deps(deps): bump the python-dependencies group across 1 directory with 38 updates

[dependabot]

Bumps the python-dependencies group with 38 updates in the / directory:

Package	From	To
aiosqlite	0.20.0	0.22.1
alembic	1.16.5	1.18.5
anyio	4.11.0	4.14.1
certifi	2025.8.3	2025.11.12
click	8.1.8	8.4.2
dnspython	2.7.0	2.8.0
ecdsa	0.19.1	0.19.2
exceptiongroup	1.3.0	1.3.1
fastapi	0.115.14	0.128.1
greenlet	3.2.4	3.5.3
httptools	0.6.4	0.8.0
httpx	0.27.2	0.28.1
idna	3.10	3.18
jsonschema	4.25.1	4.26.0
mako	1.3.10	1.3.12
pyasn1	0.6.1	0.6.3
pyjwt	2.10.1	2.13.0
pydantic	2.11.9	2.11.10
pydantic-settings	2.11.0	2.14.2
python-dotenv	1.1.1	1.2.2
requests	2.32.5	2.34.2
scipy	1.13.1	1.15.3
sqlalchemy	2.0.43	2.0.51
starlette	0.46.2	0.50.0
tiktoken	0.12.0	0.13.0
tomli	2.2.1	2.4.1
typing-extensions	4.15.0	4.16.0
typing-inspection	0.4.1	0.4.2
urllib3	2.5.0	2.7.0
uvicorn	0.30.6	0.50.1
watchfiles	1.1.0	1.2.0
psycopg2-binary	2.9.11	2.9.12
dependency-injector	4.48.3	4.49.1
prometheus-client	0.20.0	0.25.0
mypy	1.18.2	1.20.2
types-pyyaml	6.0.12.20250915	6.0.12.20260518
ruff	0.5.7	0.15.20
pytest-asyncio	0.24.0	0.26.0

Updates aiosqlite from 0.20.0 to 0.22.1

Changelog

Sourced from aiosqlite's changelog.

v0.22.1

Bug fix release

NOTE: Starting with v0.22.0, the aiosqlite.Connection object no longer inherits from threading.Thread. If not using aiosqlite as a context manager, clients must await connection.close() or call connection.stop() to ensure the helper thread is completed and terminated correctly. A ResourceWarning will be emitted for any connection that is garbage collected without being closed or stopped.

• Added synchronous stop() method to aiosqlite.Connection to enable safe cleanup and termination of the background thread without dependence on having an active event loop (#370)

$ git shortlog -s v0.22.0...v0.22.1
     2	Amethyst Reese

v0.22.0

Feature release

• Support set_authorizer query access controls (#349)
• Wait for transaction queue to complete when closing connection (#305)
• Emit warning when connection goes out of scope without being closed (#355)
• Remove dependency on typing_extensions (#365)

$ git shortlog -s v0.21.0...v0.22.0
     1	Alec Berryman
     1	Amethyst Reese
     1	David Andreoletti
     1	Markus Heidelberg
     1	beerpsi
    19	dependabot[bot]

v0.21.0

Maintenance release

• Fix: close connection correctly when BaseException raised in connection (#317)
• Metadata improvements

... (truncated)

Commits

• 9b127ce Version bump v0.22.1
• 5c3f61c Improve stop semantics for connections (#370)
• a869d73 Version bump v0.22.0
• 1cd60ad Emit warning if connection is deleted before it is closed (#355)
• 611d7b4 Add set_authorizer support for fine-grained access control (#349)
• 81d00c8 Bump actions/setup-python from 5 to 6 (#357)
• 7a26722 Bump coverage[toml] from 7.8.0 to 7.10.7 (#358)
• 4457540 Bump flake8 from 7.2.0 to 7.3.0 (#346)
• b650dad Bump actions/checkout from 5 to 6 (#366)
• 065ffdd Bump mypy from 1.15.0 to 1.19.0 (#367)
• Additional commits viewable in compare view

Updates alembic from 1.16.5 to 1.18.5

Release notes

Sourced from alembic's releases.

1.18.5

Released: June 25, 2026

usecase

• [usecase] [commands] Added --splice support to the merge() command. Previously, the merge command would suggest using --splice when attempting to merge non-head revisions, but the flag was not actually accepted by the command. The splice parameter is now available in both the command-line interface and the command.merge() function, matching the existing support in command.revision(). Pull request courtesy Kadir Can Ozden.

  References: #1712

• [usecase] [environment] Added ScriptDirectory.get_heads.consider_depends_on parameter to ScriptDirectory.get_heads(). When set to True, head revisions that are also a dependency of another revision via depends_on are excluded from the result, matching the effective heads that would be present in the alembic_version table after running all upgrades.

  References: #1806

bug

• [bug] [autogenerate] Fixed rendering of dialect keyword arguments containing ~sqlalchemy.schema.Column objects within sequences, such as postgresql_include. These were previously rendered using repr(), producing invalid Python in the generated migration scripts. Column objects within list or tuple values are now correctly rendered as their string column names. Pull request courtesy Ajay Singh.

  References: #1258

• [bug] [mysql] Implemented type comparison for ENUM datatypes on MySQL, which checks that the individual enum values are equivalent. If additional entries are on either side, this generates a diff. Changes of order do not generate a diff. Pull request courtesy Furkan Köykıran.

  References: #1745, #779

• [bug] [operations] Fixed bug where the inline_references parameter of Operations.add_column() did not include foreign key referential actions such as ON DELETE, ON UPDATE, DEFERRABLE, INITIALLY, and MATCH when rendering the inline REFERENCES clause.

... (truncated)

Commits

• See full diff in compare view

Updates anyio from 4.11.0 to 4.14.1

Release notes

Sourced from anyio's releases.

4.14.1

• Fixed teardown of higher-scoped async fixtures failing on asyncio with RuntimeError: Attempted to exit cancel scope in a different task than it was entered in when an async test raise an outcome exception (e.g., pytest.skip(), pytest.xfail(), or pytest.fail()) (#1179; PR by @​EmmanuelNiyonshuti)
• Fixed CapacityLimiter.total_tokens rejecting a value of 0 when the limiter was instantiated outside of an event loop, contradicting the documented behavior of allowing 0 total tokens (#1183; PR by @​nyxst4ck)

4.14.0

• Added support for Python 3.15

• Added an asynchronous implementation of the itertools module (#998; PR by @​11kkw)

• Added the local_port parameter to connect_tcp() to allow binding to a specific local port before connecting (#1067; PR by @​nullwiz)

• Added support for custom capacity limiters in async path and file I/O functions and classes

• Added the create_task() task group method for easier asyncio migration (returns a TaskHandle) (#1098)

• Changed TaskGroup.start_soon() to return a TaskHandle

• Added an option for TaskGroup.start() to return a TaskHandle (which then contains the start value in the start_value property)

• Added the cancel() convenience method to TaskGroup as a shortcut for cancelling the task group's cancel scope

• Improved the error message when a known backend is not installed to suggest the install command (#1115; PR by @​EmmanuelNiyonshuti)

• Improved anyio.Path to preserve subclass types by returning Self in methods that return path objects (#1130; PR by @​EmmanuelNiyonshuti)

• Changed the parameter type annotation in anyio.Path.write_bytes() to accept any ReadableBuffer, thus allowing it to accept bytearray and memoryview to match pathlib.Path.write_bytes() (#1135; PR by @​SAY-5)

• Changed several type annotations to only accept callables returning coroutine-like objects instead of arbitrary awaitables:

  • TaskGroup.start_soon()
  • TaskGroup.start()
  • anyio.from_thread.run()

  This reverts an earlier change from v3.7.0 which was made in error. (#1153)

• Changed anyio.run to support callables returning arbitrary awaitables at runtime on all backends. Previously, this only worked on asyncio (#1171; PR by @​gschaffner)

• Changed several classes (and their subclasses) to have __slots__ (with __weakref__):

  • anyio.CancelScope
  • anyio.CapacityLimiter
  • anyio.Condition
  • anyio.Event
  • anyio.Lock
  • anyio.ResourceGuard
  • anyio.Semaphore

• Fixed cancellation exception escaping a cancel scope when triggered via check_cancelled() in a worker thread (#1113)

• Fixed TaskGroup raising AttributeError instead of a clear error when entered more than once (#1109; PR by @​bahtya)

... (truncated)

Commits

• 149b9e9 Bumped up the version
• 377518c Bump actions/checkout from 6 to 7 in the github-actions group (#1186)
• b42a2f5 [pre-commit.ci] pre-commit autoupdate (#1185)
• 3ceb6ff Allow 0 tokens in a CapacityLimiter instantiated outside an event loop (#1183)
• e10d1db Add missing await to open_file() in file I/O concurrency example (#1182)
• 1dbc3b6 OutcomeException should not discard test runner_task (#1180)
• ffe9133 Bumped up the version
• f8b9f01 Fixed asyncio lock waiter deadlocks after cancellation (#1145)
• d517ee1 [pre-commit.ci] pre-commit autoupdate (#1176)
• 550b68e Make anyio.run support Awaitable at runtime on all backends (#1171)
• Additional commits viewable in compare view

Updates certifi from 2025.8.3 to 2025.11.12

Commits

• 37ea150 2025.11.12 (#375)
• 2fa50bb Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#374)
• 6cadb53 Bump actions/download-artifact from 5.0.0 to 6.0.0 (#373)
• fb14ac4 2025.10.05 (#371)
• 2c7c7ee Add Python 3.14 classifier in setup.py
• 1a5cb7b Bump actions/setup-python from 5.6.0 to 6.0.0 (#367)
• dea5960 Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 (#366)
• 83566b7 Bump actions/checkout from 4.2.2 to 5.0.0
• ca2e121 Bump actions/download-artifact from 4.3.0 to 5.0.0
• See full diff in compare view

Updates click from 8.1.8 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

• Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
• Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
• A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
• echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
• Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
• {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32

• get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
• Zsh completion scripts parse correctly on Windows. #3277 # 3466
• Shell completion of Choice Enum values produces a valid completion result. #3015
• Fix empty byte-string handling in echo. #3487
• Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our [Version Support Policy][version] on our website.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

• Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
• Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
• A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
• echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
• Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
• {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

Version 8.4.1

Released 2026-05-21

• get_parameter_source() is available during eager callbacks and type conversion again. {issue}3458 {pr}3484
• Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
• Shell completion of Enum values used as Choice options produces a valid completion result. {issue}3015 {pr}3471
• Fix empty byte-string handling in echo. {issue}3487 {pr}3493
• Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
• Fix open_url on Windows when the file path contains spaces. {issue}2994 {pr}3478

Version 8.4.0

Released 2026-05-17

• {class}ParamType typing improvements. {pr}3371

  • {class}ParamType is now a generic abstract base class,

... (truncated)

Commits

• b2e30a1 Release version 8.4.2
• 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
• bec5928 Fix package_name resolution when top-level module differs from distribution...
• 916883a Fix tests to not rely on -Wdefault option (#3591)
• 09195f6 Fix double-bracketing of choices in synopsis (#3578)
• 1557e26 Check for warning exception with idiomatic context manager
• d9ff133 Static typing improvements in click.shell_completion (#3460)
• 762c97e Fix double-bracketing of choices in synopsis
• 8929d39 Convert changes to markdown. (#3559)
• 237be50 Move changes headings down a level.
• Additional commits viewable in compare view

Updates dnspython from 2.7.0 to 2.8.0

Release notes

Sourced from dnspython's releases.

dnspython 2.8.0

See What's New for details.

The minimum supported version of Python is 3.10.

My thanks to the many people who have contributed to this release. Also thanks to my co-maintainers: Tomáš Křížek, Petr Špaček, and Brian Wellington.

This release was published to PyPI using Trusted Publishing.

Changelog

Sourced from dnspython's changelog.

2.8.0

• dns/btreezone.py provides another zone versioned implementation built on top of a B-tree. It maintains DNSSEC sort order, labels nodes as delegation points or glue, and can find the "bounds" of a name (useful for DNSSEC responses).

• dns/query.py now provides make_socket(), make_ssl_socket(), and make_ssl_context() to make using persistent connections with the query code easier.

• dns/win32util.py now supports explicitly setting the configuration method used to get system dns info, using the set_config_method() function. There is a new configuration method that uses the Win32 API, which can be set using set_config_method(ConfigMethod.Win32). We are considering making the Win32 API the default in the future as we believe it to be the most accurate. Any feedback on it compared to the other methods is welcome.

• The DSYNC record is now supported. This type is still in draft stage at the IETF and is subject to change.

• The minimum supported Python version is now 3.10.

Commits

• 77fd94c 2.8.0 versioning
• 884f383 update 2.8 branch workflows
• 1938fe3 update 2.8 branch workflows
• a35d692 2.8.0rc1 prep
• c862baa 2.8.0rc1 prep
• 0945d59 more lint
• 8fa6766 lint
• 6416335 Type syntax (#1218)
• a459144 lint
• a0d5f17 fix the all entries
• Additional commits viewable in compare view

Updates ecdsa from 0.19.1 to 0.19.2

Release notes

Sourced from ecdsa's releases.

0.19.2

Bug fixes:

• Fix CVE-2026-33936, a DER parsing issue in remove_octet_string(), remove_constructed(), and remove_implitic() where a truncated buffer wasn't detected. This can lead to high level functions, like SigningKey.from_der() to raise unexpected exceptions. (Mohamed Abdelaal (0xmrma))

Maintenance:

• Update CI to use newer version of Ubuntu.

Changelog

Sourced from ecdsa's changelog.

• Release 0.19.2 (26 Mar 2026)

Bug fixes:

• Fix CVE-2026-33936, a DER parsing issue in remove_octet_string(), remove_constructed(), and remove_implitic() where a truncated buffer wasn't detected. This can lead to high level functions, like SigningKey.from_der() to raise unexpected exceptions. (Mohamed Abdelaal (0xmrma))

Maintenance:

• Update CI to use newer version of Ubuntu.

• Release 0.19.1 (13 Mar 2025)

New API:

• der.remove_implitic and der.encode_implicit for decoding and encoding DER IMPLICIT values with custom tag values and arbitrary classes

Bug fixes:

• Minor fixes around arithmetic with curves that have non-prime order (useful for experimentation, not practical deployments)
• Fix arithmetic to work with curves that have (0, 0) on the curve
• Fix canonicalization of signatures when s is just slightly above half of curve order

Maintenance:

• Dropped official support for Python 3.5 (again, issues with CI, support for Python 2.6 and Python 2.7 is unchanged)

• Officialy support Python 3.12 and 3.13 (add them to CI)

• Removal of few more unnecessary six.b literals (Alexandre Detiste)

• Fix typos in warning messages

• Release 0.19.0 (08 Apr 2024)

New API:

• to_ssh in VerifyingKey and SigningKey, supports Ed25519 keys only (Pablo Mazzini)

New features:

• Support for twisted Brainpool curves

Doc fix:

• Fix curve equation in glossary
• Documentation for signature encoding and signature decoding functions

Maintenance:

• Dropped official support for 3.3 and 3.4 (because of problems running them in CI, not because it's actually incompatible; support for 2.6 and 2.7 is

... (truncated)

Commits

• bd66899 Merge commit from fork
• 9c046ee tests: reject truncated DER lengths
• acc40fd der: reject truncated lengths in octet/implicit/constructed
• 55aca78 Merge pull request #363 from gstarovo/ubuntu20-deprecation
• c4f0df1 chore: change to ubuntu-22 since u-20 is deprecated
• See full diff in compare view

Updates exceptiongroup from 1.3.0 to 1.3.1

Release notes

Sourced from exceptiongroup's releases.

1.3.1

• Fixed AttributeError: 'TracebackException' object has no attribute 'exceptions' when formatting unpickled TBEs from another Python process which did not apply the exceptiongroup patches (#144)

Changelog

Sourced from exceptiongroup's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

UNRELEASED

• Fixed the repr() of exception groups being affected by mutation of the original exception sequence after construction ([#154](https://github.com/agronholm/exceptiongroup/issues/154) <https://github.com/agronholm/exceptiongroup/issues/154>_)

1.3.1

• Fixed AttributeError: 'TracebackException' object has no attribute 'exceptions' when formatting unpickled TBEs from another Python process which did not apply the exceptiongroup patches ([#144](https://github.com/agronholm/exceptiongroup/issues/144) <https://github.com/agronholm/exceptiongroup/issues/144>_)

1.3.0

• Added **kwargs to function and method signatures as appropriate to match the signatures in the standard library
• In line with the stdlib typings in typeshed, updated (Base)ExceptionGroup generic types to define defaults for their generic arguments (defaulting to BaseExceptionGroup[BaseException] and ExceptionGroup[Exception]) (PR by @​mikenerone)
• Changed BaseExceptionGroup.__init__() to directly call BaseException.__init__() instead of the superclass __init__() in order to emulate the CPython behavior (broken or not) (PR by @​cfbolz)
• Changed the exceptions attribute to always return the same tuple of exceptions, created from the original exceptions sequence passed to BaseExceptionGroup to match CPython behavior ([#143](https://github.com/agronholm/exceptiongroup/issues/143) <https://github.com/agronholm/exceptiongroup/issues/143>_)

1.2.2

• Removed an assert in exceptiongroup._formatting that caused compatibility issues with Sentry ([#123](https://github.com/agronholm/exceptiongroup/issues/123) <https://github.com/agronholm/exceptiongroup/issues/123>_)

1.2.1

• Updated the copying of __notes__ to match CPython behavior (PR by CF Bolz-Tereick)
• Corrected the type annotation of the exception handler callback to accept a BaseExceptionGroup instead of BaseException
• Fixed type errors on Python < 3.10 and the type annotation of suppress() (PR by John Litborn)

1.2.0

• Added special monkeypatching if Apport <https://github.com/canonical/apport>_ has

... (truncated)

Commits

• ddddb6f Added the release version
• 49c5e60 Fixed AttributeError when formatting unpickled TBEs from an unpatched process
• 1be517f [pre-commit.ci] pre-commit autoupdate (#152)
• af0ea2f [pre-commit.ci] pre-commit autoupdate (#149)
• 7c980a8 Removed pin on pyright version
• ef85336 Fixed typing job not finding Python 3.14
• 080b3f4 Pinned pyright version to fix typeshed related failure
• ac66090 Added Python 3.14 to the test matrix
• a0da94d Fixed test failures on Python 3.14
• See full diff in compare view

Updates fastapi from 0.115.14 to 0.128.1

Release notes

Sourced from fastapi's releases.

0.128.1

Features

• ✨ Add viewport meta tag to improve Swagger UI on mobile devices. PR #14777 by @​Joab0.
• 🚸 Improve error message for invalid query parameter type annotations. PR #14479 by @​retwish.

Fixes

• 🐛 Update ValidationError schema to include input and ctx. PR #14791 by @​jonathan-fulton.
• 🐛 Fix TYPE_CHECKING annotations for Python 3.14 (PEP 649). PR #14789 by @​mgu.
• 🐛 Strip whitespaces from Authorization header credentials. PR #14786 by @​WaveTheory1.
• 🐛 Fix OpenAPI duplication of anyOf refs for app-level responses with specified content and model as Union. PR #14463 by @​DJMcoder.

Refactors

• 🎨 Tweak types for mypy. PR #14816 by @​tiangolo.
• 🏷️ Re-export IncEx type from Pydantic instead of duplicating it. PR #14641 by @​mvanderlee.
• 💡 Update comment for Pydantic internals. PR #14814 by @​tiangolo.

Docs

• 📝 Update docs for contributing translations, simplify title. PR #14817 by @​tiangolo.
• 📝 Fix typing issue in docs_src/app_testing/app_b code example. PR #14573 by @​timakaa.
• 📝 Fix example of license identifier in documentation. PR #14492 by @​johnson-earls.
• 📝 Add banner to translated pages. PR #14809 by @​YuriiMotov.
• 📝 Add links to related sections of docs to docstrings. PR #14776 by @​YuriiMotov.
• 📝 Update embedded code examples to Python 3.10 syntax. PR #14758 by @​YuriiMotov.
• 📝 Fix dependency installation command in docs/en/docs/contributing.md. PR #14757 by @​YuriiMotov.
• 📝 Use return type annotation instead of response_model when possible. PR #14753 by @​YuriiMotov.
• 📝 Use WSGIMiddleware from a2wsgi instead of deprecated fastapi.middleware.wsgi.WSGIMiddleware. PR #14756 by @​YuriiMotov.
• 📝 Fix minor typos in release notes. PR #14780 by @​whyvineet.
• 🐛 Fix copy button in custom.js. PR #14722 by @​fcharrier.
• 📝 Add contribution instructions about LLM generated code and comments and automated tools for PRs. PR #14706 by @​tiangolo.
• 📝 Update docs for management tasks. PR #14705 by @​tiangolo.
• 📝 Update docs about managing translations. PR #14704 by @​tiangolo.
• 📝 Update docs for contributing with translations. PR #14701 by @​tiangolo.
• 📝 Specify language code for code block. PR #14656 by @​YuriiMotov.

Translations

• 🌐 Improve LLM prompt of uk documentation. PR #14795 by @​roli2py.
• 🌐 Update translations for ja (update-outdated). PR #14588 by @​tiangolo.
• 🌐 Update translations for uk (update outdated, found by fixer tool). PR #14739 by @​YuriiMotov.
• 🌐 Update translations for tr (update-outdated). PR #14745 by @​tiangolo.
• 🌐 Update llm-prompt.md for Korean language. PR #14763 by @​seuthootDev.
• 🌐 Update translations for ko (update outdated, found by fixer tool). PR #14738 by @​YuriiMotov.
• 🌐 Update translations for de (update-outdated). PR #14690 by @​tiangolo.
• 🌐 Update LLM prompt for Russian translations. PR #14733 by @​YuriiMotov.
• 🌐 Update translations for ru (update-outdated). PR #14693 by @​tiangolo.
• 🌐 Update translations for pt (update-outdated). PR #14724 by @​tiangolo.

... (truncated)

Commits

• 1de0de5 🔖 Release version 0.128.1
• 734c95b 📝 Update release notes
• 84a5bcf ⬇️ Downgrade LLM translations model to GPT-5 to reduce mistakes (#14823)
• 0e06400 📝 Update release notes
• ad29e44 🌐 Improve LLM prompt of uk documentation (#14795)
• 71ceac2 📝 Update release notes
• b0e99d6 🌐 Update translations for ja (update-outdated) (#14588)
• cec4be0 📝 Update release notes
• aea6137 🐛 Fix translation script commit in place (#14818)
• fe5b617 📝 Update release notes
• Additional commits viewable in compare view

Updates greenlet from 3.2.4 to 3.5.3

Changelog

Sourced from greenlet's changelog.

3.5.3 (2026-06-26)

• Fix a crash on free-threaded builds when multiple greenlets were holding a critical section on an object and the GIL for the thread was dropped. See issue 513 <https://github.com/python-greenlet/greenlet/issues/513>_. Thanks to ddorian.

3.5.2 (2026-06-17)

• The minimum supported version of Python 3.15 is now 3.15b2.
• Fix some garbage-collection related crashes on free-threaded Python 3.15. Thanks to Kumar Aditya in PR [#511](https://github.com/python-greenlet/greenlet/issues/511) <https://github.com/python-greenlet/greenlet/pull/511>_.
• Improve garbage collection of greenlets. This mostly applies to Python 3.15. Thanks to Kumar Aditya in PR [#512](https://github.com/python-greenlet/greenlet/issues/512) <https://github.com/python-greenlet/greenlet/pull/512>_.

3.5.1 (2026-05-20)

• Add preliminary support for Python 3.15b1. This has not been reviewed by CPython core developers, but all tests pass. Binary wheels of this version won't work on earlier Python 3.15 builds and may not work on later 3.15 builds.
• Fix the discrepancy in the way the two getcurrent APIs behave during greenlet teardown. One API (the C API used by, e.g., gevent) raised a RuntimeError; the other (the Python greenlet.getcurrent API) returned None. This second way is incompatible with greenlet's type annotations, so greenlet.getcurrent now raises a RuntimeError as well.

3.5.0 (2026-04-27)

• Remove the atexit callback. This callback caused greenlet APIs to become unavailable far too soon during interpreter shutdown. Now they remain available while all atexit callbacks run. Sometime after Py_IsFinalizing becomes true, they may begin misbehaving. Because the order in which C extensions are finalized is undefined, C extensions that are sensitive to this need to check the results of that function before invoking greenlet APIs. As a convenience, PyGreenlet_GetCurrent sets an exception and returns NULL when this happens (and greenlet.getcurrent begins returning None); other greenlet C API functions have undefined behaviour.

... (truncated)

Commits

• 6ee8c2c Preparing release 3.5.3
• 6ec0bbb Merge pull request #514 from python-greenlet/issue513-preserve-crit-section
• c03a7e6 Py3.13+: Preserve thread state critical_section to prevent crash on free-thre...
• bc10829 Speed up manylinux test runs by only running the core checks; only start many...
• c2db75d Back to development: 3.5.3
• 0b64e9c Preparing release 3.5.2
• 3e28d27 Add change note for #512 [skip ci]
• 6563c5e Merge pull request #512 from kumaraditya303/ft-mem
• ab6eff6 add ignore for win 3.10
• 41f5349 revert back to fails_leakcheck_on_py314_or_less
• Additional commits viewable in compare view

Updates httptools from 0.6.4 to 0.8.0

Release notes

Sourced from httptools's releases.

v0.8.0

Changes

• Add http-parser and llhttp licenses into the wheels (#135) (by @​justeph in c398a157)

• Mark cython module as free-threading compatible (#139) (by @​kumaraditya303 in 28d1db15)

• Fix all typing issues (#134) (by @​Kludex in a9bda0ed)

• Bump llhttp to 9.4.1 (#145) (by @​fantix in e3e8d71e)

• Security: fix URL truncation issue (#144) (by @​fantix in a0283f07 for #142)

• Allow building with latest setuptools (#138) (by @​OldManYellsAtCloud in c403ad1a)

v0.7.1

This is identical to 0.7.0 whose CI failed uploading

v0.7.0

Changes

• Modernize packaging and fix CI (#130) Drop Python 3.8, add Python 3.14 Use Cython 3.1.0 Bump llhttp to 9.3.0 (by @​ngoldbaum @​Carreau @​fantix in 59bf94fc for #129)

• Static Type-checking for httptools (#100) (by @​Vizonex @​KRRT7 in b55f5fe2 for #100)

Commits

• cf10ce6 httptools 0.8.0
• a0283f0 security: fix URL truncation issue (#144)
• 05e6b8e ci: add freethreading 3.14 to the CI matrix (#146)
• e3e8d71 Bump llhttp to 9.4.1 (#145)
• a9bda0e Fix all typing issues (#134)
• 28d1db1 mark cython module as free-threading compatible (#139)

[cloudflare-workers-and-pages]

Deploying fba-bench-enterprise with    Cloudflare Pages

Latest commit:	8a28632
Status:	✅  Deploy successful!
Preview URL:	https://cee0ca07.fba-bench-enterprise.pages.dev
Branch Preview URL:	https://dependabot-pip-python-depend-bbkr.fba-bench-enterprise.pages.dev

View logs

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	fba	8a28632	Jul 06 2026, 08:28 AM