Skip to content

chore(deps): bump the weekly-batch group across 1 directory with 37 updates - #241

Closed
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/weekly-batch-eeb05747de
Closed

chore(deps): bump the weekly-batch group across 1 directory with 37 updates#241
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/pip/weekly-batch-eeb05747de

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 4, 2026

Copy link
Copy Markdown
Contributor

Bumps the weekly-batch group with 37 updates in the / directory:

Package From To
boto3 1.43.97 1.43.123
werkzeug 3.1.8 3.1.9
python-dotenv 1.2.3 1.2.4
roc-validator 0.11.4 0.13.1
amqp 5.3.1 5.4.1
billiard 4.3.0 4.3.1
botocore 1.43.97 1.43.123
cattrs 26.2.0 26.2.1
certifi 2026.7.22 2026.10.23
charset-normalizer 3.5.1 3.5.2
click-repl 0.4.0 0.4.1
dnspython 2.8.0 2.9.1
enum-tools 0.12.0 0.13.0
importlib-metadata 9.0.1 10.1.0
markupsafe 3.0.3 3.0.4
platformdirs 4.11.10 4.14.2
pydantic 2.13.5 2.14.2
pydantic-core 2.46.5 2.50.2
pyparsing 3.3.2 3.3.3
pyshacl 0.40.1 0.40.2
python-dateutil 2.9.0.post0 4.0.0
rich 13.9.4 15.0.0
s3transfer 0.19.2 0.19.3
tzdata 2026.4 2026.6
tzlocal 5.4.4 5.4.5
url-normalize 3.0.0 3.1.0
wcwidth 0.8.4 0.9.4
zipp 4.1.0 4.1.2
cryptography 50.0.1 50.0.2
iniconfig 2.3.0 2.3.1
moto 5.2.3 5.2.5
pip-tools 7.6.1 7.6.2
pluggy 1.6.0 1.7.0
pycparser 3.0 3.12
pytest 9.1.1 9.2.0
pytest-mock 3.15.1 3.17.0
ruff 0.16.8 0.17.3

Updates boto3 from 1.43.97 to 1.43.123

Commits
  • 6334d9f Merge branch 'release-1.43.123'
  • 51224ed Bumping version to 1.43.123
  • 3dfd2b6 Add changelog entries from botocore
  • f89caef Merge branch 'release-1.43.122'
  • f0464ef Merge branch 'release-1.43.122' into develop
  • 5af8c5f Bumping version to 1.43.122
  • 1af5d47 Add changelog entries from botocore
  • cc2e975 Merge branch 'release-1.43.121'
  • 807ecf8 Merge branch 'release-1.43.121' into develop
  • 21a159b Bumping version to 1.43.121
  • Additional commits viewable in compare view

Updates werkzeug from 3.1.8 to 3.1.9

Release notes

Sourced from werkzeug's releases.

3.1.9

This is the Werkzeug 3.1.9 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Werkzeug/3.1.9/ Changes: https://werkzeug.palletsprojects.com/page/changes/#version-3-1-9 Milestone: https://github.com/pallets/werkzeug/milestone/46?closed=1

  • safe_join on Windows does not allow special devices names with empty ADS markers on NTFS. GHSA-g6x2-hccm-hh4m
  • ProfilerMiddleware uses profiling.tracing on Python 3.15. #3207
  • uri_to_iri and iri_to_uri preserve empty username, password, and port 0. #3189
  • Improve performance of parse_options_header. #3231
  • Improve performance of parse_etags. #3231
  • Improve performance of parse_cookie. #3231
  • get_host also checks that the port is in the valid range. #3236
  • The int URL converter returns a 404 instead of 500 error when the value is longer than sys.get_int_max_str_digits(). #3237
  • Improve debugger PIN generation from cgroup data inside Podman. #3245
  • Authorization parsing basic auth disallows non-base64 characters. #3248
  • application/x-www-form-urlencoded form data is no longer limited to max_form_memory_size, only max_content_length. #3251
  • LimitedStream.readinto does not resize the buffer when it reads less than the remaining size. #3253
  • Rules with 10 or more converters in a single part assign matched values correctly. #3254
  • The invalid Range suffix length -0 is no longer accepted. #3255
Changelog

Sourced from werkzeug's changelog.

Version 3.1.9

Released 2026-09-27

  • safe_join on Windows does not allow special devices names with empty ADS markers on NTFS. :ghsa:g6x2-hccm-hh4m
  • ProfilerMiddleware uses profiling.tracing on Python 3.15. :issue:3207
  • uri_to_iri and iri_to_uri preserve empty username, password, and port 0. :issue:3189
  • Improve performance of parse_options_header. :pr:3231
  • Improve performance of parse_etags. :pr:3231
  • Improve performance of parse_cookie. :pr:3231
  • get_host also checks that the port is in the valid range. :pr:3236
  • The int URL converter returns a 404 instead of 500 error when the value is longer than sys.get_int_max_str_digits(). :issue:3237
  • Improve debugger PIN generation from cgroup data inside Podman. :issue:3245
  • Authorization parsing basic auth disallows non-base64 characters. :pr:3248
  • application/x-www-form-urlencoded form data is no longer limited to max_form_memory_size, only max_content_length. :pr:3251
  • LimitedStream.readinto does not resize the buffer when it reads less than the remaining size. :pr:3253
  • Rules with 10 or more converters in a single part assign matched values correctly. :pr:3254
  • The invalid Range suffix length -0 is no longer accepted. :pr:3255
Commits

Updates python-dotenv from 1.2.3 to 1.2.4

Release notes

Sourced from python-dotenv's releases.

v1.2.4

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698
Changelog

Sourced from python-dotenv's changelog.

[1.2.4] - 2026-10-01

Fixed

  • dotenv get no longer exits with code 1 for empty string values (KEY=) by [@​ShamikOfficial] in #700
  • An unquoted empty value followed by an inline comment (e.g. KEY= # comment) is now parsed as an empty string instead of the comment text by [@​Noethix55555] in #663
  • dotenv run --no-override now expands variable references with the same precedence as load_dotenv(override=False), so a value like ${BASE}/suffix uses the existing BASE from the environment instead of the one from the .env file by [@​ROTl24] in #698
Commits
  • a565c2c Bump version: 1.2.3 → 1.2.4
  • 4a7abd0 docs: add 1.2.4 release notes (#663, #698, #700)
  • f215c02 fix: dotenv get exits 0 for empty string values (#700)
  • 58f2d7c test: make test_run_with_command_flags portable and meaningful (#709)
  • e0310e5 fix: honor --no-override when expanding variables in dotenv run (#698)
  • a00cb2e docs: add CHANGELOG entry for #663 (fix #600)
  • f5485a6 fix: parse empty unquoted value with inline comment as empty string
  • See full diff in compare view

Updates roc-validator from 0.11.4 to 0.13.1

Release notes

Sourced from roc-validator's releases.

0.13.1

What's Changed

New Contributors

Full Changelog: crs4/rocrate-validator@0.13.0...0.13.1

0.13.0

What's Changed

New Contributors

Full Changelog: crs4/rocrate-validator@0.12.2...0.13.0

0.12.2

What's Changed

Full Changelog: crs4/rocrate-validator@0.12.1...0.12.2

0.12.1

What's Changed

Full Changelog: crs4/rocrate-validator@0.12.0...0.12.1

0.12.0

What's Changed

... (truncated)

Changelog

Sourced from roc-validator's changelog.

[0.13.1] - 2026-10-29

Full changelog: kikkomep/rocrate-validator@0.13.0...0.13.1

🔧 Changed

  • chore(deps): update dependencies in poetry.lock, including PySHACL 0.40.2 and Starlette 1.10.0 (c27cf006)
  • build(deps): allow Rich versions below 15 for compatibility with Flower 1.32+ (64ded524)
  • build(deps): bump crate-ci/typos (e022f654)

🐛 Fixed

  • fix(profiles): use resolved IDs for web entity checks (49638aa7)
  • fix(crate): resolve entity IDs against JSON-LD @base (e9ef43ed)
  • fix(uri): handle local paths with URI-safe conversion (4bdea490)

[0.13.0] - 2026-10-21

Full changelog: kikkomep/rocrate-validator@0.12.2...0.13.0

✨ Added

  • Profile detection now explains suggested profiles and lets users confirm them before validation (2b0cbaae).
  • Opt-in extra checks extend validation beyond the standard profile rules (e3ef940b, 8b0d1fcd).
  • Automatic package-type detection and CLI selection distinguish attached and detached crates; reports show the package type and validation scope (bebee42b, 06c29319, 595fcc8e).
  • Dictionary metadata can be validated against files in a local package root (86a84ea5).
  • Reusable validation preparation avoids repeating setup across validation calls (6bd45817).
  • Workflow Run Crate checks require an action using the main entity as its instrument and support additional action types (d88a1ce8, 57a1413f).

🐛 Fixed

  • Reusing prepared profiles across crates preserves absolute IRIs, relative identifiers, URI paths, and SHACL class targets (dc258c3a, 5edb72e4, 230856a1).
  • Package checks handle attached metadata-only inputs and dictionary metadata consistently; reports identify the local package root

... (truncated)

Commits
  • e2f05c2 release: 🔖 version 0.13.1
  • 7e2c612 chore(release): 🔖 bump version to 0.13.1
  • b61e688 chore: 🔖 update changelog (v0.13.1)
  • c27cf00 chore(deps): 🔧 update dependencies in poetry.lock (v0.13.1)
  • 73a387c Merge pull request #239 from kikkomep/fix/issue-238-spaces-in-crate-paths
  • c2fa6ec Merge pull request #241 from kikkomep/fix/issue-240-jsonld-base-resolution
  • 5e6a7de test(validation): 🧪 cover JSON-LD @​base resolution
  • 49638aa fix(profiles): 🌐 use resolved IDs for web entity checks
  • e9ef43e fix(crate): 🔗 resolve entity IDs against JSON-LD @​base
  • 27cb597 Merge pull request #237 from faizollah/support-rich-14
  • Additional commits viewable in compare view

Updates amqp from 5.3.1 to 5.4.1

Release notes

Sourced from amqp's releases.

v5.4.1

What's Changed

New Contributors

Full Changelog: celery/py-amqp@v5.4.0...v5.4.1

v5.4.0

What's Changed

New Contributors

Full Changelog: celery/py-amqp@v5.3.1...v5.4.0

Changelog

Sourced from amqp's changelog.

5.4.1

:release-date: 2026-10-05 :release-by: Asif Saif Uddin (@​auvipy)

  • Fix signedness of byte fields in AMQP tables - #472

.. _version-5.4.0:

5.4.0

:release-date: 2026-09-19 :release-by: Asif Saif Uddin (@​auvipy)

  • Replace deprecated datetime.datetime.utcfromtimestamp (#448)
  • Remove Python 3.8, 3.9 support
  • Update CI workflow to exclude Python 3.9 (#454)
  • Add null check for connection to prevent AttributeError on drain_events (#457)
  • Fix prevent channel revival during intentional close to fix shutdown crash (#458)
  • Add Python 3.14 support
  • Support limiting tls version (#463)
  • Decode AMQP field-table type l as signed 64-bit (#465)
  • Treat basic_publish write timeouts as connection errors (#464)
  • Serialize frame_writer() writes with a lock (#466)
  • Decode AMQP field-table type 's' as signed 16-bit (#469)

.. _version-5.3.1:

Commits
  • b850b07 Bump version: 5.4.0 → 5.4.1
  • 3b401be added changelog for v5.4.1 release
  • d03ced3 Decode AMQP field-table types 'b' and 'B' with the right signedness (#473)
  • c6117db Fix signedness of byte fields in AMQP tables
  • 31b0b58 Bump version: 5.3.1 → 5.4.0
  • de36b55 added changelog for v5.4.0 release
  • f3d82f1 Decode AMQP field-table type 's' as signed 16-bit (#469)
  • c2012cc Drop unused python version check (#468)
  • 9517a4d Update Python version requirements in setup.py (#467)
  • 3082466 Serialize frame_writer() writes with a lock (#466)
  • Additional commits viewable in compare view

Updates billiard from 4.3.0 to 4.3.1

Release notes

Sourced from billiard's releases.

v4.3.1

What's Changed

New Contributors

Full Changelog: celery/billiard@v4.3.0...v4.3.1

Changelog

Sourced from billiard's changelog.

4.3.1 - 2026-10-05

  • Reject bool for Pool numeric args (processes, timeouts, limits) - #460
  • Reject fewer than one pool process - #462
  • Reject a non-positive maxtasksperchild in Pool - #465
  • Refuse to close a Process that is still running -(#467)
  • Raise ValueError when using a closed Queue (#466)
  • Do not report a shutdown SystemExit as the job's result (#464)
Commits
  • 5a4a12d Bump version: 4.3.0 → 4.3.1
  • 158e5b3 added changelog for v4.3.1 release
  • 24af5db Do not report a shutdown SystemExit as the job's result (#464)
  • 5b0531b Raise ValueError when using a closed Queue (#466)
  • e51ef3d Refuse to close a Process that is still running (#467)
  • 941ca3c Reject a non-positive maxtasksperchild in Pool
  • 7fb0abe Reject fewer than one pool process
  • c59f1e5 Update CI runner to Ubuntu 24.04
  • ef3461a Reject bool for Pool numeric args (processes, timeouts, limits)
  • See full diff in compare view

Updates botocore from 1.43.97 to 1.43.123

Commits
  • c2b1d51 Merge branch 'release-1.43.123'
  • 2dba970 Bumping version to 1.43.123
  • 70ea7e3 Update endpoints model
  • e984358 Update to latest models
  • 76af6f8 Merge branch 'release-1.43.122'
  • 7f517a3 Merge branch 'release-1.43.122' into develop
  • 88fd8aa Bumping version to 1.43.122
  • f16acbc Update to latest models
  • 3c9efec fix(s3): prevent generate_presigned_post from mutating Conditions (#3847) (#3...
  • 750c41d Update awscrt version to 0.38.0 (#3850)
  • Additional commits viewable in compare view

Updates cattrs from 26.2.0 to 26.2.1

Release notes

Sourced from cattrs's releases.

v26.2.1

What's Changed

  • Fix heterogeneous tuples and NamedTuples with a member type containing a quote in its repr, like tuple[Literal["a"], int], crashing structuring code generation with SyntaxError; the index note is now embedded with repr. (#777)
  • Fix transform_error listing the extra keys of a ForbiddenExtraKeysError in set iteration order, which made the message differ between runs; the keys are now sorted, like the error's own __str__ already sorts them. (#776)

New Contributors

Full Changelog: python-attrs/cattrs@v26.2.0...v26.2.1

Changelog

Sourced from cattrs's changelog.

26.2.1 (2026-09-26)

  • Honor field renaming overrides when selecting literal discriminators for unions, so renamed union members can be structured from their serialized keys. (#778)
  • Fix heterogeneous tuples and NamedTuples with a member type containing a quote in its repr, like tuple[Literal["a"], int], crashing structuring code generation with SyntaxError; the index note is now embedded with repr. (#777)
  • Fix {func}transform_error <cattrs.transform_error> listing the extra keys of a ForbiddenExtraKeysError in set iteration order, which made the message differ between runs; the keys are now sorted, like the error's own __str__ already sorts them. (#776)
Commits
  • 995d66a v26.2.1
  • 5bf7c97 Escape the index note when structuring heterogeneous tuples
  • bc34a46 Sort extra keys when formatting ForbiddenExtraKeysError (#776)
  • See full diff in compare view

Updates certifi from 2026.7.22 to 2026.10.23

Commits

Updates charset-normalizer from 3.5.1 to 3.5.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.2

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Changelog

Sourced from charset-normalizer's changelog.

3.5.2 (2026-09-29)

Changed

  • Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

  • Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
  • Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)
Commits
  • 935c29a Release 3.5.2 (#805)
  • 9d3238a test: disable traefik in downstream niquests
  • b4c0368 docs: write changelog entry for 3.5.2
  • 717da31 chore: bump version to 3.5.2
  • 264895d chore: update pypa/cibuildwheel and pypa/gh-action-pypi-publish
  • 41e28b6 chore: raise Cython upper bound to 3.3
  • b130b7d Fix valid UTF-8 Chinese JSON misdetected as PTCP154 (#796)
  • f6afd31 Make the IANA_NO_ALIASES encodings resolvable by name (#800)
  • See full diff in compare view

Updates click-repl from 0.4.0 to 0.4.1

Release notes

Sourced from click-repl's releases.

0.4.1

What's Changed

New Contributors

Full Changelog: click-contrib/click-repl@0.4.0...0.4.1

Changelog

Sourced from click-repl's changelog.

0.4.1

:release-date: 05 Oct, 2026 :release-by: Asif Saif Uddin

  • Guard click-repl import when stdin is unavailable (#140)

.. _version-0.4.0:

Commits

Updates dnspython from 2.8.0 to 2.9.1

Release notes

Sourced from dnspython's releases.

dnspython 2.9.1

See What's New for details.

The minimum supported version of Python is 3.11.

My thanks to the many people who have contributed to this release. Also thanks to my co-maintainers: Nicki Křížek, Petr Špaček, and Brian Wellington.

This release was published to PyPI using Trusted Publishing.

dnspython 2.9.0

This release fixes a potential excessive CPU consumption issue. Thanks to Evgenios Gkritsis, Constantinos Patsakis, and George Stergiopoulos, for discovering and reporting this issue.

See What's New for details.

The minimum supported version of Python is 3.11.

My thanks to the many people who have contributed to this release. Also thanks to my co-maintainers: Nicki Křížek, Petr Špaček, and Brian Wellington.

This release was published to PyPI using Trusted Publishing.

Changelog

Sourced from dnspython's changelog.

2.9.1

  • LOC text parsing now converts the altitude, size, horizontal precision, and vertical precision fields to centimeters exactly, and requires them to be decimal numbers of meters with at most two fractional digits, as RFC 1876 section 3 specifies. They were converted with float(), so 9.29m became 928 cm rather than 929 cm and the text and wire forms of the record disagreed, forms such as 1e3m, 1_000m, +10m, nanm, and infm were accepted, extra fractional digits were silently dropped, and an altitude outside the representable range was accepted and then failed in to_wire() with a non-DNS exception. dns.exception.SyntaxError is now raised for all of these.

  • The resolver now assigns a new random query id to every query.

  • For transports that require a 0 query id, set it in a way that does not break TSIG.

  • dns.message.QueryMessage.resolve_chaining() now caps the minimum TTL of a negative response with no SOA record at 300 seconds (dns.message.NEGATIVE_TTL_WITHOUT_SOA). Previously the TTL was left at its initial value of 2^32 - 1, so a single NXDOMAIN or NODATA response with no SOA, e.g. a spoofed one, stayed in the resolver cache for the life of the process.

  • DNSSEC validation now rejects an RRSIG whose type covered or class does not match the RRset, as RFC 4035 section 5.3.1 requires. This was not checked, so a revoked DNSKEY, which may only validate the DNSKEY RRset, still validated any RRset signed with its private key if the RRSIG claimed to cover DNSKEY.

  • dns.tokenizer.Tokenizer now ends a line at a carriage return, or at a carriage return followed by a line feed, unless the carriage return is in a quoted string. The carriage return of CRLF line ends used to stay in the last token of each line and in the text of a comment, so e.g. dns.zone.from_text() rejected a zone with CRLF line ends.

  • DNSSEC validation no longer uses a DNSKEY with the REVOKE flag set to validate anything other than the DNSKEY RRset. RFC 5011 section 2.1 says a revoked key must not be used for any other purpose, but it was a candidate key like any other, so as long as the revoked key was still published, data signed with its private key, e.g. by whoever compromised it, validated.

  • dns.ttl.from_text() now rejects a BIND-style TTL that ends in a 0 without a unit, e.g. 1h0, as it already did for other numbers, e.g. 1h5, and as BIND does. The check for a trailing number tested its value instead of whether there was one, so 1h0 was read as one hour.

  • dns.dnssec.sign_zone() now adds the apex NSEC record when the origin is

... (truncated)

Commits

@dependabot
chore(deps): bump the weekly-batch group across 1 directory with 37 u…
c6a0eef 
…pdates

Bumps the weekly-batch group with 37 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [boto3](https://github.com/boto/boto3) | `1.43.97` | `1.43.123` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.8` | `3.1.9` |
| [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.3` | `1.2.4` |
| [roc-validator](https://github.com/crs4/rocrate-validator) | `0.11.4` | `0.13.1` |
| [amqp](https://github.com/celery/py-amqp) | `5.3.1` | `5.4.1` |
| [billiard](https://github.com/celery/billiard) | `4.3.0` | `4.3.1` |
| [botocore](https://github.com/boto/botocore) | `1.43.97` | `1.43.123` |
| [cattrs](https://github.com/python-attrs/cattrs) | `26.2.0` | `26.2.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.7.22` | `2026.10.23` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.5.1` | `3.5.2` |
| [click-repl](https://github.com/click-contrib/click-repl) | `0.4.0` | `0.4.1` |
| [dnspython](https://github.com/rthalley/dnspython) | `2.8.0` | `2.9.1` |
| [enum-tools](https://github.com/domdfcoding/enum_tools) | `0.12.0` | `0.13.0` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `9.0.1` | `10.1.0` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.3` | `3.0.4` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.11.10` | `4.14.2` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.13.5` | `2.14.2` |
| [pydantic-core](https://github.com/pydantic/pydantic) | `2.46.5` | `2.50.2` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.3.2` | `3.3.3` |
| [pyshacl](https://github.com/RDFLib/pySHACL) | `0.40.1` | `0.40.2` |
| [python-dateutil](https://github.com/dateutil/dateutil) | `2.9.0.post0` | `4.0.0` |
| [rich](https://github.com/Textualize/rich) | `13.9.4` | `15.0.0` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.19.2` | `0.19.3` |
| [tzdata](https://github.com/python/tzdata) | `2026.4` | `2026.6` |
| [tzlocal](https://github.com/regebro/tzlocal) | `5.4.4` | `5.4.5` |
| [url-normalize](https://github.com/niksite/url-normalize) | `3.0.0` | `3.1.0` |
| [wcwidth](https://github.com/jquast/wcwidth) | `0.8.4` | `0.9.4` |
| [zipp](https://github.com/jaraco/zipp) | `4.1.0` | `4.1.2` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.1` | `50.0.2` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.3.0` | `2.3.1` |
| [moto](https://github.com/getmoto/moto) | `5.2.3` | `5.2.5` |
| [pip-tools](https://github.com/jazzband/pip-tools) | `7.6.1` | `7.6.2` |
| [pluggy](https://github.com/pytest-dev/pluggy) | `1.6.0` | `1.7.0` |
| [pycparser](https://github.com/eliben/pycparser) | `3.0` | `3.12` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.1.1` | `9.2.0` |
| [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.15.1` | `3.17.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.16.8` | `0.17.3` |



Updates `boto3` from 1.43.97 to 1.43.123
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.43.97...1.43.123)

Updates `werkzeug` from 3.1.8 to 3.1.9
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.8...3.1.9)

Updates `python-dotenv` from 1.2.3 to 1.2.4
- [Release notes](https://github.com/theskumar/python-dotenv/releases)
- [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md)
- [Commits](theskumar/python-dotenv@v1.2.3...v1.2.4)

Updates `roc-validator` from 0.11.4 to 0.13.1
- [Release notes](https://github.com/crs4/rocrate-validator/releases)
- [Changelog](https://github.com/crs4/rocrate-validator/blob/develop/CHANGELOG.md)
- [Commits](crs4/rocrate-validator@0.11.4...0.13.1)

Updates `amqp` from 5.3.1 to 5.4.1
- [Release notes](https://github.com/celery/py-amqp/releases)
- [Changelog](https://github.com/celery/py-amqp/blob/main/Changelog)
- [Commits](celery/py-amqp@v5.3.1...v5.4.1)

Updates `billiard` from 4.3.0 to 4.3.1
- [Release notes](https://github.com/celery/billiard/releases)
- [Changelog](https://github.com/celery/billiard/blob/main/CHANGES.txt)
- [Commits](celery/billiard@v4.3.0...v4.3.1)

Updates `botocore` from 1.43.97 to 1.43.123
- [Commits](boto/botocore@1.43.97...1.43.123)

Updates `cattrs` from 26.2.0 to 26.2.1
- [Release notes](https://github.com/python-attrs/cattrs/releases)
- [Changelog](https://github.com/python-attrs/cattrs/blob/main/HISTORY.md)
- [Commits](python-attrs/cattrs@v26.2.0...v26.2.1)

Updates `certifi` from 2026.7.22 to 2026.10.23
- [Commits](certifi/python-certifi@2026.07.22...2026.10.23)

Updates `charset-normalizer` from 3.5.1 to 3.5.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.5.1...3.5.2)

Updates `click-repl` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/click-contrib/click-repl/releases)
- [Changelog](https://github.com/click-contrib/click-repl/blob/master/Changelog.rst)
- [Commits](click-contrib/click-repl@0.4.0...0.4.1)

Updates `dnspython` from 2.8.0 to 2.9.1
- [Release notes](https://github.com/rthalley/dnspython/releases)
- [Changelog](https://github.com/rthalley/dnspython/blob/main/doc/whatsnew.rst)
- [Commits](rthalley/dnspython@v2.8.0...v2.9.1)

Updates `enum-tools` from 0.12.0 to 0.13.0
- [Release notes](https://github.com/domdfcoding/enum_tools/releases)
- [Commits](domdfcoding/enum_tools@v0.12.0...v0.13.0)

Updates `importlib-metadata` from 9.0.1 to 10.1.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v9.0.1...v10.1.0)

Updates `markupsafe` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.3...3.0.4)

Updates `platformdirs` from 4.11.10 to 4.14.2
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.11.10...4.14.2)

Updates `pydantic` from 2.13.5 to 2.14.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/v2.14.2/HISTORY.md)
- [Commits](pydantic/pydantic@v2.13.5...v2.14.2)

Updates `pydantic-core` from 2.46.5 to 2.50.2
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@core-v2.46.5...core-v2.50.2)

Updates `pyparsing` from 3.3.2 to 3.3.3
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.3.2...3.3.3)

Updates `pyshacl` from 0.40.1 to 0.40.2
- [Release notes](https://github.com/RDFLib/pySHACL/releases)
- [Changelog](https://github.com/RDFLib/pySHACL/blob/master/CHANGELOG.md)
- [Commits](RDFLib/pySHACL@v0.40.1...v0.40.2)

Updates `python-dateutil` from 2.9.0.post0 to 4.0.0
- [Release notes](https://github.com/dateutil/dateutil/releases)
- [Changelog](https://github.com/dateutil/dateutil/blob/master/NEWS)
- [Commits](dateutil/dateutil@2.9.0.post0...4.0.0)

Updates `rich` from 13.9.4 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](Textualize/rich@v13.9.4...v15.0.0)

Updates `s3transfer` from 0.19.2 to 0.19.3
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.19.2...0.19.3)

Updates `tzdata` from 2026.4 to 2026.6
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2026.4...2026.6)

Updates `tzlocal` from 5.4.4 to 5.4.5
- [Changelog](https://github.com/regebro/tzlocal/blob/master/CHANGES.txt)
- [Commits](regebro/tzlocal@5.4.4...5.4.5)

Updates `url-normalize` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/niksite/url-normalize/releases)
- [Changelog](https://github.com/niksite/url-normalize/blob/master/CHANGELOG.md)
- [Commits](niksite/url-normalize@v3.0.0...v3.1.0)

Updates `wcwidth` from 0.8.4 to 0.9.4
- [Release notes](https://github.com/jquast/wcwidth/releases)
- [Changelog](https://github.com/jquast/wcwidth/blob/master/docs/history.rst)
- [Commits](jquast/wcwidth@0.8.4...0.9.4)

Updates `zipp` from 4.1.0 to 4.1.2
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v4.1.0...v4.1.2)

Updates `cryptography` from 50.0.1 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.1...50.0.2)

Updates `iniconfig` from 2.3.0 to 2.3.1
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.3.0...v2.3.1)

Updates `moto` from 5.2.3 to 5.2.5
- [Release notes](https://github.com/getmoto/moto/releases)
- [Changelog](https://github.com/getmoto/moto/blob/master/CHANGELOG.md)
- [Commits](getmoto/moto@5.2.3...5.2.5)

Updates `pip-tools` from 7.6.1 to 7.6.2
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/pypa/pip-tools/blob/main/CHANGELOG.md)
- [Commits](pypa/pip-tools@v7.6.1...v7.6.2)

Updates `pluggy` from 1.6.0 to 1.7.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.6.0...1.7.0)

Updates `pycparser` from 3.0 to 3.12
- [Release notes](https://github.com/eliben/pycparser/releases)
- [Commits](eliben/pycparser@release_v3.00...release_v3.12)

Updates `pytest` from 9.1.1 to 9.2.0
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.1.1...9.2.0)

Updates `pytest-mock` from 3.15.1 to 3.17.0
- [Release notes](https://github.com/pytest-dev/pytest-mock/releases)
- [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-mock@v3.15.1...v3.17.0)

Updates `ruff` from 0.16.8 to 0.17.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.16.8...0.17.3)

---
updated-dependencies:
- dependency-name: boto3
  dependency-version: 1.43.123
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: werkzeug
  dependency-version: 3.1.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: python-dotenv
  dependency-version: 1.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: roc-validator
  dependency-version: 0.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: amqp
  dependency-version: 5.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: billiard
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: botocore
  dependency-version: 1.43.123
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cattrs
  dependency-version: 26.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: certifi
  dependency-version: 2026.10.23
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: charset-normalizer
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: click-repl
  dependency-version: 0.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: dnspython
  dependency-version: 2.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: enum-tools
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: importlib-metadata
  dependency-version: 10.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: markupsafe
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: platformdirs
  dependency-version: 4.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic
  dependency-version: 2.14.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pydantic-core
  dependency-version: 2.50.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pyparsing
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pyshacl
  dependency-version: 0.40.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: python-dateutil
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: rich
  dependency-version: 15.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: weekly-batch
- dependency-name: s3transfer
  dependency-version: 0.19.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: tzdata
  dependency-version: '2026.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: tzlocal
  dependency-version: 5.4.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: url-normalize
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: wcwidth
  dependency-version: 0.9.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: zipp
  dependency-version: 4.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: iniconfig
  dependency-version: 2.3.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: moto
  dependency-version: 5.2.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pip-tools
  dependency-version: 7.6.2
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: weekly-batch
- dependency-name: pluggy
  dependency-version: 1.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pycparser
  dependency-version: '3.12'
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pytest
  dependency-version: 9.2.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: pytest-mock
  dependency-version: 3.17.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
- dependency-name: ruff
  dependency-version: 0.17.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: weekly-batch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Nov 4, 2026
@douglowe

douglowe commented Nov 6, 2026

Copy link
Copy Markdown
Collaborator

these are covered in my PR

@douglowe douglowe closed this Nov 6, 2026
@dependabot @github

dependabot Bot commented on behalf of github Nov 6, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/pip/weekly-batch-eeb05747de branch November 6, 2026 10:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@douglowe