Bump the runtime group with 49 updates

[dependabot]

Bumps the runtime group with 49 updates:

Package	From	To
matplotlib	3.10.8	3.11.0
opencv-python-headless	4.11.0.86	4.13.0.92
scipy	1.15.2	1.17.1
requests	2.33.0	2.34.2
idna	3.15	3.18
pint	0.24.4	0.25.3
pyqt5-sip	12.17.0	12.18.0
archspec	0.2.5	0.2.6
build	1.4.4	1.5.0
certifi	2026.2.25	2026.5.20
charset-normalizer	3.4.6	3.4.7
click	8.3.3	8.4.1
conda-package-handling	2.4.0	2.5.0
conda-package-streaming	0.12.0	0.13.0
contourpy	1.3.2	1.3.3
dask	2026.3.0	2026.6.0
debugpy	1.8.20	1.8.21
decorator	5.2.1	5.3.1
fonttools	4.62.1	4.63.0
fsspec	2026.3.0	2026.4.0
ids-peak-common	1.2.0.3597	1.3.0.4212
ids-peak-ipl	1.17.1.0.6	1.17.2.0.7
ids-peak	1.14.0.0.7	1.15.0.0.8
improv	0.0.1	0.2.2
jedi	0.19.2	0.20.0
jsonpointer	3.0.0	3.1.1
jupyter-client	8.8.0	8.9.1
markdown-it-py	4.0.0	4.2.0
matplotlib-inline	0.2.1	0.2.2
msgpack	1.1.2	1.2.0
networkx	3.4.2	3.6.1
packaging	26.0	26.2
parso	0.8.6	0.8.7
platformdirs	4.9.4	4.10.0
pydantic-settings	2.14.0	2.14.1
pydantic	2.13.3	2.13.4
pydantic-core	2.46.3	2.47.0
pytz	2026.1.post1	2026.2
ruamel-yaml	0.18.17	0.19.1
scikit-image	0.25.2	0.26.0
superqt	0.8.1	0.8.2
tornado	6.5.5	6.5.7
tqdm	4.67.3	4.68.2
traitlets	5.14.3	5.15.1
typer	0.24.2	0.26.7
tzdata	2026.1	2026.2
vispy	0.16.1	0.16.2
wcwidth	0.6.0	0.8.1
wrapt	2.1.2	2.2.1

Updates matplotlib from 3.10.8 to 3.11.0

Release notes

Sourced from matplotlib's releases.

REL: v3.11.0

The largest change within this release is a complete overhaul of text and font processing. Through the use of libraqm, HarfBuzz, SheenBidi, and an updated release of FreeType, all text should now support modern font features, enabling full internationalization in all languages. Not all features of these libraries are supported yet, but we expect this work to enable further improvements in an easier manner.

Outside of text handling, there are several improvements to 3D Axes, performance, new accessible colour sequences, flexible figure management, and more. See the release notes for more information.

REL: v3.11.0rc2

This is the second release candidate for the meso release 3.11.0.

This release candidate fixes some problems with downstream packages, removes some missed deprecations, and corrects some additional minor bugs.

REL: v3.11.0rc1

After an extended development stretch, we are pleased to announce the first release candidate of Matplotlib 3.11.0.

The largest change within this release is a complete overhaul of text and font processing. Through the use of libraqm, HarfBuzz, SheenBidi, and an updated release of FreeType, all text should now support modern font features, enabling full internationalization in all languages. Not all features of these libraries are supported yet, but we expect this work to enable further improvements in an easier manner. Due to the update to the font rendering stack, we cannot guarantee that text will be bit-for-bit perfect with previous releases, so if you are using Matplotlib for testing, it may be necessary to introduce/raise a tolerance within your tests.

Outside of text handling, there are several improvements to 3D Axes, performance, new accessible colour sequences, flexible figure management, and more. Final release notes are still being curated, but you may browse the list of new features, API changes, and all issues/pull requests on the milestone.

As a note for downstream packagers, the font libraries have only been tested against the versions bundled with the wheels. It may be possible to expand the range of requirements, or that a requirement is too broad. Please report any issues you have building against external dependencies.

v3.10.9

This is a micro release of the v3.10.x series. Highlights of this release include:

• Various minor bug and doc fixes
• Security hardening validation of cyclers - Removing eval usage
• Security hardening in Latex and PS calls - Removing shell escapes

Commits

• 69c7534 REL: v3.11.0
• b7d912b DOC: Set 3.11 as preferred stable release
• 7c3d502 Update Security Policy for 3.11
• 964e73d DOC: Prepare GitHub stats for 3.11 final
• bfa2633 Bump font manager version to final release
• d0603b2 Merge pull request #31873 from meeseeksmachine/auto-backport-of-pr-31706-on-v...
• edf5ebc Backport PR #31706: Fix clabel manual index
• c0e80b7 Merge pull request #31872 from meeseeksmachine/auto-backport-of-pr-31868-on-v...
• 2a14854 Backport PR #31868: DOC: Move errorbar examples to the statistics sections
• ea43d96 Merge pull request #31871 from meeseeksmachine/auto-backport-of-pr-31870-on-v...
• Additional commits viewable in compare view

Updates opencv-python-headless from 4.11.0.86 to 4.13.0.92

Release notes

Sourced from opencv-python-headless's releases.

4.13.0.92

Follow up release for 4.13.0 with X server dependency fix. See #28438 for details.

4.13.0.90

Complete OpenCV 4.13.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4130

Python specific:

• Manylinux 2_28 support, Numpy 2.4 support, Python 3.14 support
• Tuned Python bindings for logging #27812
• Marked Feature2D.detectAndCompute mask as optional in Python type stubs #27544
• Marked distCoeffs/R/D as optional in calib3d functions #27564
• Added DLPACK support #27581, #27861
• Fixed memory leaks in pybindings #27738
• Add PathLike type hints for args annotated with CV_WRAP_FILE_PATH #27767
• Fixed memory leak in pyopencv_to for path-like objects #28047
• Tunned Python bindings: use export_name as resolved typename for AliasTypeNode #27997
• python: fix pytest-cov false warnings by using compile() with full file path in exec_file_wrapper #28093
• Fixed python scalar typing issues #27620
• Fixed bug in ifdef state machine in header parser for bindings #27393
• Wrap GridType field in cv::findCirclesGrid parameters structure #27689

4.12.0.88

Complete OpenCV 4.12.0 changelog: https://github.com/opencv/opencv/wiki/OpenCV-Change-Logs#version4120

Python:

• Added libavif to the package and corresponding image format support on Linux and Mac OS. Windows is in progress.
• Enabled GIF support by default.
• Updated Numpy dependency rules. Packages for Python 3.9+ are built with Numpy 2.x. Packages for older Python version are built with Numpy 1.x.
• Improved libjpeg-turbo performance in Windows builds (added NASM and assembly branches).
• Made DNN, FLANN, G-API modules optional during the package build (bindings generation and typing).

Commits

• See full diff in compare view

Updates scipy from 1.15.2 to 1.17.1

Release notes

Sourced from scipy's releases.

SciPy 1.17.1 Release Notes

SciPy 1.17.1 is a bug-fix release with no new features compared to 1.17.0.

Authors

• Name (commits)
• Evgeni Burovski (5)
• Lucas Colley (1)
• Christoph Gohlke (1)
• Ralf Gommers (6)
• Matt Haberland (5)
• Matthias Koeppe (1)
• Nick ODell (1)
• Ilhan Polat (10)
• Tyler Reddy (44)
• Martin Schuck (3)
• Dan Schult (3)
• stratakis (1) +
• ਗਗਨਦੀਪ ਸਿੰਘ (Gagandeep Singh) (1)

A total of 13 people contributed to this release. People with a "+" by their names contributed a patch for the first time. This list of names is automatically generated, and may not be fully complete.

Complete issue list, PR list, and release asset hashes are available in the associated README.txt.

SciPy 1.17.0 Release Notes

SciPy 1.17.0 is the culmination of 6 months of hard work. It contains many new features, numerous bug-fixes, improved test coverage and better documentation. There have been a number of deprecations and API changes in this release, which are documented below. All users are encouraged to upgrade to this release, as there are a large number of bug-fixes and optimizations. Before upgrading, we recommend that users check that their own code does not use deprecated SciPy functionality (to do so, run your code with python -Wd and check for DeprecationWarning s). Our development attention will now shift to bug-fix releases on the 1.17.x branch, and on adding new features on the main branch.

This release requires Python 3.11-3.14 and NumPy 1.26.4 or greater.

Highlights of this release

• Many SciPy functions have gained native support for batching of N-dimensional array input and additional support for the array API standard. An overall

... (truncated)

Commits

• 527eb7f REL: 1.17.1 release commit [wheel build]
• f11663b Merge pull request #24584 from tylerjereddy/treddy_prep_1.17.1
• 2c49e68 DOC: PR 24584 revisions
• 400fa15 safely convert index dtypes to intc for csgraph and superLU
• 8c70404 MAINT: PR 24584 revisions [wheel build]
• 6dda8c1 BUG: PR 24584 revisions
• 4a187e5 DOC: PR 24584 revisions
• 463ee9f ENH: linalg/inv: re-enable overwrite_a for 2D inputs (#24442)
• df746ee BUG: linalg: restore dtypes in inv, solve, det
• 246bfee MAINT:optimize: Enable multi-phase init to DIRECT
• Additional commits viewable in compare view

Updates requests from 2.33.0 to 2.34.2

Release notes

Sourced from requests's releases.

v2.34.2

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2342-2026-05-14

v2.34.1

2.34.1 (2026-05-13)

Bugfixes

• Widened json input type from dict and list to Mapping and Sequence. (#7436)
• Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
• Response.reason moved from str | None to str to improve handling for users. (#7437)
• Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

New Contributors

• @​k223kim made their first contribution in psf/requests#7433

Full Changelog: https://github.com/psf/requests/blob/main/HISTORY.md#2341-2026-05-13

v2.34.0

2.34.0 (2026-05-11)

Announcements

• Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

  Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

• Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
• Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
• Requests added support for Python 3.14t. (#7419)

Bugfixes

• Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
• Requests no longer performs greedy matching on no_proxy domains. The

... (truncated)

Changelog

Sourced from requests's changelog.

2.34.2 (2026-05-14)

• Moved headers input type back to Mapping to avoid invariance issues with MutableMapping and inferred dict types. Users calling Request.headers.update() may need to narrow typing in their code. (#7441)

2.34.1 (2026-05-13)

Bugfixes

• Widened json input type from dict and list to Mapping and Sequence. (#7436)
• Changed headers input type to MutableMapping and removed None from Request.headers typing to improve handling for users. (#7431)
• Response.reason moved from str | None to str to improve handling for users. (#7437)
• Fixed a bug where some bodies with custom __getattr__ implementations weren't being properly detected as Iterables. (#7433)

2.34.0 (2026-05-11)

Announcements

• Requests 2.34.0 introduces inline types, replacing those provided by typeshed. Public API types should be fully compatible with mypy, pyright, and ty. We believe types are comprehensive but if you find issues, please report them to the pinned tracking issue.

  Special thanks to @​bastimeyer, @​cthoyt, @​edgarrmondragon, and @​srittau for helping review and test the types ahead of the release. (#7272)

Improvements

• Digest Auth hashing algorithms have added usedforsecurity=False to clarify security considerations. (#7310)
• Requests added support for Python 3.15 based on beta1. Downstream projects should be able to start testing prior to its release in October. (#7422)
• Requests added support for Python 3.14t. (#7419)

Bugfixes

• Response.history no longer contains a reference to itself, preventing accidental looping when traversing the history list. (#7328)
• Requests no longer performs greedy matching on no_proxy domains. The proxy_bypass implementation has been updated with CPython's fix from bpo-39057. (#7427)
• Requests no longer incorrectly strips duplicate leading slashes in URI paths. This should address user issues with specific presigned URLs. Note the full fix requires urllib3 2.7.0+. (#7315)

... (truncated)

Commits

• 6e83187 v2.34.2
• 84d10f0 Move Request.headers back to Mapping (#7441)
• b7b549b v2.34.1
• e511bc7 Fix mutability issues with headers input types (#7431)
• 5691f59 Update JsonType containers to read-based collections (#7436)
• 2144213 Constrain Response.reason to str (#7437)
• 6404f34 Fix prepare_body stream detection for __getattr__-based file wrappers (#7...
• 0b401c7 v2.34.0
• 86b378d Align Session.get parameters with requests.get (#7429)
• a4f9a59 Port bpo-39057 to Requests (#7427)
• Additional commits viewable in compare view

Updates idna from 3.15 to 3.18

Changelog

Sourced from idna's changelog.

3.18 (2026-06-02)

• When decoding a domain, add a display argument that will pass through invalid labels rather than raising an exception.

3.17 (2026-05-28)

• Substantial 75% reduction in memory usage through new data structures and some optimization in processing speed.
• Added a general 1024-character input length cap to the public validation, conversion, and codec entry points. This is well above any legitimate domain or label and guards against pathological inputs.

3.16 (2026-05-22)

• Add a command-line interface (python -m idna, also available as the idna script). Encodes or decodes one or more domains supplied as arguments or on standard input, with options to select A-label or U-label output and control error handling.
• Raise the minimum supported Python version to 3.9
• Various code quality improvements

Commits

• f39ea90 Release 3.18
• 40f4e40 Pre-release 3.18rc0
• 1a5bf80 Merge pull request #253 from kjd/lenient-decode
• 5bbb26f Merge branch 'master' into lenient-decode
• c532bae Rename decode() lenient= option to display= (issue #248)
• 0b1758b Merge pull request #252 from kjd/release-3.17
• f48619c Release 3.17
• 7421ba8 Pre-release 3.17rc0
• 22ebb73 Merge pull request #251 from kjd/structure-optimizations
• 2a7ac0a Drop redundant parallel-arrays comment from uts46data
• Additional commits viewable in compare view

Updates pint from 0.24.4 to 0.25.3

Changelog

Sourced from pint's changelog.

0.25.3 (2026-03-19)

• GenericPlainRegistry.parse_expression now correctly returns a dimensionless Quantity when taking a float, int, or NaN (#2259)
• Replace MIP with scipy in Quantity.to_preferred (#2264)
• New unit formatting modifier added (^) to format unit with negative exponents (#2256)
• Add atomic unit of electric field gradient (atomic_unit_of_electric_field_gradient, a_u_efg) (#2269)
• Defer expensive loading of dask.array (#2265)
• Add support for numpy's vdot, inner, outer, linalg.outer, matvec, vecmat, tensordot, and linalg.tensordot (#2279)

0.25.2 (2025-11-06)

• Revert typing change in pint.Unit

0.25.1 (2025-11-01)

• Fix raising exception in Quantity.from_tuple with invalid units (#2199)
• Several unit definition fixes.
• Add devcontainer.json to add GitHub Codespace support (#2208)
• Add support for numpy.geomspace (#2206)
• Add support for linalg.diagonal, linalg.matrix_transpose, diag, tril, triu, linalg.eigvals, linalg.eigvalsh, linalg.matrix_norm and linalg.vector_norm (#2210)
• An example of performing currency conversions that change over time has been added to the docs. (#2240)
• Add support for pint.Quantity being used as Generic. (#2231)
• Add a typing and IDE autocomplete page to the documentation. (#2243)
• Fixed nan/nan to return nan rather than 1 in unit conversion (#2228)

0.25.0 (2025-08-25)

• Bump minimum Python version to 3.11.
• Upgrade code to Python 3.11.
• Move to pixi/uv/ruff.
• Refactor compat to make it easier to test.
• Implemented several pixi environment and tasks to simplify development.
• Add docs to the functions in pint.testing (PR #2070)
• Fix round function returning float instead of int (#2081)
• Fix return type of PlainQuantity.to (#2088)
• Update constants to CODATA 2022 recommended values. (#2049)
• Fixed issue with .to_compact and Magnitudes with uncertainties / Quantities with units (PR #2069, issue #2044)
• Fixed issue in unit conversion which led to loss of precision when using decimal. (#2107)
• Add conductivity dimension. (#2112)
• Add absorbance unit and dimension. (#2114)
• Add membrane filtration flux and permeability dimensionality, and shorthand "LMH". (#2116)
• Fix find_shortest_path to use breadth first search (#2146)
• Fix typo in pyproject.toml: rename AS_MIP to HAS_MIP so that MIP support is correctly detected. (#2152)

... (truncated)

Commits

• 5e79411 Back to development: 0.26
• 046ae5d prep for release 0.25.3
• 625d53b prep for release 0.25.2
• d4961b9 Converting units without default definition to prefixed forms (#2261) (#2282)
• df412ef Support numpy functions vdot, inner, outer, linalg.outer, matvec, `...
• ea5a863 Enh: Defer expensive loading of dask.array (#2276)
• 86f37c0 2256 as ratio (#2268)
• 40936b9 Add atomic unit of electric field gradient (#2270)
• 6049a9c make parse_expression always return Quantity (#2260)
• 936a13d to_preferred(): Replace mip with scipy (#2264)
• Additional commits viewable in compare view

Updates pyqt5-sip from 12.17.0 to 12.18.0

Changelog

Sourced from pyqt5-sip's changelog.

Release Notes

v6.15.3

Bug fixes

• Fixed the handling of virtuals that return enums with a non-int base type. Resolves #105
• A regression in v6.15.2 that caused a crash if MinimumABIVersion was not specified was fixed. Resolves #106

Deprecations

The use of the %MinimumABIVersion directive will be required in SIP v7. Failing to use it now results in a deprecation warning.

Testing

• The tests now amend CXXFLAGS instead of overwriting them. This fixes blhc (build log hardening check) in Debian. Pull request #104.

v6.15.2

Enhancements

• The way in which the parser checks for duplicate attributes in a scope is now quick and complete.

Bug fixes

• Operators that take an enum as their first argument is now fixed in ABI v13. The latest ABI v13 version is v13.11.1.
• The handling of the wrapped instance result of a call to a method with the /Factory/ annotation has been fixed in the case where result was created by a Python reimplementation of a C++ virtual.
• Fixed a warning about an unclosed file when generating code.
• Removed support for all remaining Python v2 exceptions.

Testing

• The tests are now included in the sdist. Resolves #103
• The mixins test was fixed so that it will run on Python v3.12 and earlier. Resolves #101
• Added tests including those related to enums and importing wrapped modules.
• Tests may now use separate .h files rather then code embedded in the .sip files.

... (truncated)

Commits

• See full diff in compare view

Updates archspec from 0.2.5 to 0.2.6

Release notes

Sourced from archspec's releases.

v0.2.6

What's Changed

Microarchitectures

• See Release Notes https://github.com/archspec/archspec-json/releases/tag/v0.2.6

Library improvements

• Fall back to newest known Apple M chip by @​sethrj in archspec/archspec#231
• microarchitecture.py: make __repr__ brief, add tree by @​haampie in archspec/archspec#192
• Use relative imports, delete unnecessary imports by @​haampie in archspec/archspec#203
• Cache host() call by @​alalazo in archspec/archspec#225
• Fix a bug in tree where seen is not used by @​alalazo in archspec/archspec#232
• MacOS: reduce the number of sysctl calls for detection by @​alalazo in archspec/archspec#233
• Add a feature explaining why a target is not chosen by @​alalazo in archspec/archspec#234

CI updates

• CI: update workflow after deprecation of ubuntu 20.04 runner by @​alalazo in archspec/archspec#199
• Remove the linux-amazon2-sapphirerapids test target by @​linsword13 in archspec/archspec#200
• Fix CI for Python 3.9 by @​alalazo in archspec/archspec#207
• Reduce the number of jobs in CI by @​alalazo in archspec/archspec#208
• Add vermin and mypy checks in CI, improve type-hints by @​alalazo in archspec/archspec#209
• tests: ensure feature subset semantics for partial order on uarchs by @​haampie in archspec/archspec#193
• ci: update macOS runner image, add Python 3.14 by @​alalazo in archspec/archspec#224

New Contributors

• @​haampie made their first contribution in archspec/archspec#192
• @​linsword13 made their first contribution in archspec/archspec#200
• @​sethrj made their first contribution in archspec/archspec#231

Full Changelog: archspec/archspec@v0.2.5...v0.2.6

Commits

• 560800b Bump version from v0.2.5 to v0.2.6 (#241)
• d471759 macOS: fall back to newest known Apple M chip (#231)
• c9c55f5 Add Ampere1 and Ampere1a (#238)
• 55c43bd Add SpacemiT X60 (#239)
• cc9cc6a Add latest m4 support (#240)
• b958b59 Bump codecov/codecov-action from 5.5.2 to 6.0.0 (#237)
• 0fce21d Bump actions/checkout from 5.0.1 to 6.0.2 (#230)
• 0cefd4e Add a feature explaining why a target is not chosen (#234)
• 72c06eb MacOS: reduce the number of sysctl calls for detection (#233)
• f33df45 Fix a bug in tree where seen is not used (#232)
• Additional commits viewable in compare view

Updates build from 1.4.4 to 1.5.0

Release notes

Sourced from build's releases.

1.5.0

What's Changed

• ci: try to improve release docs by @​henryiii in pypa/build#1051
• feat: drop 3.9, require 3.10+ by @​henryiii in pypa/build#1036
• chore: tox toml by @​henryiii in pypa/build#1033
• fix: api should not ignore installed, only CLI by @​henryiii in pypa/build#1056

Full Changelog: pypa/build@1.4.4...1.5.0

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################

---

Features

---

• Drop Python 3.9 support - by :user:henryiii (:issue:1036)

---

Bugfixes

---

• Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

---

Miscellaneous

---

• :issue:1033

#################### 1.4.4 (2026-04-22) ####################

---

Bugfixes

---

• Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)
• Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)
• Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)
• Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

---

Miscellaneous

---

• :issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################

---

Features

---

... (truncated)

Commits

• 615d04c chore: prepare for 1.5.0
• 776f702 fix: api should not ignore installed, only CLI (#1056)
• 42da4c4 pre-commit: bump repositories (#1055)
• b445cd2 chore: tox toml (#1033)
• c44c143 feat: drop 3.9, require 3.10+ (#1036)
• a9bb456 build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 in the actions group...
• cb33511 ci: try to improve release docs (#1051)
• See full diff in compare view

Updates certifi from 2026.2.25 to 2026.5.20

Commits

• d7ea151 2026.05.20 (#413)
• 5dddfb0 2026.04.22 (#410)
• f99eccd Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#404)
• 918bed0 Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#405)
• 0a49067 Bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#403)
• acf6ce8 Bump actions/download-artifact from 8.0.0 to 8.0.1 (#398)
• feb0ed2 Bump actions/download-artifact from 7.0.0 to 8.0.0 (#397)
• d9c11a5 Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#396)
• See full diff in compare view

Updates charset-normalizer from 3.4.6 to 3.4.7

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.7

3.4.7 (2026-04-02)

Changed

• Pre-built optimized version using mypy[c] v1.20.
• Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

• Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

Changelog

Sourced from charset-normalizer's changelog.

3.4.7 (2026-04-02)

Changed

• Pre-built optimized version using mypy[c] v1.20.
• Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

• Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

Commits

• 0f07891 Merge pull request #729 from jawah/release-3.4.7
• fdbeb29 chore: update dev, and ci requirements
• b66f922 chore: add ft classifier
• f94249d chore: add test cases for utf_7 recent fix
• 95c866f chore: bump version to 3.4.7
• 4f429bb chore: bump mypy pre-commit to v1.20
• b579cd6 fix: correctly remove SIG remnant in utf-7 decoded string
• 58bf944 ⬆️ Bump github/codeql-action from 4.32.4 to 4.35.1 (#728)
• 44cf8a1 ⬆️ Bump actions/download-artifact from 8.0.0 to 8.0.1 (#726)
• 362bc20 ⬆️ Bump docker/setup-qemu-action from 3.7.0 to 4.0.0 (#725)
• Additional commits viewable in compare view

Updates click from 8.3.3 to 8.4.1

Release notes

Sourced from click's releases.

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32?closed=1

• get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
• Zsh completion scripts parse correctly on Windows. #3277 # 3466
• Shell completion of Choice Enum values produces a valid completion result. #3015
• Fix empty byte-string handling in echo. #3487
• Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.4.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-0 Milestone https://github.com/pallets/click/milestone/30

• ParamType typing improvements. #3371

  • :class:ParamType is now a generic abstract base class, parameterized by its converted value type.
  • :meth:~ParamType.convert return types are narrowed on all concrete types (str for :class:STRING, int for :class:INT, etc.).
  • :meth:~ParamType.to_info_dict returns specific :class:~typing.TypedDict subclasses instead of dict[str, Any].
  • :class:CompositeParamType and the number-range base are now generic with abstract methods.

• Refactor convert_type to extract type inference into a private _guess_type helper, and add :func:typing.overload signatures. #3372

• Parameter typing improvements. #2805

  • :class:Parameter is now an abstract base class, making explicit that it cannot be instantiated directly.
  • :attr:Parameter.name is now str instead of str | None. When expose_value=False, the name is set to "" instead of None.
  • The ctx parameter of :meth:Parameter.get_error_hint is now typed as Context | None, matching the runtime behavior.

• Split string values from default_map for parameters with nargs > 1 or :class:Tuple type, matching environment variable behavior.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.1

Released 2026-05-21

• get_parameter_source() is available during eager callbacks and type conversion again. {issue}3458 {pr}3484
• Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
• Shell completion of Enum values used as Choice options produces a valid completion result. {issue}3015 {pr}3471
• Fix empty byte-string handling in echo. {issue}3487 {pr}3493
• Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
• Fix open_url on Windows when the file path contains spaces. {issue}2994 {pr}3478

Version 8.4.0

Released 2026-05-17

• {class}ParamType typing improvements. {pr}3371

  • {class}ParamType is now a generic abstract base class, parameterized by its converted value type.
  • {meth}~ParamType.convert return types are narrowed on all concrete types (str for {class}STRING, int for {class}INT, etc.).
  • {meth}~ParamType.to_info_dict returns specific {class}~typing.TypedDict subclasses instead of dict[str, Any].
  • {class}CompositeParamType and the number-range base are now generic with abstract methods.

• Refactor convert_type to extract type inference into a private _guess_type helper, and add {func}typing.overload signatures. {pr}3372

• {class}Parameter typing improvements. {pr}2805

  • {class}ParameterDescription has been truncated

[dependabot]

Labels

The following labels could not be found: dependencies, pip. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.