Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 1, 2025

Bumps the all-dependencies group with 40 updates in the /api directory:

Package From To
arrow 1.3.0 1.4.0
boto3 1.37.24 1.40.64
botocore 1.37.24 1.40.64
certifi 2025.1.31 2025.10.5
charset-normalizer 3.4.1 3.4.4
click 8.1.8 8.3.0
flask 3.1.1 3.1.2
greenlet 3.1.1 3.2.4
httplib2 0.22.0 0.31.0
idna 3.10 3.11
importlib-metadata 8.6.1 8.7.0
markupsafe 3.0.2 3.0.3
networkx 3.4.2 3.5
psycopg2-binary 2.9.10 2.9.11
pydantic 2.11.1 2.12.3
pydantic-core 2.33.0 2.41.4
pyparsing 3.2.3 3.2.5
pyyaml 6.0.2 6.0.3
requests 2.32.4 2.32.5
s3transfer 0.11.4 0.14.0
sendgrid 6.11.0 6.12.5
sqlalchemy 2.0.40 2.0.44
typing-extensions 4.12.2 4.15.0
zipp 3.21.0 3.23.0
pip 25.2 25.3
pip-tools 7.4.1 7.5.1
cachetools 5.5.2 6.2.1
coverage 7.8.0 7.11.0
distlib 0.3.9 0.4.0
filelock 3.18.0 3.20.0
identify 2.6.9 2.6.15
iniconfig 2.1.0 2.3.0
packaging 24.2 25.0
platformdirs 4.3.7 4.5.0
pluggy 1.5.0 1.6.0
pre-commit 4.2.0 4.3.0
pyproject-api 1.9.0 1.10.0
pytest 8.3.5 8.4.2
tox 4.25.0 4.32.0
virtualenv 20.30.0 20.35.4

Updates arrow from 1.3.0 to 1.4.0

Release notes

Sourced from arrow's releases.

Version 1.4.0

ADDED

CHANGED

FIXED

INTERNAL

Changelog

Sourced from arrow's changelog.

1.4.0 (2025-10-18)

  • [ADDED] Added week_start parameter to floor() and ceil() methods. PR [#1222](https://github.com/arrow-py/arrow/issues/1222) <https://github.com/arrow-py/arrow/pull/1222>_
  • [ADDED] Added FORMAT_RFC3339_STRICT with a T separator. PR [#1201](https://github.com/arrow-py/arrow/issues/1201) <https://github.com/arrow-py/arrow/pull/1201>_
  • [ADDED] Added Macedonian in Latin locale support. PR [#1200](https://github.com/arrow-py/arrow/issues/1200) <https://github.com/arrow-py/arrow/pull/1200>_
  • [ADDED] Added Persian/Farsi locale support. PR [#1190](https://github.com/arrow-py/arrow/issues/1190) <https://github.com/arrow-py/arrow/pull/1190>_
  • [ADDED] Added week and weeks to Thai locale timeframes. PR [#1218](https://github.com/arrow-py/arrow/issues/1218) <https://github.com/arrow-py/arrow/pull/1218>_
  • [ADDED] Added weeks to Catalan locale. PR [#1189](https://github.com/arrow-py/arrow/issues/1189) <https://github.com/arrow-py/arrow/pull/1189>_
  • [ADDED] Added Persian names of months, month-abbreviations and day-abbreviations in Gregorian calendar. PR [#1172](https://github.com/arrow-py/arrow/issues/1172) <https://github.com/arrow-py/arrow/pull/1172>_
  • [CHANGED] Migrated Arrow to use ZoneInfo for timezones instead of pytz. PR [#1217](https://github.com/arrow-py/arrow/issues/1217) <https://github.com/arrow-py/arrow/pull/1217>_
  • [FIXED] Fixed humanize month limits. PR [#1224](https://github.com/arrow-py/arrow/issues/1224) <https://github.com/arrow-py/arrow/pull/1224>_
  • [FIXED] Fixed type hint of Arrow.__getattr__. PR [#1171](https://github.com/arrow-py/arrow/issues/1171) <https://github.com/arrow-py/arrow/pull/1171>_
  • [FIXED] Fixed spelling and removed poorly used expressions in Korean locale. PR [#1181](https://github.com/arrow-py/arrow/issues/1181) <https://github.com/arrow-py/arrow/pull/1181>_
  • [FIXED] Updated shift() method for issue #1145. PR [#1194](https://github.com/arrow-py/arrow/issues/1194) <https://github.com/arrow-py/arrow/pull/1194>_
  • [FIXED] Improved Greek locale translations (seconds, days, "ago", and month typo). PR [#1184](https://github.com/arrow-py/arrow/issues/1184) <https://github.com/arrow-py/arrow/pull/1184>, PR [#1186](https://github.com/arrow-py/arrow/issues/1186) <https://github.com/arrow-py/arrow/pull/1186>
  • [FIXED] Addressed datetime.utcnow deprecation warning. PR [#1182](https://github.com/arrow-py/arrow/issues/1182) <https://github.com/arrow-py/arrow/pull/1182>_
  • [INTERNAL] Added codecov test results. PR [#1223](https://github.com/arrow-py/arrow/issues/1223) <https://github.com/arrow-py/arrow/pull/1223>_
  • [INTERNAL] Updated CI dependencies (actions/setup-python, actions/checkout, codecov/codecov-action, actions/cache).
  • [INTERNAL] Added docstrings to parser.py. PR [#1010](https://github.com/arrow-py/arrow/issues/1010) <https://github.com/arrow-py/arrow/pull/1010>_
  • [INTERNAL] Updated Python versions support and bumped CI dependencies. PR [#1177](https://github.com/arrow-py/arrow/issues/1177) <https://github.com/arrow-py/arrow/pull/1177>_
  • [INTERNAL] Added dependabot for GitHub actions. PR [#1193](https://github.com/arrow-py/arrow/issues/1193) <https://github.com/arrow-py/arrow/pull/1193>_
  • [INTERNAL] Moved dateutil types to test requirements. PR [#1183](https://github.com/arrow-py/arrow/issues/1183) <https://github.com/arrow-py/arrow/pull/1183>_
  • [INTERNAL] Added documentation link for arrow.format. PR [#1180](https://github.com/arrow-py/arrow/issues/1180) <https://github.com/arrow-py/arrow/pull/1180>_
Commits

Updates boto3 from 1.37.24 to 1.40.64

Commits
  • 4767297 Merge branch 'release-1.40.64'
  • 4126cfb Bumping version to 1.40.64
  • 1f76848 Add changelog entries from botocore
  • de8a8d8 Merge branch 'release-1.40.63'
  • b4ab1ec Merge branch 'release-1.40.63' into develop
  • cb48975 Bumping version to 1.40.63
  • 5c30ab5 Add changelog entries from botocore
  • 6abe178 update the documentation for creating s3 bucket to address the region mismatc...
  • ea1a84d Merge branch 'release-1.40.62'
  • ec252ff Merge branch 'release-1.40.62' into develop
  • Additional commits viewable in compare view

Updates botocore from 1.37.24 to 1.40.64

Commits
  • 11d0051 Merge branch 'release-1.40.64'
  • 0c92337 Bumping version to 1.40.64
  • aa692dd Update endpoints model
  • e6c0125 Update to latest models
  • cf26740 Merge branch 'release-1.40.63'
  • 0f7bff1 Merge branch 'release-1.40.63' into develop
  • 906cbfb Bumping version to 1.40.63
  • ac114bc Update endpoints model
  • bd3c3ef Update to latest models
  • 68e4960 Merge branch 'release-1.40.62'
  • Additional commits viewable in compare view

Updates certifi from 2025.1.31 to 2025.10.5

Commits

Updates charset-normalizer from 3.4.1 to 3.4.4

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.4

3.4.4 (2025-10-13)

Changed

  • Bound setuptools to a specific constraint setuptools>=68,<=81.
  • Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

  • setuptools-scm as a build dependency.

Misc

  • Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
  • Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  • Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Version 3.4.2

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9
Changelog

Sourced from charset-normalizer's changelog.

3.4.4 (2025-10-13)

Changed

  • Bound setuptools to a specific constraint setuptools>=68,<=81.
  • Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

  • setuptools-scm as a build dependency.

Misc

  • Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
  • Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
  • Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

3.4.3 (2025-08-09)

Changed

  • mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
  • automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

  • Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
  • Support for Python 3.14

Fixed

  • sdist archive contained useless directories.
  • automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

  • SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
  • Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

3.4.2 (2025-05-02)

Fixed

  • Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
  • Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

  • Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8
Commits
  • b30ffdc 🔧 fix checksum step in cd.yml
  • d3fbfcf 🔧 fix cd.yml
  • dafbb95 Release 3.4.4 (#658)
  • 1f18ffa ⬆️ raise mypy upper bound to 1.18.2
  • ef4ac69 Merge branch 'release-3.4.4' of github.com:jawah/charset_normalizer into rele...
  • 4b35dda 📝 write changelog for 3.4.4
  • 0ec6452 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
  • f341ede ⬆️ upgrade dependencies (dev, ci)
  • a308841 📝 write changelog for 3.4.4
  • 9c906da 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
  • Additional commits viewable in compare view

Updates click from 8.1.8 to 8.3.0

Release notes

Sourced from click's releases.

8.3.0

This is the Click 8.3.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.3.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-0 Milestone https://github.com/pallets/click/milestone/27

  • Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

    • The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)
    • Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value
    • The default parameter can now be any type (bool, None, etc.)
    • Fixes inconsistencies reported in: #1992 #2514 #2610 #3024 #3030
  • Allow default to be set on Argument for nargs = -1. #2164 #3030

  • Show correct auto complete value for nargs option in combination with flag option #2813

  • Show correct auto complete value for nargs option in combination with flag option #2813

  • Fix handling of quoted and escaped parameters in Fish autocompletion. #2995 #3013

  • Lazily import shutil. #3023

  • Properly forward exception information to resources registered with click.core.Context.with_resource(). #2447 #3058

  • Fix regression related to EOF handling in CliRunner. #2939 #2940

8.2.2

This is the Click 8.2.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-2-2 Milestone: https://github.com/pallets/click/milestone/25

  • Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables. #2952 #2956
  • Fix typing issue in BadParameter and MissingParameter exceptions for the parameter param_hint that did not allow for a sequence of string where the underlying functino _join_param_hints allows for it. #2777 #2990
  • Use the value of Enum choices to render their default value in help screen. #2911 #3004
  • Fix completion for the Z shell (zsh) for completion items containing colons. #2703 #2846
  • Don't include envvar in error hint when not configured. #2971 #2972

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.0

Released 2025-09-17

  • Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

    • The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)
    • Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value
    • The default parameter can now be any type (bool, None, etc.)
    • Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610 :issue:3024 :pr:3030
  • Allow default to be set on Argument for nargs = -1. :issue:2164 :pr:3030

  • Show correct auto complete value for nargs option in combination with flag option :issue:2813

  • Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

  • Lazily import shutil. :pr:3023

  • Properly forward exception information to resources registered with click.core.Context.with_resource(). :issue:2447 :pr:3058

  • Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

Version 8.2.2

Released 2025-07-31

  • Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables. :issue:2952 :pr:2956
  • Fix typing issue in BadParameter and MissingParameter exceptions for the parameter param_hint that did not allow for a sequence of string where the underlying function _join_param_hints allows for it. :issue:2777 :pr:2990
  • Use the value of Enum choices to render their default value in help screen. Refs :issue:2911 :pr:3004
  • Fix completion for the Z shell (zsh) for completion items containing colons. :issue:2703 :pr:2846
  • Don't include envvar in error hint when not configured. :issue:2971 :pr:2972
  • Fix a rare race in click.testing.StreamMixer's finalization that manifested as a ValueError on close in a multi-threaded test session. :issue:2993 :pr:2991

Version 8.2.1

Released 2025-05-20

... (truncated)

Commits
  • 00fadb8 Release version 8.3.0
  • 2a0e3ba testing/CliRunner: Fix regression related to EOF introduced in 262bdf0 (#2940)
  • e11a1ef Merge branch 'main' into fix-cli-runner-prompt-eof-handling
  • 36deba8 Forward exception information to resources registered in a context (#3058)
  • f2cae7a #2447 Add summary of PR to changelog for 8.3.x
  • 7c7ec36 #2447 Split resource exception handling tests in single and nested
  • 92129c5 #2447 Added exception forwarding to context tests
  • 555fa9b #2447 Forward exception data to exit stack when calling __exit__
  • 16fe802 Add more tests on Enum rendering (#3053)
  • d36de6f Add more tests on Enum rendering their item's names and not values
  • Additional commits viewable in compare view

Updates flask from 3.1.1 to 3.1.2

Release notes

Sourced from flask's releases.

3.1.2

This is the Flask 3.1.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Flask/3.1.2/ Changes: https://flask.palletsprojects.com/page/changes/#version-3-1-2 Milestone: https://github.com/pallets/flask/milestone/38?closed=1

  • stream_with_context does not fail inside async views. #5774
  • When using follow_redirects in the test client, the final state of session is correct. #5786
  • Relax type hint for passing bytes IO to send_file. #5776
Changelog

Sourced from flask's changelog.

Version 3.1.2

Released 2025-08-19

  • stream_with_context does not fail inside async views. :issue:5774
  • When using follow_redirects in the test client, the final state of session is correct. :issue:5786
  • Relax type hint for passing bytes IO to send_file. :issue:5776
Commits
  • 2c1b30d release version 3.1.2
  • 1292419 Update GitHub Actions workflow for artifact handling (#5795)
  • 4dd52ca Update GitHub Actions workflow for artifact handling
  • 55c6255 update dev dependencies
  • d8259eb use Jinja name consistently
  • 38b4c1e refactor stream_with_context for async views (#5799)
  • 9822a03 refactor stream_with_context for async views
  • 49b7e7b security docs for TRUSTED_HOSTS (#5798)
  • b228ca3 security docs for TRUSTED_HOSTS
  • ff64079 update flask-talisman link
  • Additional commits viewable in compare view

Updates greenlet from 3.1.1 to 3.2.4

Changelog

Sourced from greenlet's changelog.

3.2.4 (2025-08-07)

.. note::

The 3.2.x series will be the last to support Python 3.9.

  • Various small build/test changes for less common configurations (e.g., building CPython with assertions enabled but NOT debugging), contributed by Michał Górny. Note that while greenlet will BUILD in a free-threaded Python, it will cause the GIL to be allocated and used, and memory may leak. Also note that these configurations are not tested by this project's CI.
  • Fix an assertion error on debug builds of Python 3.14 when using the experimental JIT. See :issue:460 <https://github.com/python-greenlet/greenlet/issues/460>_.

3.2.3 (2025-06-05)

  • Make greenlet build and run on Python 3.14 beta 2 on Windows amd64.
  • Potentially fix build on NetBSD/sparc64. See PR 447 <https://github.com/python-greenlet/greenlet/pull/447>_.

3.2.2 (2025-05-09)

  • Make greenlet build and run on Python 3.14 beta 1. It will not run on earlier versions of 3.14; it should run on subsequent versions. See PR 445 <https://github.com/python-greenlet/greenlet/pull/445>_.

3.2.1 (2025-04-22)

  • Fix a crash regression for Riscv64. See issue 443 <https://github.com/python-greenlet/greenlet/issues/443>_.

3.2.0 (2025-04-15)

  • Remove support for Python 3.7 and 3.8.
  • Add untested, community supported implementation for RiscV 32. See PR 438 <https://github.com/python-greenlet/greenlet/pull/439>_.
  • Make greenlet build and run on Python 3.14a7. It will not build on earlier 3.14 alpha releases, and may not build on later 3.14 releases.

... (truncated)

Commits
  • 65f8da8 Preparing release 3.2.4
  • b2c6559 Update CHANGES for release.
  • b2aa1aa Merge pull request #462 from python-greenlet/issue460
  • a1990d8 Python3.14/JIT: Save and restore the PyThreadState current_executor object.
  • 68af251 Py3.14 w/JIT: Fix leakchecks.
  • 74a65bd Various free-threaded fixes; bump tested Python version.
  • e3e2953 Merge pull request #459 from mgorny/py314-debug-build-failure
  • bdb5f44 Merge pull request #456 from mgorny/setuptools-test-dep
  • b288f43 Merge pull request #457 from mgorny/fix-assert-test-skips
  • 739cc55 Fix py312+ crash test skips to correctly check for assertions
  • Additional commits viewable in compare view

Updates httplib2 from 0.22.0 to 0.31.0

Changelog

Sourced from httplib2's changelog.

0.31.0

https: avoid costly load_verify_locations when SSL certificate validation is disabled httplib2/httplib2#249

0.30.2

No changes in library. Fix automatic pypi release from CI.

