Skip to content

[pull] master from aio-libs:master - #688

Merged
pull[bot] merged 10 commits into
tj-python:masterfrom
aio-libs:master
Jul 27, 2026
Merged

[pull] master from aio-libs:master#688
pull[bot] merged 10 commits into
tj-python:masterfrom
aio-libs:master

Conversation

@pull

@pull pull Bot commented Jul 27, 2026

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot Bot added 10 commits July 27, 2026 11:17
Bumps [github/codeql-action](https://github.com/github/codeql-action)
from 4.37.2 to 4.37.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/releases">github/codeql-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.37.3</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/github/codeql-action/blob/main/CHANGELOG.md">github/codeql-action's
changelog</a>.</em></p>
<blockquote>
<h2>4.37.3 - 22 Jul 2026</h2>
<p>No user facing changes.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/github/codeql-action/commit/e4fba868fa4b1b91e1fdab776edc8cfbe6e9fb81"><code>e4fba86</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4031">#4031</a>
from github/update-v4.37.3-72f6a9da0</li>
<li><a
href="https://github.com/github/codeql-action/commit/fb50ab5d62a274adf3ef3e22cfe750ae87a0ede7"><code>fb50ab5</code></a>
Update changelog for v4.37.3</li>
<li><a
href="https://github.com/github/codeql-action/commit/72f6a9da0def52d9193d6a758f0378b65091f8d1"><code>72f6a9d</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4030">#4030</a>
from github/mbg/fix/no-proxy</li>
<li><a
href="https://github.com/github/codeql-action/commit/3b5ee58597653d9cc6785f3f1277f796d81f3646"><code>3b5ee58</code></a>
Use default <code>request</code> options instead of
<code>undefined</code></li>
<li><a
href="https://github.com/github/codeql-action/commit/bfb6be4b5ecd3650f02f530571453e8c64ef0778"><code>bfb6be4</code></a>
Merge pull request <a
href="https://redirect.github.com/github/codeql-action/issues/4028">#4028</a>
from github/mergeback/v4.37.2-to-main-e0647621</li>
<li><a
href="https://github.com/github/codeql-action/commit/526ab84f9858816d9cf5f7b9df4dd5e2235f0eba"><code>526ab84</code></a>
Rebuild</li>
<li><a
href="https://github.com/github/codeql-action/commit/d6217b9b8c14166e4851db94c11155d03bd13c07"><code>d6217b9</code></a>
Update changelog and version after v4.37.2</li>
<li>See full diff in <a
href="https://github.com/github/codeql-action/compare/v4.37.2...v4.37.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github/codeql-action&package-manager=github_actions&previous-version=4.37.2&new-version=4.37.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pypa/cibuildwheel](https://github.com/pypa/cibuildwheel) from
4.1.0 to 4.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/cibuildwheel/releases">pypa/cibuildwheel's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.1</h2>
<ul>
<li>✨ Adds <code>pyodide-build</code> as a separate <a
href="https://cibuildwheel.pypa.io/en/stable/options/#build-frontend"><code>build-frontend</code></a>,
now the default frontend for Pyodide, with verbosity flags handling. Any
other frontend is ignored with a warning on Pyodide. (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2609">#2609</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2945">#2945</a>)</li>
<li>🔐 Uses digests instead of tags for pinned container images,
strengthening supply-chain security. The human-readable tags remain as
comments in <code>pinned_docker_images.cfg</code>. (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2915">#2915</a>)</li>
<li>🐛 Fixes platform-specific <a
href="https://cibuildwheel.pypa.io/en/stable/options/#test-runtime"><code>test-runtime</code></a>
environment variables (e.g. <code>CIBW_TEST_RUNTIME_ANDROID</code>) not
being honored (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2941">#2941</a>)</li>
<li>🐛 Fixes quoting of <a
href="https://cibuildwheel.pypa.io/en/stable/options/#test-requires"><code>test-requires</code></a>
and <a
href="https://cibuildwheel.pypa.io/en/stable/options/#audit-requires"><code>audit-requires</code></a>
so PEP 508 specifiers containing spaces work (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2913">#2913</a>)</li>
<li>🐛 Makes <a
href="https://cibuildwheel.pypa.io/en/stable/options/#archs"><code>archs</code></a>
parsing case-insensitive and platform-aware, so e.g. <code>arm64</code>
works on Windows (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2920">#2920</a>)</li>
<li>🐛 Uses an absolute path for the <code>{project}</code> placeholder
in <a
href="https://cibuildwheel.pypa.io/en/stable/options/#config-settings"><code>config-settings</code></a>
(<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2934">#2934</a>)</li>
<li>🐛 Validates the <a
href="https://cibuildwheel.pypa.io/en/stable/options/#pyodide-version"><code>pyodide-version</code></a>
option against the build identifier with a clear error (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2925">#2925</a>)</li>
<li>🐛 Fixes PyPy installs on macOS after PyPy switched its downloads
from <code>.tar.bz2</code> to <code>.tar.gz</code> (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2939">#2939</a>)</li>
<li>🐛 Makes a matching <code>python3-config</code> available in the
build and test venvs on macOS (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2922">#2922</a>)</li>
<li>🛠 Updates dependencies and container pins (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2917">#2917</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2935">#2935</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2939">#2939</a>)</li>
<li>🛠 Updates Android tests to current Python versions and the new test
repository URL (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2933">#2933</a>)</li>
<li>🛠 Drops the <code>orjson</code> dependency, no longer used by mypy
2+ (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2923">#2923</a>)</li>
<li>📚 Builds the docs with properdocs, a MkDocs fork (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2946">#2946</a>)</li>
<li>📚 Adds the missing <code>cp314-pyodide_wasm32</code> entry to the
build identifier table (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2947">#2947</a>)</li>
<li>📚 Removes outdated notes about the <code>pip wheel</code> build
frontend and ClearLinux (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2926">#2926</a>)</li>
<li>💼 Adds a &quot;CI: PyPy EoL&quot; PR label to run PyPy EoL tests on
PRs (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2930">#2930</a>)</li>
<li>💼 Updates CI action pins and pre-commit hooks (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2914">#2914</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2932">#2932</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2938">#2938</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2940">#2940</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2942">#2942</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2943">#2943</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/cibuildwheel/blob/main/docs/changelog.md">pypa/cibuildwheel's
changelog</a>.</em></p>
<blockquote>
<h3>v4.1.1</h3>
<p><em>24 July 2026</em></p>
<ul>
<li>✨ Adds <code>pyodide-build</code> as a separate <a
href="https://cibuildwheel.pypa.io/en/stable/options/#build-frontend"><code>build-frontend</code></a>,
now the default frontend for Pyodide, with verbosity flags handling. Any
other frontend is ignored with a warning on Pyodide. (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2609">#2609</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2945">#2945</a>)</li>
<li>🔐 Uses digests instead of tags for pinned container images,
strengthening supply-chain security. The human-readable tags remain as
comments in <code>pinned_docker_images.cfg</code>. (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2915">#2915</a>)</li>
<li>🐛 Fixes platform-specific <a
href="https://cibuildwheel.pypa.io/en/stable/options/#test-runtime"><code>test-runtime</code></a>
environment variables (e.g. <code>CIBW_TEST_RUNTIME_ANDROID</code>) not
being honored (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2941">#2941</a>)</li>
<li>🐛 Fixes quoting of <a
href="https://cibuildwheel.pypa.io/en/stable/options/#test-requires"><code>test-requires</code></a>
and <a
href="https://cibuildwheel.pypa.io/en/stable/options/#audit-requires"><code>audit-requires</code></a>
so PEP 508 specifiers containing spaces work (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2913">#2913</a>)</li>
<li>🐛 Makes <a
href="https://cibuildwheel.pypa.io/en/stable/options/#archs"><code>archs</code></a>
parsing case-insensitive and platform-aware, so e.g. <code>arm64</code>
works on Windows (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2920">#2920</a>)</li>
<li>🐛 Uses an absolute path for the <code>{project}</code> placeholder
in <a
href="https://cibuildwheel.pypa.io/en/stable/options/#config-settings"><code>config-settings</code></a>
(<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2934">#2934</a>)</li>
<li>🐛 Validates the <a
href="https://cibuildwheel.pypa.io/en/stable/options/#pyodide-version"><code>pyodide-version</code></a>
option against the build identifier with a clear error (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2925">#2925</a>)</li>
<li>🐛 Fixes PyPy installs on macOS after PyPy switched its downloads
from <code>.tar.bz2</code> to <code>.tar.gz</code> (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2939">#2939</a>)</li>
<li>🐛 Makes a matching <code>python3-config</code> available in the
build and test venvs on macOS (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2922">#2922</a>)</li>
<li>🛠 Updates dependencies and container pins (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2917">#2917</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2935">#2935</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2939">#2939</a>)</li>
<li>🛠 Updates Android tests to current Python versions and the new test
repository URL (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2933">#2933</a>)</li>
<li>🛠 Drops the <code>orjson</code> dependency, no longer used by mypy
2+ (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2923">#2923</a>)</li>
<li>📚 Builds the docs with properdocs, a MkDocs fork (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2946">#2946</a>)</li>
<li>📚 Adds the missing <code>cp314-pyodide_wasm32</code> entry to the
build identifier table (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2947">#2947</a>)</li>
<li>📚 Removes outdated notes about the <code>pip wheel</code> build
frontend and ClearLinux (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2926">#2926</a>)</li>
<li>💼 Adds a &quot;CI: PyPy EoL&quot; PR label to run PyPy EoL tests on
PRs (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2930">#2930</a>)</li>
<li>💼 Updates CI action pins and pre-commit hooks (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2914">#2914</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2932">#2932</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2938">#2938</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2940">#2940</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2942">#2942</a>,
<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2943">#2943</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/4726cd35bb13f7bde50cf2761f2499ac7b3aa32c"><code>4726cd3</code></a>
Bump version: v4.1.1</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/1af5cd76db5acb21b2b0c50486761544e9cdc672"><code>1af5cd7</code></a>
docs: switch from mkdocs to properdocs (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2946">#2946</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/b21d76ae03db451565160eae0a8abd5af9ec2c7b"><code>b21d76a</code></a>
docs: add missing cp314-pyodide_wasm32 to build-id table (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2947">#2947</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/03cbe932e607354d1792db6b348ba1236a9bdabf"><code>03cbe93</code></a>
fix(macos): make matching python3-config available in build/test venvs
(<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2922">#2922</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/b7cac6dfeffdcac258e8fcce8407d5d8891a9b92"><code>b7cac6d</code></a>
fix: don't error when a global build-frontend is set on pyodide (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2945">#2945</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/1520daf8aecb6af4d0472d1773f02d76a83bfafe"><code>1520daf</code></a>
fix: support platform-specific test runtime environment variables (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2941">#2941</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/17b74206abea6bd10391f65ca8c5c35941ea9f65"><code>17b7420</code></a>
[Bot] Update dependencies (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2939">#2939</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/f8d8cca5bb4428490c3b7cbd1748ac310c11c31f"><code>f8d8cca</code></a>
chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.2 in the actions
group...</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/265b435c864ae3e08177af8ec0df0410fcf45ac6"><code>265b435</code></a>
chore(deps): bump the actions group with 2 updates (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2942">#2942</a>)</li>
<li><a
href="https://github.com/pypa/cibuildwheel/commit/3f8bd1c9ba352bad278d1a2cf8139ee0f6a25947"><code>3f8bd1c</code></a>
chore(deps): bump the actions group with 3 updates (<a
href="https://redirect.github.com/pypa/cibuildwheel/issues/2938">#2938</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/cibuildwheel/compare/v4.1.0...v4.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pypa/cibuildwheel&package-manager=github_actions&previous-version=4.1.0&new-version=4.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.6.1 to
21.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/releases">virtualenv's
releases</a>.</em></p>
<blockquote>
<h2>21.7.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>Replace prettier with mdformat and yamlfmt by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3190">pypa/virtualenv#3190</a></li>
<li>👷 ci: test against Python 3.15 beta by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3192">pypa/virtualenv#3192</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/virtualenv/compare/21.6.1...21.7.0">https://github.com/pypa/virtualenv/compare/21.6.1...21.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's
changelog</a>.</em></p>
<blockquote>
<h1>Features - 21.7.0</h1>
<ul>
<li>Declare support for Python 3.15: CI now tests against the CPython
3.15 beta, including the free-threaded <code>3.15t</code>
build, and the <code>Programming Language :: Python :: 3.15</code>
classifier is advertised. (:issue:<code>3192</code>)</li>
</ul>
<hr />
<p>v21.6.1 (2026-07-10)</p>
<hr />
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/virtualenv/commit/e6eb5b02190608ba5bbae8639e98792e41d88179"><code>e6eb5b0</code></a>
release 21.7.0</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/6d7bf90c34939a2fe6379be00d34e3b887988bb6"><code>6d7bf90</code></a>
Add changelog fragment for Python 3.15 support</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/482c7f91d10b75b0f51e78aaf371a5dd05361f1a"><code>482c7f9</code></a>
👷 ci: test against Python 3.15 beta (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3192">#3192</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/a190228c76349ed8cf26db43aa4789a1f084cbb7"><code>a190228</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3191">#3191</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/b54bc80c0f055fbc64cda453545486d589af0347"><code>b54bc80</code></a>
Replace prettier with mdformat and yamlfmt (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3190">#3190</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/c5dff1d4defbd2f16ff0ead54de0354b2398fead"><code>c5dff1d</code></a>
chore(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3189">#3189</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/cab4a0af798849839dfeaa814257e1c8e84ef01e"><code>cab4a0a</code></a>
chore(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3188">#3188</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/c53b5b198abbc5ff7de38eb823bf15c9f618a9a3"><code>c53b5b1</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3187">#3187</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/20b70f30e8f712c099905454b100d68cc677ef53"><code>20b70f3</code></a>
chore(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3186">#3186</a>)</li>
<li>See full diff in <a
href="https://github.com/pypa/virtualenv/compare/21.6.1...21.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=21.6.1&new-version=21.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [platformdirs](https://github.com/tox-dev/platformdirs) from
4.10.1 to 4.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/platformdirs/releases">platformdirs's
releases</a>.</em></p>
<blockquote>
<h2>4.11.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>👷 ci: run the test suite against Python 3.15 by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/tox-dev/platformdirs/pull/512">tox-dev/platformdirs#512</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tox-dev/platformdirs/compare/4.10.1...4.11.0">https://github.com/tox-dev/platformdirs/compare/4.10.1...4.11.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst">platformdirs's
changelog</a>.</em></p>
<blockquote>
<p>###########
Changelog
###########</p>
<p>.. towncrier-draft-entries:: Unreleased</p>
<p>.. towncrier release notes start</p>
<hr />
<p>4.11.0 (2026-07-21)</p>
<hr />
<ul>
<li>Declare support for Python 3.15 and run the test suite against it,
currently in beta. :pr:<code>512</code></li>
</ul>
<hr />
<p>4.10.1 (2026-07-18)</p>
<hr />
<ul>
<li>Stop leaking memory on repeated Windows folder lookups.
<code>get_win_folder_via_ctypes</code> defined a fresh
<code>ctypes</code>
structure on every call, and each one registered a pointer type that was
never released; the resolver is now built
once and reused. :pr:<code>507</code></li>
</ul>
<hr />
<p>4.10.0 (2026-05-28)</p>
<hr />
<ul>
<li>Add :func:<code>~platformdirs.user_publicshare_dir</code>,
:func:<code>~platformdirs.user_templates_dir</code>,
:func:<code>~platformdirs.user_fonts_dir</code>, and
:func:<code>~platformdirs.user_preference_dir</code>
:pr:<code>491</code></li>
<li>Add :func:<code>~platformdirs.user_projects_dir</code> backed by
<code>$XDG_PROJECTS_DIR</code> :pr:<code>490</code></li>
<li>Return only the first path from
:func:<code>~platformdirs.site_config_path</code> on macOS when
<code>multipath</code> is set :pr:<code>488</code> -
by :user:<code>lphuc2250gma</code></li>
</ul>
<hr />
<p>4.9.6 (2026-04-09)</p>
<hr />
<ul>
<li>Fix macOS XDG variables leaking across
:func:<code>~platformdirs.user_config_dir</code>,
:func:<code>~platformdirs.user_data_dir</code>, and
:func:<code>~platformdirs.user_state_dir</code> when only some are set
:pr:<code>473</code> - by :user:<code>Goddesen</code></li>
<li>Avoid duplicate site directories in Unix
:meth:<code>~platformdirs.PlatformDirs.iter_config_dirs</code> and
:meth:<code>~platformdirs.PlatformDirs.iter_data_dirs</code> when
<code>use_site_for_root</code> is active :pr:<code>469</code> - by
:user:<code>viccie30</code></li>
</ul>
<hr />
<p>4.9.4 (2026-03-05)</p>
<hr />
<ul>
<li>Respect <code>XDG_CONFIG_HOME</code> when reading the user-dirs
configuration :pr:<code>453</code> - by :user:<code>bysiber</code></li>
<li>Create the directory in Android
:func:<code>~platformdirs.user_log_dir</code> and
:func:<code>~platformdirs.user_runtime_dir</code> when
<code>ensure_exists</code> is set :pr:<code>452</code> - by
:user:<code>bysiber</code></li>
</ul>
<hr />
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tox-dev/platformdirs/commit/214049508d8aaceae345c8a5c2e25847724a4cb5"><code>2140495</code></a>
Release 4.11.0</li>
<li><a
href="https://github.com/tox-dev/platformdirs/commit/a562df951ca72e672d5203fd854b0c3fc35aa2aa"><code>a562df9</code></a>
👷 ci: run the test suite against Python 3.15 (<a
href="https://redirect.github.com/tox-dev/platformdirs/issues/512">#512</a>)</li>
<li><a
href="https://github.com/tox-dev/platformdirs/commit/7c764c4c21081dcc9812037912a0a538c7f48924"><code>7c764c4</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/tox-dev/platformdirs/issues/511">#511</a>)</li>
<li>See full diff in <a
href="https://github.com/tox-dev/platformdirs/compare/4.10.1...4.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=platformdirs&package-manager=pip&previous-version=4.10.1&new-version=4.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [aiohttp](https://github.com/aio-libs/aiohttp) from 3.14.2 to
3.14.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/aiohttp/blob/master/CHANGES.rst">aiohttp's
changelog</a>.</em></p>
<blockquote>
<h1>3.14.3 (2026-07-22)</h1>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed the client dropping only the first <code>Authorization</code>,
<code>Cookie</code> and
<code>Proxy-Authorization</code> header when a redirect crossed an
origin -- by :user:<code>arshsmith1</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>13180</code>.</p>
</li>
<li>
<p>Fixed error message construction in the C HTTP parser -- by
:user:<code>bdraco</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>13222</code>.</p>
</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/5e392ce0456f5235a4ee6ad46f0e806df2f15873"><code>5e392ce</code></a>
Release v3.14.3 (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13225">#13225</a>)</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/49f65d54150397892f7bcc4aae887767d51c322d"><code>49f65d5</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13222">#13222</a>/f4866933
backport][3.14] Build C parser error message from bounded...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/240099e5216a01b32919dcd8dd5c6c0b1bf83671"><code>240099e</code></a>
[PR <a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13180">#13180</a>/ee53d655
backport][3.14] drop every copy of credential headers on ...</li>
<li><a
href="https://github.com/aio-libs/aiohttp/commit/d93f30a302f8b930074fe14a2be7b2088ba28111"><code>d93f30a</code></a>
Bump version (<a
href="https://redirect.github.com/aio-libs/aiohttp/issues/13202">#13202</a>)</li>
<li>See full diff in <a
href="https://github.com/aio-libs/aiohttp/compare/v3.14.2...v3.14.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aiohttp&package-manager=pip&previous-version=3.14.2&new-version=3.14.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps
[annotated-types](https://github.com/annotated-types/annotated-types)
from 0.7.0 to 0.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/annotated-types/annotated-types/releases">annotated-types's
releases</a>.</em></p>
<blockquote>
<h2>v0.8.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Rename DocInfo to Doc by <a
href="https://github.com/zen-xu"><code>@​zen-xu</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/80">annotated-types/annotated-types#80</a></li>
<li>Add support for Python 3.13 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/83">annotated-types/annotated-types#83</a></li>
<li>Fix docstring of <code>Timezone</code> by <a
href="https://github.com/Viicos"><code>@​Viicos</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/84">annotated-types/annotated-types#84</a></li>
<li>Update license-files to be PEP-639 compliant (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/85">#85</a>)
by <a href="https://github.com/shoeffner"><code>@​shoeffner</code></a>
in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/86">annotated-types/annotated-types#86</a></li>
<li>fix: typo in README.md by <a
href="https://github.com/camiloaz"><code>@​camiloaz</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/87">annotated-types/annotated-types#87</a></li>
<li>add CI for PyPy3.11 and fix test (issue 71) by <a
href="https://github.com/mattip"><code>@​mattip</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/88">annotated-types/annotated-types#88</a></li>
<li>Fix string predicate names in doc by <a
href="https://github.com/leogermond"><code>@​leogermond</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/90">annotated-types/annotated-types#90</a></li>
<li>Add SPDX license expression by <a
href="https://github.com/wichert"><code>@​wichert</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/92">annotated-types/annotated-types#92</a></li>
<li>Added Python 3.14 to the test matrix by <a
href="https://github.com/imtoopunkforyou"><code>@​imtoopunkforyou</code></a>
in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/96">annotated-types/annotated-types#96</a></li>
<li>Add support for Python 3.14 and drop EOL 3.8-3.9 by <a
href="https://github.com/hugovk"><code>@​hugovk</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/97">annotated-types/annotated-types#97</a></li>
<li>Fix typo in <code>Len</code> docstring by <a
href="https://github.com/Dutcho"><code>@​Dutcho</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/100">annotated-types/annotated-types#100</a></li>
<li>Prepare for 0.8.0 release by <a
href="https://github.com/adriangb"><code>@​adriangb</code></a> in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/103">annotated-types/annotated-types#103</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/zen-xu"><code>@​zen-xu</code></a> made
their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/80">annotated-types/annotated-types#80</a></li>
<li><a href="https://github.com/hugovk"><code>@​hugovk</code></a> made
their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/83">annotated-types/annotated-types#83</a></li>
<li><a href="https://github.com/shoeffner"><code>@​shoeffner</code></a>
made their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/86">annotated-types/annotated-types#86</a></li>
<li><a href="https://github.com/camiloaz"><code>@​camiloaz</code></a>
made their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/87">annotated-types/annotated-types#87</a></li>
<li><a href="https://github.com/mattip"><code>@​mattip</code></a> made
their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/88">annotated-types/annotated-types#88</a></li>
<li><a
href="https://github.com/leogermond"><code>@​leogermond</code></a> made
their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/90">annotated-types/annotated-types#90</a></li>
<li><a href="https://github.com/wichert"><code>@​wichert</code></a> made
their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/92">annotated-types/annotated-types#92</a></li>
<li><a
href="https://github.com/imtoopunkforyou"><code>@​imtoopunkforyou</code></a>
made their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/96">annotated-types/annotated-types#96</a></li>
<li><a href="https://github.com/Dutcho"><code>@​Dutcho</code></a> made
their first contribution in <a
href="https://redirect.github.com/annotated-types/annotated-types/pull/100">annotated-types/annotated-types#100</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/annotated-types/annotated-types/compare/v0.7.0...v0.8.0">https://github.com/annotated-types/annotated-types/compare/v0.7.0...v0.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/9eb96680138269811a39d838d720abc3dce33954"><code>9eb9668</code></a>
Prepare for 0.8.0 release (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/103">#103</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/10b77644f88b385357653730a1ab23748ca3ae2e"><code>10b7764</code></a>
Fix typo in <code>Len</code> docstring (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/100">#100</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/955f7576d616feb6e9407c74498517787c38afd4"><code>955f757</code></a>
Add support for Python 3.14 and drop EOL 3.8-3.9 (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/97">#97</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/bd280fea7983550d266f993d868b8dd7ff822bf1"><code>bd280fe</code></a>
Added Python 3.14 to the test matrix (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/96">#96</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/a471bb757663452459893e6f593118ec21eb1b9e"><code>a471bb7</code></a>
Add SPDX license expression (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/92">#92</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/eab91d9a8c0d3f73661fc4b0794a1fe76c94fa84"><code>eab91d9</code></a>
Fix string predicate names in doc (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/90">#90</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/03ad9c3c7b4d4dfe9e33c09075a3a2766c0820e1"><code>03ad9c3</code></a>
add CI for PyPy3.11 and fix test (issue 71) (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/88">#88</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/5ae60437f0ab493cedd27311bc6ce6d2188e8d8b"><code>5ae6043</code></a>
fix: typo in README.md (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/87">#87</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/b60ad7bff90019c7de3547df1c8e3586eb328423"><code>b60ad7b</code></a>
Update license-files to be PEP-639 compliant (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/85">#85</a>)
(<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/86">#86</a>)</li>
<li><a
href="https://github.com/annotated-types/annotated-types/commit/3fbeb6d129760ae48d7a0372fb9301764acc95ae"><code>3fbeb6d</code></a>
Fix docstring of <code>Timezone</code> (<a
href="https://redirect.github.com/annotated-types/annotated-types/issues/84">#84</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/annotated-types/annotated-types/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=annotated-types&package-manager=pip&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [cython](https://github.com/cython/cython) from 3.2.8 to 3.2.9.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/cython/cython/blob/master/CHANGES.rst">cython's
changelog</a>.</em></p>
<blockquote>
<h1>3.2.9 (2026-07-24)</h1>
<h2>Bugs fixed</h2>
<ul>
<li>
<p>Indexing into freshly created lists with an out-of-bounds index could
crash.
(Github issue :issue:<code>7793</code>)</p>
</li>
<li>
<p>Function arguments with default values could end up uninitialised in
closures, leading to crashes.
Patch by Anthony Donlon.  (Github issue :issue:<code>7782</code>)</p>
</li>
<li>
<p><code>bytearray.append(None)</code> could crash. The optimised code
was also lacking concurrency guards.
(Github issue :issue:<code>7796</code>)</p>
</li>
<li>
<p>Some rare corner cases when concatenating text strings were resolved.
(Github issue :issue:<code>7799</code>)</p>
</li>
<li>
<p>Assignments of builtin string types to typedefs of
<code>object</code> could erroneously be rejected.
(Github issue :issue:<code>7789</code>)</p>
</li>
<li>
<p>Subscripting <code>type</code> failed with a <code>TypeError</code>.
(Github issue :issue:<code>5563</code>)</p>
</li>
<li>
<p>Manually disabling <code>CYTHON_VECTORCALL</code> in CPython could
lead to invalid C code.
Patch by Florent Gallaire.  (Github issue :issue:<code>7807</code>)</p>
</li>
<li>
<p>Some internal Limited API version checks for Py3.12 were corrected.
(Github issue :issue:<code>7845</code>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cython/cython/commit/58b8e6adc51c99c8cd5dd75db720e4aa7c051cb6"><code>58b8e6a</code></a>
Prepare release of 3.2.9.</li>
<li><a
href="https://github.com/cython/cython/commit/211b66a9847cb3912b8c1c5ca8ce517e9f1c0576"><code>211b66a</code></a>
Update changelog.</li>
<li><a
href="https://github.com/cython/cython/commit/4815016313fa997e2c49d4a48c7d58bf55a34b49"><code>4815016</code></a>
Fix a few Py_LIMITED_API comparsions (<a
href="https://redirect.github.com/cython/cython/issues/7845">GH-7845</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/6f3225e5eef9bce14341f97ccd4c4c552c2e8ede"><code>6f3225e</code></a>
Disable type subscripting tests in Py3.8.</li>
<li><a
href="https://github.com/cython/cython/commit/92cfd8bf8f0869dfad5e6639e70bb1de268d41f1"><code>92cfd8b</code></a>
Disable Py3.9+ code in Py3.8.</li>
<li><a
href="https://github.com/cython/cython/commit/be32acf28c55b095129b82fbd7ac5de4bb51210a"><code>be32acf</code></a>
Update changelog.</li>
<li><a
href="https://github.com/cython/cython/commit/be4a9668404aca14aab4b461c258be5a105694bc"><code>be4a966</code></a>
Add special case for indexing <code>type</code> (<a
href="https://redirect.github.com/cython/cython/issues/7810">GH-7810</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/4052f59ff5422d7c22d5cfdcc67a6c4b7754fea6"><code>4052f59</code></a>
[3.2.x] Update OS version for 3.2.x docs (<a
href="https://redirect.github.com/cython/cython/issues/7814">#7814</a>)</li>
<li><a
href="https://github.com/cython/cython/commit/299791c57ab3d4ceb85d7ce84d41aa1adf7a9a65"><code>299791c</code></a>
[3.2.x] [Bug] Fix __Pyx_ArgsSlice_FASTCALL when CYTHON_VECTORCALL is
disabled...</li>
<li><a
href="https://github.com/cython/cython/commit/086398d439abc08f12a2c5184419cb47d99d3c87"><code>086398d</code></a>
Update changelog.</li>
<li>Additional commits viewable in <a
href="https://github.com/cython/cython/compare/3.2.8...3.2.9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cython&package-manager=pip&previous-version=3.2.8&new-version=3.2.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [certifi](https://github.com/certifi/python-certifi) from
2026.6.17 to 2026.7.22.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/certifi/python-certifi/commit/f4bc676bc101fe2235846e37044e8c693d6cbaf4"><code>f4bc676</code></a>
2026.07.22 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/428">#428</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/4c91f9c5f9b4676d40d2930025ba04d80dd536f6"><code>4c91f9c</code></a>
Bump actions/setup-python from 6.3.0 to 7.0.0 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/427">#427</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/01a66c5cf32eadb8f03a0504c24cb44f6d581248"><code>01a66c5</code></a>
Bump actions/checkout from 7.0.0 to 7.0.1 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/426">#426</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/eb355f41cb71f71012ecf1a4d27a57d0ee2b1337"><code>eb355f4</code></a>
Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/425">#425</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/474e6fc996d55b91632248da0bade702504e62dc"><code>474e6fc</code></a>
Include tests in the source distribution (<a
href="https://redirect.github.com/certifi/python-certifi/issues/424">#424</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/a31ef39bb5906af7dc9729890f7e4e04e75afdae"><code>a31ef39</code></a>
Bump actions/setup-python from 6.2.0 to 6.3.0 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/420">#420</a>)</li>
<li><a
href="https://github.com/certifi/python-certifi/commit/98eb2c76a9c7a8519912023dca00f762bbcd59af"><code>98eb2c7</code></a>
Bump actions/checkout from 6.0.3 to 7.0.0 (<a
href="https://redirect.github.com/certifi/python-certifi/issues/419">#419</a>)</li>
<li>See full diff in <a
href="https://github.com/certifi/python-certifi/compare/2026.06.17...2026.07.22">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=certifi&package-manager=pip&previous-version=2026.6.17&new-version=2026.7.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pre-commit](https://github.com/pre-commit/pre-commit) from 4.6.0
to 4.6.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pre-commit/pre-commit/releases">pre-commit's
releases</a>.</em></p>
<blockquote>
<h2>pre-commit v4.6.1</h2>
<h3>Fixes</h3>
<ul>
<li>Install <code>language: node</code> hooks via <code>git</code>.
<ul>
<li>Fixes npm 12.x compatibility</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3719">#3719</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3517">#3517</a>
issue by <a href="https://github.com/ojob"><code>@​ojob</code></a>.</li>
</ul>
</li>
<li>Set <code>JULIA_DEPOT_PATH</code> for <code>language: julia</code>.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3711">#3711</a>
PR by <a
href="https://github.com/damonbayer"><code>@​damonbayer</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit-ci/runner-image/issues/335">pre-commit-ci/runner-image#335</a>
issue by <a
href="https://github.com/damonbayer"><code>@​damonbayer</code></a>.</li>
</ul>
</li>
<li>Produce error on mistyped <code>--repo</code> for <code>pre-commit
autoupdate</code>.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3701">#3701</a>
PR by <a href="https://github.com/mxr"><code>@​mxr</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3695">#3695</a>
issue by <a href="https://github.com/mxr"><code>@​mxr</code></a>.</li>
</ul>
</li>
<li>Improve performance of commit existence check in
<code>pre-push</code>.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3726">#3726</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3604">#3604</a>
issue by <a
href="https://github.com/ptarjan"><code>@​ptarjan</code></a>.</li>
</ul>
</li>
<li>Avoid duplicating conflicted filenames during <code>pre-commit run
--all-files</code>.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3727">#3727</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3706">#3706</a>
issue by <a
href="https://github.com/RomanValov"><code>@​RomanValov</code></a>.</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md">pre-commit's
changelog</a>.</em></p>
<blockquote>
<h1>4.6.1 - 2026-07-21</h1>
<h3>Fixes</h3>
<ul>
<li>Install <code>language: node</code> hooks via <code>git</code>.
<ul>
<li>Fixes npm 12.x compatibility</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3719">#3719</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3517">#3517</a>
issue by <a href="https://github.com/ojob"><code>@​ojob</code></a>.</li>
</ul>
</li>
<li>Set <code>JULIA_DEPOT_PATH</code> for <code>language: julia</code>.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3711">#3711</a>
PR by <a
href="https://github.com/damonbayer"><code>@​damonbayer</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit-ci/runner-image/issues/335">pre-commit-ci/runner-image#335</a>
issue by <a
href="https://github.com/damonbayer"><code>@​damonbayer</code></a>.</li>
</ul>
</li>
<li>Produce error on mistyped <code>--repo</code> for <code>pre-commit
autoupdate</code>.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3701">#3701</a>
PR by <a href="https://github.com/mxr"><code>@​mxr</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3695">#3695</a>
issue by <a href="https://github.com/mxr"><code>@​mxr</code></a>.</li>
</ul>
</li>
<li>Improve performance of commit existence check in
<code>pre-push</code>.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3726">#3726</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3604">#3604</a>
issue by <a
href="https://github.com/ptarjan"><code>@​ptarjan</code></a>.</li>
</ul>
</li>
<li>Avoid duplicating conflicted filenames during <code>pre-commit run
--all-files</code>.
<ul>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3727">#3727</a>
PR by <a
href="https://github.com/asottile"><code>@​asottile</code></a>.</li>
<li><a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3706">#3706</a>
issue by <a
href="https://github.com/RomanValov"><code>@​RomanValov</code></a>.</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/242ce8a25657be59f2770b50de41fe0fd508820d"><code>242ce8a</code></a>
v4.6.1</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/766e550cd31defcb6096a96735c9de299b0eb301"><code>766e550</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3727">#3727</a>
from pre-commit/dedupe</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/1558d06e3d9e5f495cd97ccaefe937b7c44ead70"><code>1558d06</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3726">#3726</a>
from pre-commit/exists-faster</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/8a1c47a2528419e41aadfcf8135926d68f7ffbbb"><code>8a1c47a</code></a>
avoid duplicate files in --all-files during conflict</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/2e01c999b2466ac7e14e1e4a57a04504bd6c1b28"><code>2e01c99</code></a>
faster check of rev existing locally as a commit</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/3613bf27f5500d327de70cd2fa68fa20c8975659"><code>3613bf2</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3701">#3701</a>
from pre-commit/autoupdate-repos</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/1d811d9b0b655fa648001ca479a0b7da9ebd7b8c"><code>1d811d9</code></a>
Return an error for invalid --repo</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/374d354c8be227db651ddd92d9499b87e2ca1ea1"><code>374d354</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3711">#3711</a>
from damonbayer/dmb_JULIA_DEPOT_PATH</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/1e7994fb1fddd31fb1998aa98f84fc43818d9485"><code>1e7994f</code></a>
set JULIA_DEPOT_PATH</li>
<li><a
href="https://github.com/pre-commit/pre-commit/commit/b2b91195d7618d61d8973fefa4e5e084fc160d8d"><code>b2b9119</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/pre-commit/issues/3719">#3719</a>
from pre-commit/npm-unknown-options</li>
<li>Additional commits viewable in <a
href="https://github.com/pre-commit/pre-commit/compare/v4.6.0...v4.6.1">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [python-discovery](https://github.com/tox-dev/python-discovery)
from 1.4.4 to 1.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/python-discovery/releases">python-discovery's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.0</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>Replace prettier with mdformat and yamlfmt by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/tox-dev/python-discovery/pull/101">tox-dev/python-discovery#101</a></li>
<li>📦 build: move dev extras to PEP 735 dependency groups by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/tox-dev/python-discovery/pull/102">tox-dev/python-discovery#102</a></li>
<li>👷 ci: add Python 3.15 to the test matrix by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/tox-dev/python-discovery/pull/104">tox-dev/python-discovery#104</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tox-dev/python-discovery/compare/1.4.4...1.5.0">https://github.com/tox-dev/python-discovery/compare/1.4.4...1.5.0</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst">python-discovery's
changelog</a>.</em></p>
<blockquote>
<h1>Packaging updates and notes for downstreams - 1.5.0</h1>
<ul>
<li>Declare support for Python 3.15 and run the test suite against it,
currently in beta. (:issue:<code>104</code>)</li>
</ul>
<hr />
<p>v1.4.4 (2026-07-08)</p>
<hr />
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/7889874585e216659544a4c7d8a1ceed38e2709b"><code>7889874</code></a>
release 1.5.0</li>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/cb3ccb62cc7404c74c00620ee128e7960064d136"><code>cb3ccb6</code></a>
👷 ci: add Python 3.15 to the test matrix (<a
href="https://redirect.github.com/tox-dev/python-discovery/issues/104">#104</a>)</li>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/3dc250f70542b132b6c1b08c30d8f7a33a2615f1"><code>3dc250f</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/tox-dev/python-discovery/issues/103">#103</a>)</li>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/660301200965d8ce55ae652c1bad3d5131e8a522"><code>6603012</code></a>
📦 build: move dev extras to PEP 735 dependency groups (<a
href="https://redirect.github.com/tox-dev/python-discovery/issues/102">#102</a>)</li>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/8df958860c877dc682b6b5596b39275e3d7682d4"><code>8df9588</code></a>
Replace prettier with mdformat and yamlfmt (<a
href="https://redirect.github.com/tox-dev/python-discovery/issues/101">#101</a>)</li>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/de863fa9b42759762f5aef3c6181d9495af093ef"><code>de863fa</code></a>
build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (<a
href="https://redirect.github.com/tox-dev/python-discovery/issues/100">#100</a>)</li>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/61ffbc0baad3e6bba0700c1ab7bdaccfb32b06e0"><code>61ffbc0</code></a>
build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (<a
href="https://redirect.github.com/tox-dev/python-discovery/issues/99">#99</a>)</li>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/1ea2dcf64d2c79912cb383e804f8aa8a1d1a9f36"><code>1ea2dcf</code></a>
[pre-commit.ci] pre-commit autoupdate (<a
href="https://redirect.github.com/tox-dev/python-discovery/issues/98">#98</a>)</li>
<li><a
href="https://github.com/tox-dev/python-discovery/commit/8c8293ae22455fe44e974fa2be853d6f8ecc52c2"><code>8c8293a</code></a>
build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (<a
href="https://redirect.github.com/tox-dev/python-discovery/issues/97">#97</a>)</li>
<li>See full diff in <a
href="https://github.com/tox-dev/python-discovery/compare/1.4.4...1.5.0">compare
view</a></li>
</ul>
</details>
<br />

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Jul 27, 2026
@pull pull Bot added the ⤵️ pull label Jul 27, 2026
@pull
pull Bot merged commit 0ab1dd8 into tj-python:master Jul 27, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants