[pull] master from aio-libs:master#686
Merged
Merged
Conversation
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.30.2 to 3.31.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases">filelock's releases</a>.</em></p> <blockquote> <h2>3.31.0</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>✨ feat(platform): support Termux/Android by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/678">tox-dev/filelock#678</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.30.3...3.31.0">https://github.com/tox-dev/filelock/compare/3.30.3...3.31.0</a></p> <h2>3.30.3</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>Keep both tables of contents on screen at any browser font size by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/673">tox-dev/filelock#673</a></li> <li>📝 docs(mermaid): follow the light and dark theme toggle by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/674">tox-dev/filelock#674</a></li> <li>asyncio: scope the reentrant-deadlock registry to the owning task by <a href="https://github.com/xt-yin"><code>@xt-yin</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/676">tox-dev/filelock#676</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/xt-yin"><code>@xt-yin</code></a> made their first contribution in <a href="https://redirect.github.com/tox-dev/filelock/pull/676">tox-dev/filelock#676</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.30.2...3.30.3">https://github.com/tox-dev/filelock/compare/3.30.2...3.30.3</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst">filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>3.31.2 (2026-07-21)</p> <hr /> <ul> <li><code>filelock</code> imports again on runtimes whose <code>errno</code> omits <code>ENOTSUP</code>, such as GraalPy, where importing the package raised <code>ImportError</code>. It probes the code instead, preferring <code>ENOTSUP</code>, falling back to <code>EOPNOTSUPP</code> where that name is absent, and dropping to <code>ENOSYS</code>/<code>EXDEV</code> where neither exists. Platforms defining <code>ENOTSUP</code> keep their behavior. :pr:<code>681</code></li> </ul> <hr /> <p>3.31.1 (2026-07-20)</p> <hr /> <ul> <li>A <code>SoftFileLease</code> acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:<code>680</code></li> </ul> <hr /> <p>3.31.0 (2026-07-18)</p> <hr /> <ul> <li>Support Termux/Android, whose CPython ships without <code>os.link</code> and reports <code>sys.platform == "android"</code>. <code>import filelock</code> and both <code>FileLock</code> and <code>SoftFileLock</code> now work there, <code>StrictSoftFileLock</code> reports its missing hard-link support only when acquired, and process liveness reads <code>/proc</code> on Android instead of PID-only checks. :pr:<code>678</code></li> <li><code>StrictSoftFileLock</code> no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no longer miss it and win alongside it. A held lock now exposes both an <code>intent</code> and a <code>held</code> claim. :pr:<code>678</code></li> </ul> <hr /> <p>3.30.3 (2026-07-17)</p> <hr /> <ul> <li><code>AsyncFileLock</code> and <code>AsyncSoftFileLock</code> no longer raise a deadlock <code>RuntimeError</code> when a different asyncio task waits for a lock they hold; the check now scopes holders to the owning task, so only a same-task reacquire is refused. :pr:<code>676</code></li> <li>Keep both tables of contents on screen at any browser font size. The widened body column sized itself in <code>em</code> against the reader's font size while the breakpoints that fold the layout resolve <code>em</code> against a fixed 16px, so a reader whose default font is larger than 16px had the right-hand table of contents clipped off the edge. The body column now flexes instead, and the right-hand table of contents hides only at the mobile breakpoint. :pr:<code>673</code></li> <li>Color the mermaid diagrams from whichever theme is active. They previously carried a light palette baked into each diagram's source, which stayed light on a dark page. :pr:<code>674</code></li> </ul> <hr /> <p>3.30.2 (2026-07-16)</p> <hr /> <ul> <li>Stop :class:<code>~filelock.SoftFileLease</code> deleting a live marker whose <code>mode</code> it does not implement. An unrecognized mode now names its owner instead of reading as malformed, so a record written by a newer filelock survives the grace window rather than being evicted after two seconds. :pr:<code>672</code></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/3b66fdc1432e3b02e83525e61a99096aa09a933f"><code>3b66fdc</code></a> Release 3.31.0</li> <li><a href="https://github.com/tox-dev/filelock/commit/166b2b5d723a2e111be36a8b43e594a97141c0fd"><code>166b2b5</code></a> ✨ feat(platform): support Termux/Android (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/678">#678</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/51bca89704e83ea6bed8462946c72835544dbc8f"><code>51bca89</code></a> Release 3.30.3</li> <li><a href="https://github.com/tox-dev/filelock/commit/fc277001fb6abaea57986dc52d9844d48a9ef2f6"><code>fc27700</code></a> asyncio: scope the reentrant-deadlock registry to the owning task (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/676">#676</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/8699861c86445e3a46ac185dc206a44183cd681a"><code>8699861</code></a> 📝 docs(mermaid): follow the light and dark theme toggle (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/674">#674</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/1b8da43740e2484fd3c84009e4693213fe6d5300"><code>1b8da43</code></a> Keep both tables of contents on screen at any browser font size (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/673">#673</a>)</li> <li>See full diff in <a href="https://github.com/tox-dev/py-filelock/compare/3.30.2...3.31.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [platformdirs](https://github.com/tox-dev/platformdirs) from 4.10.0 to 4.10.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/platformdirs/releases">platformdirs's releases</a>.</em></p> <blockquote> <h2>4.10.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>🐛 fix(windows): stop leaking memory on repeated folder lookups by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/platformdirs/pull/507">tox-dev/platformdirs#507</a></li> <li>🚀 ci(release): towncrier changelog + publish on tag push by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/platformdirs/pull/509">tox-dev/platformdirs#509</a></li> <li>📝 docs(changelog): rebuild against release history by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/platformdirs/pull/510">tox-dev/platformdirs#510</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/platformdirs/compare/4.10.0...4.10.1">https://github.com/tox-dev/platformdirs/compare/4.10.0...4.10.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst">platformdirs's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>4.10.1 (2026-07-18)</p> <hr /> <ul> <li>Stop leaking memory on repeated Windows folder lookups. <code>get_win_folder_via_ctypes</code> defined a fresh <code>ctypes</code> structure on every call, and each one registered a pointer type that was never released; the resolver is now built once and reused. :pr:<code>507</code></li> </ul> <hr /> <p>4.10.0 (2026-05-28)</p> <hr /> <ul> <li>Add :func:<code>~platformdirs.user_publicshare_dir</code>, :func:<code>~platformdirs.user_templates_dir</code>, :func:<code>~platformdirs.user_fonts_dir</code>, and :func:<code>~platformdirs.user_preference_dir</code> :pr:<code>491</code></li> <li>Add :func:<code>~platformdirs.user_projects_dir</code> backed by <code>$XDG_PROJECTS_DIR</code> :pr:<code>490</code></li> <li>Return only the first path from :func:<code>~platformdirs.site_config_path</code> on macOS when <code>multipath</code> is set :pr:<code>488</code> - by :user:<code>lphuc2250gma</code></li> </ul> <hr /> <p>4.9.6 (2026-04-09)</p> <hr /> <ul> <li>Fix macOS XDG variables leaking across :func:<code>~platformdirs.user_config_dir</code>, :func:<code>~platformdirs.user_data_dir</code>, and :func:<code>~platformdirs.user_state_dir</code> when only some are set :pr:<code>473</code> - by :user:<code>Goddesen</code></li> <li>Avoid duplicate site directories in Unix :meth:<code>~platformdirs.PlatformDirs.iter_config_dirs</code> and :meth:<code>~platformdirs.PlatformDirs.iter_data_dirs</code> when <code>use_site_for_root</code> is active :pr:<code>469</code> - by :user:<code>viccie30</code></li> </ul> <hr /> <p>4.9.4 (2026-03-05)</p> <hr /> <ul> <li>Respect <code>XDG_CONFIG_HOME</code> when reading the user-dirs configuration :pr:<code>453</code> - by :user:<code>bysiber</code></li> <li>Create the directory in Android :func:<code>~platformdirs.user_log_dir</code> and :func:<code>~platformdirs.user_runtime_dir</code> when <code>ensure_exists</code> is set :pr:<code>452</code> - by :user:<code>bysiber</code></li> </ul> <hr /> <p>4.9.2 (2026-02-16)</p> <hr /> <ul> <li>No user-facing changes</li> </ul> <hr /> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/platformdirs/commit/2e740132ddbe62a3ff4030653bf41b54902949e1"><code>2e74013</code></a> Release 4.10.1</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/30767225f50938ff9f292ecb99f3a259cce5b255"><code>3076722</code></a> 📝 docs(changelog): rebuild against release history (<a href="https://redirect.github.com/tox-dev/platformdirs/issues/510">#510</a>)</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/42751ce658fae439137897528c2bd525dd212299"><code>42751ce</code></a> 🚀 ci(release): towncrier changelog + publish on tag push (<a href="https://redirect.github.com/tox-dev/platformdirs/issues/509">#509</a>)</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/d2e57567c14ea245981d123383132380e5022e13"><code>d2e5756</code></a> fix(windows): stop leaking ctypes pointer types on repeated calls (<a href="https://redirect.github.com/tox-dev/platformdirs/issues/507">#507</a>)</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/4f52c4f082ce493e7806aecc53a3491f449ceb13"><code>4f52c4f</code></a> build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 in the all group (<a href="https://redirect.github.com/tox-dev/platformdirs/issues/506">#506</a>)</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/f68e56f00b522d620b81a8b186ff681282df8526"><code>f68e56f</code></a> build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 in the all group (<a href="https://redirect.github.com/tox-dev/platformdirs/issues/504">#504</a>)</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/806560bc31d75cea6f89d3124d085d0e65e33426"><code>806560b</code></a> build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 in the all group (<a href="https://redirect.github.com/tox-dev/platformdirs/issues/502">#502</a>)</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/795aac4cfaf0e482ed8f1bf69db111011197a2a0"><code>795aac4</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/platformdirs/issues/503">#503</a>)</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/99977a9bce875ebc199fcda0d50b4659eb870527"><code>99977a9</code></a> [pre-commit.ci] pre-commit autoupdate (<a href="https://redirect.github.com/tox-dev/platformdirs/issues/500">#500</a>)</li> <li><a href="https://github.com/tox-dev/platformdirs/commit/4bd7bb307292ae7c46fabef7cb58951825d0dd68"><code>4bd7bb3</code></a> :moneybag: Surface GitHub Sponsors + thanks.dev</li> <li>Additional commits viewable in <a href="https://github.com/tox-dev/platformdirs/compare/4.10.0...4.10.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [actions/setup-python](https://github.com/actions/setup-python) from 6.3.0 to 7.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-python/releases">actions/setup-python's releases</a>.</em></p> <blockquote> <h2>v7.0.0</h2> <h2>What's Changed</h2> <h3>Enhancements</h3> <ul> <li>Migrate to ESM and upgrade dependencies by <a href="https://github.com/priyagupta108"><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1330">actions/setup-python#1330</a></li> <li>Pin SHA commits and update docs with latest versions by <a href="https://github.com/HarithaVattikuti"><code>@HarithaVattikuti</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1338">actions/setup-python#1338</a></li> <li>Remove the pip-install input by <a href="https://github.com/gowridurgad"><code>@gowridurgad</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1336">actions/setup-python#1336</a></li> </ul> <h3>Bug Fix</h3> <ul> <li>Fix to Classify stderr warning messages as warnings instead of errors in annotations by <a href="https://github.com/lmvysakh"><code>@lmvysakh</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li> <li>Validate and retry manifest fetch to prevent silent failures by <a href="https://github.com/priyagupta108"><code>@priyagupta108</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1332">actions/setup-python#1332</a></li> </ul> <h3>Dependency Upgrade</h3> <ul> <li>Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1328">actions/setup-python#1328</a></li> <li>Remove EOL Python versions and Bumps numpy text fixture by <a href="https://github.com/priya-kinthali"><code>@priya-kinthali</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1333">actions/setup-python#1333</a></li> <li>Upgrade <code>@actions/cache</code> to 6.2.0 by <a href="https://github.com/philip-gai"><code>@philip-gai</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/lmvysakh"><code>@lmvysakh</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1335">actions/setup-python#1335</a></li> <li><a href="https://github.com/philip-gai"><code>@philip-gai</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/1337">actions/setup-python#1337</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v6...v7.0.0">https://github.com/actions/setup-python/compare/v6...v7.0.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-python/commit/5fda3b95a4ea91299a34e894583c3862153e4b97"><code>5fda3b9</code></a> Pin SHA commits and update docs with latest versions (<a href="https://redirect.github.com/actions/setup-python/issues/1338">#1338</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/4ab7e95f05e168b4356aebde89dd84f59c283d8e"><code>4ab7e95</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-python/issues/1337">#1337</a> from actions/philip-gai/bump-actions-cache-6-2-0</li> <li><a href="https://github.com/actions/setup-python/commit/0f3a009f475dbea83c0371cd85d099690fee8c5c"><code>0f3a009</code></a> Remove the pip-install input (<a href="https://redirect.github.com/actions/setup-python/issues/1336">#1336</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/f8cf4291c8b8e273ddd26e569454615c7315d932"><code>f8cf429</code></a> Migrate to ESM and upgrade dependencies (<a href="https://redirect.github.com/actions/setup-python/issues/1330">#1330</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/54baeea5b34417d10a7479663a23cca53ea209b5"><code>54baeea</code></a> Validate and retry manifest fetch to prevent silent failures (<a href="https://redirect.github.com/actions/setup-python/issues/1332">#1332</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/c7092773a316760f4ecfe498e4af668a4dafeac5"><code>c709277</code></a> Annotation code fix (<a href="https://redirect.github.com/actions/setup-python/issues/1335">#1335</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/6849080452e69b330395e8a6d23cf90f56d76a1a"><code>6849080</code></a> remove EOL Python versions and Bumps numpy text fixture (<a href="https://redirect.github.com/actions/setup-python/issues/1333">#1333</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/0903b469fbf4441aadfe4f4b249dc5b1fba3a73e"><code>0903b46</code></a> Bump certifi from 2020.6.20 to 2024.7.4 in /<strong>tests</strong>/data (<a href="https://redirect.github.com/actions/setup-python/issues/1328">#1328</a>)</li> <li>See full diff in <a href="https://github.com/actions/setup-python/compare/v6.3.0...v7.0.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [sphinxcontrib-mermaid](https://github.com/mgaitan/sphinxcontrib-mermaid) from 2.0.3 to 2.1.0. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/mgaitan/sphinxcontrib-mermaid/blob/master/CHANGELOG.md">sphinxcontrib-mermaid's changelog</a>.</em></p> <blockquote> <h2>2.1.0 (July 18, 2026)</h2> <ul> <li>Add <code>mermaid_config</code> option for passing a global Mermaid configuration (<a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/215">#215</a>)</li> <li>Load the ZenUML plugin lazily, only on pages that contain a ZenUML diagram, and confine its injected stylesheet to the diagram subtree so it no longer restyles the host theme (<a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/252">#252</a>)</li> <li>Skip injecting the Mermaid JavaScript when the output format does not support it (<a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/253">#253</a>)</li> <li>Fix d3 zoom on nested SVGs (<a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/179">#179</a>)</li> <li>Fix fullscreen button positioning inconsistency (<a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/225">#225</a>)</li> <li>Fix interactions between the fullscreen, zoom, and lazy-render features (<a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/254">#254</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/6d7611b2943345bd0352d1203f7ab1f2e6d4bd7a"><code>6d7611b</code></a> Merge pull request <a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/257">#257</a> from mgaitan/tkp/210</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/c53952b3672bf5ca7c7996ba496b537306677a68"><code>c53952b</code></a> Bump version to 2.1.0</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/c5bfe4afff91804d7b462341ae588d90f344ce6e"><code>c5bfe4a</code></a> Merge pull request <a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/256">#256</a> from timkpaine/tkp/escape-generated-javascript</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/7244a8c6798dd529eb6740305f1924bf0a79d09a"><code>7244a8c</code></a> Escape generated JavaScript values</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/f4cf3e6b895a69d4498e690aade3195ddc6df6f4"><code>f4cf3e6</code></a> Merge pull request <a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/254">#254</a> from timkpaine/tkp/recent-integration-fixes</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/e96f80c3606f314982b659868e419ef235f935ef"><code>e96f80c</code></a> fix(html): Correct Mermaid feature interactions</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/2395a38d41f4bf941a2fe649cf6e99c9a0c8ac65"><code>2395a38</code></a> Merge pull request <a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/225">#225</a> from yarikoptic/bf-fullscreen</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/e0178bd120e287fb5e20c415c1c90e8759076a21"><code>e0178bd</code></a> Merge pull request <a href="https://redirect.github.com/mgaitan/sphinxcontrib-mermaid/issues/253">#253</a> from timkpaine/tkp/pr-132-skip-static-js</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/c5bafdb7c7232da00d1959c991f0a094768429bc"><code>c5bafdb</code></a> test(fullscreen): Cover button positioning</li> <li><a href="https://github.com/mgaitan/sphinxcontrib-mermaid/commit/c09d85258e3c5311008eec6194039d5ed03972d8"><code>c09d852</code></a> Fix fullscreen button positioning inconsistency</li> <li>Additional commits viewable in <a href="https://github.com/mgaitan/sphinxcontrib-mermaid/compare/2.0.3...2.1.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pip-tools](https://github.com/jazzband/pip-tools) from 7.5.3 to 7.6.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/jazzband/pip-tools/releases">pip-tools's releases</a>.</em></p> <blockquote> <h2>v7.6.0</h2> <p><em>2026-07-13</em></p> <h3>Features</h3> <ul> <li> <p>The <code>--help</code> output for <code>pip-compile</code> and <code>pip-sync</code> commands has been extended to include usage examples -- by <a href="https://github.com/Dzhud"><code>@Dzhud</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/1142">#1142</a></p> </li> <li> <p>Added <code>--uploaded-prior-to</code> as a passthrough option for <code>pip-compile</code>, allowing users to restrict package candidates to versions uploaded before a given datetime. Requires pip >= 26.0 -- by <a href="https://github.com/miettal"><code>@miettal</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2288">#2288</a></p> </li> <li> <p><code>pip-tools</code> is now compatible with <code>pip</code> 26.1 -- <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2379">#2379</a></p> </li> </ul> <h3>Improved documentation</h3> <ul> <li> <p>Fixed the contents sidebar for the index doc -- by <a href="https://github.com/sirosen"><code>@sirosen</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2169">#2169</a></p> </li> <li> <p><code>pip-tools</code> now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by <a href="https://github.com/sirosen"><code>@sirosen</code></a>.</p> <p>Thanks to <a href="https://github.com/0cjs"><code>@0cjs</code></a>, <a href="https://github.com/gpshead"><code>@gpshead</code></a>, mr-<a href="https://github.com/c"><code>@c</code></a>, <a href="https://github.com/samdoran"><code>@samdoran</code></a>, <a href="https://github.com/webknjaz"><code>@webknjaz</code></a>, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2318">#2318</a></p> </li> <li> <p><code>pip-tools</code>' documentation now features a section titled "Reference" covering the CLI commands and configuration. Configuration documentation has been removed from the readme.</p> <p>-- by <a href="https://github.com/sirosen"><code>@sirosen</code></a></p> </li> </ul> <h3>Contributor-facing changes</h3> <ul> <li> <p>CI testing now runs on Intel and ARM macOS runners, and is pinned to a specific macOS version -- by <a href="https://github.com/sirosen"><code>@sirosen</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2079">#2079</a>, <a href="https://redirect.github.com/jazzband/pip-tools/issues/2132">#2132</a>, <a href="https://redirect.github.com/jazzband/pip-tools/issues/2348">#2348</a></p> </li> <li> <p><code>pip-tools</code> now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by <a href="https://github.com/sirosen"><code>@sirosen</code></a>.</p> <p>Thanks to <a href="https://github.com/0cjs"><code>@0cjs</code></a>, <a href="https://github.com/gpshead"><code>@gpshead</code></a>, mr-<a href="https://github.com/c"><code>@c</code></a>, <a href="https://github.com/samdoran"><code>@samdoran</code></a>, <a href="https://github.com/webknjaz"><code>@webknjaz</code></a>, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2278">#2278</a>, <a href="https://redirect.github.com/jazzband/pip-tools/issues/2318">#2318</a></p> </li> <li> <p>Started running {pypi}<code>zizmor</code> as a part of CI pipelines to improve security of how we configure GitHub Actions CI/CD -- by <a href="https://github.com/webknjaz"><code>@webknjaz</code></a>.</p> <p><em>PRs and issues:</em> <a href="https://redirect.github.com/jazzband/pip-tools/issues/2327">#2327</a></p> </li> <li> <p>pip-tools docs now support GitHub Flavored Markdown admonition blocks -- by <a href="https://github.com/webknjaz"><code>@webknjaz</code></a>.</p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md">pip-tools's changelog</a>.</em></p> <blockquote> <h2>v7.6.0</h2> <p><em>2026-07-13</em></p> <h3>Features</h3> <ul> <li> <p>The <code>--help</code> output for <code>pip-compile</code> and <code>pip-sync</code> commands has been extended to include usage examples -- by {user}<code>Dzhud</code>.</p> <p><em>PRs and issues:</em> {issue}<code>1142</code></p> </li> <li> <p>Added <code>--uploaded-prior-to</code> as a passthrough option for <code>pip-compile</code>, allowing users to restrict package candidates to versions uploaded before a given datetime. Requires pip >= 26.0 -- by {user}<code>miettal</code>.</p> <p><em>PRs and issues:</em> {issue}<code>2288</code></p> </li> <li> <p><code>pip-tools</code> is now compatible with <code>pip</code> 26.1 -- {user}<code>gaborbernat</code>.</p> <p><em>PRs and issues:</em> {issue}<code>2379</code></p> </li> </ul> <h3>Improved documentation</h3> <ul> <li> <p>Fixed the contents sidebar for the index doc -- by {user}<code>sirosen</code>.</p> <p><em>PRs and issues:</em> {issue}<code>2169</code></p> </li> <li> <p><code>pip-tools</code> now has a policy regarding LLM-generated contributions, noted in the contributing documentation -- by {user}<code>sirosen</code>.</p> <p>Thanks to {user}<code>0cjs</code>, {user}<code>gpshead</code>, {user}<code>mr-c</code>, {user}<code>samdoran</code>, {user}<code>webknjaz</code>, and everyone else in the broader community who helped us to craft a policy which is considerate of contributors and protective of the project and its maintainers.</p> <p><em>PRs and issues:</em> {issue}<code>2318</code></p> </li> <li> <p><code>pip-tools</code>' documentation now features a section titled "Reference" covering the CLI commands and configuration. Configuration documentation has been removed from the readme.</p> <p>-- by {user}<code>sirosen</code></p> </li> </ul> <h3>Contributor-facing changes</h3> <ul> <li> <p>CI testing now runs on Intel and ARM macOS runners, and is pinned to a specific macOS version -- by {user}<code>sirosen</code>.</p> <p><em>PRs and issues:</em> {issue}<code>2079</code>, {issue}<code>2132</code>, {issue}<code>2348</code></p> </li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jazzband/pip-tools/commit/27f6a968be04fa60c0873d9025bd5e1824e09082"><code>27f6a96</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2420">#2420</a> from sirosen/release/v7.6.0</li> <li><a href="https://github.com/jazzband/pip-tools/commit/cbe77f06a778a6ccf5cf338f8e0a62fe7b9847c0"><code>cbe77f0</code></a> Apply suggestions from code review</li> <li><a href="https://github.com/jazzband/pip-tools/commit/015146e1a114a5b6aee00f1c8d3a23db7f5898b0"><code>015146e</code></a> Update changelog for version 7.6.0</li> <li><a href="https://github.com/jazzband/pip-tools/commit/9a2d2c12a798d1986807a718e2ab0c92f1f9f81c"><code>9a2d2c1</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2414">#2414</a> from jazzband/pre-commit-ci-update-config</li> <li><a href="https://github.com/jazzband/pip-tools/commit/fc3f877b89c27a89adce4e60d2ed224bae34caff"><code>fc3f877</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2418">#2418</a> from jazzband/dependabot/pip/docs/soupsieve-2.8.4</li> <li><a href="https://github.com/jazzband/pip-tools/commit/5247a6bd4ee11e6b88c026b887a52e18a30ae36e"><code>5247a6b</code></a> [pre-commit.ci] pre-commit autoupdate</li> <li><a href="https://github.com/jazzband/pip-tools/commit/3d1faf6ad56d649d04930199e6b94110cf7341af"><code>3d1faf6</code></a> Bump soupsieve from 2.8.3 to 2.8.4 in /docs</li> <li><a href="https://github.com/jazzband/pip-tools/commit/57637dbf08aeefe88fec7786bcd07cf111f9f662"><code>57637db</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2419">#2419</a> from sirosen/fix-test-failure</li> <li><a href="https://github.com/jazzband/pip-tools/commit/4695c37c231d27065688119a658e9c97ff04efc0"><code>4695c37</code></a> Fix the <code>fake_with_deps</code> test package</li> <li><a href="https://github.com/jazzband/pip-tools/commit/24f4230b0fc9c964100b73f81599b0cc4eaff79a"><code>24f4230</code></a> Merge pull request <a href="https://redirect.github.com/jazzband/pip-tools/issues/2413">#2413</a> from webknjaz/maintenance/nested-zizmor-gha-workflow...</li> <li>Additional commits viewable in <a href="https://github.com/jazzband/pip-tools/compare/v7.5.3...v7.6.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
… bounded buffer slice (#13223)
… bounded buffer slice (#13224)
…ing across a gated matrix (#13227) Co-authored-by: J. Nick Koston <nick@koston.org>
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.31.0 to 3.31.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases">filelock's releases</a>.</em></p> <blockquote> <h2>3.31.1</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>♻️ refactor(coverage): key exclusions on probed capability by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/679">tox-dev/filelock#679</a></li> <li>scope a lease's claim to the context that acquired it by <a href="https://github.com/dxbjavid"><code>@dxbjavid</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/680">tox-dev/filelock#680</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.31.0...3.31.1">https://github.com/tox-dev/filelock/compare/3.31.0...3.31.1</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst">filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>3.32.0 (2026-07-21)</p> <hr /> <ul> <li><code>SoftReadWriteLock</code> closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:<code>685</code></li> <li>Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:<code>683</code></li> <li>The source distribution ships the capability probes the tests import, and reading one no longer needs <code>coverage</code> installed, so the suite runs from an unpacked sdist instead of failing on a missing <code>coverage_pragmas</code>. :pr:<code>685</code></li> </ul> <hr /> <p>3.31.2 (2026-07-21)</p> <hr /> <ul> <li><code>filelock</code> imports again on runtimes whose <code>errno</code> omits <code>ENOTSUP</code>, such as GraalPy, where importing the package raised <code>ImportError</code>. It probes the code instead, preferring <code>ENOTSUP</code>, falling back to <code>EOPNOTSUPP</code> where that name is absent, and dropping to <code>ENOSYS</code>/<code>EXDEV</code> where neither exists. Platforms defining <code>ENOTSUP</code> keep their behavior. :pr:<code>681</code></li> </ul> <hr /> <p>3.31.1 (2026-07-20)</p> <hr /> <ul> <li>A <code>SoftFileLease</code> acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:<code>680</code></li> </ul> <hr /> <p>3.31.0 (2026-07-18)</p> <hr /> <ul> <li>Support Termux/Android, whose CPython ships without <code>os.link</code> and reports <code>sys.platform == "android"</code>. <code>import filelock</code> and both <code>FileLock</code> and <code>SoftFileLock</code> now work there, <code>StrictSoftFileLock</code> reports its missing hard-link support only when acquired, and process liveness reads <code>/proc</code> on Android instead of PID-only checks. :pr:<code>678</code></li> <li><code>StrictSoftFileLock</code> no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no longer miss it and win alongside it. A held lock now exposes both an <code>intent</code> and a <code>held</code> claim. :pr:<code>678</code></li> </ul> <hr /> <p>3.30.3 (2026-07-17)</p> <hr /> <ul> <li><code>AsyncFileLock</code> and <code>AsyncSoftFileLock</code> no longer raise a deadlock <code>RuntimeError</code> when a different asyncio task</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/c1b2e6fdbb8f2307e06dbc1543314194e3250139"><code>c1b2e6f</code></a> Release 3.31.1</li> <li><a href="https://github.com/tox-dev/filelock/commit/9fd7de55e1109fee751173ad3842cf909349ce9f"><code>9fd7de5</code></a> scope a lease's claim to the context that acquired it (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/680">#680</a>)</li> <li><a href="https://github.com/tox-dev/filelock/commit/2b3ad2c561889f340975bc62a48969e1fb4109d6"><code>2b3ad2c</code></a> ♻️ refactor(coverage): key exclusions on probed capability (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/679">#679</a>)</li> <li>See full diff in <a href="https://github.com/tox-dev/py-filelock/compare/3.31.0...3.31.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [aiofastnet](https://github.com/tarasko/aiofastnet) from 0.19.0 to 0.20.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tarasko/aiofastnet/releases">aiofastnet's releases</a>.</em></p> <blockquote> <h2>0.20.0</h2> <ul> <li>Performance improvements from <a href="https://github.com/river-walras"><code>@river-walras</code></a> in SSL fallback engine.</li> <li>Fix potential hangups in SSLEngineFallback for some specific ssl MemoryBIO sizes.</li> <li>Simplify logic by always using SSLTransport_Transport when ssl fallback engine is used.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tarasko/aiofastnet/blob/master/HISTORY.rst">aiofastnet's changelog</a>.</em></p> <blockquote> <h2>0.20.0</h2> <ul> <li>Performance improvements from <a href="https://github.com/river-walras"><code>@river-walras</code></a> in SSL fallback engine.</li> <li>Fix potential hangups in SSLEngineFallback for some specific ssl MemoryBIO sizes.</li> <li>Simplify logic by always using SSLTransport_Transport when ssl fallback engine is used.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tarasko/aiofastnet/commit/5874cfa95a02af9ee96f4104316f1b41eda61957"><code>5874cfa</code></a> Fix warning</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/a5136e6a3055f2d47c9fddf2ff93ef865d01d434"><code>a5136e6</code></a> Merge pull request <a href="https://redirect.github.com/tarasko/aiofastnet/issues/48">#48</a> from tarasko/simplify_fallback_engine</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/b5e4202ea30ce5c07e39c328594bfb4030c9f04b"><code>b5e4202</code></a> Fix tests</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/9d2375c8a59235599db3b3526ad3b55d3a6083c8"><code>9d2375c</code></a> Fix tests</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/5b48e0aa12957a5c3a04b9c0d52a333ab056981f"><code>5b48e0a</code></a> Cleanup</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/514f1ec59c2fb915a2ae8b9a9b55fb7b8b6bb884"><code>514f1ec</code></a> Simplify read path when run with fallback engine</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/46d997aa6a3a053acab0f5e1cfb8c449fa6f8fd7"><code>46d997a</code></a> Merge pull request <a href="https://redirect.github.com/tarasko/aiofastnet/issues/46">#46</a> from tarasko/better_mid_size_payload_perf</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/c77b1e75c5408c075bd96f0d889093d80791daae"><code>c77b1e7</code></a> Update HISTORY</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/94e5ac37a1fea49fd46a5f46c1c5d6dda4d61c1c"><code>94e5ac3</code></a> Remove incorrect code</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/87beb32113cc21f8685bc4544aff14a6c9d037e1"><code>87beb32</code></a> Cleanup</li> <li>Additional commits viewable in <a href="https://github.com/tarasko/aiofastnet/compare/v0.19.0...v0.20.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [yarl](https://github.com/aio-libs/yarl) from 1.24.2 to 1.24.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aio-libs/yarl/releases">yarl's releases</a>.</em></p> <blockquote> <h2>1.24.5</h2> <blockquote> <p>[!IMPORTANT] The <strong>v1.24.3</strong> and <strong>v1.24.4</strong> releases never published: their wheel builds failed on the emulated odd architectures, so no packages reached PyPI and no GitHub release was created for either version. No changes were lost; everything intended for v1.24.3 and v1.24.4 shipped in v1.24.5. Their changelog entries are reproduced below.</p> </blockquote> <hr /> <h2>Contributor-facing changes</h2> <ul> <li> <p>Restricted the exhaustive IDNA default-ignorable sweep test to a native Linux x86_64 runner. It iterates roughly 140,000 code points and its result does not depend on the architecture, so running it under emulated wheel builds only added minutes and intermittently crashed the test workers -- by :user:<code>bdraco</code>.</p> <p><em>Related issues and pull requests on GitHub:</em> <a href="https://redirect.github.com/aio-libs/yarl/issues/1806">#1806</a>.</p> </li> </ul> <hr /> <h1>v1.24.4</h1> <p><em>(2026-07-19)</em></p> <h2>Packaging updates and notes for downstreams</h2> <ul> <li> <p>Stopped installing <code>hypothesis</code> in the wheel-build test environment. The property-based quoting tests that need it are skipped there already, and building it from source on architectures without a prebuilt wheel (such as <code>armv7l</code> musllinux, where the build pulls in a Rust toolchain) was failing the wheel jobs -- by :user:<code>bdraco</code>.</p> <p><em>Related issues and pull requests on GitHub:</em> <a href="https://redirect.github.com/aio-libs/yarl/issues/1804">#1804</a>.</p> </li> </ul> <hr /> <h1>v1.24.3</h1> <p><em>(2026-07-19)</em></p> <p>Bug fixes</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/aio-libs/yarl/blob/master/CHANGES.rst">yarl's changelog</a>.</em></p> <blockquote> <h1>v1.24.5</h1> <p><em>(2026-07-19)</em></p> <h2>Contributor-facing changes</h2> <ul> <li> <p>Restricted the exhaustive IDNA default-ignorable sweep test to a native Linux x86_64 runner. It iterates roughly 140,000 code points and its result does not depend on the architecture, so running it under emulated wheel builds only added minutes and intermittently crashed the test workers -- by :user:<code>bdraco</code>.</p> <p><em>Related issues and pull requests on GitHub:</em> :issue:<code>1806</code>.</p> </li> </ul> <hr /> <h1>v1.24.4</h1> <p><em>(2026-07-19)</em></p> <h2>Packaging updates and notes for downstreams</h2> <ul> <li> <p>Stopped installing <code>hypothesis</code> in the wheel-build test environment. The property-based quoting tests that need it are skipped there already, and building it from source on architectures without a prebuilt wheel (such as <code>armv7l</code> musllinux, where the build pulls in a Rust toolchain) was failing the wheel jobs -- by :user:<code>bdraco</code>.</p> <p><em>Related issues and pull requests on GitHub:</em> :issue:<code>1804</code>.</p> </li> </ul> <hr /> <h1>v1.24.3</h1> <p><em>(2026-07-19)</em></p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aio-libs/yarl/commit/0b30cb02d07f8ac454762eed3c2edea0892e9a24"><code>0b30cb0</code></a> Release 1.24.5 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1807">#1807</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/56150c80f16755114e05d7f629168899643576f5"><code>56150c8</code></a> Run the IDNA sweep test only on native Linux x86_64 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1806">#1806</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/515adcad737941336406b3e5262750fd80b52b0e"><code>515adca</code></a> Release 1.24.4 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1805">#1805</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/ab5dec2292aaa1272ec75f314f59742121fa09f3"><code>ab5dec2</code></a> Do not install hypothesis in the wheel-build test env (<a href="https://redirect.github.com/aio-libs/yarl/issues/1804">#1804</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/f9d10fbaea4108793238d0aae13e684c153e8ecf"><code>f9d10fb</code></a> Release 1.24.3 (<a href="https://redirect.github.com/aio-libs/yarl/issues/1803">#1803</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/058b7cbcfcd39cc452689361d05ecf1525fc8fcc"><code>058b7cb</code></a> Test lone surrogate handling in encoded and parsed URL paths (<a href="https://redirect.github.com/aio-libs/yarl/issues/991">#991</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/a181cee34e203856471b03e0906728d28787548e"><code>a181cee</code></a> Update hypothesis requirement from >=6.156.4 to >=6.157.0 in /requirements (#...</li> <li><a href="https://github.com/aio-libs/yarl/commit/28c1bccabd1a37c34bf8f9cc03080deac29bc1f6"><code>28c1bcc</code></a> Encode scheme-shaped path colon in relative-path builders (<a href="https://redirect.github.com/aio-libs/yarl/issues/1802">#1802</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/51e28023f7d562fa176a4c3c2c400cc512282d64"><code>51e2802</code></a> Reject hosts with Unicode default-ignorable code points (<a href="https://redirect.github.com/aio-libs/yarl/issues/1801">#1801</a>)</li> <li><a href="https://github.com/aio-libs/yarl/commit/3921a7387f312fbb1a83103f3416d2bcc970f548"><code>3921a73</code></a> Drop lone surrogates that split a percent escape in the Cython quoter (<a href="https://redirect.github.com/aio-libs/yarl/issues/1752">#1752</a>)</li> <li>Additional commits viewable in <a href="https://github.com/aio-libs/yarl/compare/v1.24.2...v1.24.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.37.1 to 4.37.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/releases">github/codeql-action's releases</a>.</em></p> <blockquote> <h2>v4.37.2</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's changelog</a>.</em></p> <blockquote> <h2>4.37.2 - 21 Jul 2026</h2> <ul> <li>The new address format for the <code>config-file</code> input that was introduced in CodeQL Action 4.37.0 is now enabled by default. In addition to the format described there, the <code>remote=</code> prefix can now be used to explicitly indicate that the input refers to a remote file. All previous input formats continue to be accepted as well. <a href="https://redirect.github.com/github/codeql-action/pull/4023">#4023</a></li> <li>The CodeQL Action can now make use of <a href="https://docs.github.com/en/code-security/how-tos/secure-at-scale/configure-organization-security/manage-usage-and-access/giving-org-access-private-registries">configured private registries</a> in Default Setup to retrieve CodeQL configuration files from remote repositories that require authentication. This will allow customers to store their CodeQL configuration in a single repository that can then be referenced by Default Setup workflows in other repositories. We expect to roll this and other, related changes out to everyone in July. <a href="https://redirect.github.com/github/codeql-action/pull/4007">#4007</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/github/codeql-action/commit/e0647621c2984b5ed2f768cb892365bf2a616ad1"><code>e064762</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4027">#4027</a> from github/update-v4.37.2-385bcdc5a</li> <li><a href="https://github.com/github/codeql-action/commit/e0faed839190caa67a5cd42f1cc16246028ca3df"><code>e0faed8</code></a> Add a couple of change notes</li> <li><a href="https://github.com/github/codeql-action/commit/73aad0eaa9df172668665a150d17b8bc5a650c20"><code>73aad0e</code></a> Update changelog for v4.37.2</li> <li><a href="https://github.com/github/codeql-action/commit/385bcdc5afb0b5a06bd1dae7809fda5453c7664b"><code>385bcdc</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4026">#4026</a> from github/dependabot/npm_and_yarn/tar-7.5.20</li> <li><a href="https://github.com/github/codeql-action/commit/de0229cea17fd9b594946f05dccc18e9c33a15d1"><code>de0229c</code></a> Merge branch 'main' into dependabot/npm_and_yarn/tar-7.5.20</li> <li><a href="https://github.com/github/codeql-action/commit/115e8cbbe9419ab1ea002e5c0c6d4797d7820bf8"><code>115e8cb</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4010">#4010</a> from github/mbg/ts/update-release-branch</li> <li><a href="https://github.com/github/codeql-action/commit/dbdf0b0c7d63778e4b807cb4cef00f090e7dcd4b"><code>dbdf0b0</code></a> Bump tar from 7.5.16 to 7.5.20</li> <li><a href="https://github.com/github/codeql-action/commit/830c23121c8d6124ad817115f9d68da98f44eba0"><code>830c231</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4023">#4023</a> from github/mbg/ff/remove-new-remote-file-addresses-ff</li> <li><a href="https://github.com/github/codeql-action/commit/69fd9e97ba2f4e95024e587c495eec0f1c9186ea"><code>69fd9e9</code></a> Merge pull request <a href="https://redirect.github.com/github/codeql-action/issues/4024">#4024</a> from github/mbg/private-registry/make-docker-available</li> <li><a href="https://github.com/github/codeql-action/commit/b85568788a5dbb01732f9d4e0d0882e5429bb804"><code>b855687</code></a> Always make <code>docker_registry</code> registries available</li> <li>Additional commits viewable in <a href="https://github.com/github/codeql-action/compare/v4.37.1...v4.37.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 8.3.2 to 9.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/astral-sh/setup-uv/releases">astral-sh/setup-uv's releases</a>.</em></p> <blockquote> <h2>v9.0.0 🌈 Change <code>prune-cache</code> default to <code>false</code></h2> <h2>Changes</h2> <p>This release disables the default cache cache pruning to ease the load on the PyPi infrastructure. Since users might experience more GitHub Actions cache usage which might result in higher costs this is marked as a breaking change. To read more on why we did this (now) you can read the detailed analysis and reasoning in <a href="https://redirect.github.com/astral-sh/setup-uv/issues/967">#967</a></p> <p>Besides this big breaking change we also have a small bugfix while building caches for linux distributions that behave a big different than the "big ones" and a speed up in version resolution by only reading the version manifest until a matching version is found saving runtime and network bandwith.</p> <h2>🚨 Breaking changes</h2> <ul> <li>Change <code>prune-cache</code> default to <code>false</code> <a href="https://github.com/charliermarsh"><code>@charliermarsh</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/967">#967</a>)</li> </ul> <h2>🐛 Bug fixes</h2> <ul> <li>fix: fall back to distribution ID when os-release has no version field <a href="https://github.com/cxzhong"><code>@cxzhong</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/961">#961</a>)</li> </ul> <h2>🚀 Enhancements</h2> <ul> <li>Speed up version client by partial response reads <a href="https://github.com/eifinger"><code>@eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/807">#807</a>)</li> </ul> <h2>🧰 Maintenance</h2> <ul> <li>chore: update known checksums for 0.11.30 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/968">#968</a>)</li> <li>chore: update known checksums for 0.11.29 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/960">#960</a>)</li> </ul> <h2>📚 Documentation</h2> <ul> <li>docs: update version references to v8.3.2 @<a href="https://github.com/apps/github-actions">github-actions[bot]</a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/949">#949</a>)</li> </ul> <h2>⬆️ Dependency updates</h2> <ul> <li>chore(deps): roll up Dependabot updates <a href="https://github.com/eifinger"><code>@eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/970">#970</a>)</li> <li>chore(deps): roll up Dependabot updates <a href="https://github.com/eifinger"><code>@eifinger</code></a> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/962">#962</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/astral-sh/setup-uv/commit/c771a70e6277c0a99b617c7a806ffedaca235ff9"><code>c771a70</code></a> chore(deps): roll up Dependabot updates (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/970">#970</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/2f537ca87c1ffa233ca2a1b84815388e3e42d845"><code>2f537ca</code></a> chore: update known checksums for 0.11.30 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/968">#968</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/2269552d547df6f50e57442326930d30d943afe3"><code>2269552</code></a> Speed up version client by partial response reads (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/807">#807</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/47a7f4fb2e900d6c33a5b5f231fa21dbfaeba52f"><code>47a7f4f</code></a> Change <code>prune-cache</code> default to <code>false</code> (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/967">#967</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/71966eff34a27b0a62ed4b9f6f6e383e071b1bb5"><code>71966ef</code></a> chore(deps): roll up Dependabot updates (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/962">#962</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/f12b1f0a84bd6dc2331b36b2bbdbb1d1e617dbcc"><code>f12b1f0</code></a> fix: fall back to distribution ID when os-release has no version field (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/961">#961</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/ecd24dd710f2fb0dca1693a67af11fc4a5c5ec84"><code>ecd24dd</code></a> chore: update known checksums for 0.11.29 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/960">#960</a>)</li> <li><a href="https://github.com/astral-sh/setup-uv/commit/6a191366842ac1502ba6c07e9b5acd5c2d9d8db3"><code>6a19136</code></a> docs: update version references to v8.3.2 (<a href="https://redirect.github.com/astral-sh/setup-uv/issues/949">#949</a>)</li> <li>See full diff in <a href="https://github.com/astral-sh/setup-uv/compare/v8.3.2...v9.0.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [filelock](https://github.com/tox-dev/py-filelock) from 3.31.1 to 3.31.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/py-filelock/releases">filelock's releases</a>.</em></p> <blockquote> <h2>3.31.2</h2> <!-- raw HTML omitted --> <h2>What's Changed</h2> <ul> <li>🐛 fix(strict): tolerate an errno without ENOTSUP by <a href="https://github.com/gaborbernat"><code>@gaborbernat</code></a> in <a href="https://redirect.github.com/tox-dev/filelock/pull/681">tox-dev/filelock#681</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/tox-dev/filelock/compare/3.31.1...3.31.2">https://github.com/tox-dev/filelock/compare/3.31.1...3.31.2</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst">filelock's changelog</a>.</em></p> <blockquote> <p>########### Changelog ###########</p> <p>.. towncrier-draft-entries:: Unreleased</p> <p>.. towncrier release notes start</p> <hr /> <p>3.32.0 (2026-07-21)</p> <hr /> <ul> <li><code>SoftReadWriteLock</code> closes the directory handle it opens to scan for readers as soon as a scan stops early, rather than holding it until the generator is collected. :pr:<code>685</code></li> <li>Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:<code>683</code></li> <li>The source distribution ships the capability probes the tests import, and reading one no longer needs <code>coverage</code> installed, so the suite runs from an unpacked sdist instead of failing on a missing <code>coverage_pragmas</code>. :pr:<code>685</code></li> </ul> <hr /> <p>3.31.2 (2026-07-21)</p> <hr /> <ul> <li><code>filelock</code> imports again on runtimes whose <code>errno</code> omits <code>ENOTSUP</code>, such as GraalPy, where importing the package raised <code>ImportError</code>. It probes the code instead, preferring <code>ENOTSUP</code>, falling back to <code>EOPNOTSUPP</code> where that name is absent, and dropping to <code>ENOSYS</code>/<code>EXDEV</code> where neither exists. Platforms defining <code>ENOTSUP</code> keep their behavior. :pr:<code>681</code></li> </ul> <hr /> <p>3.31.1 (2026-07-20)</p> <hr /> <ul> <li>A <code>SoftFileLease</code> acquired on one thread keeps its claim when another thread fails to acquire the same lease object, so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:<code>680</code></li> </ul> <hr /> <p>3.31.0 (2026-07-18)</p> <hr /> <ul> <li>Support Termux/Android, whose CPython ships without <code>os.link</code> and reports <code>sys.platform == "android"</code>. <code>import filelock</code> and both <code>FileLock</code> and <code>SoftFileLock</code> now work there, <code>StrictSoftFileLock</code> reports its missing hard-link support only when acquired, and process liveness reads <code>/proc</code> on Android instead of PID-only checks. :pr:<code>678</code></li> <li><code>StrictSoftFileLock</code> no longer lets two processes hold the lock at once under heavy contention. A holder now keeps its intent claim for the whole hold, so a contender whose directory scan races the holder's freshly linked claim can no longer miss it and win alongside it. A held lock now exposes both an <code>intent</code> and a <code>held</code> claim. :pr:<code>678</code></li> </ul> <hr /> <p>3.30.3 (2026-07-17)</p> <hr /> <ul> <li><code>AsyncFileLock</code> and <code>AsyncSoftFileLock</code> no longer raise a deadlock <code>RuntimeError</code> when a different asyncio task</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tox-dev/filelock/commit/caeb1c92f5eef9068ba8ed55cd2fb033a855ffe5"><code>caeb1c9</code></a> Release 3.31.2</li> <li><a href="https://github.com/tox-dev/filelock/commit/60eda0f9ec8b4b7efdcb429102ea8b3e7f9f9518"><code>60eda0f</code></a> 🐛 fix(strict): tolerate an errno without ENOTSUP (<a href="https://redirect.github.com/tox-dev/py-filelock/issues/681">#681</a>)</li> <li>See full diff in <a href="https://github.com/tox-dev/py-filelock/compare/3.31.1...3.31.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [aiofastnet](https://github.com/tarasko/aiofastnet) from 0.20.0 to 0.21.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tarasko/aiofastnet/releases">aiofastnet's releases</a>.</em></p> <blockquote> <h2>0.21.0</h2> <ul> <li>Various performance improvements in TCP and SSL transports</li> <li>Change default ssl_outgoing_bio_size from 64Kb to 256Kb. This improves walltime benchmark results for bigger messages</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tarasko/aiofastnet/blob/master/HISTORY.rst">aiofastnet's changelog</a>.</em></p> <blockquote> <h2>0.21.0</h2> <ul> <li>Various performance improvements in TCP and SSL transports</li> <li>Change default ssl_outgoing_bio_size from 64Kb to 256Kb. This improves walltime benchmark results for bigger messages</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tarasko/aiofastnet/commit/ebd3b003f014a74e25cffc7bf79d39df97f18409"><code>ebd3b00</code></a> Change outgoing bio size to 256 kb</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/3e92af6c331d1695c5ec5545875af75456298a3c"><code>3e92af6</code></a> Update benchmark results</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/d5a22248d9523bedbbaa51a322d4c818675c5b12"><code>d5a2224</code></a> Remove redundant SSL_write call</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/562e983eef6c6cc8bb15836a67e8edaa56288131"><code>562e983</code></a> Do not compact outgoing bio</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/3d68aa18c4b5d5b7c8e3c7b9d09cf188e68f6b65"><code>3d68aa1</code></a> Add HISTORY</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/c8ef12507955e95ad2fd647cfece220dd9087112"><code>c8ef125</code></a> Merge branch 'master' into perf_mbio_sizes</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/b7a32a15f0544744985104c00cdd0a719897ff8c"><code>b7a32a1</code></a> Performance improvements after review</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/d3ff6917993f6adaf951df70498f6101ee80d769"><code>d3ff691</code></a> Update HISTORY</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/5fa65bbd7668c06de8cffee1ad325f5a42789d17"><code>5fa65bb</code></a> Cleanup</li> <li><a href="https://github.com/tarasko/aiofastnet/commit/e1fbc41ee37fb999764e021878c1b2a215317872"><code>e1fbc41</code></a> Add no_gc</li> <li>Additional commits viewable in <a href="https://github.com/tarasko/aiofastnet/compare/v0.20.0...v0.21.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to subscribe to this conversation on GitHub.
Already have an account?
Sign in.
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
See Commits and Changes for more details.
Created by
pull[bot] (v2.0.0-alpha.4)
Can you help keep this open source service alive? 💖 Please sponsor : )