build(deps): bump the prod-dependencies group across 1 directory with 33 updates

[dependabot]

Bumps the prod-dependencies group with 33 updates in the / directory:

Package	From	To
babel	2.14.0	2.17.0
boto3	1.34.93	1.40.1
boto3-stubs	1.34.93	1.40.1
botocore	1.34.93	1.40.1
botocore-stubs	1.34.93	1.38.46
build	1.2.1	1.3.0
charset-normalizer	3.3.2	3.4.2
coverage	7.5.0	7.10.1
docutils	0.21.2	0.22
idna	3.7	3.10
iniconfig	2.0.0	2.1.0
jinja2	3.1.3	3.1.6
keyring	25.2.0	25.6.0
more-itertools	10.2.0	10.7.0
mypy-boto3-cognito-identity	1.34.0	1.40.0
mypy-boto3-cognito-idp	1.34.93	1.40.0
nh3	0.2.17	0.3.0
pkginfo	1.10.0	1.12.1.2
pluggy	1.5.0	1.6.0
pygments	2.17.2	2.19.2
pyproject-hooks	1.0.0	1.2.0
pytest	8.2.0	8.4.1
pytest-xdist	3.6.1	3.8.0
python-dotenv	1.0.1	1.1.1
requests	2.31.0	2.32.4
s3transfer	0.10.1	0.13.1
six	1.16.0	1.17.0
sphinx-markdown-builder	0.6.6	0.6.8
sphinxcontrib-htmlhelp	2.0.5	2.1.0
types-awscrt	0.20.9	0.27.5
types-s3transfer	0.10.1	0.13.0
typing-extensions	4.11.0	4.14.1
zipp	3.18.1	3.23.0

Updates babel from 2.14.0 to 2.17.0

Release notes

Sourced from babel's releases.

v2.17.0

Happy 2025! This release is being made from FOSDEM 2025, in Brussels, Belgium. 🇧🇪

Thank you to all contributors, new and old, and here's to another great year of internationalization and localization!

---

The changelog below is auto-generated by GitHub.

Please see CHANGELOG.rst for additional details.

---

What's Changed

• Fix deprecation warnings for datetime.utcnow() by @​tomasr8 in python-babel/babel#1119
• Enclose white spaces in references by @​Dunedan in python-babel/babel#1105
• Replace str.index with str.find by @​tomasr8 in python-babel/babel#1130
• Replace more alternate characters in format_skeleton by @​tomasr8 in python-babel/babel#1122
• Fix extracted lineno with nested calls by @​dylankiss in python-babel/babel#1126
• "Deleted duplicate code in test" by @​mattdiaz007 in python-babel/babel#1138
• Fix of list index out of range error in PoFileParser.add_message when translations is empty by @​gabe-sherman in python-babel/babel#1135
• Make seconds optional in parse_time time formats by @​tomasr8 in python-babel/babel#1141
• Mark wraptext deprecated; use TextWrapper directly in write_po by @​akx in python-babel/babel#1140
• Fix the way obsolete messages are stored by @​tomasr8 in python-babel/babel#1132
• Replace OrderedDict with just dict by @​tomasr8 in python-babel/babel#1149
• Use CLDR 46 by @​tomasr8 in python-babel/babel#1145
• Update CI to use python 3.13 and Ubuntu 24.04 by @​tomasr8 in python-babel/babel#1153
• Adjust docs/conf.py to add compatibility with sphinx 8 by @​hrnciar in python-babel/babel#1155
• Allow specifying an explicit format in parse_date/parse_time by @​tomasr8 in python-babel/babel#1131
• Simplify read_mo logic regarding catalog.charset by @​tomasr8 in python-babel/babel#1148
• Bump CI/tool versions by @​akx in python-babel/babel#1160
• fix: check_and_call_extract_file uses the first matching method and options, instead of the first matching method and last matching options by @​jpmckinney in python-babel/babel#1121
• Prevent wrapping file locations containing white space by @​tomasr8 in python-babel/babel#1120
• Add tzdata as dev dependency and sync with tox.ini by @​wandrew004 in python-babel/babel#1159
• Support short and narrow formats for format_timedelta when using add_direction by @​akx in python-babel/babel#1163
• Improve handling for locale=None by @​akx in python-babel/babel#1164
• Use pytest.raises(match=...) by @​akx in python-babel/babel#1166
• Strip extra leading slashes in /etc/localtime by @​akx in python-babel/babel#1165
• Remove redundant assignment in Catalog.__setitem__ by @​tomasr8 in python-babel/babel#1167
• Small cleanups by @​akx in python-babel/babel#1170
• Small test cleanup by @​akx in python-babel/babel#1172
• Add Message.python_brace_format by @​tomasr8 in python-babel/babel#1169
• Import Literal from the typing module by @​tomasr8 in python-babel/babel#1175
• Prefer LC_MONETARY when formatting currencies by @​akx in python-babel/babel#1173
• Fix dates formatting Y, w and W symbols for week-numbering by @​jun66j5 in python-babel/babel#1179
• Increase test coverage of the python_format checker by @​tomasr8 in python-babel/babel#1176
• Prepare for 2.17.0 by @​akx in python-babel/babel#1182

New Contributors

• @​Dunedan made their first contribution in python-babel/babel#1105

... (truncated)

Changelog

Sourced from babel's changelog.

Version 2.17.0

Happy 2025! This release is being made from FOSDEM 2025, in Brussels, Belgium.

Thank you to all contributors, new and old, and here's to another great year of internationalization and localization!

Features

* CLDR: Babel now uses CLDR 46, by @tomasr8 in :gh:`1145`
* Dates: Allow specifying an explicit format in parse_date/parse_time by @tomasr8 in :gh:`1131`
* Dates: More alternate characters are now supported by `format_skeleton`. By @tomasr8 in :gh:`1122`
* Dates: Support short and narrow formats for format_timedelta when using `add_direction`, by @akx in :gh:`1163`
* Messages: .po files now enclose white spaces in filenames like GNU gettext does. By @Dunedan in :gh:`1105`, and @tomasr8 in :gh:`1120`
* Messages: Initial support for `Message.python_brace_format`, by @tomasr8 in :gh:`1169`
* Numbers: LC_MONETARY is now preferred when formatting currencies, by @akx in :gh:`1173`
Bugfixes

• Dates: Make seconds optional in parse_time time formats by @​tomasr8 in :gh:1141
• Dates: Replace str.index with str.find by @​tomasr8 in :gh:1130
• Dates: Strip extra leading slashes in /etc/localtime by @​akx in :gh:1165
• Dates: Week numbering and formatting of dates with week numbers was repaired by @​jun66j5 in :gh:1179
• General: Improve handling for locale=None by @​akx in :gh:1164
• General: Remove redundant assignment in Catalog.__setitem__ by @​tomasr8 in :gh:1167
• Messages: Fix extracted lineno with nested calls, by @​dylankiss in :gh:1126
• Messages: Fix of list index out of range when translations is empty, by @​gabe-sherman in :gh:1135
• Messages: Fix the way obsolete messages are stored by @​tomasr8 in :gh:1132
• Messages: Simplify read_mo logic regarding catalog.charset by @​tomasr8 in :gh:1148
• Messages: Use the first matching method & options, rather than first matching method & last options, by @​jpmckinney in :gh:1121

Deprecation and compatibility

* Dates: Fix deprecation warnings for `datetime.utcnow()` by @tomasr8 in :gh:`1119`
* Docs: Adjust docs/conf.py to add compatibility with sphinx 8 by @hrnciar in :gh:`1155`
* General: Import `Literal` from the typing module by @tomasr8 in :gh:`1175`
* General: Replace `OrderedDict` with just `dict` by @tomasr8 in :gh:`1149`
* Messages: Mark `wraptext` deprecated; use `TextWrapper` directly in `write_po` by @akx in :gh:`1140`
Infrastructure

* Add tzdata as dev dependency and sync with tox.ini by @wandrew004 in :gh:`1159`
* Duplicate test code was deleted by @mattdiaz007 in :gh:`1138`
* Increase test coverage of the `python_format` checker by @tomasr8 in :gh:`1176`
* Small cleanups by @akx in :gh:`1160`, :gh:`1166`, :gh:`1170` and :gh:`1172`
</tr></table> 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>

<li><a href="https://github.com/python-babel/babel/commit/b50a1d2186c20f3359f7e10853d2b2225a46ed40&quot;&gt;&lt;code&gt;b50a1d2&lt;/code&gt;&lt;/a> Prepare for 2.17.0 (<a href="https://redirect.github.com/python-babel/babel/issues/1182&quot;&gt;#1182&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/5f117b2689573aa98acc8a47108c49b99f4d1394&quot;&gt;&lt;code&gt;5f117b2&lt;/code&gt;&lt;/a> Increase test coverage of the <code>python_format</code> checker (<a href="https://redirect.github.com/python-babel/babel/issues/1176&quot;&gt;#1176&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/363ad7531fb5dcdc3e9844573592b0b44afb914b&quot;&gt;&lt;code&gt;363ad75&lt;/code&gt;&lt;/a> Fix dates formatting <code>Y</code>, <code>w</code> and <code>W</code> symbols for week-numbering (<a href="https://redirect.github.com/python-babel/babel/issues/1179&quot;&gt;#1179&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/e9c3ef8d0de3080ca59f7f8dbabf9b52983adc7d&quot;&gt;&lt;code&gt;e9c3ef8&lt;/code&gt;&lt;/a> Merge pull request <a href="https://redirect.github.com/python-babel/babel/issues/1173&quot;&gt;#1173&lt;/a> from python-babel/lc-monetary-2</li>

<li><a href="https://github.com/python-babel/babel/commit/56ef7c7f578a904917464c187e399abb762bd5e3&quot;&gt;&lt;code&gt;56ef7c7&lt;/code&gt;&lt;/a> Prefer LC_MONETARY when formatting currency</li>

<li><a href="https://github.com/python-babel/babel/commit/aee6d698b541dc50439280d7e093092cc0d4b832&quot;&gt;&lt;code&gt;aee6d69&lt;/code&gt;&lt;/a> <code>default_locale</code>: support multiple keys</li>

<li><a href="https://github.com/python-babel/babel/commit/2d8a808864d1aae5d3d02d4f95917c79740c5d35&quot;&gt;&lt;code&gt;2d8a808&lt;/code&gt;&lt;/a> Import <code>Literal</code> &amp; <code>TypedDict</code> from the typing module (<a href="https://redirect.github.com/python-babel/babel/issues/1175&quot;&gt;#1175&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/98b9562c05e5276038c27ec12c12f3e92dc027b6&quot;&gt;&lt;code&gt;98b9562&lt;/code&gt;&lt;/a> Add basic support for <code>Message.python_brace_format</code> (<a href="https://redirect.github.com/python-babel/babel/issues/1169&quot;&gt;#1169&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/0c1091c9de9543e30bc4b845eb10b5bf84516d7b&quot;&gt;&lt;code&gt;0c1091c&lt;/code&gt;&lt;/a> Small test cleanup (<a href="https://redirect.github.com/python-babel/babel/issues/1172&quot;&gt;#1172&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/db4879136a7fbcef475f26b75dbdd65d0ce488f9&quot;&gt;&lt;code&gt;db48791&lt;/code&gt;&lt;/a> Merge pull request <a href="https://redirect.github.com/python-babel/babel/issues/1170&quot;&gt;#1170&lt;/a> from python-babel/small-cleanup</li>

<li>Additional commits viewable in <a href="https://github.com/python-babel/babel/compare/v2.14.0...v2.17.0&quot;&gt;compare view</a></li>

</ul>

</details>
<br />


Updates boto3 from 1.34.93 to 1.40.1

Commits

72d9a28 Merge branch 'release-1.40.1'
a3ffa61 Bumping version to 1.40.1
c643766 Add changelog entries from botocore
e2fb47b Merge branch 'release-1.40.0'
e19cb9f Merge branch 'release-1.40.0' into develop
9e895ba Bumping version to 1.40.0
dc01534 Add changelog entries from botocore
7a97a58 Update the documentation to reflect the change in default sts endpoint (#4576)
ce70857 Merge branch 'release-1.39.17'
8617957 Merge branch 'release-1.39.17' into develop
Additional commits viewable in compare view




Updates boto3-stubs from 1.34.93 to 1.40.1

Release notes
Sourced from boto3-stubs's releases.

8.8.0 - Python 3.8 runtime is back
Changed

[services] install_requires section is calculated based on dependencies in use, so typing-extensions version is set properly
[all] Replaced typing imports with collections.abc with a fallback to typing for Python <3.9
[all] Added aliases for builtins.list, builtins.set, builtins.dict, and builtins.type, so Python 3.8 runtime should work as expected again (reported by @​YHallouard in #340 and @​Omri-Ben-Yair in #336)
[all] Unions use the same type annotations as the rest of the structures due to proper fallbacks

Fixed

[services] Universal input/output shapes were not replaced properly in service subresources
[docs] Simplified doc links rendering for services
[services] Cleaned up unnecessary imports in client.pyi
[builder] Import records with fallback are always rendered




Commits

See full diff in compare view




Updates botocore from 1.34.93 to 1.40.1

Commits

5fed6e5 Merge branch 'release-1.40.1'
2297202 Bumping version to 1.40.1
43408fd Update endpoints model
c5ca572 Update to latest models
304d4ff Merge customizations for ARC Region switch
a3bbf61 Merge branch 'release-1.40.0'
4dc13e5 Merge branch 'release-1.40.0' into develop
0fa45d3 Bumping version to 1.40.0
5600878 Update endpoints model
bd39d33 Update to latest models
Additional commits viewable in compare view




Updates botocore-stubs from 1.34.93 to 1.38.46

Commits

See full diff in compare view




Updates build from 1.2.1 to 1.3.0

Release notes
Sourced from build's releases.

1.3.0

Add --config-json (PR #916, fixes issue #900)
Drop Python 3.8 (PR #891)
Test on Python 3.14, colorful help on 3.14+ (PR #895)
Fix ModuleNotFoundError when pip is not installed (PR #898)
Disable use of pip install --python for debundled pip (PR #861)
Don't pass no-wheel to virtualenv if it would warn (PR #892)
Optimize our tests to run faster (PR #871, #872, #738)
Allow running our tests without virtualenv (PR #911)
Fix issues in our tests (PR #824, #918, #870, #915, #862, #863, #899, #896, #854)
Use SPDX identifiers for our license metadata (PR #914)
Use dependency-groups for our development (PR #880)
Mention conda and update uv mention in README/docs (PR #842, #816, #917)

1.2.2.post1

This release only makes metadata (Python 3.13 classifier), docs, and test suite changes.
What's Changed

ci: add Python 3.13 by @​henryiii in pypa/build#815
docs: mention conda-forge name in README by @​henryiii in pypa/build#816
docs: add a missing ` in README by @​SigureMo in pypa/build#817
tests: fix under pyproject-hooks 1.2 by @​layday in pypa/build#824
ci: add PyPI attestations by @​henryiii in pypa/build#821
chore: 1.2.2.post1 by @​henryiii in pypa/build#820

New Contributors

@​SigureMo made their first contribution in pypa/build#817

Full Changelog: https://github.com/pypa/build/compare/1.2.2...1.2.2.post1
Version 1.2.2

What's Changed

Add editable to builder.get_requries_for_build's static types
(PR #764, fixes issue #763)
Include artifact attestations in our release
(PR #782)
Fix typing compatibility with typed pyproject-hooks
(PR #788)
Mark more tests with network
(PR #808)
Add more intersphinx links to docs
(PR #804)
Make uv optional for tests
(PR #807 and #813)



... (truncated)


Changelog
Sourced from build's changelog.

1.3.0 (2025-08-01)

Add --config-json
(PR :pr:916, fixes issue :issue:900)
Drop Python 3.8
(PR :pr:891)
Test on Python 3.14, colorful help on 3.14+
(PR :pr:895)
Fix ModuleNotFoundError when pip is not installed
(PR :pr:898)
Disable use of pip install --python for debundled pip
(PR :pr:861)
Don't pass no-wheel to virtualenv if it would warn
(PR :pr:892)
Optimize our tests to run faster
(PR :pr:871, :pr:872, :pr:738)
Allow running our tests without virtualenv
(PR :pr:911)
Fix issues in our tests
(PR :pr:824, :pr:918, :pr:870, :pr:915, :pr:862, :pr:863, :pr:899, :pr:896, :pr:854)
Use SPDX identifiers for our license metadata
(PR :pr:914)
Use dependency-groups for our development
(PR :pr:880)
Mention conda and update uv mention in README/docs
(PR :pr:842, :pr:816, :pr:917)

1.2.2 (2024-09-06)

Add editable to builder.get_requries_for_build's static types
(PR :pr:764, fixes issue :issue:763)
Include artifact attestations in our release
(PR :pr:782)
Fix typing compatibility with typed pyproject-hooks
(PR :pr:788)
Mark more tests with network
(PR :pr:808)
Add more intersphinx links to docs
(PR :pr:804)
Make uv optional for tests
(PR :pr:807 and :pr:813)




Commits

60e8752 chore: bump to 1.3.0 (#919)
807cfba feat: add --config-json (#916)
bf54ad0 tests: fix issues with ignore
53852df docs: uv example
b983371 tests: optional virtualenv
6cd157a Adopt PEP 639 "license" field (#914)
bdaea36 tests: fixes for errors in CI
14d6508 pre-commit: bump repositories
59ac60e pre-commit: bump repositories
48ebd63 pre-commit: bump repositories
Additional commits viewable in compare view




Updates charset-normalizer from 3.3.2 to 3.4.2

Release notes
Sourced from charset-normalizer's releases.

Version 3.4.2
3.4.2 (2025-05-02)
Fixed

Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9

Version 3.4.1
🚀 We're still raising awareness around HTTP/2, and HTTP/3!
Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...]
Using Requests today is the rough equivalent of using EOL Windows 8!  We promptly invite Python developers to look at the first drop-in replacement for Requests, namely Niquests. Ship with native WebSocket, SSE, Happy Eyeballs, DNS over HTTPS, and so on[...] All of this while remaining compatible with all Requests prior plug-ins / add-ons.
It leverages charset-normalizer in a better way! Check it out, you will gain up to being 3X faster and get a real/respectable support with it.
3.4.1 (2024-12-24)
Changed

Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
Enforce annotation delayed loading for a simpler and consistent types in the project.
Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

pre-commit configuration.
noxfile.

Removed

build-requirements.txt as per using pyproject.toml native build configuration.
bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
setup.cfg in favor of pyproject.toml metadata configuration.
Unused utils.range_scan function.

Fixed

Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+

Version 3.4.0
🚀 charset-normalizer is raising awareness around HTTP/2, and HTTP/3!
Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...]
All of this while our community is still struggling to make a firm advancement in HTTP clients. Now, many of you use Requests
as the defacto http client, now, and for many years now, Requests has been frozen. Being left in a vegetative state and not evolving,
this blocked millions of developers from using more advanced features.
We promptly invite Python developers to look at the drop-in replacement for Requests, namely Niquests.
It leverage charset-normalizer in a better way! Check it out, you will be positively surprised! Don't wait another decade.


... (truncated)


Changelog
Sourced from charset-normalizer's changelog.

3.4.2 (2025-05-02)
Fixed

Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

3.4.1 (2024-12-24)
Changed

Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
Enforce annotation delayed loading for a simpler and consistent types in the project.
Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

pre-commit configuration.
noxfile.

Removed

build-requirements.txt as per using pyproject.toml native build configuration.
bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
setup.cfg in favor of pyproject.toml metadata configuration.
Unused utils.range_scan function.

Fixed

Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+

3.4.0 (2024-10-08)
Added

Argument --no-preemptive in the CLI to prevent the detector to search for hints.
Support for Python 3.13 (#512)

Fixed

Relax the TypeError exception thrown when trying to compare a CharsetMatch with anything else than a CharsetMatch.
Improved the general reliability of the detector based on user feedbacks. (#520) (#509) (#498) (#407) (#537)
Declared charset in content (preemptive detection) not changed when converting to utf-8 bytes. (#381)




Commits

6422af1 :pencil: update release date
0e60ec1 :bookmark: Release 3.4.2 (#614)
f6630ce :arrow_up: Bump pypa/cibuildwheel from 2.23.2 to 2.23.3 (#617)
677c999 :arrow_up: Bump actions/download-artifact from 4.2.1 to 4.3.0 (#618)
960ab1e :arrow_up: Bump actions/setup-python from 5.5.0 to 5.6.0 (#619)
6eb6325 :arrow_up: Bump github/codeql-action from 3.28.10 to 3.28.16 (#620)
c99c0f2 :arrow_up: Update coverage requirement from <7.7,>=7.2.7 to >=7.2.7,<7.9 (#606)
270f28e :arrow_up: Bump actions/setup-python from 5.4.0 to 5.5.0 (#607)
d4d89a0 :arrow_up: Bump pypa/cibuildwheel from 2.22.0 to 2.23.2 (#608)
905fcf5 :arrow_up: Bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#609)
Additional commits viewable in compare view




Updates coverage from 7.5.0 to 7.10.1

Changelog
Sourced from coverage's changelog.

Version 7.10.1 — 2025-07-27


Fix: the exclusion for if TYPE_CHECKING: was wrong: it marked the branch
as partial, but it should have been a line exclusion so the entire clause
would be excluded. Improves issue 831_.


Fix: changed where .pth files are written for patch = subprocess, closing
issue 2006_.


.. _issue 2006: nedbat/coveragepy#2006
.. _changes_7-10-0:
Version 7.10.0 — 2025-07-24


A new configuration option: ":ref:config_run_patch" specifies named patches
to work around some limitations in coverage measurement.  These patches are
available:


patch = _exit lets coverage save its data even when :func:os._exit() <python:os._exit> is used to abruptly end the process.  This closes
long-standing issue 310_ as well as its duplicates: issue 312, issue 1673, issue 1845, and issue 1941.


patch = subprocess measures coverage in Python subprocesses created
with :mod:subprocess, :func:os.system, or one of the :func:execv <python:os.execl> or :func:spawnv <python:os.spawnl> family of
functions. Closes old issue 367_ and duplicate issue 378_.


patch = execv adjusts the :func:execv <python:os.execl> family of
functions to save coverage data before ending the current program and
starting the next. Not available on Windows. Closes issue 43_ after 15
years!




The HTML report now dimly colors subsequent lines in multi-line statements.
They used to have no color.  This gives a better indication of the amount of
code missing in the report.  Closes issue 1308_.


Two new exclusion patterns are part of the defaults: ... is automatically
excluded as a line and if TYPE_CHECKING: is excluded as a branch.  Closes
issue 831_.


A new command-line option: --save-signal=USR1 specifies a signal that
coverage.py will listen for.  When the signal is sent, the coverage data will
be saved.  This makes it possible to save data from within long-running
processes.  Thanks, Arkady Gilinsky <pull 1998_>_.




... (truncated)


Commits

7fdcbeb docs: sample HTML for 7.10.1
c9e9625 docs: prep for 7.10.1
e8193ff chore: make upgrade
9aad22a test: improve the if TYPE_CHECKING: exclusion test
1e2f41a fix: excluding TYPE_CHECKING should have been the line not the branch
2134e57 fix: use getsitepackages for writing .pth files.  #2006
a4300a7 test: signal statuses are mysterious. #2008
2fd4961 docs: update the man page, for once
a13607f build: comment_on_fixes should show html urls
0f00d49 build: bump version to 7.10.1
Additional commits viewable in compare view




Updates docutils from 0.21.2 to 0.22

Commits

See full diff in compare view




Updates idna from 3.7 to 3.10

Release notes
Sourced from idna's releases.

v3.10
No release notes provided.
v3.9
No release notes provided.
v3.8
What's Changed

Fix regression where IDNAError exception was not being produced for certain inputs.
Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.
Documentation improvements
Updates to package testing using Github actions

Thanks to Hugo van Kemenade for contributions to this release.
Full Changelog: https://github.com/kjd/idna/compare/v3.7...v3.8



Changelog
Sourced from idna's changelog.

3.10 (2024-09-15)
+++++++++++++++++

Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes
to UTS46 processing that will require more work to properly implement.

3.9 (2024-09-13)
++++++++++++++++

Update to Unicode 16.0.0
Deprecate setup.cfg in favour of pyproject.toml
Use ruff for code formatting

Thanks to Waket Zheng for contributions to this release.
3.8 (2024-08-23)
++++++++++++++++

Fix regression where IDNAError exception was not being produced for
certain inputs.
Add support for Python 3.13, drop support for Python 3.5 as it is no
longer testable.
Documentation improvements
Updates to package testing using Github actions

Thanks to Hugo van Kemenade for contributions to this release.



Commits

729225d Release v3.10
3eef168 Merge pull request #194 from kjd/revert-unicode-16
ceca619 Revert Unicode 16.0.0 data updates
c43ac75 Merge pull request #191 from kjd/release-3.9
1b8800a Release v3.9
a1fd168 Merge pull request #190 from kjd/unicode-16
7732c61 Merge branch 'master' into unicode-16
4ed183d Refactor membership test
762216b Format with ruff
580ece9 Implement changes to UTS46 algorithm
Additional commits viewable in compare view




Updates iniconfig from 2.0.0 to 2.1.0

Release notes
Sourced from iniconfig's releases.

v2.1.0
What's Changed

fix #26 - list individuals in license file by @​RonnyPfannschmidt in pytest-dev/iniconfig#52
Run tests in CI by @​nicoddemus in pytest-dev/iniconfig#53
Use pypa/gh-action-pypi-publish@release/v1 @ GHA by @​webknjaz in pytest-dev/iniconfig#54
Add support for Python 3.12-3.13 and drop EOL 3.7 by @​hugovk in pytest-dev/iniconfig#56

New Contributors

@​nicoddemus made their first contribution in pytest-dev/iniconfig#53
@​webknjaz made their first contribution in pytest-dev/iniconfig#54

Full Changelog: https://github.com/pytest-dev/iniconfig/compare/v2.0.0...v2.1.0



Changelog
Sourced from iniconfig's changelog.

2.1.0

fix artifact building - pin minimal version of hatch
drop eol python 3.8
add python 3.12 and 3.13




Commits

34793a6 pre-commit
136435d update changelog
0bb99ad fix #62: require a minimal hatch version with correct metadata
16793ea Merge pull request #56 from hugovk/add-3.12
3dc2b2d Add support for Python 3.13
2eb8abf Bump GitHub Actions
8c4bb5b Set python-version for pre-commit to remove CI warning
58b22b2 Drop support for EOL Python 3.7
4a53042 Add support for Python 3.12
9cae431 Merge pull request #54 from webknjaz/patch-1
Additional commits viewable in compare view




Updates jinja2 from 3.1.3 to 3.1.6

Release notes
Sourced from jinja2's releases.

3.1.6
This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.
PyPI: https://pypi.org/project/Jinja2/3.1.6/
Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7

3.1.5
This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.
PyPI: https://pypi.org/project/Jinja2/3.1.5/
Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5
Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
Sandbox does not allow clear and pop on known mutable sequence types. #2032
Calling sync render for an async template uses asyncio.run. #1952
Avoid unclosed auto_aiter warnings. #1960
Return an aclose-able AsyncGenerator from Template.generate_async. #1960
Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
Avoid leaving async generators unclosed in blocks, includes and extends. #1960
The runtime uses the correct concat function for the current environment when calling block references. #1701
Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
|int filter handles OverflowError from scientific notation. #1921
Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021
Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025
Fix copy/pickle support for the internal missing object. #2027
Environment.overlay(enable_async) is applied correctly. #2061
The error message from FileSystemLoader includes the paths that were searched. #1661
PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705
Improve annotations for methods returning copies. #1880
urlize does not add mailto: to values like @a@b. #1870
Tests decorated with @pass_context can be used with the |select filter. #1624
Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413
Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253

3.1.4
This is the Jinja 3.1.4 security release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes.
PyPI: https://pypi.org/project/Jinja2/3.1.4/
Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-4

The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. GHSA-h75v-3vvj-5mfj




Changelog
Sourced from jinja2's changelog.

Version 3.1.6
Released 2025-03-05

The |attr filter does not bypass the environment's attribute lookup,
allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

Version 3.1.5
Released 2024-12-21

The sandboxed environment handles indirect calls to str.format, such as
by passing a stored reference to a filter that calls its argument.
:ghsa:q2x7-8rv6-6q7h
Escape template name before formatting it into error messages, to avoid
issues with names that contain f-string syntax.
:issue:1792, :ghsa:gmj6-6f8f-6699
Sandbox does not allow clear and pop on known mutable sequence
types. :issue:2032
Calling sync render for an async template uses asyncio.run.
:pr:1952
Avoid unclosed auto_aiter warnings. :pr:1960
Return an aclose-able AsyncGenerator from
Template.generate_async. :pr:1960Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.