Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the all-dependencies group with 42 updates in the /api directory:

Package From To
arrow 1.3.0 1.4.0
boto3 1.37.24 1.42.0
botocore 1.37.24 1.41.6
certifi 2025.1.31 2025.11.12
charset-normalizer 3.4.1 3.4.4
click 8.1.8 8.3.1
flask 3.1.1 3.1.2
greenlet 3.1.1 3.2.4
httplib2 0.22.0 0.31.0
idna 3.10 3.11
importlib-metadata 8.6.1 8.7.0
markupsafe 3.0.2 3.0.3
networkx 3.4.2 3.6
psycopg2-binary 2.9.10 2.9.11
pydantic 2.11.1 2.12.5
pydantic-core 2.33.0 2.41.5
pyparsing 3.2.3 3.2.5
pyyaml 6.0.2 6.0.3
requests 2.32.4 2.32.5
s3transfer 0.11.4 0.16.0
sendgrid 6.11.0 6.12.5
sqlalchemy 2.0.40 2.0.44
typing-extensions 4.12.2 4.15.0
werkzeug 3.1.3 3.1.4
zipp 3.21.0 3.23.0
pip 25.2 25.3
pip-tools 7.4.1 7.5.2
cachetools 5.5.2 6.2.2
cfgv 3.4.0 3.5.0
coverage 7.8.0 7.12.0
distlib 0.3.9 0.4.0
filelock 3.18.0 3.20.0
identify 2.6.9 2.6.15
iniconfig 2.1.0 2.3.0
packaging 24.2 25.0
platformdirs 4.3.7 4.5.0
pluggy 1.5.0 1.6.0
pre-commit 4.2.0 4.5.0
pyproject-api 1.9.0 1.10.0
pytest 8.3.5 9.0.1
tox 4.25.0 4.32.0
virtualenv 20.30.0 20.35.4

Updates arrow from 1.3.0 to 1.4.0

Release notes

Sourced from arrow's releases.

Version 1.4.0

ADDED

CHANGED

FIXED

INTERNAL

Changelog

Sourced from arrow's changelog.

1.4.0 (2025-10-18)

  • [ADDED] Added week_start parameter to floor() and ceil() methods. PR [#1222](https://github.com/arrow-py/arrow/issues/1222) <https://github.com/arrow-py/arrow/pull/1222>_
  • [ADDED] Added FORMAT_RFC3339_STRICT with a T separator. PR [#1201](https://github.com/arrow-py/arrow/issues/1201) <https://github.com/arrow-py/arrow/pull/1201>_
  • [ADDED] Added Macedonian in Latin locale support. PR [#1200](https://github.com/arrow-py/arrow/issues/1200) <https://github.com/arrow-py/arrow/pull/1200>_
  • [ADDED] Added Persian/Farsi locale support. PR [#1190](https://github.com/arrow-py/arrow/issues/1190) <https://github.com/arrow-py/arrow/pull/1190>_
  • [ADDED] Added week and weeks to Thai locale timeframes. PR [#1218](https://github.com/arrow-py/arrow/issues/1218) <https://github.com/arrow-py/arrow/pull/1218>_
  • [ADDED] Added weeks to Catalan locale. PR [#1189](https://github.com/arrow-py/arrow/issues/1189) <https://github.com/arrow-py/arrow/pull/1189>_
  • [ADDED] Added Persian names of months, month-abbreviations and day-abbreviations in Gregorian calendar. PR [#1172](https://github.com/arrow-py/arrow/issues/1172) <https://github.com/arrow-py/arrow/pull/1172>_
  • [CHANGED] Migrated Arrow to use ZoneInfo for timezones instead of pytz. PR [#1217](https://github.com/arrow-py/arrow/issues/1217) <https://github.com/arrow-py/arrow/pull/1217>_
  • [FIXED] Fixed humanize month limits. PR [#1224](https://github.com/arrow-py/arrow/issues/1224) <https://github.com/arrow-py/arrow/pull/1224>_
  • [FIXED] Fixed type hint of Arrow.__getattr__. PR [#1171](https://github.com/arrow-py/arrow/issues/1171) <https://github.com/arrow-py/arrow/pull/1171>_
  • [FIXED] Fixed spelling and removed poorly used expressions in Korean locale. PR [#1181](https://github.com/arrow-py/arrow/issues/1181) <https://github.com/arrow-py/arrow/pull/1181>_
  • [FIXED] Updated shift() method for issue #1145. PR [#1194](https://github.com/arrow-py/arrow/issues/1194) <https://github.com/arrow-py/arrow/pull/1194>_
  • [FIXED] Improved Greek locale translations (seconds, days, "ago", and month typo). PR [#1184](https://github.com/arrow-py/arrow/issues/1184) <https://github.com/arrow-py/arrow/pull/1184>, PR [#1186](https://github.com/arrow-py/arrow/issues/1186) <https://github.com/arrow-py/arrow/pull/1186>
  • [FIXED] Addressed datetime.utcnow deprecation warning. PR [#1182](https://github.com/arrow-py/arrow/issues/1182) <https://github.com/arrow-py/arrow/pull/1182>_
  • [INTERNAL] Added codecov test results. PR [#1223](https://github.com/arrow-py/arrow/issues/1223) <https://github.com/arrow-py/arrow/pull/1223>_
  • [INTERNAL] Updated CI dependencies (actions/setup-python, actions/checkout, codecov/codecov-action, actions/cache).
  • [INTERNAL] Added docstrings to parser.py. PR [#1010](https://github.com/arrow-py/arrow/issues/1010) <https://github.com/arrow-py/arrow/pull/1010>_
  • [INTERNAL] Updated Python versions support and bumped CI dependencies. PR [#1177](https://github.com/arrow-py/arrow/issues/1177) <https://github.com/arrow-py/arrow/pull/1177>_
  • [INTERNAL] Added dependabot for GitHub actions. PR [#1193](https://github.com/arrow-py/arrow/issues/1193) <https://github.com/arrow-py/arrow/pull/1193>_
  • [INTERNAL] Moved dateutil types to test requirements. PR [#1183](https://github.com/arrow-py/arrow/issues/1183) <https://github.com/arrow-py/arrow/pull/1183>_
  • [INTERNAL] Added documentation link for arrow.format. PR [#1180](https://github.com/arrow-py/arrow/issues/1180) <https://github.com/arrow-py/arrow/pull/1180>_
Commits

Updates boto3 from 1.37.24 to 1.42.0

Commits
  • 7ce189b Merge branch 'release-1.42.0'
  • 29d92d1 Bumping version to 1.42.0
  • 743f945 Add changelog entries from botocore
  • e3744fd Merge pull request #4629 from hssyoo/crt-mode
  • 39215b6 Merge branch 'release-1.41.5'
  • 79f2845 Merge branch 'release-1.41.5' into develop
  • 0fc8075 Bumping version to 1.41.5
  • 573d359 Add changelog entries from botocore
  • 177e900 Remove backticks from error msg
  • ff9d88c Add warning
  • Additional commits viewable in compare view

Updates botocore from 1.37.24 to 1.41.6

Commits

Updates certifi from 2025.1.31 to 2025.11.12

Commits

Updates charset-normalizer from 3.4.1 to 3.4.4

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.4

3.4.4 (2025-10-13)

Changed

  • Bound setuptools to a specific constraint setuptools>=68,<=81.
  • Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

  • setuptools-scm as a build dependency.

Misc

  • Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
  • Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  • Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Version 3.4.2

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9
Changelog

Sourced from charset-normalizer's changelog.

3.4.4 (2025-10-13)

Changed

  • Bound setuptools to a specific constraint setuptools>=68,<=81.
  • Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

  • setuptools-scm as a build dependency.

Misc

  • Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
  • Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  • Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8
Commits
  • b30ffdc 🔧 fix checksum step in cd.yml
  • d3fbfcf 🔧 fix cd.yml
  • dafbb95 Release 3.4.4 (#658)
  • 1f18ffa ⬆️ raise mypy upper bound to 1.18.2
  • ef4ac69 Merge branch 'release-3.4.4' of github.com:jawah/charset_normalizer into rele...
  • 4b35dda 📝 write changelog for 3.4.4
  • 0ec6452 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
  • f341ede ⬆️ upgrade dependencies (dev, ci)
  • a308841 📝 write changelog for 3.4.4
  • 9c906da 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
  • Additional commits viewable in compare view

Updates click from 8.1.8 to 8.3.1

Release notes

Sourced from click's releases.

8.3.1

This is the Click 8.3.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-1 Milestone: https://github.com/pallets/click/milestone/28

  • Don't discard pager arguments by correctly using subprocess.Popen. #3039 #3055
  • Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. #3066 #3065 #3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. #3071 #3079
  • Fix rendering when prompt and confirm parameter prompt_suffix is empty. #3019 #3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. #3069 #3090
  • Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. #3136 #3137

8.3.0

This is the Click 8.3.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.3.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-0 Milestone https://github.com/pallets/click/milestone/27

  • Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

    • The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)
    • Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value
    • The default parameter can now be any type (bool, None, etc.)
    • Fixes inconsistencies reported in: #1992 #2514 #2610 #3024 #3030
  • Allow default to be set on Argument for nargs = -1. #2164 #3030

  • Show correct auto complete value for nargs option in combination with flag option #2813

  • Show correct auto complete value for nargs option in combination with flag option #2813

  • Fix handling of quoted and escaped parameters in Fish autocompletion. #2995 #3013

  • Lazily import shutil. #3023

  • Properly forward exception information to resources registered with click.core.Context.with_resource(). #2447 #3058

  • Fix regression related to EOF handling in CliRunner. #2939 #2940

8.2.2

This is the Click 8.2.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.2/

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.1

Released 2025-11-15

  • Don't discard pager arguments by correctly using subprocess.Popen. :issue:3039 :pr:3055
  • Replace Sentinel.UNSET default values by None as they're passed through the Context.invoke() method. :issue:3066 :issue:3065 :pr:3068
  • Fix conversion of Sentinel.UNSET happening too early, which caused incorrect behavior for multiple parameters using the same name. :issue:3071 :pr:3079
  • Hide Sentinel.UNSET values as None when looking up for other parameters through the context inside parameter callbacks. :issue:3136 :pr:3137
  • Fix rendering when prompt and confirm parameter prompt_suffix is empty. :issue:3019 :pr:3021
  • When Sentinel.UNSET is found during parsing, it will skip calls to type_cast_value. :issue:3069 :pr:3090

Version 8.3.0

Released 2025-09-17

  • Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

    • The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)
    • Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value
    • The default parameter can now be any type (bool, None, etc.)
    • Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610 :issue:3024 :pr:3030
  • Allow default to be set on Argument for nargs = -1. :issue:2164 :pr:3030

  • Show correct auto complete value for nargs option in combination with flag option :issue:2813

  • Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

  • Lazily import shutil. :pr:3023

  • Properly forward exception information to resources registered with click.core.Context.with_resource(). :issue:2447 :pr:3058

  • Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

Version 8.2.2

Released 2025-07-31

  • Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables.

... (truncated)

Commits
  • 1d038f2 release version 8.3.1
  • 03f3889 Fix Ruff UP038 warning (#3141)
  • 3867781 Fix Ruff UP038 warning
  • b91bb95 Provide altered context to callbacks to hide UNSET values as None (#3137)
  • 437e1e3 Temporarily provide a fake context to the callback to hide UNSET values as ...
  • ea70da4 Don't test using a file in docs/ (#3102)
  • e27b307 Make uv run --all-extras pyright --verifytypes click pass (#3072)
  • a92c573 Fix test_edit to work with BSD sed (#3129)
  • bd131e1 Fix test_edit to work with BSD sed
  • 0b5c6b7 Add Best practices section (#3127)
  • Additional commits viewable in compare view

Updates flask from 3.1.1 to 3.1.2

Release notes

Sourced from flask's releases.

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776
Changelog

Sourced from flask's changelog.

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776
Commits
  • 2c1b30d release version 3.1.2
  • 1292419 Update GitHub Actions workflow for artifact handling (#5795)
  • 4dd52ca Update GitHub Actions workflow for artifact handling
  • 55c6255 update dev dependencies
  • d8259eb use Jinja name consistently
  • 38b4c1e refactor stream_with_context for async views (#5799)
  • 9822a03 refactor stream_with_context for async views
  • 49b7e7b security docs for TRUSTED_HOSTS (#5798)
  • b228ca3 security docs for TRUSTED_HOSTS
  • ff64079 update flask-talisman link
  • Additional commits viewable in compare view

Updates greenlet from 3.1.1 to 3.2.4

Changelog

Sourced from greenlet's changelog.

3.2.4 (2025-08-07)

.. note::

The 3.2.x series will be the last to support Python 3.9.

  • Various small build/test changes for less common configurations (e.g., building CPython with assertions enabled but NOT debugging), contributed by Michał Górny. Note that while greenlet will BUILD in a free-threaded Python, it will cause the GIL to be allocated and used, and memory may leak. Also note that these configurations are not tested by this project's CI.
  • Fix an assertion error on debug builds of Python 3.14 when using the experimental JIT. See :issue:460 <https://github.com/python-greenlet/greenlet/issues/460>_.

3.2.3 (2025-06-05)

  • Make greenlet build and run on Python 3.14 beta 2 on Windows amd64.
  • Potentially fix build on NetBSD/sparc64. See PR 447 <https://github.com/python-greenlet/greenlet/pull/447>_.

3.2.2 (2025-05-09)

  • Make greenlet build and run on Python 3.14 beta 1. It will not run on earlier versions of 3.14; it should run on subsequent versions. See PR 445 <https://github.com/python-greenlet/greenlet/pull/445>_.

3.2.1 (2025-04-22)

  • Fix a crash regression for Riscv64. See issue 443 <https://github.com/python-greenlet/greenlet/issues/443>_.

3.2.0 (2025-04-15)

  • Remove support for Python 3.7 and 3.8.
  • Add untested, community supported implementation for RiscV 32. See PR 438 <https://github.com/python-greenlet/greenlet/pull/439>_.
  • Make greenlet build and run on Python 3.14a7. It will not build on earlier 3.14 alpha releases, and may not build on later 3.14 releases.

... (truncated)

Commits
  • 65f8da8 Preparing release 3.2.4
  • b2c6559 Update CHANGES for release.
  • b2aa1aa Merge pull request #462 from python-greenlet/issue460
  • a1990d8 Python3.14/JIT: Save and restore the PyThreadState current_executor object.
  • 68af251 Py3.14 w/JIT: Fix leakchecks.
  • 74a65bd Various free-threaded fixes; bump tested Python version.
  • e3e2953 Merge pull request #459 from mgorny/py314-debug-build-failure
  • bdb5f44 Merge pull request #456 from mgorny/setuptools-test-dep
  • b288f43 Merge pull request #457 from mgorny/fix-assert-test-skips
  • 739cc55 Fix py312+ crash test skips to correctly check for assertions
  • Additional commits viewable in compare view

Updates httplib2 from 0.22.0 to 0.31.0

Changelog

Sourced from httplib2's changelog.

0.31.0

https: avoid costly load_verify_locations when SSL certificate validation is disabled httplib2/httplib2#249

0.30.2

No changes in library. Fix automatic pypi release from CI.

0.30.1

restore socks proxy support, was broken in 0.30.0 httplib2/httplib2#251

0.30.0

BREAKING CHANGE! Python support 3.7+ only

https: Do not rely on ssl.PROTOCOL_TLS, which has been deprecated in Python3.10 httplib2/httplib2#243

Commits
  • 26cfea5 v0.31.0 release
  • cbd3d21 chore: CI use trusted publishing
  • 147d7d5 https: avoid costly load_verify_locations when SSL certificate validation is ...
  • d9278ce v0.30.2 release
  • c4b7405 chore: CI cache update
  • 6cfe2e6 v0.30.1 release
  • 4b8777f chore: update pytest plugins
  • 2a97a86 restore socks proxy support, was broken in py2/3 merge
  • ddfbfd5 v0.30.0 release
  • 8cc0d54 chore: requirements-test bump cryptography, remove future
  • Additional commits viewable in compare view

Updates idna from 3.10 to 3.11

Changelog

Sourced from idna's changelog.

3.11 (2025-10-12)

  • Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.
  • Add support for Python 3.14, lowest supported version is Python 3.8.
  • Various updates to packaging, including PEP 740 support.
Commits
  • ad949ee Release v3.11
  • cae4ba7 Second release candidate for 3.11
  • 8adb305 Add space in RST link
  • 74cb2b6 Release candidate for 3.11
  • 05dab09 Format idna-data with ruff
  • 90eac78 Apply ruff formatting
  • a31ce7e Remove errant test vectors
  • 81f0333 Omit vectors known to be broken in test suite
  • a0f3257 Merge branch 'master' into unicode-16-uts46-changes
  • 38d9886 Remove extra UTS46 test vector
  • Additional commits viewable in compare view

Updates importlib-metadata from 8.6.1 to 8.7.0

Changelog

Sourced from importlib-metadata's changelog.

v8.7.0

Features

  • .metadata() (and Distribution.metadata) can now return None if the metadata directory exists but not metadata file is present. (#493)

Bugfixes

  • Raise consistent ValueError for invalid EntryPoint.value (#518)
Commits
  • 708dff4 Finalize
  • b3065f0 Merge pull request #519 from python/bugfix/493-metadata-missing
  • e4351c2 Add a new test capturing the new expectation.
  • 5a65705 Refactor the casting into a wrapper for brevity and to document its purpose.
  • 0830c39 Add news fragment.
  • 22bb567 Fix type errors where metadata could be None.
  • 57f31d7 Allow metadata to return None when there is no metadata present.
  • b9c4be4 Merge pull request #518 from python/bugfix/488-bad-ep-value
  • 9f8af01 Prefer a cached property, as the property is likely to be retrieved at least ...
  • f179e28 Also raise ValueError on construction if the value is invalid.
  • Additional commits viewable in compare view

Updates markupsafe from 3.0.2 to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

  • __version__ raises DeprecationWarning instead of UserWarning. #487
  • Adopt multi-phase initialization PEP 489 for the C extension. #494
  • Build Windows ARM64 wheels. #485
  • Build Python 3.14 wheels. #503
  • Build riscv64 wheels. #505
Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

  • __version__ raises DeprecationWarning instead of UserWarning. :issue:487
  • Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494
  • Build Windows ARM64 wheels. :issue:485
  • Build Python 3.14 wheels. :issue:503
  • Build riscv64 wheels. :issue:505
Commits

Updates networkx from 3.4.2 to 3.6

Release notes

Sourced from networkx's releases.

NetworkX 3.6

networkx 3.6

We're happy to announce the release of networkx 3.6!

New Features

  • ENH: add normalize option for subgraph_centrality and its _exp version (#8340).

API Changes

  • Replace random_lobster with random_lobster_graph (#8067).
  • Replace maybe_regular_expander with maybe_regular_expander_graph (#8050).
  • Rm networkx.algorithms.threshold.swap_d (#8213).
  • Expire deprecation of compute_v_structures (#8281).
  • Rm unused dissuade_hubs kwarg from forceatlas2 (#8293).
  • Expire deprecation of link kwarg in node_link fns (#8282).
  • DEP: Deprecate metric_closure (#8304).

Enhancements

  • Improve error message for removed random_tree function (#8105).
  • Update approx current_flow betweenness to use k directly (#8007).
  • Proposal: update semantics for nonisomorphic trees with order 0 or 1 (#8083).
  • SCC benchmarks and use of G._adj in Tarjan algorithm (#8064).
  • Performance improvement and tests for edges_equal (#8077).
  • optimise is_reachable() (#8112).
  • Optimise harmonic centrality (#8158).
  • feat(drawing): add missing connection styles in draw_networkx_edge_labels and display (#8108).
  • Optimizing Dijkstra's paths to target (~50x faster for graphs with multiple-hops shortest path) (

Bumps the all-dependencies group with 42 updates in the /api directory:

| Package | From | To |
| --- | --- | --- |
| [arrow](https://github.com/arrow-py/arrow) | `1.3.0` | `1.4.0` |
| [boto3](https://github.com/boto/boto3) | `1.37.24` | `1.42.0` |
| [botocore](https://github.com/boto/botocore) | `1.37.24` | `1.41.6` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2025.11.12` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.1` | `3.4.4` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.3.1` |
| [flask](https://github.com/pallets/flask) | `3.1.1` | `3.1.2` |
| [greenlet](https://github.com/python-greenlet/greenlet) | `3.1.1` | `3.2.4` |
| [httplib2](https://github.com/httplib2/httplib2) | `0.22.0` | `0.31.0` |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.11` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.6.1` | `8.7.0` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [networkx](https://github.com/networkx/networkx) | `3.4.2` | `3.6` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.11.1` | `2.12.5` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.33.0` | `2.41.5` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.2.3` | `3.2.5` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.11.4` | `0.16.0` |
| [sendgrid](https://github.com/sendgrid/sendgrid-python) | `6.11.0` | `6.12.5` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.40` | `2.0.44` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.12.2` | `4.15.0` |
| [werkzeug](https://github.com/pallets/werkzeug) | `3.1.3` | `3.1.4` |
| [zipp](https://github.com/jaraco/zipp) | `3.21.0` | `3.23.0` |
| [pip](https://github.com/pypa/pip) | `25.2` | `25.3` |
| [pip-tools](https://github.com/jazzband/pip-tools) | `7.4.1` | `7.5.2` |
| [cachetools](https://github.com/tkem/cachetools) | `5.5.2` | `6.2.2` |
| [cfgv](https://github.com/asottile/cfgv) | `3.4.0` | `3.5.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.8.0` | `7.12.0` |
| [distlib](https://github.com/pypa/distlib) | `0.3.9` | `0.4.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.18.0` | `3.20.0` |
| [identify](https://github.com/pre-commit/identify) | `2.6.9` | `2.6.15` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.1.0` | `2.3.0` |
| [packaging](https://github.com/pypa/packaging) | `24.2` | `25.0` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.3.7` | `4.5.0` |
| [pluggy](https://github.com/pytest-dev/pluggy) | `1.5.0` | `1.6.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.5.0` |
| [pyproject-api](https://github.com/tox-dev/pyproject-api) | `1.9.0` | `1.10.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.5` | `9.0.1` |
| [tox](https://github.com/tox-dev/tox) | `4.25.0` | `4.32.0` |
| [virtualenv](https://github.com/pypa/virtualenv) | `20.30.0` | `20.35.4` |



Updates `arrow` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/arrow-py/arrow/releases)
- [Changelog](https://github.com/arrow-py/arrow/blob/master/CHANGELOG.rst)
- [Commits](arrow-py/arrow@1.3.0...1.4.0)

Updates `boto3` from 1.37.24 to 1.42.0
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.37.24...1.42.0)

Updates `botocore` from 1.37.24 to 1.41.6
- [Commits](boto/botocore@1.37.24...1.41.6)

Updates `certifi` from 2025.1.31 to 2025.11.12
- [Commits](certifi/python-certifi@2025.01.31...2025.11.12)

Updates `charset-normalizer` from 3.4.1 to 3.4.4
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.1...3.4.4)

Updates `click` from 8.1.8 to 8.3.1
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.8...8.3.1)

Updates `flask` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.1...3.1.2)

Updates `greenlet` from 3.1.1 to 3.2.4
- [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst)
- [Commits](python-greenlet/greenlet@3.1.1...3.2.4)

Updates `httplib2` from 0.22.0 to 0.31.0
- [Changelog](https://github.com/httplib2/httplib2/blob/master/CHANGELOG)
- [Commits](httplib2/httplib2@v0.22.0...v0.31.0)

Updates `idna` from 3.10 to 3.11
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.10...v3.11)

Updates `importlib-metadata` from 8.6.1 to 8.7.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.6.1...v8.7.0)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `networkx` from 3.4.2 to 3.6
- [Release notes](https://github.com/networkx/networkx/releases)
- [Commits](networkx/networkx@networkx-3.4.2...networkx-3.6)

Updates `psycopg2-binary` from 2.9.10 to 2.9.11
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.10...2.9.11)

Updates `pydantic` from 2.11.1 to 2.12.5
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.11.1...v2.12.5)

Updates `pydantic-core` from 2.33.0 to 2.41.5
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.33.0...v2.41.5)

Updates `pyparsing` from 3.2.3 to 3.2.5
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.2.3...3.2.5)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `s3transfer` from 0.11.4 to 0.16.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.11.4...0.16.0)

Updates `sendgrid` from 6.11.0 to 6.12.5
- [Release notes](https://github.com/sendgrid/sendgrid-python/releases)
- [Changelog](https://github.com/sendgrid/sendgrid-python/blob/main/CHANGELOG.md)
- [Commits](sendgrid/sendgrid-python@6.11.0...6.12.5)

Updates `sqlalchemy` from 2.0.40 to 2.0.44
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `typing-extensions` from 4.12.2 to 4.15.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.12.2...4.15.0)

Updates `werkzeug` from 3.1.3 to 3.1.4
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.3...3.1.4)

Updates `zipp` from 3.21.0 to 3.23.0
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.21.0...v3.23.0)

Updates `pip` from 25.2 to 25.3
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@25.2...25.3)

Updates `pip-tools` from 7.4.1 to 7.5.2
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md)
- [Commits](jazzband/pip-tools@7.4.1...v7.5.2)

Updates `cachetools` from 5.5.2 to 6.2.2
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v5.5.2...v6.2.2)

Updates `cfgv` from 3.4.0 to 3.5.0
- [Commits](asottile/cfgv@v3.4.0...v3.5.0)

Updates `coverage` from 7.8.0 to 7.12.0
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.8.0...7.12.0)

Updates `distlib` from 0.3.9 to 0.4.0
- [Release notes](https://github.com/pypa/distlib/releases)
- [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst)
- [Commits](pypa/distlib@0.3.9...0.4.0)

Updates `filelock` from 3.18.0 to 3.20.0
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.18.0...3.20.0)

Updates `identify` from 2.6.9 to 2.6.15
- [Commits](pre-commit/identify@v2.6.9...v2.6.15)

Updates `iniconfig` from 2.1.0 to 2.3.0
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.1.0...v2.3.0)

Updates `packaging` from 24.2 to 25.0
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@24.2...25.0)

Updates `platformdirs` from 4.3.7 to 4.5.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst)
- [Commits](tox-dev/platformdirs@4.3.7...4.5.0)

Updates `pluggy` from 1.5.0 to 1.6.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.5.0...1.6.0)

Updates `pre-commit` from 4.2.0 to 4.5.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.5.0)

Updates `pyproject-api` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/tox-dev/pyproject-api/releases)
- [Commits](tox-dev/pyproject-api@1.9.0...1.10.0)

Updates `pytest` from 8.3.5 to 9.0.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.5...9.0.1)

Updates `tox` from 4.25.0 to 4.32.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.25.0...4.32.0)

Updates `virtualenv` from 20.30.0 to 20.35.4
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.30.0...20.35.4)

---
updated-dependencies:
- dependency-name: arrow
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: boto3
  dependency-version: 1.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: botocore
  dependency-version: 1.41.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: certifi
  dependency-version: 2025.11.12
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: click
  dependency-version: 8.3.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: flask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: greenlet
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: httplib2
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: idna
  dependency-version: '3.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: importlib-metadata
  dependency-version: 8.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: networkx
  dependency-version: '3.6'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: psycopg2-binary
  dependency-version: 2.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: pydantic
  dependency-version: 2.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pydantic-core
  dependency-version: 2.41.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pyparsing
  dependency-version: 3.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: s3transfer
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sendgrid
  dependency-version: 6.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sqlalchemy
  dependency-version: 2.0.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: typing-extensions
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: werkzeug
  dependency-version: 3.1.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: zipp
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pip
  dependency-version: '25.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pip-tools
  dependency-version: 7.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: cachetools
  dependency-version: 6.2.2
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: cfgv
  dependency-version: 3.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: coverage
  dependency-version: 7.12.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: distlib
  dependency-version: 0.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: filelock
  dependency-version: 3.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: identify
  dependency-version: 2.6.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: iniconfig
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: packaging
  dependency-version: '25.0'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: platformdirs
  dependency-version: 4.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pluggy
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pre-commit
  dependency-version: 4.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pyproject-api
  dependency-version: 1.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pytest
  dependency-version: 9.0.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: tox
  dependency-version: 4.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: virtualenv
  dependency-version: 20.35.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Dec 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant