Skip to content

Bump the patch-update group with 15 updates#21

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/patch-update-4ceeda0617
Open

Bump the patch-update group with 15 updates#21
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/patch-update-4ceeda0617

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the patch-update group with 15 updates:

Package From To
pyyaml 6.0.2 6.0.3
einops 0.8.0 0.8.2
charset-normalizer 3.4.0 3.4.9
contourpy 1.3.0 1.3.3
evaluate 0.4.3 0.4.6
fastrlock 0.8.2 0.8.3
httpcore 1.0.6 1.0.9
jinja2 3.1.4 3.1.6
markupsafe 3.0.2 3.0.3
mbstrdecoder 1.1.3 1.1.5
pyasn1 0.6.1 0.6.4
pytablewriter 1.2.0 1.2.1
tabledata 1.3.3 1.3.5
tcolorpy 0.1.6 0.1.7
timm 1.0.11 1.0.28

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

  • Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

  • yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)
Commits

Updates einops from 0.8.0 to 0.8.2

Release notes

Sourced from einops's releases.

v0.8.1 Multiple improvements

What's Changed

TLDR:

  • ellipsis is added to EinMix
  • tests moved into the package
  • devcontainer provided
  • added backend for pyTensor
  • niceties: citation, docs, fixed broken links
  • this did not require any changes in einops, but array API is supported by more libs these days, and einops can operate on them

PRs:

New Contributors

Full Changelog: arogozhnikov/einops@v0.8.0...v0.8.1

Commits

Updates charset-normalizer from 3.4.0 to 3.4.9

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.9

3.4.9 (2026-07-07)

Fixed

  • Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

Version 3.4.8

3.4.8 (2026-07-06)

Fixed

  • Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)
  • Unnecessary json import at runtime (#753)
  • Inverse capitalization not seen by noise detector (#731)

Changed

  • No longer holding a global cache for our noise / coherence measurements. Relax RSS memory usage.
  • Micro-optimizations in our noise / coherence measurements.
  • No longer using regex search by default for our preemptive charset mark algorithm.
  • Raised upperbound of setuptools to v83.
  • Raised upperbound of mypy(c) to v2.1.

Removed

  • Redundant UTF7 BOM marker (#730)

Version 3.4.7

3.4.7 (2026-04-02)

Changed

  • Pre-built optimized version using mypy[c] v1.20.
  • Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

  • Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

Version 3.4.6

3.4.6 (2026-03-15)

Changed

  • Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...) in favor of feed_info(...).
  • Raised upper bound for mypy[c] to 1.20, for our optimized version.
  • Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

  • Edge case where noise difference between two candidates can be almost insignificant. (#672)
  • CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

  • Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

... (truncated)

Changelog

Sourced from charset-normalizer's changelog.

3.4.9 (2026-07-07)

Fixed

  • Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

3.4.8 (2026-07-06)

Fixed

  • Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)
  • Unnecessary json import at runtime (#753)
  • Inverse capitalization not seen by noise detector (#731)

Changed

  • No longer holding a global cache for our noise / coherence measurements. Relax RSS memory usage.
  • Micro-optimizations in our noise / coherence measurements.
  • No longer using regex search by default for our preemptive charset mark algorithm.
  • Raised upperbound of setuptools to v83.
  • Raised upperbound of mypy(c) to v2.1.

Removed

  • Redundant UTF7 BOM marker (#730)

3.4.7 (2026-04-02)

Changed

  • Pre-built optimized version using mypy[c] v1.20.
  • Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

  • Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

3.4.6 (2026-03-15)

Changed

  • Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...) in favor of feed_info(...).
  • Raised upper bound for mypy[c] to 1.20, for our optimized version.
  • Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

  • Edge case where noise difference between two candidates can be almost insignificant. (#672)
  • CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

  • Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

3.4.5 (2026-03-06)

Changed

... (truncated)

Commits
  • cc68407 Merge pull request #772 from jawah/fix-regression-fallback-path
  • 152b923 chore: release 3.4.9
  • 2bc2607 fix: unicodedecodeerror in fallback path
  • be252d7 chore(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#767)
  • 71c7bdd chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 (#768)
  • aeea391 chore(deps): bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#758)
  • a6f8feb Merge pull request #770 from jawah/unblock-ci
  • 528e16c chore: add osv-scanner.toml
  • 5993498 chore: ast_serialize musl missing prebuilt riscv,s390x,ppc64le
  • aa2ddd8 Release 3.4.8 (#766)
  • Additional commits viewable in compare view

Updates contourpy from 1.3.0 to 1.3.3

Release notes

Sourced from contourpy's releases.

Version 1.3.3

ContourPy 1.3.3 is a compatibility release adding support for CPython 3.14 and Windows on ARM.

This release supports CPython 3.11 to 3.14, and PyPy 3.11.

Compatibility:

Code improvements:

  • Update type annotations for bokeh 3.7.3 (#475)
  • Support type annotation changes in numpy 2.3.0 (#480)

Build, testing and CI improvements:

  • Remove Python 3.13.3 pin (#487)
  • CI install numpy 2.3.2 wheels from PyPI for Python 3.14 and Windows ARM (#488)

Version 1.3.2

ContourPy 1.3.2 is a minor release to support changes in type annotations in Bokeh >= 3.7 and add support for PyPy 3.11.

This release supports CPython 3.10 to 3.13, and PyPy 3.10 to 3.11.

Compatibility:

  • Fix type annotations for Bokeh >= 3.7 (#471`

Build, testing and CI improvements:

  • Test on CPython 3.14 (#470`)
  • Test and build wheels for PyPy 3.11 (#464)
  • Test PyPy 3.10 on all 3 major OSes (#465)
  • Use ubuntu-24.04-arm runners (#459)

Version 1.3.1

ContourPy 1.3.1 is a compatibility release to support changes in bokeh, meson-python and pybind11.

This release supports Python 3.10 to 3.13.

Compatibility:

  • Drop support for Python 3.9 (#435)
  • Update to bokeh 3.6.0 (#444)
  • Update minimum pybind11 to 2.13.2 (#451)
  • Read meson-python version in recommended way (#452)

Code improvements:

... (truncated)

Changelog

Sourced from contourpy's changelog.

v1.3.3 (2025-07-26)

ContourPy 1.3.3 is a compatibility release adding support for CPython 3.14 and Windows on ARM.

This release supports CPython 3.11 to 3.14, and PyPy 3.11.

Compatibility:

Code improvements:

  • Update type annotations for bokeh 3.7.3 (#475)
  • Support type annotation changes in numpy 2.3.0 (#480)

Build, testing and CI improvements:

  • Remove Python 3.13.3 pin (#487)
  • CI install numpy 2.3.2 wheels from PyPI for Python 3.14 and Windows ARM (#488)

v1.3.2 (2025-04-15)

ContourPy 1.3.2 is a minor release to support changes in type annotations in Bokeh >= 3.7 and add support for PyPy 3.11.

This release supports CPython 3.10 to 3.13, and PyPy 3.10 to 3.11.

Compatibility:

  • Fix type annotations for Bokeh >= 3.7 (#471)

Build, testing and CI improvements:

  • Test on CPython 3.14 (#470)
  • Test and build wheels for PyPy 3.11 (#464)
  • Test PyPy 3.10 on all 3 major OSes (#465)
  • Use ubuntu-24.04-arm runners (#459)

v1.3.1 (2024-11-12)

ContourPy 1.3.1 is a compatibility release to support changes in bokeh, meson-python and pybind11.

This release supports Python 3.10 to 3.13.

Compatibility:

  • Drop support for Python 3.9 (#435)

... (truncated)

Commits

Updates evaluate from 0.4.3 to 0.4.6

Release notes

Sourced from evaluate's releases.

v0.4.6

What's Changed

New Contributors

Full Changelog: huggingface/evaluate@v0.4.5...v0.4.6

v0.4.5

What's Changed

Full Changelog: huggingface/evaluate@v0.4.4...v0.4.5

v0.4.4

Bug fixes

Other changes

New Contributors

Full Changelog: huggingface/evaluate@v0.4.3...v0.4.4

Commits

Updates fastrlock from 0.8.2 to 0.8.3

Changelog

Sourced from fastrlock's changelog.

0.8.3 (2024-12-17)

  • Rebuilt with Cython 3.0.11 to add Python 3.13 support.
Commits
  • 841e3de Prepare release of 0.8.3.
  • f89f0f0 Remove official Py2 support but keep building Linux wheels for it.
  • 375d793 Build: Remove Py3.7 which is EOL.
  • a799395 Build: Clean up artefact uploading for tool version v4.
  • 3f52f73 Build: Clean up artefact uploading. for tool version v4.
  • dd29298 Build: Use more recent and hopefully working macOS deployment target version.
  • 0043caa Improve function signatures for exception handling in recent Cython versions.
  • 5c74fe5 Build: Update targets, tools and dependencies.
  • 7a02e09 CI: Avoid duplicate builds.
  • 984bc48 CI: Split AArch64 targets to parallelise their build.
  • Additional commits viewable in compare view

Updates httpcore from 1.0.6 to 1.0.9

Release notes

Sourced from httpcore's releases.

Version 1.0.9 (April 24th, 2025)

Version 1.0.8 (April 11th, 2025)

  • Fix AttributeError when importing on Python 3.14. (#1005)

Version 1.0.7 (November 15th, 2024)

  • Support proxy=… configuration on ConnectionPool(). (#974)
Changelog

Sourced from httpcore's changelog.

Version 1.0.9 (April 24th, 2025)

Version 1.0.8 (April 11th, 2025)

  • Fix AttributeError when importing on Python 3.14. (#1005)

Version 1.0.7 (November 15th, 2024)

  • Support proxy=… configuration on ConnectionPool(). (#974)
Commits

Updates jinja2 from 3.1.4 to 3.1.6

Release notes

Sourced from jinja2's releases.

3.1.6

This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. GHSA-cpwx-vrp4-4pq7

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. #2032
  • Calling sync render for an async template uses asyncio.run. #1952
  • Avoid unclosed auto_aiter warnings. #1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. #1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. #1960
  • The runtime uses the correct concat function for the current environment when calling block references. #1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
  • |int filter handles OverflowError from scientific notation. #1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025
  • Fix copy/pickle support for the internal missing object. #2027
  • Environment.overlay(enable_async) is applied correctly. #2061
  • The error message from FileSystemLoader includes the paths that were searched. #1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705
  • Improve annotations for methods returning copies. #1880
  • urlize does not add mailto: to values like @a@b. #1870
  • Tests decorated with @pass_context can be used with the |select filter. #1624
  • Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413
  • Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253
Changelog

Sourced from jinja2's changelog.

Version 3.1.6

Released 2025-03-05

  • The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

Version 3.1.5

Released 2024-12-21

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h
  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699
  • Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032
  • Calling sync render for an async template uses asyncio.run. :pr:1952
  • Avoid unclosed auto_aiter warnings. :pr:1960
  • Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960
  • Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960
  • Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960
  • The runtime uses the correct concat function for the current environment when calling block references. :issue:1701
  • Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781
  • |int filter handles OverflowError from scientific notation. :issue:1921
  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021
  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025
  • Fix copy/pickle support for the internal missing object. :issue:2027
  • Environment.overlay(enable_async) is applied correctly. :pr:2061
  • The error message from FileSystemLoader includes the paths that were searched. :issue:1661
  • PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705
  • Improve annotations for methods returning copies. :pr:1880
  • urlize does not add mailto: to values like @a@b. :pr:1870

... (truncated)

Commits

Updates markupsafe from 3.0.2 to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

  • __version__ raises DeprecationWarning instead of UserWarning. #487
  • Adopt multi-phase initialization PEP 489 for the C extension. #494
  • Build Windows ARM64 wheels. #485
  • Build Python 3.14 wheels. #503
  • Build riscv64 wheels. #505
Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

  • __version__ raises DeprecationWarning instead of UserWarning. :issue:487
  • Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494
  • Build Windows ARM64 wheels. :issue:485
  • Build Python 3.14 wheels. :issue:503
  • Build riscv64 wheels. :issue:505
Commits

Updates mbstrdecoder from 1.1.3 to 1.1.5

Release notes

Sourced from mbstrdecoder's releases.

v1.1.5

What's Changed

Full Changelog: thombashi/mbstrdecoder@v1.1.4...v1.1.5

v1.1.4

  • Fix UnicodeDecodeError exception sending correctly
  • Add GitHub Actions workflow for building, publishing, and signing packages to PyPI
  • Remove deprecated tests_require from setup.py
  • Modify to use setuptools_scm for package build
  • Add support for Python 3.13
  • Drop support for Python 3.7/3.8
  • Add metadata attributes to the mbstrdecoder module
  • Improve type annotations

Full Changelog: thombashi/mbstrdecoder@v1.1.3...v1.1.4

Commits
  • 844a297 Bump version to 1.1.5
  • c36f1fc Merge pull request #16 from thombashi/support-py314-drop-py39
  • 8b2ddbf Drop support for Python 3.9 and add support for Python 3.14
  • c797333 Update chardet version constraint to allow versions below 7
  • 48661b8 Bump version to 1.1.4
  • 2424d5f Use Final for constants
  • b411aa9 Add GitHub Actions workflow for building, publishing, and signing packages to...
  • a0bf607 Rename lint and test workflow to CI
  • 060d424 Update lint and test workflow to ignore specific paths for push and pull requ...
  • f250349 Add permissions section to lint and test workflow
  • Additional commits viewable in compare view

Updates pyasn1 from 0.6.1 to 0.6.4

Release notes

Sourced from pyasn1's releases.

Release 0.6.4

This is a security release.

  • CVE-2026-59885 (GHSA-8ppf-4f7h-5ppj): Fixed quadratic time complexity in the OBJECT IDENTIFIER and RELATIVE-OID decoders. A small crafted substrate encoding many arcs could consume excessive CPU.
  • CVE-2026-59884 (GHSA-m4p7-r5rc-7g4j): Limited BER long-form tag IDs to 20 octets (140 bits). Unbounded tag IDs allowed a crafted substrate to consume excessive CPU and memory.
  • CVE-2026-59886 (GHSA-hm4w-wwcw-mr6r): Fixed excessive memory and CPU consumption in Real.__float__() for values with large base-10 exponents.
  • Pinned PyPI publish GitHub Action to an immutable commit.

All changes are noted in the CHANGELOG.

Release 0.6.3

It's a minor release.

  • Added nesting depth limit to ASN.1 decoder to prevent stack overflow from deeply nested structures (CVE-2026-30922).
  • Fixed OverflowError from oversized BER length field.
  • Fixed DeprecationWarning stacklevel for deprecated attributes.
  • Fixed asDateTime incorrect fractional seconds parsing.

All changes are noted in the CHANGELOG.

Release 0.6.2

It's a minor release.

  • Fixed continuation octet limits in OID/RELATIVE-OID decoder (CVE-2026-23490).
  • Added support for Python 3.14.
  • Added SECURITY.md policy.
  • Migrated to pyproject.toml packaging.

All changes are noted ...

Description has been truncated

@dependabot
Bump the patch-update group with 15 updates
dae3aa1 
Bumps the patch-update group with 15 updates:

| Package | From | To |
| --- | --- | --- |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [einops](https://github.com/arogozhnikov/einops) | `0.8.0` | `0.8.2` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.0` | `3.4.9` |
| [contourpy](https://github.com/contourpy/contourpy) | `1.3.0` | `1.3.3` |
| [evaluate](https://github.com/huggingface/evaluate) | `0.4.3` | `0.4.6` |
| [fastrlock](https://github.com/scoder/fastrlock) | `0.8.2` | `0.8.3` |
| [httpcore](https://github.com/encode/httpcore) | `1.0.6` | `1.0.9` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.6` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [mbstrdecoder](https://github.com/thombashi/mbstrdecoder) | `1.1.3` | `1.1.5` |
| [pyasn1](https://github.com/pyasn1/pyasn1) | `0.6.1` | `0.6.4` |
| [pytablewriter](https://github.com/thombashi/pytablewriter) | `1.2.0` | `1.2.1` |
| [tabledata](https://github.com/thombashi/tabledata) | `1.3.3` | `1.3.5` |
| [tcolorpy](https://github.com/thombashi/tcolorpy) | `0.1.6` | `0.1.7` |
| [timm](https://github.com/huggingface/pytorch-image-models) | `1.0.11` | `1.0.28` |


Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `einops` from 0.8.0 to 0.8.2
- [Release notes](https://github.com/arogozhnikov/einops/releases)
- [Commits](arogozhnikov/einops@v0.8.0...v0.8.2)

Updates `charset-normalizer` from 3.4.0 to 3.4.9
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.0...3.4.9)

Updates `contourpy` from 1.3.0 to 1.3.3
- [Release notes](https://github.com/contourpy/contourpy/releases)
- [Changelog](https://github.com/contourpy/contourpy/blob/main/docs/changelog.md)
- [Commits](contourpy/contourpy@v1.3.0...v1.3.3)

Updates `evaluate` from 0.4.3 to 0.4.6
- [Release notes](https://github.com/huggingface/evaluate/releases)
- [Commits](huggingface/evaluate@v0.4.3...v0.4.6)

Updates `fastrlock` from 0.8.2 to 0.8.3
- [Release notes](https://github.com/scoder/fastrlock/releases)
- [Changelog](https://github.com/scoder/fastrlock/blob/master/CHANGES.rst)
- [Commits](scoder/fastrlock@v0.8.2...v0.8.3)

Updates `httpcore` from 1.0.6 to 1.0.9
- [Release notes](https://github.com/encode/httpcore/releases)
- [Changelog](https://github.com/encode/httpcore/blob/master/CHANGELOG.md)
- [Commits](encode/httpcore@1.0.6...1.0.9)

Updates `jinja2` from 3.1.4 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.4...3.1.6)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `mbstrdecoder` from 1.1.3 to 1.1.5
- [Release notes](https://github.com/thombashi/mbstrdecoder/releases)
- [Commits](thombashi/mbstrdecoder@v1.1.3...v1.1.5)

Updates `pyasn1` from 0.6.1 to 0.6.4
- [Release notes](https://github.com/pyasn1/pyasn1/releases)
- [Changelog](https://github.com/pyasn1/pyasn1/blob/main/CHANGES.rst)
- [Commits](pyasn1/pyasn1@v0.6.1...v0.6.4)

Updates `pytablewriter` from 1.2.0 to 1.2.1
- [Release notes](https://github.com/thombashi/pytablewriter/releases)
- [Changelog](https://github.com/thombashi/pytablewriter/blob/master/CHANGELOG.md)
- [Commits](thombashi/pytablewriter@v1.2.0...v1.2.1)

Updates `tabledata` from 1.3.3 to 1.3.5
- [Release notes](https://github.com/thombashi/tabledata/releases)
- [Commits](thombashi/tabledata@v1.3.3...v1.3.5)

Updates `tcolorpy` from 0.1.6 to 0.1.7
- [Release notes](https://github.com/thombashi/tcolorpy/releases)
- [Changelog](https://github.com/thombashi/tcolorpy/blob/master/CHANGELOG.md)
- [Commits](thombashi/tcolorpy@v0.1.6...v0.1.7)

Updates `timm` from 1.0.11 to 1.0.28
- [Release notes](https://github.com/huggingface/pytorch-image-models/releases)
- [Commits](huggingface/pytorch-image-models@v1.0.11...v1.0.28)

---
updated-dependencies:
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: einops
  dependency-version: 0.8.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: charset-normalizer
  dependency-version: 3.4.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: contourpy
  dependency-version: 1.3.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: evaluate
  dependency-version: 0.4.6
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: fastrlock
  dependency-version: 0.8.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: httpcore
  dependency-version: 1.0.9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: mbstrdecoder
  dependency-version: 1.1.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: pyasn1
  dependency-version: 0.6.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: pytablewriter
  dependency-version: 1.2.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: tabledata
  dependency-version: 1.3.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: tcolorpy
  dependency-version: 0.1.7
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: patch-update
- dependency-name: timm
  dependency-version: 1.0.28
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: patch-update
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants