From dc4c5734f01dbdf566348809479559109cf9a015 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Dec 2025 10:24:20 +0000 Subject: [PATCH 1/3] Bump click from 8.3.0 to 8.3.1 (#11780) Bumps [click](https://github.com/pallets/click) from 8.3.0 to 8.3.1.
Release notes

Sourced from click's releases.

8.3.1

This is the Click 8.3.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-1 Milestone: https://github.com/pallets/click/milestone/28

Changelog

Sourced from click's changelog.

Version 8.3.1

Released 2025-11-15

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=click&package-manager=pip&previous-version=8.3.0&new-version=8.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/doc-spelling.txt | 2 +- requirements/doc.txt | 2 +- requirements/lint.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index dc4b096646f..5777579f7f1 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -47,7 +47,7 @@ cfgv==3.4.0 # via pre-commit charset-normalizer==3.4.4 # via requests -click==8.3.0 +click==8.3.1 # via # pip-tools # slotscheck diff --git a/requirements/dev.txt b/requirements/dev.txt index 3ada1c7725b..916f35f1b03 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -47,7 +47,7 @@ cfgv==3.4.0 # via pre-commit charset-normalizer==3.4.4 # via requests -click==8.3.0 +click==8.3.1 # via # pip-tools # slotscheck diff --git a/requirements/doc-spelling.txt b/requirements/doc-spelling.txt index 1b0f7b05a4e..9e4892bd5bc 100644 --- a/requirements/doc-spelling.txt +++ b/requirements/doc-spelling.txt @@ -14,7 +14,7 @@ certifi==2025.11.12 # via requests charset-normalizer==3.4.4 # via requests -click==8.3.0 +click==8.3.1 # via towncrier docutils==0.21.2 # via sphinx diff --git a/requirements/doc.txt b/requirements/doc.txt index 491478d3f89..c5ca284d8bb 100644 --- a/requirements/doc.txt +++ b/requirements/doc.txt @@ -14,7 +14,7 @@ certifi==2025.11.12 # via requests charset-normalizer==3.4.4 # via requests -click==8.3.0 +click==8.3.1 # via towncrier docutils==0.21.2 # via sphinx diff --git a/requirements/lint.txt b/requirements/lint.txt index ec2d60488f5..d53f4d7d89c 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -21,7 +21,7 @@ cffi==2.0.0 # pytest-codspeed cfgv==3.4.0 # via pre-commit -click==8.3.0 +click==8.3.1 # via slotscheck cryptography==46.0.3 # via trustme diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 716242eeef3..58b8c2eeb09 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -12,7 +12,7 @@ cffi==2.0.0 # via # cryptography # pytest-codspeed -click==8.3.0 +click==8.3.1 # via wait-for-it coverage==7.11.0 # via diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 290800a1238..aed180241ff 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -25,7 +25,7 @@ cffi==2.0.0 # cryptography # pycares # pytest-codspeed -click==8.3.0 +click==8.3.1 # via wait-for-it coverage==7.11.0 # via diff --git a/requirements/test.txt b/requirements/test.txt index 1541c4c81f4..a814a212e7e 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -25,7 +25,7 @@ cffi==2.0.0 # cryptography # pycares # pytest-codspeed -click==8.3.0 +click==8.3.1 # via wait-for-it coverage==7.11.0 # via From fbfe8331f9fcfb2231c32c91b1b8d901b4b18628 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Dec 2025 10:57:34 +0000 Subject: [PATCH 2/3] Bump backports-zstd from 1.0.0 to 1.1.0 (#11781) Bumps [backports-zstd](https://github.com/rogdham/backports.zstd) from 1.0.0 to 1.1.0.
Changelog

Sourced from backports-zstd's changelog.

1.1.0 - 2025-11-23

:rocket: Added

  • Shorten import time by lazy loading the register_shutil function

:bug: Fixes

  • Fix assertion on Python 3.13 when build with DEBUG
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=backports-zstd&package-manager=pip&previous-version=1.0.0&new-version=1.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/base-ft.txt | 2 +- requirements/base.txt | 2 +- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/runtime-deps.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) diff --git a/requirements/base-ft.txt b/requirements/base-ft.txt index 869083e319f..5babb3967ad 100644 --- a/requirements/base-ft.txt +++ b/requirements/base-ft.txt @@ -12,7 +12,7 @@ aiosignal==1.4.0 # via -r requirements/runtime-deps.in async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.1.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in brotli==1.2.0 ; platform_python_implementation == "CPython" # via -r requirements/runtime-deps.in diff --git a/requirements/base.txt b/requirements/base.txt index 469e87f4b92..3bbd3f77705 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -12,7 +12,7 @@ aiosignal==1.4.0 # via -r requirements/runtime-deps.in async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.1.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in brotli==1.2.0 ; platform_python_implementation == "CPython" # via -r requirements/runtime-deps.in diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 5777579f7f1..804401325b5 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -24,7 +24,7 @@ async-timeout==5.0.1 ; python_version < "3.11" # valkey babel==2.17.0 # via sphinx -backports-zstd==1.0.0 ; implementation_name == "cpython" +backports-zstd==1.1.0 ; implementation_name == "cpython" # via # -r requirements/lint.in # -r requirements/runtime-deps.in diff --git a/requirements/dev.txt b/requirements/dev.txt index 916f35f1b03..0555605a33a 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -24,7 +24,7 @@ async-timeout==5.0.1 ; python_version < "3.11" # valkey babel==2.17.0 # via sphinx -backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.1.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via # -r requirements/lint.in # -r requirements/runtime-deps.in diff --git a/requirements/lint.txt b/requirements/lint.txt index d53f4d7d89c..d1c30733441 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -10,7 +10,7 @@ annotated-types==0.7.0 # via pydantic async-timeout==5.0.1 # via valkey -backports-zstd==1.0.0 ; implementation_name == "cpython" +backports-zstd==1.1.0 ; implementation_name == "cpython" # via -r requirements/lint.in blockbuster==1.5.25 # via -r requirements/lint.in diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt index d518feb2408..e0a8a8b7d30 100644 --- a/requirements/runtime-deps.txt +++ b/requirements/runtime-deps.txt @@ -12,7 +12,7 @@ aiosignal==1.4.0 # via -r requirements/runtime-deps.in async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.1.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in brotli==1.2.0 ; platform_python_implementation == "CPython" # via -r requirements/runtime-deps.in diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index aed180241ff..967c96d6b2e 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -14,7 +14,7 @@ annotated-types==0.7.0 # via pydantic async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.1.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in blockbuster==1.5.25 # via -r requirements/test-common.in diff --git a/requirements/test.txt b/requirements/test.txt index a814a212e7e..945636def47 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -14,7 +14,7 @@ annotated-types==0.7.0 # via pydantic async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.1.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in blockbuster==1.5.25 # via -r requirements/test-common.in From 6d1358c2c98dcbecfc21bcc308f316794674c46f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 2 Dec 2025 10:58:31 +0000 Subject: [PATCH 3/3] Bump execnet from 2.1.1 to 2.1.2 (#11784) Bumps [execnet](https://github.com/pytest-dev/execnet) from 2.1.1 to 2.1.2.
Changelog

Sourced from execnet's changelog.

2.1.2 (2025-11-11)

  • [#376](https://github.com/pytest-dev/execnet/issues/376) <https://github.com/pytest-dev/execnet/issues/376>__ fix artifact building - pin minimal version of hatch.
Commits
  • 9313ece Release 2.1.2
  • 45a4d87 Test on pypy-3.11 instead of pypy-3.8 (#375)
  • 03462f5 Update hatchling version requirement in pyproject.toml (#377)
  • f056180 [pre-commit.ci] pre-commit autoupdate (#378)
  • a9d75e7 [pre-commit.ci] pre-commit autoupdate (#373)
  • 9bfff13 [pre-commit.ci] pre-commit autoupdate (#372)
  • caf108d build(deps): bump actions/download-artifact from 5 to 6 (#371)
  • d3074cd [pre-commit.ci] pre-commit autoupdate (#370)
  • 35aa807 [pre-commit.ci] pre-commit autoupdate (#369)
  • d823f13 build(deps): bump hynek/build-and-inspect-python-package (#368)
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=execnet&package-manager=pip&previous-version=2.1.1&new-version=2.1.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 804401325b5..fe56ca39e43 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -67,7 +67,7 @@ docutils==0.21.2 # via sphinx exceptiongroup==1.3.0 # via pytest -execnet==2.1.1 +execnet==2.1.2 # via pytest-xdist filelock==3.20.0 # via virtualenv diff --git a/requirements/dev.txt b/requirements/dev.txt index 0555605a33a..5d07815d2ea 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -65,7 +65,7 @@ docutils==0.21.2 # via sphinx exceptiongroup==1.3.0 # via pytest -execnet==2.1.1 +execnet==2.1.2 # via pytest-xdist filelock==3.20.0 # via virtualenv diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 58b8c2eeb09..36f12c1fcfb 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -22,7 +22,7 @@ cryptography==46.0.3 # via trustme exceptiongroup==1.3.0 # via pytest -execnet==2.1.1 +execnet==2.1.2 # via pytest-xdist forbiddenfruit==0.1.4 # via blockbuster diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 967c96d6b2e..48739ac8e0b 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -35,7 +35,7 @@ cryptography==46.0.3 # via trustme exceptiongroup==1.3.0 # via pytest -execnet==2.1.1 +execnet==2.1.2 # via pytest-xdist forbiddenfruit==0.1.4 # via blockbuster diff --git a/requirements/test.txt b/requirements/test.txt index 945636def47..bbddc41da0d 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -35,7 +35,7 @@ cryptography==46.0.3 # via trustme exceptiongroup==1.3.0 # via pytest -execnet==2.1.1 +execnet==2.1.2 # via pytest-xdist forbiddenfruit==0.1.4 # via blockbuster