Scheduled weekly dependency update for week 10 by pyup-bot · Pull Request #328 · jima80525/markplates

pyup-bot · 2026-03-09T17:03:11Z

Update black from 25.12.0 to 26.3.0.

Changelog

26.3.0

Stable style

- Don&#x27;t double-decode input, causing non-UTF-8 files to be corrupted (4964)
- Fix crash on standalone comment in lambda default arguments (4993)
- Preserve parentheses when ` type: ignore` comments would be merged with other
comments on the same line, preventing AST equivalence failures (4888)

Preview style

- Fix bug where `if` guards in `case` blocks were incorrectly split when the pattern had
a trailing comma (4884)
- Fix `string_processing` crashing on unassigned long string literals with trailing
commas (one-item tuples) (4929)
- Simplify implementation of the power operator &quot;hugging&quot; logic (4918)

Packaging

- Fix shutdown errors in PyInstaller builds on macOS by disabling multiprocessing in
frozen environments (4930)

Performance

- Introduce winloop for windows as an alternative to uvloop (4996)
- Remove deprecated function `uvloop.install()` in favor of `uvloop.new_event_loop()`
(4996)
- Rename `maybe_install_uvloop` function to `maybe_use_uvloop` to simplify loop
installation and creation of either a uvloop/winloop evenloop or default eventloop
(4996)

Output

- Emit a clear warning when the target Python version is newer than the running Python
version, since AST safety checks cannot parse newer syntax. Also replace the
misleading &quot;INTERNAL ERROR&quot; message with an actionable error explaining the version
mismatch (4983)

_Blackd_

- Introduce winloop to be used when windows in use which enables blackd to run faster on
windows when winloop is installed. (4996)

Integrations

- Remove unused gallery script (5030)
- Harden parsing of `black` requirements in the GitHub Action when `use_pyproject` is
enabled so that only version specifiers are accepted and direct references such as
`black  https://...` are rejected. Users should upgrade to the latest version of the
action as soon as possible. This update is received automatically when using
`psf/blackstable`, and is independent of the version of Black installed by the
action. (5031)

Documentation

- Expand preview style documentation with detailed examples for `wrap_comprehension_in`,
`simplify_power_operator_hugging`, and `wrap_long_dict_values_in_parens` features
(4987)
- Add detailed documentation for formatting Jupyter Notebooks (5009)

26.1.0

Highlights

Introduces the 2026 stable style (4892), stabilizing the following changes:

- `always_one_newline_after_import`: Always force one blank line after import
statements, except when the line after the import is a comment or an import statement
(4489)
- `fix_fmt_skip_in_one_liners`: Fix ` fmt: skip` behavior on one-liner declarations,
such as `def foo(): return &quot;mock&quot;  fmt: skip`, where previously the declaration would
have been incorrectly collapsed (4800)
- `fix_module_docstring_detection`: Fix module docstrings being treated as normal
strings if preceded by comments (4764)
- `fix_type_expansion_split`: Fix type expansions split in generic functions (4777)
- `multiline_string_handling`: Make expressions involving multiline strings more compact
(1879)
- `normalize_cr_newlines`: Add `\r` style newlines to the potential newlines to
normalize file newlines both from and to (4710)
- `remove_parens_around_except_types`: Remove parentheses around multiple exception
types in `except` and `except*` without `as` (4720)
- `remove_parens_from_assignment_lhs`: Remove unnecessary parentheses from the left-hand
side of assignments while preserving magic trailing commas and intentional multiline
formatting (4865)
- `standardize_type_comments`: Format type comments which have zero or more spaces
between `` and `type:` or between `type:` and value to ` type: (value)` (4645)

The following change was not in any previous stable release:

- Regenerated the `_width_table.py` and added tests for the Khmer language (4253)

This release alo bumps `pathspec` to v1 and fixes inconsistencies with Git&#x27;s
`.gitignore` logic (4958). Now, files will be ignored if a pattern matches them, even
if the parent directory is directly unignored. For example, Black would previously
format `exclude/not_this/foo.py` with this `.gitignore`:


exclude/
!exclude/not_this/


Now, `exclude/not_this/foo.py` will remain ignored. To ensure `exclude/not_this/` and
all of it&#x27;s children are included in formatting (and in Git), use this `.gitignore`:


*/exclude/*
!*/exclude/not_this/


This new behavior matches Git. The leading `*/` are only necessary if you wish to ignore
matching subdirectories (like the previous behavior did), and not just matching root
directories.

Output

- Explicitly shutdown the multiprocessing manager when run in diff mode too (4952)

Integrations

- Upgraded PyPI upload workflow to use Trusted Publishing (4611)

Links

PyPI: https://pypi.org/project/black
Changelog: https://data.safetycli.com/changelogs/black/

Update certifi from 2025.11.12 to 2026.2.25.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/certifi
Repo: https://github.com/certifi/python-certifi

Update chardet from 5.2.0 to 7.0.1.

Changelog

7.0.0

-------------------

Ground-up, MIT-licensed rewrite of chardet. Same package name, same
public API — drop-in replacement for chardet 5.x/6.x.

**Highlights:**

- **MIT license** (previous versions were LGPL)
- **96.8% accuracy** on 2,179 test files (+2.3pp vs chardet 6.0.0,
+7.7pp vs charset-normalizer)
- **41x faster** than chardet 6.0.0 with mypyc (**28x** pure Python),
**7.5x faster** than charset-normalizer
- **Language detection** for every result (90.5% accuracy across 49
languages)
- **99 encodings** across six eras (MODERN_WEB, LEGACY_ISO, LEGACY_MAC,
LEGACY_REGIONAL, DOS, MAINFRAME)
- **12-stage detection pipeline** — BOM, UTF-16/32 patterns, escape
sequences, binary detection, markup charset, ASCII, UTF-8 validation,
byte validity, CJK gating, structural probing, statistical scoring,
post-processing
- **Bigram frequency models** trained on CulturaX multilingual corpus
data for all supported language/encoding pairs
- **Optional mypyc compilation** — 1.49x additional speedup on CPython
- **Thread-safe** ``detect()`` and ``detect_all()`` with no measurable
overhead; scales on free-threaded Python 3.13t+
- **Negligible import memory** (96 B)
- **Zero runtime dependencies**

6.0.0

-------------------

**Features:**

- Unified single-byte charset detection with proper language-specific
bigram models for all single-byte encodings (replaces ``Latin1Prober``
and ``MacRomanProber`` heuristics)
- 38 new languages: Arabic, Belarusian, Breton, Croatian, Czech, Danish,
Dutch, English, Esperanto, Estonian, Farsi, Finnish, French, German,
Icelandic, Indonesian, Irish, Italian, Kazakh, Latvian, Lithuanian,
Macedonian, Malay, Maltese, Norwegian, Polish, Portuguese, Romanian,
Scottish Gaelic, Serbian, Slovak, Slovene, Spanish, Swedish, Tajik,
Ukrainian, Vietnamese, Welsh
- ``EncodingEra`` filtering via new ``encoding_era`` parameter
- ``max_bytes`` and ``chunk_size`` parameters for ``detect()``,
``detect_all()``, and ``UniversalDetector``
- ``-e``/``--encoding-era`` CLI flag
- EBCDIC detection (CP037, CP500)
- Direct GB18030 support (replaces redundant GB2312 prober)
- Binary file detection
- Python 3.12, 3.13, and 3.14 support

**Breaking changes:**

- Dropped Python 3.7, 3.8, and 3.9 (requires Python 3.10+)
- Removed ``Latin1Prober`` and ``MacRomanProber``
- Removed EUC-TW support
- Removed ``LanguageFilter.NONE``
- ``detect()`` default changed to ``encoding_era=EncodingEra.MODERN_WEB``

**Fixes:**

- Fixed CP949 state machine
- Fixed SJIS distribution analysis (second-byte range &gt;= 0x80)
- Fixed UTF-16/32 detection for non-ASCII-heavy text
- Fixed GB18030 ``char_len_table``
- Fixed UTF-8 state machine
- Fixed ``detect_all()`` returning inactive probers
- Fixed early cutoff bug

Links

PyPI: https://pypi.org/project/chardet
Changelog: https://data.safetycli.com/changelogs/chardet/

Update coverage from 7.13.0 to 7.13.4.

Changelog

7.13.4

---------------------------

- Fix: the third-party code fix in 7.13.3 required examining the parent
directories where coverage was run. In the unusual situation that one of the
parent directories is unreadable, a PermissionError would occur, as
described in `issue 2129`_. This is now fixed.

- Fix: in test suites that change sys.path, coverage.py could fail with
&quot;RuntimeError: Set changed size during iteration&quot; as described and fixed in
`pull 2130`_. Thanks, Noah Fatsi.

- We now publish ppc64le wheels, thanks to `Pankhudi Jain &lt;pull 2121_&gt;`_.

.. _pull 2121: https://github.com/coveragepy/coveragepy/pull/2121
.. _issue 2129: https://github.com/coveragepy/coveragepy/issues/2129
.. _pull 2130: https://github.com/coveragepy/coveragepy/pull/2130


.. _changes_7-13-3:

7.13.3

---------------------------

- Fix: in some situations, third-party code was measured when it shouldn&#x27;t have
been, slowing down test execution. This happened with layered virtual
environments such as uv sometimes makes. The problem is fixed, closing `issue
2082`_. Now any directory on sys.path that is inside a virtualenv is
considered third-party code.

.. _issue 2082: https://github.com/coveragepy/coveragepy/issues/2082


.. _changes_7-13-2:

7.13.2

---------------------------

- Fix: when Python is installed via symlinks, for example with Homebrew, the
standard library files could be incorrectly included in coverage reports.
This is now fixed, closing `issue 2115`_.

- Fix: if a data file is created with no read permissions, the combine step
would fail completely. Now a warning is issued and the file is skipped.
Closes `issue 2117`_.

.. _issue 2115: https://github.com/coveragepy/coveragepy/issues/2115
.. _issue 2117: https://github.com/coveragepy/coveragepy/issues/2117


.. _changes_7-13-1:

7.13.1

---------------------------

- Added: the JSON report now includes a ``&quot;start_line&quot;`` key for function and
class regions, indicating the first line of the region in the source. Closes
`issue 2110`_.

- Added: The ``debug data`` command now takes file names as arguments on the
command line, so you can inspect specific data files without needing to set
the ``COVERAGE_FILE`` environment variable.

- Fix: the JSON report used to report module docstrings as executed lines,
which no other report did, as described in `issue 2105`_. This is now fixed,
thanks to Jianrong Zhao.

- Fix: coverage.py uses a more disciplined approach to detecting where
third-party code is installed, and avoids measuring it. This shouldn&#x27;t change
any behavior. If you find that it does, please get in touch.

- Performance: data files that will be combined now record their hash as part
of the file name. This lets us skip duplicate data more quickly, speeding the
combining step.

- Docs: added a section explaining more about what is considered a missing
branch and how it is reported: :ref:`branch_explain`, as requested in `issue
1597`_. Thanks to `Ayisha Mohammed &lt;pull 2092_&gt;`_.

- Tests: the test suite misunderstood what core was being tested if
``COVERAGE_CORE`` wasn&#x27;t set on 3.14+. This is now fixed, closing `issue
2109`_.

.. _issue 1597: https://github.com/coveragepy/coveragepy/issues/1597
.. _pull 2092: https://github.com/coveragepy/coveragepy/pull/2092
.. _issue 2105: https://github.com/coveragepy/coveragepy/issues/2105
.. _issue 2109: https://github.com/coveragepy/coveragepy/issues/2109
.. _issue 2110: https://github.com/coveragepy/coveragepy/issues/2110


.. _changes_7-13-0:

Links

PyPI: https://pypi.org/project/coverage
Changelog: https://data.safetycli.com/changelogs/coverage/
Repo: https://github.com/coveragepy/coveragepy

Update docutils from 0.22.3 to 0.22.4.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/docutils

Update filelock from 3.20.0 to 3.25.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/filelock

Update tox from 4.32.0 to 4.49.0.

The bot wasn't able to find a changelog for this release. Got an idea?

Links

PyPI: https://pypi.org/project/tox
Changelog: https://data.safetycli.com/changelogs/tox/

Update tqdm from 4.67.1 to 4.67.3.

Changelog

4.67.3

- fix py3.7 dependencies (1706 &lt;- 1705)

4.67.2

- support `pandas&gt;=3` (1703 &lt;- 1701, 1650, 1700)
- fix `format_interval` for negative numbers (1703)
- misc linting
- framework updates (1704)
+ bump CI workflow &amp; `pre-commit` dependencies
+ add `pyupgrade`
+ add py3.13 support
+ fix py3.7 tests
+ update `setuptools-scm` usage
+ support auto-dedented docstrings when building docs in py3.13
- tests: relax flaky benchmarks

Links

PyPI: https://pypi.org/project/tqdm
Changelog: https://data.safetycli.com/changelogs/tqdm/

Update urllib3 from 2.6.2 to 2.6.3.

Changelog

2.6.3

==================

- Fixed a high-severity security issue where decompression-bomb safeguards of
the streaming API were bypassed when HTTP redirects were followed.
(`GHSA-38jv-5279-wg99 &lt;https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99&gt;`__)
- Started treating ``Retry-After`` times greater than 6 hours as 6 hours by
default. (`3743 &lt;https://github.com/urllib3/urllib3/issues/3743&gt;`__)
- Fixed ``urllib3.connection.VerifiedHTTPSConnection`` on Emscripten.
(`3752 &lt;https://github.com/urllib3/urllib3/issues/3752&gt;`__)

Links

PyPI: https://pypi.org/project/urllib3
Changelog: https://data.safetycli.com/changelogs/urllib3/

Update virtualenv from 20.35.4 to 21.1.0.

Changelog

21.1.0

&lt;!-- Release notes generated using configuration in .github/release.yml at 21.1.0 --&gt;

What&#x27;s Changed
* add comprehensive type annotations across the entire codebase by rahuldevikar in https://github.com/pypa/virtualenv/pull/3076


**Full Changelog**: https://github.com/pypa/virtualenv/compare/21.0.0...21.1.0

21.0.0

&lt;!-- Release notes generated using configuration in .github/release.yml at 21.0.0 --&gt;

What&#x27;s Changed
* ♻️ refactor(discovery): extract py_discovery as self-contained package by gaborbernat in https://github.com/pypa/virtualenv/pull/3070
* 📝 docs(changelog): add removal entry for python-discovery extraction by gaborbernat in https://github.com/pypa/virtualenv/pull/3074


**Full Changelog**: https://github.com/pypa/virtualenv/compare/20.39.1...21.0.0

20.39.1

&lt;!-- Release notes generated using configuration in .github/release.yml at 20.39.1 --&gt;

What&#x27;s Changed
* Align dependency versions across projects by gaborbernat in https://github.com/pypa/virtualenv/pull/3069
* ✨ feat(create): add RustPython support by gaborbernat in https://github.com/pypa/virtualenv/pull/3071
* 🐛 fix(create): add pythonw3.exe to Windows venvs by gaborbernat in https://github.com/pypa/virtualenv/pull/3073


**Full Changelog**: https://github.com/pypa/virtualenv/compare/20.39.0...20.39.1

20.39.0

&lt;!-- Release notes generated using configuration in .github/release.yml at 20.39.0 --&gt;

What&#x27;s Changed
* Move from extras to dependency-groups by gaborbernat in https://github.com/pypa/virtualenv/pull/3056
* 🐛 fix(sdist): include tox.toml in sdist by gaborbernat in https://github.com/pypa/virtualenv/pull/3063
* 🐛 fix(seed): add --ignore-installed to pip invoke seeder by gaborbernat in https://github.com/pypa/virtualenv/pull/3064
* 👷 ci(brew): add missing Homebrew Python versions and fix discovery by gaborbernat in https://github.com/pypa/virtualenv/pull/3066
* 🧪 test(discovery): fix test_py_info_cache_clear outside venv by gaborbernat in https://github.com/pypa/virtualenv/pull/3065
* Add architecture (ISA) awareness to Python discovery by rahuldevikar in https://github.com/pypa/virtualenv/pull/3058
* 🐛 fix(discovery): resolve version-manager shims to real binaries by gaborbernat in https://github.com/pypa/virtualenv/pull/3067
* Add auto-upgrade workflow for embedded dependencies by rahuldevikar in https://github.com/pypa/virtualenv/pull/3057


**Full Changelog**: https://github.com/pypa/virtualenv/compare/20.38.0...20.39.0

20.38.0

&lt;!-- Release notes generated using configuration in .github/release.yml at 20.38.0 --&gt;

What&#x27;s Changed
* Fix Windows activation scripts to handle Python paths with spaces by rahuldevikar in https://github.com/pypa/virtualenv/pull/3015
* Exclude pywintypes*.dll and pythoncom*.dll from being copied to Scripts directory by rahuldevikar in https://github.com/pypa/virtualenv/pull/3012
* update `Automated testing` documentation section by elmjag in https://github.com/pypa/virtualenv/pull/3016
* Preserver Symlinks in pyvenv.cfg paths by rahuldevikar in https://github.com/pypa/virtualenv/pull/3022
* Add ``PKG_CONFIG_PATH`` environment variable support to all activation scripts by rahuldevikar in https://github.com/pypa/virtualenv/pull/3023
* Add ty type checker to CI via tox by rahuldevikar in https://github.com/pypa/virtualenv/pull/3025
* Upgrade embedded dependencies by rahuldevikar in https://github.com/pypa/virtualenv/pull/3026
* Fix ty Type Narrowing by rahuldevikar in https://github.com/pypa/virtualenv/pull/3030
* Replace ty: ignore with proper type declarations for inheritance patterns by rahuldevikar in https://github.com/pypa/virtualenv/pull/3034
* Use user_cache_dir for app data with auto-migration from old location by rahuldevikar in https://github.com/pypa/virtualenv/pull/3033
* Fix unhelpful KeyError when using invalid VIRTUALENV_DISCOVERY value by veeceey in https://github.com/pypa/virtualenv/pull/3031
* ⚡ perf(test): parallelize test suite with pytest-xdist by gaborbernat in https://github.com/pypa/virtualenv/pull/3035
* ✨ feat(create): sync with upstream CPython/PyPy venv by gaborbernat in https://github.com/pypa/virtualenv/pull/3036
* Python3.9 dependency range correction by reactive-firewall in https://github.com/pypa/virtualenv/pull/3038
* Version bump filelock to latest by reactive-firewall in https://github.com/pypa/virtualenv/pull/3039
* Improve error message when discovery plugin is not available by veeceey in https://github.com/pypa/virtualenv/pull/3032
* 👷 ci(release): add workflow_dispatch release with zipapp and get-virtualenv by gaborbernat in https://github.com/pypa/virtualenv/pull/3040
* 📝 docs: restructure to follow Diataxis framework by gaborbernat in https://github.com/pypa/virtualenv/pull/3041
* 👷 ci(release): split into release and tag-triggered publish by gaborbernat in https://github.com/pypa/virtualenv/pull/3042
* Fix bash activate PKG_CONFIG_PATH unbound variable under bash -u by Fridayai700 in https://github.com/pypa/virtualenv/pull/3047
* 🐛 fix(discovery): harden subprocess interrogation and test reliability by gaborbernat in https://github.com/pypa/virtualenv/pull/3054
* 🔧 chore(tox): migrate tox.ini to tox.toml by gaborbernat in https://github.com/pypa/virtualenv/pull/3050

New Contributors
* elmjag made their first contribution in https://github.com/pypa/virtualenv/pull/3016
* veeceey made their first contribution in https://github.com/pypa/virtualenv/pull/3031
* reactive-firewall made their first contribution in https://github.com/pypa/virtualenv/pull/3038
* Fridayai700 made their first contribution in https://github.com/pypa/virtualenv/pull/3047

**Full Changelog**: https://github.com/pypa/virtualenv/compare/20.37.0...20.38.0

20.36.0

&lt;!-- Release notes generated using configuration in .github/release.yml at 20.36.0 --&gt;

What&#x27;s Changed

Links

PyPI: https://pypi.org/project/virtualenv
Changelog: https://data.safetycli.com/changelogs/virtualenv/

pyup-bot · 2026-03-16T17:03:13Z

Closing this in favor of #329

pyup-bot added 10 commits March 9, 2026 11:03

Update black from 25.12.0 to 26.3.0

c805d07

Update certifi from 2025.11.12 to 2026.2.25

3b134ee

Update chardet from 5.2.0 to 7.0.1

7601983

Update coverage from 7.13.0 to 7.13.4

6da34e5

Update docutils from 0.22.3 to 0.22.4

e126acd

Update filelock from 3.20.0 to 3.25.0

dc292cc

Update tox from 4.32.0 to 4.49.0

712eb10

Update tqdm from 4.67.1 to 4.67.3

cde2c7e

Update urllib3 from 2.6.2 to 2.6.3

2bb132c

Update virtualenv from 20.35.4 to 21.1.0

65846d4

pyup-bot mentioned this pull request Mar 9, 2026

Scheduled weekly dependency update for week 09 #327

Closed

pyup-bot closed this Mar 16, 2026

jima80525 deleted the pyup-scheduled-update-2026-03-09 branch March 16, 2026 17:03

Navigation Menu

Scheduled weekly dependency update for week 10 - #328

Scheduled weekly dependency update for week 10#328
pyup-bot wants to merge 10 commits into
masterfrom
pyup-scheduled-update-2026-03-09

pyup-bot commented Mar 9, 2026

Uh oh!

pyup-bot commented Mar 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

pyup-bot commented Mar 9, 2026

Update black from 25.12.0 to 26.3.0.

26.3.0

26.1.0

Update certifi from 2025.11.12 to 2026.2.25.

Update chardet from 5.2.0 to 7.0.1.

7.0.0

6.0.0

Update coverage from 7.13.0 to 7.13.4.

7.13.4

7.13.3

7.13.2

7.13.1

Update docutils from 0.22.3 to 0.22.4.

Update filelock from 3.20.0 to 3.25.0.

Update tox from 4.32.0 to 4.49.0.

Update tqdm from 4.67.1 to 4.67.3.

4.67.3

4.67.2

Update urllib3 from 2.6.2 to 2.6.3.

2.6.3

Update virtualenv from 20.35.4 to 21.1.0.

21.1.0

21.0.0

20.39.1

20.39.0

20.38.0

20.36.0

Uh oh!

pyup-bot commented Mar 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant