Skip to content

deps(deps): bump the python-minor-patch group with 34 updates - #2276

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-minor-patch-0cdb8b688f
Closed

deps(deps): bump the python-minor-patch group with 34 updates#2276
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/uv/python-minor-patch-0cdb8b688f

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the python-minor-patch group with 34 updates:

Package From To
eth-abi 5.1.0 5.2.0
bitstring 4.3.1 4.4.0
click 8.3.1 8.4.2
cookiecutter 2.6.0 2.7.1
docker 7.1.0 7.2.0
flask 3.1.2 3.1.3
humanize 4.14.0 4.16.0
jsonschema 4.25.1 4.26.0
mistune 3.2.1 3.3.3
numpy 2.3.5 2.4.6
psutil 7.1.3 7.2.2
pyasn1 0.6.1 0.6.4
pygments 2.19.2 2.20.0
pynacl 1.6.1 1.6.2
requests 2.32.5 2.34.2
tabulate 0.9.0 0.10.0
ujson 5.11.0 5.13.0
werkzeug 3.1.4 3.1.8
zope-interface 8.1.1 8.5
furo 2025.9.25 2025.12.19
pip-licenses 5.5.0 5.5.5
sphinx-autodoc-typehints 3.5.2 3.6.1
pytest 9.0.2 9.1.1
pytest-cov 7.0.0 7.1.0
tox 4.32.0 4.57.0
ruff 0.14.9 0.15.22
bandit 1.9.2 1.9.4
build 1.3.0 1.5.0
wheel 0.45.1 0.47.0
pyinstaller 6.17.0 6.21.0
myst-parser 4.0.1 5.1.0
sphinx-autoapi 3.6.1 3.8.0
sphinx-design 0.6.1 0.7.0
linkify-it-py 2.0.3 2.1.0

Updates eth-abi from 5.1.0 to 5.2.0

Changelog

Sourced from eth-abi's changelog.

eth-abi v5.2.0 (2025-01-14)

Features


- Merge template, adding ``py313`` support, replace ``bumpversion`` with ``bump-my-version``, raise required ``hypothesis`` versions. (`[#241](https://github.com/ethereum/eth-abi/issues/241) <https://github.com/ethereum/eth-abi/issues/241>`__)

Internal Changes - for eth-abi Contributors

  • Merge template, fixing docs CI and other various updates ([#236](https://github.com/ethereum/eth-abi/issues/236) <https://github.com/ethereum/eth-abi/issues/236>__)
Commits
  • bbf60c2 Bump version: 5.1.0 → 5.2.0
  • 05414f6 Compile release notes for v5.2.0
  • c6be9de Merge pull request #241 from pacrob/upgrade-template
  • b74f580 new hypothesis pins and fix things it breaks
  • 8d66e07 merge template and fill vars
  • 4be68af Put python3.8 support back in:
  • c6a24e4 Update version update note
  • 8388742 correct use of file
  • 1280617 run mypy local
  • 6a927ac drop py38, add py13, add 2024 to license
  • Additional commits viewable in compare view

Updates bitstring from 4.3.1 to 4.4.0

Changelog

Sourced from bitstring's changelog.

March 2026: version 4.4.0

This version adds a new optional Rust-based backend. This is turned off by default so shouldn't affect users. The new backend uses the tibs library, which is by the same author as bitstring and should allow some nice optimisations as the whole stack can work together.

For now the Rust backend is about the same speed as the C backend (which uses bitarray) so there are no real advantages to use it yet. If you do want to try it then you'll need to set the BITSTRING_USE_RUST_CORE environment variable.

BITSTRING_USE_RUST_CORE=1 python your_script.py

You can check which backend is being used using bitstring.options.using_rust_core which should be False unless you've enabled it as detailed above.

The plan is to remove the C backend in version 5, which will allow lots of code simplifications and further performance improvements.

The tibs dependency is a bit experimental and difficult to test on every possible platform. If you experience any issues with installation then please file a bug report.

The only other change is explicit support for Python 3.14.

Commits
  • 68853eb Removing the release candidate tag.
  • 8489c9c Advert for tibs :)
  • 0ca2f82 Docs for using_rust_core
  • d2fe9cf Tagging a release candidate.
  • 6a415a4 Reinstating previously failing test.
  • 2873c3a Changing BitStore.find to return int | None instead of using -1.
  • bf76db5 Making using_rust_core a property.
  • 6703ab4 Reverting last change.
  • 01213a3 Moving _imul to BitArray instead of Bits
  • 73382e9 Renaming internal methods to be closer to the Tibs naming.
  • Additional commits viewable in compare view

Updates click from 8.3.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32

  • get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
  • Zsh completion scripts parse correctly on Windows. #3277 # 3466
  • Shell completion of Choice Enum values produces a valid completion result. #3015
  • Fix empty byte-string handling in echo. #3487
  • Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our [Version Support Policy][version] on our website.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

  • Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

Version 8.4.1

Released 2026-05-21

  • get_parameter_source() is available during eager callbacks and type conversion again. {issue}3458 {pr}3484
  • Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
  • Shell completion of Enum values used as Choice options produces a valid completion result. {issue}3015 {pr}3471
  • Fix empty byte-string handling in echo. {issue}3487 {pr}3493
  • Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
  • Fix open_url on Windows when the file path contains spaces. {issue}2994 {pr}3478

Version 8.4.0

Released 2026-05-17

  • {class}ParamType typing improvements. {pr}3371

    • {class}ParamType is now a generic abstract base class,

... (truncated)

Commits
  • b2e30a1 Release version 8.4.2
  • 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
  • bec5928 Fix package_name resolution when top-level module differs from distribution...
  • 916883a Fix tests to not rely on -Wdefault option (#3591)
  • 09195f6 Fix double-bracketing of choices in synopsis (#3578)
  • 1557e26 Check for warning exception with idiomatic context manager
  • d9ff133 Static typing improvements in click.shell_completion (#3460)
  • 762c97e Fix double-bracketing of choices in synopsis
  • 8929d39 Convert changes to markdown. (#3559)
  • 237be50 Move changes headings down a level.
  • Additional commits viewable in compare view

Updates cookiecutter from 2.6.0 to 2.7.1

Release notes

Sourced from cookiecutter's releases.

Cookiecutter 2.7.1: The One Where It Knows Its Own Name

You know that thing where you release an album, it's on the shelves, people are buying it, and then someone points out the spine says it's your previous album? That's what happened with Cookiecutter 2.7.0. We put out the long-awaited release with 27 improvements and 17 contributors, and cookiecutter -V proudly announced: 2.6.0.

$ cookiecutter -V
Cookiecutter 2.6.0

$ # narrator voice: it was not 2.6.0

Go on, run this and see for yourself that the 2.7.1 release knows its own version number now:

uv tool upgrade cookiecutter

What's fixed

cookiecutter -V now reports the real version. Rather than patch VERSION.txt, this release removes it entirely. The version is now read from package metadata at runtime, so pyproject.toml is the single source of truth and there's nothing left to drift. Thanks @​bollwyvl for the bug report PR and for suggesting the importlib.metadata approach, and thanks @​tranzystorekk for filing #2195!

What's better

CI runs each Python version as its own job. Tests for 3.10 through 3.14 used to run sequentially inside a single job per OS, which pushed Windows past 30 minutes. Each version now runs in parallel with a 15-minute timeout. Windows tests focus on the boundary versions (3.10 and 3.14) since intermediate versions add little signal beyond Ubuntu and macOS.

Contributors

@​audreyfeldroy (Audrey M. Roy Greenfeld) and @​pydanny (Daniel Roy Greenfeld) built this release, with help from Claude roleplaying as David Bowie.

Thanks to @​bollwyvl (Nicholas Bollweg) for the version fix PR and the importlib.metadata suggestion, and @​tranzystorekk for reporting the version mismatch.

2.7.0

Cookiecutter 2.7.0 is tested on Python 3.10 through 3.14, ships with a security policy documenting the trust model for template hook scripts, and publishes to PyPI with cryptographic provenance so you can verify every release. Seventeen contributors from the community helped build it.

uv tool upgrade cookiecutter

What's new

A security policy that explains what you're trusting. Cookiecutter templates can run arbitrary code through hook scripts, and that's by design. The new SECURITY.md lays out the trust model: what Cookiecutter sandboxes (nothing), what's in scope for vulnerability reports, and how to report them privately through GitHub. If you maintain templates or run unfamiliar ones, this is worth reading.

Python 3.10 through 3.14. Full test coverage across five Python versions. If you're on 3.7, 3.8, or 3.9, this is the release where you'll want to upgrade.

Pretty-printed JSON in templates. The jsonify Jinja2 extension takes an indent argument, so you can generate formatted JSON in your templates instead of single-line blobs. Thanks @​pabloxio! (#2050)

Boolean variables from the command line. Pass use_docker=y via --no-input and it arrives as a proper boolean in your template context. Thanks @​tylermilner! (#2029)

Structured bug reports. The GitHub issue form collects environment details upfront, so maintainers can reproduce your issue faster.

Tutorial videos and slides. Conference talk recordings and slide decks linked from the docs. Thanks @​datasharp! (#2137)

... (truncated)

Commits
  • 083dd3c Release 2.7.1
  • 59e7eb1 Ground the runtime version in package metadata instead of a hand-maintained file
  • 730d2eb Run each Python version as its own CI job instead of sequentially
  • db674d8 Reflect that PyPI publishing runs automatically on tag push
  • 718f685 Release 2.7.0
  • 14da090 Let contributors focus on what interests them, not a milestone plan
  • a4a7e99 Give release managers a safe, documented path from version bump to PyPI
  • cf3bd2f Drop the Release Drafter integration
  • 0ff1fa8 Tell template creators what Cookiecutter actually gives them
  • 154d946 Modernize the README around uv and a leaner project page
  • Additional commits viewable in compare view

Updates docker from 7.1.0 to 7.2.0

Release notes

Sourced from docker's releases.

7.2.0

Upgrade Notes

  • docker.from_env() now honors the active Docker CLI context when DOCKER_HOST is not set.
    • This means the client may connect to the daemon selected by DOCKER_CONTEXT or the current context in ~/.docker/config.json, matching Docker CLI behavior more closely.
    • If your application relied on the previous default connection behavior, set DOCKER_HOST explicitly, set DOCKER_CONTEXT=default, or pass use_context=False to DockerClient.from_env().
  • Added docker.from_context() / DockerClient.from_context() for explicitly creating a client from a Docker CLI context.

Features

  • Added support for Docker contexts when creating the default client
  • Added subpath support for volumes

Bugfixes

  • Fixed exec_run documentation for the stream parameter
  • Fixed image loading to avoid depending on the deprecated JSONMessage.error field
  • Preserved the rotated unlock key in swarm integration tests
  • Fixed SSL certificate generation in tests
  • Fixed IPv6 integration tests by explicitly enabling IPv6 where required

Miscellaneous

  • Updated tests for newer Docker Engine behavior
  • CI and build updates

What's Changed

New Contributors

... (truncated)

Commits
  • 5ad5327 Merge pull request #3415 from vvoland/update-changelog
  • d242230 docs: 7.2.0 changelog
  • ba01cc7 Merge pull request #3401 from ebriney/client-from-context
  • ae5dfe9 Merge pull request #3410 from vvoland/fix-flaky
  • aa99999 integration/swarm: Preserve rotated unlock key
  • 059d371 Merge pull request #3407 from vvoland/fix-arm64
  • 9b4b9b8 gha: Add arm64 integration CI
  • 9e9f8ff Skip tests incompatible with host architecture
  • e0542d9 Merge pull request #3408 from vvoland/gha-pin
  • 578a11d gha: Pin to digests
  • Additional commits viewable in compare view

Updates flask from 3.1.2 to 3.1.3

Release notes

Sourced from flask's releases.

3.1.3

This is the Flask 3.1.3 security fix release, which fixes a security issue but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.3/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-3

  • The session is marked as accessed for operations that only access the keys but not the values, such as in and len. GHSA-68rp-wp8r-4726
Changelog

Sourced from flask's changelog.

Version 3.1.3

Released 2026-02-18

  • The session is marked as accessed for operations that only access the keys but not the values, such as in and len. :ghsa:68rp-wp8r-4726
Commits
  • 22d9247 release version 3.1.3
  • 089cb86 Merge commit from fork
  • c17f379 request context tracks session access
  • 27be933 start version 3.1.3
  • 4e652d3 Abort if the instance folder cannot be created (#5903)
  • 3d03098 Abort if the instance folder cannot be created
  • 407eb76 document using gevent for async (#5900)
  • ac5664d document using gevent for async
  • 4f79d5b Increase required flit_core version to 3.11 (#5865)
  • fe3b215 Increase required flit_core version to 3.11
  • Additional commits viewable in compare view

Updates humanize from 4.14.0 to 4.16.0

Release notes

Sourced from humanize's releases.

4.16.0

Added

Changed

Fixed

4.15.0

Added

Changed

Fixed

Commits
  • 3c577d7 Add test for exact googol (10**100) in intword() (#304)
  • 52609bf Drop experimental Python 3.13 free-threaded (#336)
  • 8a47cb4 Lazy imports for Python 3.15+ (#335)
  • 823ad60 Fix naturalsize() rounding rollover at unit boundaries (#329)
  • 7574e0c Carry metric() to the next SI prefix when rounding reaches 1000 (#328)
  • c2c410c Stop printing two minus signs in fractional for a negative mixed number (#320)
  • 976484a Fix typo in i18n.activate() docstring (#325)
  • d333afd Update release-drafter/release-drafter action to v7.3.1 (#324)
  • d07d77e Update dependency mypy to v2 (#323)
  • 15eb4cc Update github-actions (#322)
  • Additional commits viewable in compare view

Updates jsonschema from 4.25.1 to 4.26.0

Release notes

Sourced from jsonschema's releases.

v4.26.0

What's Changed

New Contributors

Full Changelog: python-jsonschema/jsonschema@v4.25.1...v4.26.0

Changelog

Sourced from jsonschema's changelog.

v4.26.0

  • Decrease import time by delaying importing of urllib.request (#1416).
Commits
  • a727743 Add a changelog entry for 4.26.
  • 6d28c13 Update the lockfile.
  • 739499e Update pre-commit hooks.
  • cb2d779 Merge pull request #1443 from python-jsonschema/pre-commit-ci-update-config
  • e6bbbb7 [pre-commit.ci] pre-commit autoupdate
  • d56037a Merge pull request #1442 from python-jsonschema/dependabot/github_actions/ast...
  • e54ce13 Bump astral-sh/setup-uv from 7.1.4 to 7.1.6
  • 1f7c9fb Partially update docs requirements.
  • 241aec9 Merge pull request #1441 from python-jsonschema/pre-commit-ci-update-config
  • 2818efb Apache-2.0 -> nongpl
  • Additional commits viewable in compare view

Updates mistune from 3.2.1 to 3.3.3

Release notes

Sourced from mistune's releases.

v3.3.3

   🐞 Bug Fixes

   🏎 Performance

    View changes on GitHub

v3.3.2

   🐞 Bug Fixes

    View changes on GitHub

v3.3.1

   🐞 Bug Fixes

  • abbr: Update process_text method in abrr, adding parse_emphasis parameter  -  by @​lepture (ae850)
  • directive: Use correct file path for include directive  -  by @​lepture (18c21)
    View changes on GitHub

v3.3.0

   🐞 Bug Fixes

  • Resolve O(n^2) DoS in parse_link_text (CWE-400)  -  by bhanugoudm041 (b6b49)
  • Resolve O(n^2) DoS in parse_link_text (CWE-400)-Type handling/testing done  -  by bhanugoudm041 (b3af8)
  • block: Avoid quadratic ref link scans  -  by @​lepture (2b04d)
  • cli: Add entrypoint and utf-8 output  -  by @​lepture (2f244)
  • directives: Constrain include targets  -  by @​lepture (1bef3)
  • formatting: Avoid quadratic marker scans  -  by @​lepture (96d0f)
  • image: Validate figure width option  -  by

@dependabot
deps(deps): bump the python-minor-patch group with 34 updates
575e99a 
Bumps the python-minor-patch group with 34 updates:

| Package | From | To |
| --- | --- | --- |
| [eth-abi](https://github.com/ethereum/eth-abi) | `5.1.0` | `5.2.0` |
| [bitstring](https://github.com/scott-griffiths/bitstring) | `4.3.1` | `4.4.0` |
| [click](https://github.com/pallets/click) | `8.3.1` | `8.4.2` |
| [cookiecutter](https://github.com/cookiecutter/cookiecutter) | `2.6.0` | `2.7.1` |
| [docker](https://github.com/docker/docker-py) | `7.1.0` | `7.2.0` |
| [flask](https://github.com/pallets/flask) | `3.1.2` | `3.1.3` |
| [humanize](https://github.com/python-humanize/humanize) | `4.14.0` | `4.16.0` |
| [jsonschema](https://github.com/python-jsonschema/jsonschema) | `4.25.1` | `4.26.0` |
| [mistune](https://github.com/lepture/mistune) | `3.2.1` | `3.3.3` |
| [numpy](https://github.com/numpy/numpy) | `2.3.5` | `2.4.6` |
| [psutil](https://github.com/giampaolo/psutil) | `7.1.3` | `7.2.2` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.4` |
| [pygments](https://github.com/pygments/pygments) | `2.19.2` | `2.20.0` |
| [pynacl](https://github.com/pyca/pynacl) | `1.6.1` | `1.6.2` |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.34.2` |
| [tabulate](https://github.com/astanin/python-tabulate) | `0.9.0` | `0.10.0` |
| [ujson](https://github.com/ultrajson/ultrajson) | `5.11.0` | `5.13.0` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.4` | `3.1.8` |
| [zope-interface](https://github.com/zopefoundation/zope.interface) | `8.1.1` | `8.5` |
| [furo](https://github.com/pradyunsg/furo) | `2025.9.25` | `2025.12.19` |
| [pip-licenses](https://github.com/raimon49/pip-licenses) | `5.5.0` | `5.5.5` |
| [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) | `3.5.2` | `3.6.1` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.1.1` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` |
| [tox](https://github.com/tox-dev/tox) | `4.32.0` | `4.57.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.9` | `0.15.22` |
| [bandit](https://github.com/PyCQA/bandit) | `1.9.2` | `1.9.4` |
| [build](https://github.com/pypa/build) | `1.3.0` | `1.5.0` |
| [wheel](https://github.com/pypa/wheel) | `0.45.1` | `0.47.0` |
| [pyinstaller](https://github.com/pyinstaller/pyinstaller) | `6.17.0` | `6.21.0` |
| [myst-parser](https://github.com/executablebooks/MyST-Parser) | `4.0.1` | `5.1.0` |
| [sphinx-autoapi](https://github.com/readthedocs/sphinx-autoapi) | `3.6.1` | `3.8.0` |
| [sphinx-design](https://github.com/executablebooks/sphinx-design) | `0.6.1` | `0.7.0` |
| [linkify-it-py](https://github.com/tsutsu3/linkify-it-py) | `2.0.3` | `2.1.0` |


Updates `eth-abi` from 5.1.0 to 5.2.0
- [Release notes](https://github.com/ethereum/eth-abi/releases)
- [Changelog](https://github.com/ApeWorX/eth-abi/blob/main/docs/release_notes.rst)
- [Commits](ApeWorX/eth-abi@v5.1.0...v5.2.0)

Updates `bitstring` from 4.3.1 to 4.4.0
- [Release notes](https://github.com/scott-griffiths/bitstring/releases)
- [Changelog](https://github.com/scott-griffiths/bitstring/blob/main/release_notes.md)
- [Commits](scott-griffiths/bitstring@bitstring-4.3.1...4.4.0)

Updates `click` from 8.3.1 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.3.1...8.4.2)

Updates `cookiecutter` from 2.6.0 to 2.7.1
- [Release notes](https://github.com/cookiecutter/cookiecutter/releases)
- [Commits](cookiecutter/cookiecutter@2.6.0...v2.7.1)

Updates `docker` from 7.1.0 to 7.2.0
- [Release notes](https://github.com/docker/docker-py/releases)
- [Commits](docker/docker-py@7.1.0...7.2.0)

Updates `flask` from 3.1.2 to 3.1.3
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.2...3.1.3)

Updates `humanize` from 4.14.0 to 4.16.0
- [Release notes](https://github.com/python-humanize/humanize/releases)
- [Commits](python-humanize/humanize@4.14.0...4.16.0)

Updates `jsonschema` from 4.25.1 to 4.26.0
- [Release notes](https://github.com/python-jsonschema/jsonschema/releases)
- [Changelog](https://github.com/python-jsonschema/jsonschema/blob/main/CHANGELOG.rst)
- [Commits](python-jsonschema/jsonschema@v4.25.1...v4.26.0)

Updates `mistune` from 3.2.1 to 3.3.3
- [Release notes](https://github.com/lepture/mistune/releases)
- [Changelog](https://github.com/lepture/mistune/blob/main/docs/changes.rst)
- [Commits](lepture/mistune@v3.2.1...v3.3.3)

Updates `numpy` from 2.3.5 to 2.4.6
- [Release notes](https://github.com/numpy/numpy/releases)
- [Changelog](https://github.com/numpy/numpy/blob/main/doc/RELEASE_WALKTHROUGH.rst)
- [Commits](numpy/numpy@v2.3.5...v2.4.6)

Updates `psutil` from 7.1.3 to 7.2.2
- [Changelog](https://github.com/giampaolo/psutil/blob/master/docs/changelog.rst)
- [Commits](giampaolo/psutil@v7.1.3...v7.2.2)

Updates `pyasn1` from 0.6.1 to 0.6.4
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.1...v0.6.4)

Updates `pygments` from 2.19.2 to 2.20.0
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.19.2...2.20.0)

Updates `pynacl` from 1.6.1 to 1.6.2
- [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst)
- [Commits](pyca/pynacl@1.6.1...1.6.2)

Updates `requests` from 2.32.5 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.5...v2.34.2)

Updates `tabulate` from 0.9.0 to 0.10.0
- [Changelog](https://github.com/astanin/python-tabulate/blob/master/CHANGELOG)
- [Commits](astanin/python-tabulate@v0.9.0...v0.10.0)

Updates `ujson` from 5.11.0 to 5.13.0
- [Release notes](https://github.com/ultrajson/ultrajson/releases)
- [Commits](ultrajson/ultrajson@5.11.0...5.13.0)

Updates `werkzeug` from 3.1.4 to 3.1.8
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.4...3.1.8)

Updates `zope-interface` from 8.1.1 to 8.5
- [Changelog](https://github.com/zopefoundation/zope.interface/blob/master/CHANGES.rst)
- [Commits](zopefoundation/zope.interface@8.1.1...8.5)

Updates `furo` from 2025.9.25 to 2025.12.19
- [Release notes](https://github.com/pradyunsg/furo/releases)
- [Changelog](https://github.com/pradyunsg/furo/blob/main/docs/changelog.md)
- [Commits](pradyunsg/furo@2025.09.25...2025.12.19)

Updates `pip-licenses` from 5.5.0 to 5.5.5
- [Release notes](https://github.com/raimon49/pip-licenses/releases)
- [Changelog](https://github.com/raimon49/pip-licenses/blob/master/CHANGELOG.md)
- [Commits](raimon49/pip-licenses@v-5.5.0...v-5.5.5)

Updates `sphinx-autodoc-typehints` from 3.5.2 to 3.6.1
- [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases)
- [Commits](tox-dev/sphinx-autodoc-typehints@3.5.2...3.6.1)

Updates `pytest` from 9.0.2 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@9.0.2...9.1.1)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](pytest-dev/pytest-cov@v7.0.0...v7.1.0)

Updates `tox` from 4.32.0 to 4.57.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.32.0...4.57.0)

Updates `ruff` from 0.14.9 to 0.15.22
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](astral-sh/ruff@0.14.9...0.15.22)

Updates `bandit` from 1.9.2 to 1.9.4
- [Release notes](https://github.com/PyCQA/bandit/releases)
- [Commits](PyCQA/bandit@1.9.2...1.9.4)

Updates `build` from 1.3.0 to 1.5.0
- [Release notes](https://github.com/pypa/build/releases)
- [Changelog](https://github.com/pypa/build/blob/main/CHANGELOG.rst)
- [Commits](pypa/build@1.3.0...1.5.0)

Updates `wheel` from 0.45.1 to 0.47.0
- [Release notes](https://github.com/pypa/wheel/releases)
- [Changelog](https://github.com/pypa/wheel/blob/main/docs/news.rst)
- [Commits](pypa/wheel@0.45.1...0.47.0)

Updates `pyinstaller` from 6.17.0 to 6.21.0
- [Release notes](https://github.com/pyinstaller/pyinstaller/releases)
- [Changelog](https://github.com/pyinstaller/pyinstaller/blob/develop/doc/CHANGES.rst)
- [Commits](pyinstaller/pyinstaller@v6.17.0...v6.21.0)

Updates `myst-parser` from 4.0.1 to 5.1.0
- [Release notes](https://github.com/executablebooks/MyST-Parser/releases)
- [Changelog](https://github.com/executablebooks/MyST-Parser/blob/master/CHANGELOG.md)
- [Commits](executablebooks/MyST-Parser@v4.0.1...v5.1.0)

Updates `sphinx-autoapi` from 3.6.1 to 3.8.0
- [Release notes](https://github.com/readthedocs/sphinx-autoapi/releases)
- [Changelog](https://github.com/readthedocs/sphinx-autoapi/blob/main/CHANGELOG.rst)
- [Commits](readthedocs/sphinx-autoapi@v3.6.1...v3.8.0)

Updates `sphinx-design` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/executablebooks/sphinx-design/releases)
- [Changelog](https://github.com/executablebooks/sphinx-design/blob/main/CHANGELOG.md)
- [Commits](executablebooks/sphinx-design@v0.6.1...v0.7.0)

Updates `linkify-it-py` from 2.0.3 to 2.1.0
- [Release notes](https://github.com/tsutsu3/linkify-it-py/releases)
- [Changelog](https://github.com/tsutsu3/linkify-it-py/blob/main/CHANGELOG.md)
- [Commits](tsutsu3/linkify-it-py@v2.0.3...v2.1.0)

---
updated-dependencies:
- dependency-name: eth-abi
  dependency-version: 5.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: bitstring
  dependency-version: 4.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: click
  dependency-version: 8.4.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: cookiecutter
  dependency-version: 2.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: docker
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: flask
  dependency-version: 3.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: humanize
  dependency-version: 4.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: jsonschema
  dependency-version: 4.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: mistune
  dependency-version: 3.3.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: numpy
  dependency-version: 2.4.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: psutil
  dependency-version: 7.2.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pyasn1
  dependency-version: 0.6.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: pygments
  dependency-version: 2.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pynacl
  dependency-version: 1.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: tabulate
  dependency-version: 0.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: ujson
  dependency-version: 5.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: werkzeug
  dependency-version: 3.1.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: zope-interface
  dependency-version: '8.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: furo
  dependency-version: 2025.12.19
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pip-licenses
  dependency-version: 5.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: sphinx-autodoc-typehints
  dependency-version: 3.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: tox
  dependency-version: 4.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: ruff
  dependency-version: 0.15.22
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: bandit
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: python-minor-patch
- dependency-name: build
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: wheel
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: pyinstaller
  dependency-version: 6.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: myst-parser
  dependency-version: 5.1.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: python-minor-patch
- dependency-name: sphinx-autoapi
  dependency-version: 3.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: sphinx-design
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: linkify-it-py
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

Labels

The following labels could not be found: python. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@oberstet oberstet closed this Jul 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot
dependabot Bot deleted the dependabot/uv/python-minor-patch-0cdb8b688f branch July 20, 2026 09:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@oberstet