by <a href="https://github.com/veeceey"><code>@veeceey</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1097">pypa/packaging#1097</a></li>
<li>Fix incorrect self-comparison for <code>InfinityType</code> and <code>NegativeInfinityType</code> by <a href="https://github.com/bysiber"><code>@bysiber</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1093">pypa/packaging#1093</a></li>
<li>Canonicalize when deduplicating specifiers in <code>SpecifierSet</code> by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1109">pypa/packaging#1109</a></li>
<li>Fix charset error message formatting by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1121">pypa/packaging#1121</a></li>
<li>Handle the <code>key</code> parameter in <code>SpecifierSet.filter</code> when specifiers are empty and prerelease is <code>False</code> by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1096">pypa/packaging#1096</a></li>
<li>Standardize inner components of <code>repr</code> output by <a href="https://github.com/henryiii"><code>@henryiii</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1090">pypa/packaging#1090</a></li>
<li><code>Specifier</code>'s <code>===</code> uses original string, not normalized, when available by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1124">pypa/packaging#1124</a></li>
<li>Propagate int-max-str-digits <code>ValueError</code> by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1155">pypa/packaging#1155</a></li>
</ul>
<p>Performance:</p>
<ul>
<li>Add fast path for parsing simple versions (digits and dots only) by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1082">pypa/packaging#1082</a></li>
<li>Add fast path for <code>Version</code> to <code>Version</code> comparison by skipping <code>_key</code> property by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1083">pypa/packaging#1083</a></li>
<li>Cache <code>Version</code> hash value in dedicated slot by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1118">pypa/packaging#1118</a></li>
<li>Overhaul <code>_cmpkey</code> to remove use of custom objects by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1116">pypa/packaging#1116</a></li>
<li>Skip <code>__replace__</code> in Specifier comparison if not needed by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1081">pypa/packaging#1081</a></li>
<li><code>SpecifierSet</code> use <code>tuple</code> instead of <code>frozenset</code> for <code>_specs</code> by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1108">pypa/packaging#1108</a></li>
<li>Speed up complex <code>SpecifierSet</code> filtering by implementing cost-based ordering by <a href="https://github.com/notatallshaw"><code>@notatallshaw</code></a> in <a href="https://redirect.github.com/pypa/packaging/pull/1105">pypa/packaging#1105</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/packaging/blob/main/CHANGELOG.rst">packaging's changelog</a>.</em></p>
<blockquote>
<p>26.1 - 2026-04-14</p>
<pre><code>
Features:
<ul>
<li>PEP 783: add handling for Emscripten wheel tags in (:pull:<code>804</code>) (old name used in implementation, fixed in next release)</li>
<li>PEP 803: add handling for the <code>abi3.abi3t</code> free-threading tag in (:pull:<code>1099</code>)</li>
<li>PEP 723: add <code>packaging.dependency_groups</code> module, based on the <code>dependency-groups</code> package in (:pull:<code>1065</code>)</li>
<li>Add the <code>packaging.direct_url</code> module in (:pull:<code>944</code>)</li>
<li>Add the <code>packaging.errors</code> module in (:pull:<code>1071</code>)</li>
<li>Add <code>SpecifierSet.is_unsatisfiable</code> using ranges (new internals that will be expanded in future versions) in (:pull:<code>1119</code>)</li>
<li>Add <code>create_compatible_tags_selector</code> to select compatible tags in (:pull:<code>1110</code>)</li>
<li>Add a <code>key</code> argument to <code>SpecifierSet.filter()</code> in (:pull:<code>1068</code>)</li>
<li>Support <code>&amp;</code> and <code>|</code> for <code>Marker</code>'s in (:pull:<code>1146</code>)</li>
<li>Normalize <code>Version.__replace__</code> and add <code>Version.from_parts</code> in (:pull:<code>1078</code>)</li>
<li>Add an option to validate compressed tag set sort order in <code>parse_wheel_filename</code> in (:pull:<code>1150</code>)</li>
</ul>
<p>Behavior adaptations:</p>
<ul>
<li>Narrow exclusion of pre-releases for <code>&lt;V.postN</code> to match spec in (:pull:<code>1140</code>)</li>
<li>Narrow exclusion of post-releases for <code>&gt;V</code> to match spec in (:pull:<code>1141</code>)</li>
<li>Rename <code>format_full_version</code> to <code>_format_full_version</code> to make it visibly private in (:pull:<code>1125</code>)</li>
<li>Restrict local version to ASCII in (:pull:<code>1102</code>)</li>
</ul>
<p>Pylock (PEP 751) updates:</p>
<ul>
<li>Add pylock <code>select</code> function in (:pull:<code>1092</code>)</li>
<li>Document pylock <code>select()</code> method and <code>PylockSelectError</code> in (:pull:<code>1153</code>)</li>
<li>Add <code>filename</code> property to <code>PackageSdist</code> and <code>PackageWheel</code>, more validation in (:pull:<code>1095</code>)</li>
<li>Give preference to path over url in (:pull:<code>1128</code>)</li>
<li>Validate name/version consistency in file names in (:pull:<code>1114</code>)</li>
</ul>
<p>Fixes:</p>
<ul>
<li>Fix <code>&gt;</code> comparison for versions with dev+local segments in (:pull:<code>1097</code>)</li>
<li>Fix incorrect self-comparison for <code>InfinityType</code> and <code>NegativeInfinityType</code> in (:pull:<code>1093</code>)</li>
<li>Canonicalize when deduplicating specifiers in <code>SpecifierSet</code> in (:pull:<code>1109</code>)</li>
<li>Fix charset error message formatting in (:pull:<code>1121</code>)</li>
<li>Handle the <code>key</code> parameter in <code>SpecifierSet.filter</code> when specifiers are empty and prerelease is <code>False</code> in (:pull:<code>1096</code>)</li>
<li>Standardize inner components of <code>repr</code> output in (:pull:<code>1090</code>)</li>
<li><code>Specifier</code>'s <code>===</code> uses original string, not normalized, when available in (:pull:<code>1124</code>)</li>
<li>Propagate int-max-str-digits <code>ValueError</code> in (:pull:<code>1155</code>)</li>
</ul>
<p>Performance:</p>
<ul>
<li>Add fast path for parsing simple versions (digits and dots only) in (:pull:<code>1082</code>)</li>
<li>Add fast path for <code>Version</code> to <code>Version</code> comparison by skipping <code>_key</code> property in (:pull:<code>1083</code>)</li>
<li>Cache <code>Version</code> hash value in dedicated slot in (:pull:<code>1118</code>)</li>
<li>Overhaul <code>_cmpkey</code> to remove use of custom objects in (:pull:<code>1116</code>)</li>
<li>Skip <code>__replace__</code> in Specifier comparison if not needed in (:pull:<code>1081</code>)<br />
</tr></table><br />
</code></pre></li>
</ul>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/packaging/commit/c1a88a3e035e8bfe47dbc957f4a2493e8a7b4f3c"><code>c1a88a3</code></a> Bump for release</li>
<li><a href="https://github.com/pypa/packaging/commit/702c25ecc297054f9597acda987a75dd6833acf5"><code>702c25e</code></a> docs: update changelog for 26.1 (<a href="https://redirect.github.com/pypa/packaging/issues/1156">#1156</a>)</li>
<li><a href="https://github.com/pypa/packaging/commit/3f4f5d46808f51709aba8341d4121f20752b3235"><code>3f4f5d4</code></a> Implement <code>is_unsatisfiable</code> on <code>SpecifierSet</code> using ranges (<a href="https://redirect.github.com/pypa/packaging/issues/1119">#1119</a>)</li>
<li><a href="https://github.com/pypa/packaging/commit/06c6555f44f0f7b84459c876375c5b1d52ee7fef"><code>06c6555</code></a> Propagate int-max-str-digits ValueError (<a href="https://redirect.github.com/pypa/packaging/issues/1155">#1155</a>)</li>
<li><a href="https://github.com/pypa/packaging/commit/905c90c1eb8c77dede11899194ca4b0f5eaf188d"><code>905c90c</code></a> feat: option to validate compressed tag set sort order in `parse_wheel_filena...</li>
<li><a href="https://github.com/pypa/packaging/commit/af0026cff97a8f28d165d6ac4afb58b2cdc8ffc5"><code>af0026c</code></a> docs(pylock): document select() method and PylockSelectError (<a href="https://redirect.github.com/pypa/packaging/issues/1153">#1153</a>)</li>
<li><a href="https://github.com/pypa/packaging/commit/668da8662a112036e4850b68980790cb2d10dae9"><code>668da86</code></a> Rename format_full_version to _format_full_version to make it visibly private...</li>
<li><a href="https://github.com/pypa/packaging/commit/f294d529e2634798a98fd9cee6708307a5c1792c"><code>f294d52</code></a> tests: do not reload the tags module (<a href="https://redirect.github.com/pypa/packaging/issues/1152">#1152</a>)</li>
<li><a href="https://github.com/pypa/packaging/commit/2c6c7dfa2d406e44b91f3f8d26eeed72437c9435"><code>2c6c7df</code></a> feat: add handling for Emscripten wheels tags per PEP 783 (<a href="https://redirect.github.com/pypa/packaging/issues/804">#804</a>)</li>
<li><a href="https://github.com/pypa/packaging/commit/6762eea4de40da02c119d02cc77c907c6b446b86"><code>6762eea</code></a> docs(markers): document & and | operators for combining Marker objects (<a href="https://redirect.github.com/pypa/packaging/issues/1151">#1151</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/packaging/compare/26.0...26.1">compare view</a></li>
</ul>
</details>
<br />
Updates `virtualenv` from 21.2.0 to 21.2.4
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pypa/virtualenv/releases">virtualenv's releases</a>.</em></p>
<blockquote>
<h2>21.2.4</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(periodic-update): refuse unverified HTTPS to PyPI by default by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3122">pypa/virtualenv#3122</a></li>
<li>🐛 fix(zipapp): enforce ROOT containment with Path.relative_to by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3121">pypa/virtualenv#3121</a></li>
<li>🐛 fix(seed): validate distribution and version before pip download by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3120">pypa/virtualenv#3120</a></li>
<li>🐛 fix(seed): verify sha256 of bundled wheels on load by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3119">pypa/virtualenv#3119</a></li>
<li>🐛 fix(seed): validate wheel zip entries before extraction by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3118">pypa/virtualenv#3118</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/21.2.3...21.2.4">https://github.com/pypa/virtualenv/compare/21.2.3...21.2.4</a></p>
<h2>21.2.3</h2>
<!-- raw HTML omitted -->
<p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/21.2.2...21.2.3">https://github.com/pypa/virtualenv/compare/21.2.2...21.2.3</a></p>
<h2>21.2.2</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>bump python-discovery minimum to 1.2.2 by <a href="https://github.com/rahuldevikar"><code>@rahuldevikar</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3117">pypa/virtualenv#3117</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/pypa/virtualenv/compare/21.2.1...21.2.2">https://github.com/pypa/virtualenv/compare/21.2.1...21.2.2</a></p>
<h2>21.2.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>Upgrade embedded pip/setuptools/wheel by <a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot] in <a href="https://redirect.github.com/pypa/virtualenv/pull/3093">pypa/virtualenv#3093</a></li>
<li>Enhance upgrade workflow: age check, dedup, issue tracking by <a href="https://github.com/rahuldevikar"><code>@rahuldevikar</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3094">pypa/virtualenv#3094</a></li>
<li>🐛 fix(create): use commonpath for correct path validation by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3097">pypa/virtualenv#3097</a></li>
<li>🔒 ci(workflows): add zizmor security auditing by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3099">pypa/virtualenv#3099</a></li>
<li>Add current and previous maintainers by <a href="https://github.com/rahuldevikar"><code>@rahuldevikar</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3101">pypa/virtualenv#3101</a></li>
<li>🔧 fix(ci): restore git credentials for release and upgrade jobs by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3102">pypa/virtualenv#3102</a></li>
<li>Fix broken Installation link in README by <a href="https://github.com/Bahtya"><code>@Bahtya</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3106">pypa/virtualenv#3106</a></li>
<li>fix: use terminal width for help formatting instead of hardcoded 240 by <a href="https://github.com/Bahtya"><code>@Bahtya</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3110">pypa/virtualenv#3110</a></li>
<li>🐛 fix(nushell): surface actionable hint in deactivate error output by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3112">pypa/virtualenv#3112</a></li>
<li>👷 ci: fix setup-uv warnings and drop brew@3.9 by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3113">pypa/virtualenv#3113</a></li>
<li>fix(ci): fix pre-release push and release note generation by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3114">pypa/virtualenv#3114</a></li>
<li>fix(ci): check out repo in publish job for gh release notes by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/pypa/virtualenv/pull/3115">pypa/virtualenv#3115</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/github-actions"><code>@github-actions</code></a>[bot] made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/3093">pypa/virtualenv#3093</a></li>
<li><a href="https://github.com/Bahtya"><code>@Bahtya</code></a> made their first contribution in <a href="https://redirect.github.com/pypa/virtualenv/pull/3106">pypa/virtualenv#3106</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's changelog</a>.</em></p>
<blockquote>
<h1>Bugfixes - 21.2.4</h1>
<ul>
<li>Security hardening: validate each entry of a seed wheel archive before extracting it so a tampered wheel cannot escape
the app-data image directory via an absolute path or <code>..</code> traversal. (:issue:<code>3118</code>)</li>
<li>Security hardening: verify the SHA-256 of every bundled seed wheel when it is loaded so a corrupted or tampered file
on disk fails loud instead of being handed to pip. The hash table is generated alongside <code>BUNDLE_SUPPORT</code> by
<code>tasks/upgrade_wheels.py</code>. (:issue:<code>3119</code>)</li>
<li>Security hardening: validate the distribution name and version specifier passed to <code>pip download</code> when acquiring a
seed wheel so extras, pip flags, or shell metacharacters cannot be smuggled into the subprocess command line.
(:issue:<code>3120</code>)</li>
<li>Security hardening: replace the string-prefix containment check in <code>virtualenv.util.zipapp</code> with
<code>Path.relative_to</code> so the zipapp extraction helpers refuse any path that does not resolve under the archive root.
(:issue:<code>3121</code>)</li>
<li>Security hardening: do not silently fall back to an unverified HTTPS context when the periodic update request to PyPI
fails TLS verification. The returned metadata drives which wheel version virtualenv considers "up to date", so
accepting an unverified response lets a network-level attacker suppress security updates. Set
<code>VIRTUALENV_PERIODIC_UPDATE_INSECURE=1</code> to restore the previous behavior on hosts with broken trust stores.
(:issue:<code>3122</code>)</li>
</ul>
<hr />
<p>v21.2.3 (2026-04-14)</p>
<hr />
<p>No significant changes.</p>
<hr />
<p>v21.2.2 (2026-04-13)</p>
<hr />
<h1>Bugfixes - 21.2.2</h1>
<ul>
<li>Bump <code>python-discovery</code> minimum to <code>>=1.2.2</code> to include <code>normalize_isa</code> support - by :user:<code>rahuldevikar</code>.
(:issue:<code>3117</code>)</li>
</ul>
<hr />
<p>v21.2.1 (2026-04-09)</p>
<hr />
<h1>Bugfixes - 21.2.1</h1>
<ul>
<li>
<p>Upgrade embedded wheels:</p>
<ul>
<li>setuptools to <code>82.0.1</code> from <code>82.0.0</code> (:issue:<code>3093</code>)</li>
</ul>
</li>
<li>
<p>Use terminal width for help formatting instead of hardcoded 240. (:issue:<code>3110</code>)</p>
</li>
</ul>
<hr />
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pypa/virtualenv/commit/15063c10b3afae1d3fa3234e99f956434051f7b5"><code>15063c1</code></a> release 21.2.4</li>
<li><a href="https://github.com/pypa/virtualenv/commit/754602d6f07d262f4f352cc590bd3f9ef3b157fe"><code>754602d</code></a> 🐛 fix(seed): validate wheel zip entries before extraction (<a href="https://redirect.github.com/pypa/virtualenv/issues/3118">#3118</a>)</li>
<li><a href="https://github.com/pypa/virtualenv/commit/43deabf249c10896d09a282aa254a837fdcef9b5"><code>43deabf</code></a> 🐛 fix(seed): verify sha256 of bundled wheels on load (<a href="https://redirect.github.com/pypa/virtualenv/issues/3119">#3119</a>)</li>
<li><a href="https://github.com/pypa/virtualenv/commit/4e412b0ba38284487267f481026ea218689fa9bd"><code>4e412b0</code></a> 🐛 fix(seed): validate distribution and version before pip download (<a href="https://redirect.github.com/pypa/virtualenv/issues/3120">#3120</a>)</li>
<li><a href="https://github.com/pypa/virtualenv/commit/130981834946a828174e37ecdd250f530f09832f"><code>1309818</code></a> 🐛 fix(zipapp): enforce ROOT containment with Path.relative_to (<a href="https://redirect.github.com/pypa/virtualenv/issues/3121">#3121</a>)</li>
<li><a href="https://github.com/pypa/virtualenv/commit/48f6fdcc14b8654236f9081adbff10a32f536940"><code>48f6fdc</code></a> 🐛 fix(periodic-update): refuse unverified HTTPS to PyPI by default (<a href="https://redirect.github.com/pypa/virtualenv/issues/3122">#3122</a>)</li>
<li><a href="https://github.com/pypa/virtualenv/commit/a5fb4a290d60776e2b3f81696bd7291913aa25d4"><code>a5fb4a2</code></a> release 21.2.3</li>
<li><a href="https://github.com/pypa/virtualenv/commit/7f91a9a0bfbc549fc10274164135cf02c8ca8167"><code>7f91a9a</code></a> release 21.2.2</li>
<li><a href="https://github.com/pypa/virtualenv/commit/33348d69426ef49ea26dcab7f12b474706968813"><code>33348d6</code></a> bump python-discovery minimum to 1.2.2 (<a href="https://redirect.github.com/pypa/virtualenv/issues/3117">#3117</a>)</li>
<li><a href="https://github.com/pypa/virtualenv/commit/d73ff7c2dccd6a60223b5c4ed673d7f3e7df9a43"><code>d73ff7c</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/pypa/virtualenv/issues/3116">#3116</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pypa/virtualenv/compare/21.2.0...21.2.4">compare view</a></li>
</ul>
</details>
<br />
Updates `pytest` to 9.0.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pytest-dev/pytest/releases">pytest's releases</a>.</em></p>
<blockquote>
<h2>9.0.3</h2>
<h1>pytest 9.0.3 (2026-04-07)</h1>
<h2>Bug fixes</h2>
<ul>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/12444">#12444</a>: Fixed <code>pytest.approx</code> which now correctly takes into account <code>~collections.abc.Mapping</code> keys order to compare them.</p>
</li>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/13634">#13634</a>: Blocking a <code>conftest.py</code> file using the <code>-p no:</code> option is now explicitly disallowed.</p>
<p>Previously this resulted in an internal assertion failure during plugin loading.</p>
<p>Pytest now raises a clear <code>UsageError</code> explaining that conftest files are not plugins and cannot be disabled via <code>-p</code>.</p>
</li>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/13734">#13734</a>: Fixed crash when a test raises an exceptiongroup with <code>__tracebackhide__ = True</code>.</p>
</li>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/14195">#14195</a>: Fixed an issue where non-string messages passed to <!-- raw HTML omitted -->unittest.TestCase.subTest()<!-- raw HTML omitted --> were not printed.</p>
</li>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/14343">#14343</a>: Fixed use of insecure temporary directory (CVE-2025-71176).</p>
</li>
</ul>
<h2>Improved documentation</h2>
<ul>
<li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13388">#13388</a>: Clarified documentation for <code>-p</code> vs <code>PYTEST_PLUGINS</code> plugin loading and fixed an incorrect <code>-p</code> example.</li>
<li><a href="https://redirect.github.com/pytest-dev/pytest/issues/13731">#13731</a>: Clarified that capture fixtures (e.g. <code>capsys</code> and <code>capfd</code>) take precedence over the <code>-s</code> / <code>--capture=no</code> command-line options in <code>Accessing captured output from a test function <accessing-captured-output></code>.</li>
<li><a href="https://redirect.github.com/pytest-dev/pytest/issues/14088">#14088</a>: Clarified that the default <code>pytest_collection</code> hook sets <code>session.items</code> before it calls <code>pytest_collection_finish</code>, not after.</li>
<li><a href="https://redirect.github.com/pytest-dev/pytest/issues/14255">#14255</a>: TOML integer log levels must be quoted: Updating reference documentation.</li>
</ul>
<h2>Contributor-facing changes</h2>
<ul>
<li>
<p><a href="https://redirect.github.com/pytest-dev/pytest/issues/12689">#12689</a>: The test reports are now published to Codecov from GitHub Actions.
The test statistics is visible <a href="https://app.codecov.io/gh/pytest-dev/pytest/tests">on the web interface</a>.</p>
<p>-- by <code>aleguy02</code></p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pytest-dev/pytest/commit/a7d58d7a21b78581e636bbbdea13c66ad1657c1e"><code>a7d58d7</code></a> Prepare release version 9.0.3</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/089d98199c253d8f89a040243bc4f2aa6cd5ab22"><code>089d981</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14366">#14366</a> from bluetech/revert-14193-backport</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/8127eaf4ab7f6b2fdd0dc1b38343ec97aeef05ac"><code>8127eaf</code></a> Revert "Fix: assertrepr_compare respects dict insertion order (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14050">#14050</a>) (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14193">#14193</a>)"</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/99a7e6029e7a6e8d53e5df114b1346e035370241"><code>99a7e60</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14363">#14363</a> from pytest-dev/patchback/backports/9.0.x/95d8423bd...</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/ddee02a578da30dd43aedc39c1c1f1aaadfcee95"><code>ddee02a</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14343">#14343</a> from bluetech/cve-2025-71176-simple</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/74eac6916fee34726cb194f16c516e96fbd29619"><code>74eac69</code></a> doc: Update training info (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14298">#14298</a>) (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14301">#14301</a>)</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/f92dee777cfdb77d1c43633d02766ddf1f07c869"><code>f92dee7</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14267">#14267</a> from pytest-dev/patchback/backports/9.0.x/d6fa26c62...</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/7ee58acc8777c31ac6cf388d01addf5a414a7439"><code>7ee58ac</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/12378">#12378</a> from Pierre-Sassoulas/fix-implicit-str-concat-and-d...</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/37da870d37e3a2f5177cae075c7b9ae279432bf8"><code>37da870</code></a> Merge pull request <a href="https://redirect.github.com/pytest-dev/pytest/issues/14259">#14259</a> from mitre88/patch-4 (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14268">#14268</a>)</li>
<li><a href="https://github.com/pytest-dev/pytest/commit/c34bfa3b7acb65b594707c714f1d8461b0304eed"><code>c34bfa3</code></a> Add explanation for string context diffs (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14257">#14257</a>) (<a href="https://redirect.github.com/pytest-dev/pytest/issues/14266">#14266</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/pytest-dev/pytest/compare/8.2.0...9.0.3">compare view</a></li>
</ul>
</details>
<br />
Updates `requests` to 2.33.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/psf/requests/releases">requests's releases</a>.</em></p>
<blockquote>
<h2>v2.33.1</h2>
<h2>2.33.1 (2026-03-30)</h2>
<p><strong>Bugfixes</strong></p>
<ul>
<li>Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary
files in the tmp directory. (<a href="https://redirect.github.com/psf/requests/issues/7305">#7305</a>)</li>
<li>Fixed Content-Type header parsing for malformed values. (<a href="https://redirect.github.com/psf/requests/issues/7309">#7309</a>)</li>
<li>Improved error consistency for malformed header values. (<a href="https://redirect.github.com/psf/requests/issues/7308">#7308</a>)</li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ferdnyc"><code>@ferdnyc</code></a> made their first contribution in <a href="https://redirect.github.com/psf/requests/pull/7277">psf/requests#7277</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30">https://github.com/psf/requests/blob/main/HISTORY.md#2331-2026-03-30</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/psf/requests/blob/main/HISTORY.md">requests's changelog</a>.</em></p>
<blockquote>
<h2>2.33.1 (2026-03-30)</h2>
<p><strong>Bugfixes</strong></p>
<ul>
<li>Fixed test cleanup for CVE-2026-25645 to avoid leaving unnecessary
files in the tmp directory. (<a href="https://redirect.github.com/psf/requests/issues/7305">#7305</a>)</li>
<li>Fixed Content-Type header parsing for malformed values. (<a href="https://redirect.github.com/psf/requests/issues/7309">#7309</a>)</li>
<li>Improved error consistency for malformed header values. (<a href="https://redirect.github.com/psf/requests/issues/7308">#7308</a>)</li>
</ul>
<h2>2.33.0 (2026-03-25)</h2>
<p><strong>Announcements</strong></p>
<ul>
<li>📣 Requests is adding inline types. If you have a typed code base that
uses Requests, please take a look at <a href="https://redirect.github.com/psf/requests/issues/7271">#7271</a>. Give it a try, and report
any gaps or feedback you may have in the issue. 📣</li>
</ul>
<p><strong>Security</strong></p>
<ul>
<li>CVE-2026-25645 <code>requests.utils.extract_zipped_paths</code> now extracts
contents to a non-deterministic location to prevent malicious file
replacement. This does not affect default usage of Requests, only
applications calling the utility function directly.</li>
</ul>
<p><strong>Improvements</strong></p>
<ul>
<li>Migrated to a PEP 517 build system using setuptools. (<a href="https://redirect.github.com/psf/requests/issues/7012">#7012</a>)</li>
</ul>
<p><strong>Bugfixes</strong></p>
<ul>
<li>Fixed an issue where an empty netrc entry could cause
malformed authentication to be applied to Requests on
Python 3.11+. (<a href="https://redirect.github.com/psf/requests/issues/7205">#7205</a>)</li>
</ul>
<p><strong>Deprecations</strong></p>
<ul>
<li>Dropped support for Python 3.9 following its end of support. (<a href="https://redirect.github.com/psf/requests/issues/7196">#7196</a>)</li>
</ul>
<p><strong>Documentation</strong></p>
<ul>
<li>Various typo fixes and doc improvements.</li>
</ul>
<h2>2.32.5 (2025-08-18)</h2>
<p><strong>Bugfixes</strong></p>
<ul>
<li>The SSLContext caching feature originally introduced in 2.32.0 has created
a new class of issues in Requests that have had negative impact across a number
of use cases. The Requests team has decided to revert this feature as long term
maintenance of it is proving to be unsustainable in its current iteration.</li>
</ul>
<p><strong>Deprecations</strong></p>
<ul>
<li>Added support for Python 3.14.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/psf/requests/commit/111d2b77790bf49943c0dfa09b365371c24aec7e"><code>111d2b7</code></a> v2.33.1</li>
<li><a href="https://github.com/psf/requests/commit/f0198e6dfc431a2293dc16e1b1e8fcddc910a7f3"><code>f0198e6</code></a> Fix malformed value parsing for Content-Type (<a href="https://redirect.github.com/psf/requests/issues/7309">#7309</a>)</li>
<li><a href="https://github.com/psf/requests/commit/bc7dd0fc4d56e808bcdd85ac2d797b3107c89259"><code>bc7dd0f</code></a> Fix cosmetic header validity parsing regex (<a href="https://redirect.github.com/psf/requests/issues/7308">#7308</a>)</li>
<li><a href="https://github.com/psf/requests/commit/4443b1a847b190010c2972a658924b98b5db6360"><code>4443b1a</code></a> Fix unintended test extra (<a href="https://redirect.github.com/psf/requests/issues/7306">#7306</a>)</li>
<li><a href="https://github.com/psf/requests/commit/389eea58dfb2f2ee096421a812e3af29c0298951"><code>389eea5</code></a> Cleanup extracted file after extract_zipped_path test (<a href="https://redirect.github.com/psf/requests/issues/7305">#7305</a>)</li>
<li><a href="https://github.com/psf/requests/commit/7407309c8a8a73aa2f4337184025d440bbedab7a"><code>7407309</code></a> Packaging: DRY out extras definition (<a href="https://redirect.github.com/psf/requests/issues/7277">#7277</a>)</li>
<li><a href="https://github.com/psf/requests/commit/bc04dfd6dad4cb02cd92f5daa81eb562d280a761"><code>bc04dfd</code></a> v2.33.0</li>
<li><a href="https://github.com/psf/requests/commit/66d21cb07bd6255b1280291c4fafb71803cdb3b7"><code>66d21cb</code></a> Merge commit from fork</li>
<li><a href="https://github.com/psf/requests/commit/8b9bc8fc0f63be84602387913c4b689f19efd028"><code>8b9bc8f</code></a> Move badges to top of README (<a href="https://redirect.github.com/psf/requests/issues/7293">#7293</a>)</li>
<li><a href="https://github.com/psf/requests/commit/e331a288f369973f5de0ec8901c94cae4fa87286"><code>e331a28</code></a> Remove unused extraction call (<a href="https://redirect.github.com/psf/requests/issues/7292">#7292</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/psf/requests/compare/v2.27.0...v2.33.1">compare view</a></li>
</ul>
</details>
<br />
Updates `python-on-whales` to 0.81.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/gabrieldemarmiesse/python-on-whales/releases">python-on-whales's releases</a>.</em></p>
<blockquote>
<h2>v0.81.0</h2>
<h2>What's Changed</h2>
<ul>
<li>More accurate error handling when streaming stdout and stderr by <a href="https://github.com/Hasnainz"><code>@Hasnainz</code></a> in <a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/pull/703">gabrieldemarmiesse/python-on-whales#703</a></li>
<li>feat(compose): Add support for <code>docker compose up SERVICE --no-deps</code> by <a href="https://github.com/romeroyonatan"><code>@romeroyonatan</code></a> in <a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/pull/708">gabrieldemarmiesse/python-on-whales#708</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/romeroyonatan"><code>@romeroyonatan</code></a> made their first contribution in <a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/pull/708">gabrieldemarmiesse/python-on-whales#708</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a href="https://github.com/gabrieldemarmiesse/python-on-whales/compare/v0.80.0...v0.81.0">https://github.com/gabrieldemarmiesse/python-on-whales/compare/v0.80.0...v0.81.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/059d89a178ccaa07e8c426c7af00e6ac41f3ae8a"><code>059d89a</code></a> Bump version to 0.81.0</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/f0b529ec6ac741c36c9ac10a7b3c3b9b75c41eae"><code>f0b529e</code></a> feat(compose): Add support for <code>docker compose up SERVICE --no-deps</code> (<a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/issues/708">#708</a>)</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/b615fc485fe60406160d617d5a8a91d7bd082d1a"><code>b615fc4</code></a> More accurate error handling when streaming stdout and stderr (<a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/issues/703">#703</a>)</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/ee87a947f0e18a86cee76f11765fd1779a431bca"><code>ee87a94</code></a> Bump version to 0.80.0</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/12efa4677e7a6f48cdafd919e4cfcd157da74863"><code>12efa46</code></a> Add support for <code>--metadata-file</code> option with buildx bake (<a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/issues/693">#693</a>)</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/6dfcce4243bf6cf17d0bf30eb5458029f949bad0"><code>6dfcce4</code></a> Add --service-ports flag to compose.run (<a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/issues/701">#701</a>)</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/fde7e12361037255f93ef92833a53a601a33ce7b"><code>fde7e12</code></a> Use the trusted publisher system of pypi (<a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/issues/702">#702</a>)</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/511ca7316e13f7d5ed232bd2593f664357c8976b"><code>511ca73</code></a> Add another test for buildx secrets (<a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/issues/651">#651</a>)</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/5c697f982073a58fabb34034836ec3bad2d81f98"><code>5c697f9</code></a> fix: missing ipam_config in NetworkInspectResult (<a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/issues/700">#700</a>)</li>
<li><a href="https://github.com/gabrieldemarmiesse/python-on-whales/commit/6423af2a2b04ae1f0688e9c34a49ae43dccdd3c2"><code>6423af2</code></a> Add unconditional debug level logging (<a href="https://redirect.github.com/gabrieldemarmiesse/python-on-whales/issues/696">#696</a>)</li>
<li>Additional commits viewable in <a href="https://github.com/gabrieldemarmiesse/python-on-whales/compare/v0.70.0...v0.81.0">compare view</a></li>
</ul>
</details>
<br />
Updates `click` to 8.3.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pallets/click/releases">click's releases</a>.</em></p>
<blockquote>
<h2>8.3.2</h2>
<p>This is the Click 8.3.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.</p>
<p>PyPI: <a href="https://pypi.org/project/click/8.3.2/">https://pypi.org/project/click/8.3.2/</a>
Changes: <a href="https://click.palletsprojects.com/page/changes/#version-8-3-2">https://click.palletsprojects.com/page/changes/#version-8-3-2</a>
Milestone: <a href="https://github.com/pallets/click/milestone/29">https://github.com/pallets/click/milestone/29</a></p>
<ul>
<li>Fix handling of <code>flag_value</code> when <code>is_flag=False</code> to allow such options to be
used without an explicit value. <a href="https://redirect.github.com/pallets/click/issues/3084">#3084</a> <a href="https://redirect.github.com/pallets/click/issues/3152">#3152</a></li>
<li>Hide <code>Sentinel.UNSET</code> values as <code>None</code> when using <code>lookup_default()</code>.
<a href="https://redirect.github.com/pallets/click/issues/3136">#3136</a> <a href="https://redirect.github.com/pallets/click/issues/3199">#3199</a> <a href="https://redirect.github.com/pallets/click/issues/3202">#3202</a> <a href="https://redirect.github.com/pallets/click/issues/3209">#3209</a> <a href="https://redirect.github.com/pallets/click/issues/3212">#3212</a> <a href="https://redirect.github.com/pallets/click/issues/3224">#3224</a></li>
<li>Prevent <code>_NamedTextIOWrapper</code> from closing streams owned by <code>StreamMixer</code>.
<a href="https://redirect.github.com/pallets/click/issues/824">#824</a> <a href="https://redirect.github.com/pallets/click/issues/2991">#2991</a> <a href="https://redirect.github.com/pallets/click/issues/2993">#2993</a> <a href="https://redirect.github.com/pallets/click/issues/3110">#3110</a> <a href="https://redirect.github.com/pallets/click/issues/3139">#3139</a> <a href="https://redirect.github.com/pallets/click/issues/3140">#3140</a></li>
<li>Add comprehensive tests for <code>CliRunner</code> stream lifecycle, covering
logging interaction, multi-threaded safety, and sequential invocation
isolation. Add high-iteration stress tests behind a <code>stress</code> marker
with a dedicated CI job. <a href="https://redirect.github.com/pallets/click/issues/3139">#3139</a></li>
<li>Fix callable <code>flag_value</code> being instantiated when used as a default via
<code>default=True</code>. <a href="https://redirect.github.com/pallets/click/issues/3121">#3121</a> <a href="https://redirect.github.com/pallets/click/issues/3201">#3201</a> <a href="https://redirect.github.com/pallets/click/issues/3213">#3213</a> <a href="https://redirect.github.com/pallets/click/issues/3225">#3225</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pallets/click/blob/main/CHANGES.rst">click's changelog</a>.</em></p>
<blockquote>
<h2>Version 8.3.2</h2>
<p>Released 2026-04-02</p>
<ul>
<li>Fix handling of <code>flag_value</code> when <code>is_flag=False</code> to allow such options to be
used without an explicit value. :issue:<code>3084</code> :pr:<code>3152</code></li>
<li>Hide <code>Sentinel.UNSET</code> values as <code>None</code> when using <code>lookup_default()</code>.
:issue:<code>3136</code> :pr:<code>3199</code> :pr:<code>3202</code> :pr:<code>3209</code> :pr:<code>3212</code> :pr:<code>3224</code></li>
<li>Prevent <code>_NamedTextIOWrapper</code> from closing streams owned by <code>StreamMixer</code>.
:issue:<code>824</code> :issue:<code>2991</code> :issue:<code>2993</code> :issue:<code>3110</code> :pr:<code>3139</code> :pr:<code>3140</code></li>
<li>Add comprehensive tests for <code>CliRunner</code> stream lifecycle, covering
logging interaction, multi-threaded safety, and sequential invocation
isolation. Add high-iteration stress tests behind a <code>stress</code> marker
with a dedicated CI job. :pr:<code>3139</code></li>
<li>Fix callable <code>flag_value</code> being instantiated when used as a default via
<code>default=True</code>. :issue:<code>3121</code> :pr:<code>3201</code> :pr:<code>3213</code> :pr:<code>3225</code></li>
</ul>
<h2>Version 8.3.1</h2>
<p>Released 2025-11-15</p>
<ul>
<li>Don't discard pager arguments by correctly using <code>subprocess.Popen</code>. :issue:<code>3039</code>
:pr:<code>3055</code></li>
<li>Replace <code>Sentinel.UNSET</code> default values by <code>None</code> as they're passed through
the <code>Context.invoke()</code> method. :issue:<code>3066</code> :issue:<code>3065</code> :pr:<code>3068</code></li>
<li>Fix conversion of <code>Sentinel.UNSET</code> happening too early, which caused incorrect
behavior for multiple parameters using the same name. :issue:<code>3071</code> :pr:<code>3079</code></li>
<li>Hide <code>Sentinel.UNSET</code> values as <code>None</code> when looking up for other parameters
through the context inside parameter callbacks. :issue:<code>3136</code> :pr:<code>3137</code></li>
<li>Fix rendering when <code>prompt</code> and <code>confirm</code> parameter <code>prompt_suffix</code> is
empty. :issue:<code>3019</code> :pr:<code>3021</code></li>
<li>When <code>Sentinel.UNSET</code> is found during parsing, it will skip calls to
<code>type_cast_value</code>. :issue:<code>3069</code> :pr:<code>3090</code></li>
</ul>
<h2>Version 8.3.0</h2>
<p>Released 2025-09-17</p>
<ul>
<li>
<p><strong>Improved flag option handling</strong>: Reworked the relationship between <code>flag_value</code>
and <code>default</code> parameters for better consistency:</p>
<ul>
<li>The <code>default</code> parameter value is now preserved as-is and passed directly
to CLI functions (no more unexpected transformations)</li>
<li>Exception: flag options with <code>default=True</code> maintain backward compatibility
by defaulting to their <code>flag_value</code></li>
<li>The <code>default</code> parameter can now be any type (<code>bool</code>, <code>None</code>, etc.)</li>
<li>Fixes inconsistencies reported in: :issue:<code>1992</code> :issue:<code>2514</code> :issue:<code>2610</code></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pallets/click/commit/052c006033729bbb422cbdad0c4fee988ecb5aa5"><code>052c006</code></a> Change update release date.</li>
<li><a href="https://github.com/pallets/click/commit/502b7ce7b131473ef00a3586e60bb000f33b4c43"><code>502b7ce</code></a> Merge branch 'stable' of <a href="https://github.com/pallets/click">https://github.com/pallets/click</a> into release-8.3.2</li>
<li><a href="https://github.com/pallets/click/commit/a0a37e411820861d48e21b131fdd840abaf746e0"><code>a0a37e4</code></a> Change publish to werkzeug latest. (<a href="https://redirect.github.com/pallets/click/issues/3301">#3301</a>)</li>
<li><a href="https://github.com/pallets/click/commit/57be6fc2b40eb40279d022e6aabc983ee0dfb7a9"><code>57be6fc</code></a> Change publish to werkzeug latest.</li>
<li><a href="https://github.com/pallets/click/commit/781d6a88bdd30229e72a84cd6753b0235f339679"><code>781d6a8</code></a> Update publish workflows (<a href="https://redirect.github.com/pallets/click/issues/3266">#3266</a>)</li>
<li><a href="https://github.com/pallets/click/commit/ff795b66ba945239c779b528171f5fe4536cf844"><code>ff795b6</code></a> Update precommit pins with tox</li>
<li><a href="https://github.com/pallets/click/commit/dd87ef4f9fa7d6f13e14885e9a6842a21ededebc"><code>dd87ef4</code></a> Update github action pins with tox</li>
<li><a href="https://github.com/pallets/click/commit/93d3f9d22e90035bc2b51c2183c15bd4a021376f"><code>93d3f9d</code></a> Release version 8.3.2</li>
<li><a href="https://github.com/pallets/click/commit/3299ba1a8a5de34b24a7226a683a837d8a0857e7"><code>3299ba1</code></a> Add missing PR to changelog. (<a href="https://redirect.github.com/pallets/click/issues/3264">#3264</a>)</li>
<li><a href="https://github.com/pallets/click/commit/b7f62c4d002e5b5bca3ebef6b995b7338740fe6f"><code>b7f62c4</code></a> Add missing PR to changelog.</li>
<li>Additional commits viewable in <a href="https://github.com/pallets/click/compare/8.0.0...8.3.2">compare view</a></li>
</ul>
</details>
<br />
Updates `jinja2` to 3.1.6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a href="https://github.com/pallets/jinja/releases">jinja2's releases</a>.</em></p>
<blockquote>
<h2>3.1.6</h2>
<p>This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.</p>
<p>PyPI: <a href="https://pypi.org/project/Jinja2/3.1.6/">https://pypi.org/project/Jinja2/3.1.6/</a>
Changes: <a href="https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6">https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6</a></p>
<ul>
<li>The <code>|attr</code> filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. <a href="https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7">https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a href="https://github.com/pallets/jinja/blob/main/CHANGES.rst">jinja2's changelog</a>.</em></p>
<blockquote>
<h2>Version 3.1.6</h2>
<p>Released 2025-03-05</p>
<ul>
<li>The <code>|attr</code> filter does not bypass the environment's attribute lookup,
allowing the sandbox to apply its checks. :ghsa:<code>cpwx-vrp4-4pq7</code></li>
</ul>
<h2>Version 3.1.5</h2>
<p>Released 2024-12-21</p>
<ul>
<li>The sandboxed environment handles indirect calls to <code>str.format</code>, such as
by passing a stored reference to a filter that calls its argument.
:ghsa:<code>q2x7-8rv6-6q7h</code></li>
<li>Escape template name before formatting it into error messages, to avoid
issues with names that contain f-string syntax.
:issue:<code>1792</code>, :ghsa:<code>gmj6-6f8f-6699</code></li>
<li>Sandbox does not allow <code>clear</code> and <code>pop</code> on known mutable sequence
types. :issue:<code>2032</code></li>
<li>Calling sync <code>render</code> for an async template uses <code>asyncio.run</code>.
:pr:<code>1952</code></li>
<li>Avoid unclosed <code>auto_aiter</code> warnings. :pr:<code>1960</code></li>
<li>Return an <code>aclose</code>-able <code>AsyncGenerator</code> from
<code>Template.generate_async</code>. :pr:<code>1960</code></li>
<li>Avoid leaving <code>root_render_func()</code> unclosed in
<code>Template.generate_async</code>. :pr:<code>1960</code></li>
<li>Avoid leaving async generators unclosed in blocks, includes and extends.
:pr:<code>1960</code></li>
<li>The runtime uses the correct <code>concat</code> function for the current environment
when calling block references. :issue:<code>1701</code></li>
<li>Make <code>|unique</code> async-aware, allowing it to be used after another
async-aware filter. :issue:<code>1781</code></li>
<li><code>|int</code> filter handles <code>OverflowError</code> from scientific notation.
:issue:<code>1921</code></li>
<li>Make compiling deterministic for tuple unpacking in a <code>{% set ... %}</code>
call. :issue:<code>2021</code></li>
<li>Fix dunder protocol (<code>copy</code>/<code>pickle</code>/etc) interaction with <code>Undefined</code>
objects. :issue:<code>2025</code></li>
<li>Fix <code>copy</code>/<code>pickle</code> support for the internal <code>missing</code> object.
:issue:<code>2027</code></li>
<li><code>Environment.overlay(enable_async)</code> is applied correctly. :pr:<code>2061</code></li>
<li>The error message from <code>FileSystemLoader</code> includes the paths that were
searched. :issue:<code>1661</code></li>
<li><code>PackageLoader</code> shows a clearer error message when the package does not
contain the templates directory. :issue:<code>1705</code></li>
<li>Improve annotations for methods returning copies. :pr:<code>1880</code></li>
<li><code>urlize</code> does not add <code>mailto:</code> to values like <code>@a@b</code>. :pr:<code>1870</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a href="https://github.com/pallets/jinja/commit/15206881c006c79667fe5154fe80c01c65410679"><code>1520688</code></a> release version 3.1.6</li>
<li><a href="https://github.com/pallets/jinja/commit/90457bbf33b8662926ae65cdde4c4c32e756e403"><code>90457bb</code></a> Merge commit from fork</li>
<li><a href="https://github.com/pallets/jinja/commit/065334d1ee5b7210e1a0a93c37238c86858f2af7"><code>065334d</code></a> attr filter uses env.getattr</li>
<li><a href="https://github.com/pallets/jinja/commit/033c20015c7ca899ab52eb921bb0f08e6d3dd145"><code>033c200</code></a> start version 3.1.6</li>
<li><a href="https://github.com/pallets/jinja/commit/bc68d4efa99c5f77334f0e519628558059ae8c35"><code>bc68d4e</code></a> use global contributing guide (<a href="https://redirect.github.com/pallets/jinja/issues/2070">#2070</a>)</li>
<li><a href="https://github.com/pallets/jinja/commit/247de5e0c5062a792eb378e50e13e692885ee486"><code>247de5e</code></a> use global contributing guide</li>
<li><a href="https://github.com/pallets/jinja/commit/ab8218c7a1b66b62e0ad6b941bd514e3a64a358f"><code>ab8218c</code></a> use project advisory link instead of global</li>
<li><a href="https...
_Description has been truncated_
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump the pip-dependency-updates group across 2 directories with 8 updates [airflow]
Posted by "potiuk (via GitHub)" <gi...@apache.org>.
potiuk closed pull request #65803: Bump the pip-dependency-updates group across 2 directories with 8 updates
URL: https://github.com/apache/airflow/pull/65803
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] Bump the pip-dependency-updates group across 2 directories with 8 updates [airflow]
Posted by "dependabot[bot] (via GitHub)" <gi...@apache.org>.
dependabot[bot] commented on PR #65803:
URL: https://github.com/apache/airflow/pull/65803#issuecomment-4320541002
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.
To ignore these dependencies, configure [ignore rules](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore) in dependabot.yml
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org