0.30.1

restore socks proxy support, was broken in 0.30.0 httplib2/httplib2#251

0.30.0

BREAKING CHANGE! Python support 3.7+ only

https: Do not rely on ssl.PROTOCOL_TLS, which has been deprecated in Python3.10 httplib2/httplib2#243

Commits
  • 26cfea5 v0.31.0 release
  • cbd3d21 chore: CI use trusted publishing
  • 147d7d5 https: avoid costly load_verify_locations when SSL certificate validation is ...
  • d9278ce v0.30.2 release
  • c4b7405 chore: CI cache update
  • 6cfe2e6 v0.30.1 release
  • 4b8777f chore: update pytest plugins
  • 2a97a86 restore socks proxy support, was broken in py2/3 merge
  • ddfbfd5 v0.30.0 release
  • 8cc0d54 chore: requirements-test bump cryptography, remove future
  • Additional commits viewable in compare view

Updates idna from 3.10 to 3.11

Changelog

Sourced from idna's changelog.

3.11 (2025-10-12)

  • Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.
  • Add support for Python 3.14, lowest supported version is Python 3.8.
  • Various updates to packaging, including PEP 740 support.
Commits
  • ad949ee Release v3.11
  • cae4ba7 Second release candidate for 3.11
  • 8adb305 Add space in RST link
  • 74cb2b6 Release candidate for 3.11
  • 05dab09 Format idna-data with ruff
  • 90eac78 Apply ruff formatting
  • a31ce7e Remove errant test vectors
  • 81f0333 Omit vectors known to be broken in test suite
  • a0f3257 Merge branch 'master' into unicode-16-uts46-changes
  • 38d9886 Remove extra UTS46 test vector
  • Additional commits viewable in compare view

Updates importlib-metadata from 8.6.1 to 8.7.0

Changelog

Sourced from importlib-metadata's changelog.

v8.7.0

Features

  • .metadata() (and Distribution.metadata) can now return None if the metadata directory exists but not metadata file is present. (#493)

Bugfixes

  • Raise consistent ValueError for invalid EntryPoint.value (#518)
Commits
  • 708dff4 Finalize
  • b3065f0 Merge pull request #519 from python/bugfix/493-metadata-missing
  • e4351c2 Add a new test capturing the new expectation.
  • 5a65705 Refactor the casting into a wrapper for brevity and to document its purpose.
  • 0830c39 Add news fragment.
  • 22bb567 Fix type errors where metadata could be None.
  • 57f31d7 Allow metadata to return None when there is no metadata present.
  • b9c4be4 Merge pull request #518 from python/bugfix/488-bad-ep-value
  • 9f8af01 Prefer a cached property, as the property is likely to be retrieved at least ...
  • f179e28 Also raise ValueError on construction if the value is invalid.
  • Additional commits viewable in compare view

Updates markupsafe from 3.0.2 to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

  • __version__ raises DeprecationWarning instead of UserWarning. #487
  • Adopt multi-phase initialization PEP 489 for the C extension. #494
  • Build Windows ARM64 wheels. #485
  • Build Python 3.14 wheels. #503
  • Build riscv64 wheels. #505
Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

  • __version__ raises DeprecationWarning instead of UserWarning. :issue:487
  • Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494
  • Build Windows ARM64 wheels. :issue:485
  • Build Python 3.14 wheels. :issue:503
  • Build riscv64 wheels. :issue:505
Commits

Updates networkx from 3.4.2 to 3.5

Release notes

Sourced from networkx's releases.

NetworkX 3.5

networkx 3.5

We're happy to announce the release of networkx 3.5!

API Changes

  • Save Layouts on Graphs (#7571).
  • Expire d_separated and minimum_d_separator functions (#7830).
  • Expire all_triplets deprecation (#7828).
  • Expire random_triad deprecation (#7829).
  • DEP: Raise an exception for k_core functions with multigraphs (#7831).
  • Deprecate graph_could_be_isomorphic (#7826).
  • Expire total_spanning_tree_weight deprecation (#7843).
  • Expire deprecation of create kwarg in nonisomorphic_trees (#7847).
  • New draw API (#7589).

Enhancements

  • perf: optimise random_k_out_graph (#7702).
  • Clausets local community detection algorithm (#7691).
  • find_asteroidal_triple improvement (#7736).
  • Add weight to harmonic_diameter (#7636).
  • Densest Subgraph Problem: Greedy Peeling and Greedy++ Implementations (#7731).
  • single_source_all_shortest_paths: don't loop over all nodes (#7762).
  • Error message improvement for nbunch_iter ( NetworkXError raised with specific message on TypeError with "iter" in msg ) (#7790).
  • Faster computation of energy in Laplacian centrality (#7793).
  • Make forceatlas2_layout dispatchable (#7794).
  • Update dispatchable for forceatlas2_layout (#7798).
  • Enable backend-only functions where NetworkX is just an API (#7690).
  • Steinertree kou enhancement in response to issue 5889 type:Enhancements (#7767).
  • Add Leiden as a backend-only algorithm (#7743).
  • Bipartite layout nodes optional (#7756).
  • Densest Subgraph Problem: FISTA based algorithm + Large scale tests (#7770).
  • Dispatch get_node_attributes<...

    Description has been truncated

Bumps the all-dependencies group with 40 updates in the /api directory:

| Package | From | To |
| --- | --- | --- |
| [arrow](https://github.com/arrow-py/arrow) | `1.3.0` | `1.4.0` |
| [boto3](https://github.com/boto/boto3) | `1.37.24` | `1.40.64` |
| [botocore](https://github.com/boto/botocore) | `1.37.24` | `1.40.64` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.1.31` | `2025.10.5` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.1` | `3.4.4` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.3.0` |
| [flask](https://github.com/pallets/flask) | `3.1.1` | `3.1.2` |
| [greenlet](https://github.com/python-greenlet/greenlet) | `3.1.1` | `3.2.4` |
| [httplib2](https://github.com/httplib2/httplib2) | `0.22.0` | `0.31.0` |
| [idna](https://github.com/kjd/idna) | `3.10` | `3.11` |
| [importlib-metadata](https://github.com/python/importlib_metadata) | `8.6.1` | `8.7.0` |
| [markupsafe](https://github.com/pallets/markupsafe) | `3.0.2` | `3.0.3` |
| [networkx](https://github.com/networkx/networkx) | `3.4.2` | `3.5` |
| [psycopg2-binary](https://github.com/psycopg/psycopg2) | `2.9.10` | `2.9.11` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.11.1` | `2.12.3` |
| [pydantic-core](https://github.com/pydantic/pydantic-core) | `2.33.0` | `2.41.4` |
| [pyparsing](https://github.com/pyparsing/pyparsing) | `3.2.3` | `3.2.5` |
| [pyyaml](https://github.com/yaml/pyyaml) | `6.0.2` | `6.0.3` |
| [requests](https://github.com/psf/requests) | `2.32.4` | `2.32.5` |
| [s3transfer](https://github.com/boto/s3transfer) | `0.11.4` | `0.14.0` |
| [sendgrid](https://github.com/sendgrid/sendgrid-python) | `6.11.0` | `6.12.5` |
| [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.40` | `2.0.44` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.12.2` | `4.15.0` |
| [zipp](https://github.com/jaraco/zipp) | `3.21.0` | `3.23.0` |
| [pip](https://github.com/pypa/pip) | `25.2` | `25.3` |
| [pip-tools](https://github.com/jazzband/pip-tools) | `7.4.1` | `7.5.1` |
| [cachetools](https://github.com/tkem/cachetools) | `5.5.2` | `6.2.1` |
| [coverage](https://github.com/nedbat/coveragepy) | `7.8.0` | `7.11.0` |
| [distlib](https://github.com/pypa/distlib) | `0.3.9` | `0.4.0` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.18.0` | `3.20.0` |
| [identify](https://github.com/pre-commit/identify) | `2.6.9` | `2.6.15` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.1.0` | `2.3.0` |
| [packaging](https://github.com/pypa/packaging) | `24.2` | `25.0` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.3.7` | `4.5.0` |
| [pluggy](https://github.com/pytest-dev/pluggy) | `1.5.0` | `1.6.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.2.0` | `4.3.0` |
| [pyproject-api](https://github.com/tox-dev/pyproject-api) | `1.9.0` | `1.10.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `8.3.5` | `8.4.2` |
| [tox](https://github.com/tox-dev/tox) | `4.25.0` | `4.32.0` |
| [virtualenv](https://github.com/pypa/virtualenv) | `20.30.0` | `20.35.4` |



Updates `arrow` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/arrow-py/arrow/releases)
- [Changelog](https://github.com/arrow-py/arrow/blob/master/CHANGELOG.rst)
- [Commits](arrow-py/arrow@1.3.0...1.4.0)

Updates `boto3` from 1.37.24 to 1.40.64
- [Release notes](https://github.com/boto/boto3/releases)
- [Commits](boto/boto3@1.37.24...1.40.64)

Updates `botocore` from 1.37.24 to 1.40.64
- [Commits](boto/botocore@1.37.24...1.40.64)

Updates `certifi` from 2025.1.31 to 2025.10.5
- [Commits](certifi/python-certifi@2025.01.31...2025.10.05)

Updates `charset-normalizer` from 3.4.1 to 3.4.4
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.4.1...3.4.4)

Updates `click` from 8.1.8 to 8.3.0
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.rst)
- [Commits](pallets/click@8.1.8...8.3.0)

Updates `flask` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/pallets/flask/releases)
- [Changelog](https://github.com/pallets/flask/blob/main/CHANGES.rst)
- [Commits](pallets/flask@3.1.1...3.1.2)

Updates `greenlet` from 3.1.1 to 3.2.4
- [Changelog](https://github.com/python-greenlet/greenlet/blob/master/CHANGES.rst)
- [Commits](python-greenlet/greenlet@3.1.1...3.2.4)

Updates `httplib2` from 0.22.0 to 0.31.0
- [Changelog](https://github.com/httplib2/httplib2/blob/master/CHANGELOG)
- [Commits](httplib2/httplib2@v0.22.0...v0.31.0)

Updates `idna` from 3.10 to 3.11
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.10...v3.11)

Updates `importlib-metadata` from 8.6.1 to 8.7.0
- [Release notes](https://github.com/python/importlib_metadata/releases)
- [Changelog](https://github.com/python/importlib_metadata/blob/main/NEWS.rst)
- [Commits](python/importlib_metadata@v8.6.1...v8.7.0)

Updates `markupsafe` from 3.0.2 to 3.0.3
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@3.0.2...3.0.3)

Updates `networkx` from 3.4.2 to 3.5
- [Release notes](https://github.com/networkx/networkx/releases)
- [Commits](networkx/networkx@networkx-3.4.2...networkx-3.5)

Updates `psycopg2-binary` from 2.9.10 to 2.9.11
- [Changelog](https://github.com/psycopg/psycopg2/blob/master/NEWS)
- [Commits](psycopg/psycopg2@2.9.10...2.9.11)

Updates `pydantic` from 2.11.1 to 2.12.3
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](pydantic/pydantic@v2.11.1...v2.12.3)

Updates `pydantic-core` from 2.33.0 to 2.41.4
- [Release notes](https://github.com/pydantic/pydantic-core/releases)
- [Commits](pydantic/pydantic-core@v2.33.0...v2.41.4)

Updates `pyparsing` from 3.2.3 to 3.2.5
- [Release notes](https://github.com/pyparsing/pyparsing/releases)
- [Changelog](https://github.com/pyparsing/pyparsing/blob/master/CHANGES)
- [Commits](pyparsing/pyparsing@3.2.3...3.2.5)

Updates `pyyaml` from 6.0.2 to 6.0.3
- [Release notes](https://github.com/yaml/pyyaml/releases)
- [Changelog](https://github.com/yaml/pyyaml/blob/6.0.3/CHANGES)
- [Commits](yaml/pyyaml@6.0.2...6.0.3)

Updates `requests` from 2.32.4 to 2.32.5
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.32.4...v2.32.5)

Updates `s3transfer` from 0.11.4 to 0.14.0
- [Changelog](https://github.com/boto/s3transfer/blob/develop/CHANGELOG.rst)
- [Commits](boto/s3transfer@0.11.4...0.14.0)

Updates `sendgrid` from 6.11.0 to 6.12.5
- [Release notes](https://github.com/sendgrid/sendgrid-python/releases)
- [Changelog](https://github.com/sendgrid/sendgrid-python/blob/main/CHANGELOG.md)
- [Commits](sendgrid/sendgrid-python@6.11.0...6.12.5)

Updates `sqlalchemy` from 2.0.40 to 2.0.44
- [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases)
- [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst)
- [Commits](https://github.com/sqlalchemy/sqlalchemy/commits)

Updates `typing-extensions` from 4.12.2 to 4.15.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](python/typing_extensions@4.12.2...4.15.0)

Updates `zipp` from 3.21.0 to 3.23.0
- [Release notes](https://github.com/jaraco/zipp/releases)
- [Changelog](https://github.com/jaraco/zipp/blob/main/NEWS.rst)
- [Commits](jaraco/zipp@v3.21.0...v3.23.0)

Updates `pip` from 25.2 to 25.3
- [Changelog](https://github.com/pypa/pip/blob/main/NEWS.rst)
- [Commits](pypa/pip@25.2...25.3)

Updates `pip-tools` from 7.4.1 to 7.5.1
- [Release notes](https://github.com/jazzband/pip-tools/releases)
- [Changelog](https://github.com/jazzband/pip-tools/blob/main/CHANGELOG.md)
- [Commits](jazzband/pip-tools@7.4.1...v7.5.1)

Updates `cachetools` from 5.5.2 to 6.2.1
- [Changelog](https://github.com/tkem/cachetools/blob/master/CHANGELOG.rst)
- [Commits](tkem/cachetools@v5.5.2...v6.2.1)

Updates `coverage` from 7.8.0 to 7.11.0
- [Release notes](https://github.com/nedbat/coveragepy/releases)
- [Changelog](https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst)
- [Commits](coveragepy/coveragepy@7.8.0...7.11.0)

Updates `distlib` from 0.3.9 to 0.4.0
- [Release notes](https://github.com/pypa/distlib/releases)
- [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst)
- [Commits](pypa/distlib@0.3.9...0.4.0)

Updates `filelock` from 3.18.0 to 3.20.0
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.18.0...3.20.0)

Updates `identify` from 2.6.9 to 2.6.15
- [Commits](pre-commit/identify@v2.6.9...v2.6.15)

Updates `iniconfig` from 2.1.0 to 2.3.0
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](pytest-dev/iniconfig@v2.1.0...v2.3.0)

Updates `packaging` from 24.2 to 25.0
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@24.2...25.0)

Updates `platformdirs` from 4.3.7 to 4.5.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/CHANGES.rst)
- [Commits](tox-dev/platformdirs@4.3.7...4.5.0)

Updates `pluggy` from 1.5.0 to 1.6.0
- [Changelog](https://github.com/pytest-dev/pluggy/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pluggy@1.5.0...1.6.0)

Updates `pre-commit` from 4.2.0 to 4.3.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.2.0...v4.3.0)

Updates `pyproject-api` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/tox-dev/pyproject-api/releases)
- [Commits](tox-dev/pyproject-api@1.9.0...1.10.0)

Updates `pytest` from 8.3.5 to 8.4.2
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](pytest-dev/pytest@8.3.5...8.4.2)

Updates `tox` from 4.25.0 to 4.32.0
- [Release notes](https://github.com/tox-dev/tox/releases)
- [Changelog](https://github.com/tox-dev/tox/blob/main/docs/changelog.rst)
- [Commits](tox-dev/tox@4.25.0...4.32.0)

Updates `virtualenv` from 20.30.0 to 20.35.4
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@20.30.0...20.35.4)

---
updated-dependencies:
- dependency-name: arrow
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: boto3
  dependency-version: 1.40.64
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: botocore
  dependency-version: 1.40.64
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: certifi
  dependency-version: 2025.10.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: charset-normalizer
  dependency-version: 3.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: click
  dependency-version: 8.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: flask
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: greenlet
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: httplib2
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: idna
  dependency-version: '3.11'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: importlib-metadata
  dependency-version: 8.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: markupsafe
  dependency-version: 3.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: networkx
  dependency-version: '3.5'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: psycopg2-binary
  dependency-version: 2.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: pydantic
  dependency-version: 2.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pydantic-core
  dependency-version: 2.41.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pyparsing
  dependency-version: 3.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: pyyaml
  dependency-version: 6.0.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: requests
  dependency-version: 2.32.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: s3transfer
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sendgrid
  dependency-version: 6.12.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: sqlalchemy
  dependency-version: 2.0.44
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: typing-extensions
  dependency-version: 4.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: zipp
  dependency-version: 3.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pip
  dependency-version: '25.3'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pip-tools
  dependency-version: 7.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: cachetools
  dependency-version: 6.2.1
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: coverage
  dependency-version: 7.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: distlib
  dependency-version: 0.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: filelock
  dependency-version: 3.20.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: identify
  dependency-version: 2.6.15
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: iniconfig
  dependency-version: 2.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: packaging
  dependency-version: '25.0'
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: platformdirs
  dependency-version: 4.5.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pluggy
  dependency-version: 1.6.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pre-commit
  dependency-version: 4.3.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pyproject-api
  dependency-version: 1.10.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pytest
  dependency-version: 8.4.2
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: tox
  dependency-version: 4.32.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: virtualenv
  dependency-version: 20.35.4
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 1, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant