Bump the python-dependencies group across 1 directory with 16 updates by dependabot[bot] · Pull Request #18 · CSSUoB/birminghack-checkin

dependabot · 2026-04-23T01:47:01Z

Bumps the python-dependencies group with 16 updates in the / directory:

Package	From	To
anyio	`4.12.1`	`4.13.0`
certifi	`2026.2.25`	`2026.4.22`
click	`8.3.1`	`8.3.3`
fastapi	`0.135.1`	`0.136.0`
idna	`3.11`	`3.13`
importlib-resources	`6.5.2`	`7.1.0`
pillow	`12.1.1`	`12.2.0`
pydantic	`2.12.5`	`2.13.3`
pydantic-core	`2.42.0`	`2.46.3`
pygments	`2.19.2`	`2.20.0`
python-multipart	`0.0.22`	`0.0.26`
rich	`14.3.3`	`15.0.0`
setuptools	`82.0.0`	`82.0.1`
starlette	`0.52.1`	`1.0.0`
typer	`0.24.1`	`0.24.2`
uvicorn	`0.41.0`	`0.45.0`

Updates anyio from 4.12.1 to 4.13.0

Release notes

Sourced from anyio's releases.

4.13.0

Dropped support for Python 3.9

Added a ttl parameter to the anyio.functools.lru_cache wrapper (#1073; PR by @Graeme22)

Widened the type annotations of file I/O streams to accept IO[bytes] instead of just BinaryIO (#1078)

Fixed anyio.Path not being compatible with Python 3.15 due to the removal of pathlib.Path.is_reserved() and the addition of pathlib.Path.__vfspath__() (#1061; PR by @veeceey)

Fixed the BrokenResourceError raised by the asyncio SocketStream not having the original exception as its cause (#1055; PR by @veeceey)

Fixed the TypeError raised when using "func" as a parameter name in pytest.mark.parametrize when using the pytest plugin (#1068; PR by @JohnnyDeuss)

Fixed the pytest plugin not running tests that had the anyio marker added programmatically via pytest_collection_modifyitems (#422; PR by @chbndrhnns)

Fixed cancellation exceptions leaking from a CancelScope on asyncio when they are contained in an exception group alongside non-cancellation exceptions (#1091; PR by @gschaffner)

Fixed Condition.wait() not passing on a notification when the task is cancelled but already received a notification

Fixed inverted condition in the process pool shutdown phase which would cause still-running pooled processes not to be terminated (#1074; PR by @bysiber)

Commits

afbe93c Bumped up the version
33bdf2e Rearranged the changelog entries
19e09e2 Fixed inverted condition in _forcibly_shutdown_process_pool_on_exit (#1074)
9369d80 Fixed Condition.wait() not handing over notification when cancelled
6f122ab Fixed cancellation exceptions leaking from a CancelScope on asyncio when th...
beaa45a [pre-commit.ci] pre-commit autoupdate (#1097)
602f660 Widened type annotations to accept IO[bytes] in file streams
b5dcd45 Added note about erasing the template
d68670b [pre-commit.ci] pre-commit autoupdate (#1090)
fc17a22 tweak to_thread docs about abandon_on_cancel (#1088)
Additional commits viewable in compare view

Updates certifi from 2026.2.25 to 2026.4.22

Commits

5dddfb0 2026.04.22 (#410)
f99eccd Bump peter-evans/create-pull-request from 8.1.0 to 8.1.1 (#404)
918bed0 Bump actions/upload-artifact from 7.0.0 to 7.0.1 (#405)
0a49067 Bump pypa/gh-action-pypi-publish from 1.13.0 to 1.14.0 (#403)
acf6ce8 Bump actions/download-artifact from 8.0.0 to 8.0.1 (#398)
feb0ed2 Bump actions/download-artifact from 7.0.0 to 8.0.0 (#397)
d9c11a5 Bump actions/upload-artifact from 6.0.0 to 7.0.0 (#396)
See full diff in compare view

Updates click from 8.3.1 to 8.3.3

Release notes

Sourced from click's releases.

8.3.3

This is the Click 8.3.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.3/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-3 Milestone: https://github.com/pallets/click/milestone/30

Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. #1026 #1477 #2775

Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. #3298 #3299

Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. #3238

Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. #3224 #3240

Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. #654 #824 #843 #951 #3235

Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. #3151

Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. #3151 #3177

Show custom show_default string in prompts, matching the existing help text behavior. #2836 #2837 #3165 #3262 #3280 #3328

Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. #3111 #3239

Mark make_default_short_help as private API. #3189 #3250

CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. #2865

Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. #2879 #3248

8.3.2

This is the Click 8.3.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.3.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-2 Milestone: https://github.com/pallets/click/milestone/29

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.3

Released 2026-04-20

Use :func:shlex.split to split pager and editor commands into argv lists for :class:subprocess.Popen, removing shell=True. :issue:1026 :pr:1477 :pr:2775

Fix TypeError when rendering help for an option whose default value is an object that doesn't support equality comparison with strings, such as semver.Version. :issue:3298 :pr:3299

Fix pager test pollution under parallel execution by using pytest's tmp_path fixture instead of a shared temporary file path. :pr:3238

Treat Sentinel.UNSET values in a default_map as absent, so they fall through to the next default source instead of being used as the value. :issue:3224 :pr:3240

Patch pdb.Pdb in CliRunner isolation so pdb.set_trace(), breakpoint(), and debuggers subclassing pdb.Pdb (ipdb, pdbpp) can interact with the real terminal instead of the captured I/O streams. :issue:654 :issue:824 :issue:843 :pr:951 :pr:3235

Add optional randomized parallel test execution using pytest-randomly and pytest-xdist to detect test pollution and race conditions. :pr:3151

Add contributor documentation for running stress tests, randomized parallel tests, and Flask smoke tests. :pr:3151 :pr:3177

Show custom show_default string in prompts, matching the existing help text behavior. :issue:2836 :pr:2837 :pr:3165 :pr:3262 :pr:3280 :pr:3328

Fix default=True with boolean flag_value always returning the flag_value instead of True. The default=True to flag_value substitution now only applies to non-boolean flags, where True acts as a sentinel meaning "activate this flag by default". For boolean flags, default=True is returned as a literal value. :issue:3111 :pr:3239

Mark make_default_short_help as private API. :issue:3189 :pr:3250

CliRunner's redirected streams now expose the original file descriptor via fileno(), so that faulthandler, subprocess, and other C-level consumers no longer crash with io.UnsupportedOperation. :issue:2865

Change :class:ParameterSource to an :class:~enum.IntEnum and reorder its members from most to least explicit, so values can be compared to check whether a parameter was explicitly provided. :issue:2879 :pr:3248

Version 8.3.2

Released 2026-04-02

Fix handling of flag_value when is_flag=False to allow such options to be used without an explicit value. :issue:3084 :pr:3152

Hide Sentinel.UNSET values as None when using lookup_default(). :issue:3136 :pr:3199 :pr:3202 :pr:3209 :pr:3212 :pr:3224

... (truncated)

Commits

c06d2d0 Release 8.3.3
f1f191e Apply format guidelines to commits since latest 8.3.2 release (#3343)
bb59ba0 Apply format guidelines to commits since latest 8.3.2 release
4a35225 Reduce blast-radius of UNSET in default_map (#3240)
c07bb93 Merge branch 'stable' into unset-in-default-map
c7e1ba8 Reorder ParameterSource (#3248)
76552ff Show default string in prompt (#3328)
ac5cec5 Reorder ParameterSource from most to least explicit
8c452e0 Merge branch 'stable' into show-default-string-in-prompt
8c95c73 Reconcile default value passing and default activation (#3239)
Additional commits viewable in compare view

Updates fastapi from 0.135.1 to 0.136.0

Release notes

Sourced from fastapi's releases.

0.136.0

Upgrades

⬆️ Support free-threaded Python 3.14t. PR #15149 by @svlandeg.

0.135.4

Refactors

🔥 Remove April Fool's @app.vibe() 🤪. PR #15363 by @tiangolo.

Internal

⬆ Bump cryptography from 46.0.5 to 46.0.7. PR #15314 by @dependabot[bot].

⬆ Bump strawberry-graphql from 0.307.1 to 0.312.3. PR #15309 by @dependabot[bot].

🔨 Add pre-commit hook to ensure latest release header has date. PR #15293 by @YuriiMotov.

0.135.3

Features

✨ Add support for @app.vibe(). PR #15280 by @tiangolo.

New docs: Vibe Coding.

Docs

✏️ Fix typo for client_secret in OAuth2 form docstrings. PR #14946 by @bysiber.

Internal

👥 Update FastAPI People - Experts. PR #15279 by @tiangolo.

⬆ Bump orjson from 3.11.7 to 3.11.8. PR #15276 by @dependabot[bot].

⬆ Bump ruff from 0.15.0 to 0.15.8. PR #15277 by @dependabot[bot].

👥 Update FastAPI GitHub topic repositories. PR #15274 by @tiangolo.

⬆ Bump fastmcp from 2.14.5 to 3.2.0. PR #15267 by @dependabot[bot].

👥 Update FastAPI People - Contributors and Translators. PR #15270 by @tiangolo.

⬆ Bump requests from 2.32.5 to 2.33.0. PR #15228 by @dependabot[bot].

👷 Add ty check to lint.sh. PR #15136 by @svlandeg.

0.135.2

Upgrades

⬆️ Increase lower bound to pydantic >=2.9.0. and fix the test suite. PR #15139 by @svlandeg.

Docs

📝 Add missing last release notes dates. PR #15202 by @tiangolo.

📝 Update docs for contributors and team members regarding translation PRs. PR #15200 by @YuriiMotov.

💄 Fix code blocks in reference docs overflowing table width. PR #15094 by @YuriiMotov.

📝 Fix duplicated words in docstrings. PR #15116 by @AhsanSheraz.

📝 Add docs for pyproject.toml with entrypoint. PR #15075 by @tiangolo.

📝 Update links in docs to no longer use the classes external-link and internal-link. PR #15061 by @tiangolo.

... (truncated)

Commits

708606c 🔖 Release version 0.136.0
13be6a3 📝 Update release notes
4b26487 ⬆️ Support free-threaded Python 3.14t (#15149)
f796c34 🔖 Release version 0.135.4
09d1d1c 📝 Update release notes
ae4e45c 🔥 Remove April Fool's @app.vibe() 🤪 (#15363)
9653034 📝 Update release notes
6f9a102 ⬆ Bump cryptography from 46.0.5 to 46.0.7 (#15314)
eba8942 📝 Update release notes
77d080c ⬆ Bump strawberry-graphql from 0.307.1 to 0.312.3 (#15309)
Additional commits viewable in compare view

Updates idna from 3.11 to 3.13

Changelog

Sourced from idna's changelog.

3.13 (2026-04-22) +++++++++++++++++

Correct classification error for codepoint U+A7F1

3.12 (2026-04-21) +++++++++++++++++

Update to Unicode 17.0.0.

Issue a deprecation warning for the transitional argument.

Added lazy-loading to provide some performance improvements.

Removed vestiges of code related to Python 2 support, including segmentation of data structures specific to Jython.

Thanks to Rodrigo Nogueira for contributions to this release.

Commits

89cdfd2 Release v3.13
1eb0686 Pre-release 3.13
5f20d1e Merge pull request #220 from kjd/unicode-next
4ea8425 Regenerate idnadata.py with correct NFKC_CF data
fd47341 Use NFKC_CF from Unicode data files instead of Python's unicodedata module
a5304a4 Merge pull request #219 from kjd/release-3.12
d80d6f9 Release v3.12
1bb44dd Merge pull request #218 from kjd/release-candidate-3.12rc0
909c49d Release candidate for 3.12
c5459a1 Merge pull request #217 from kjd/housekeeping-2
Additional commits viewable in compare view

Updates importlib-resources from 6.5.2 to 7.1.0

Changelog

Sourced from importlib-resources's changelog.

v7.1.0

Features

files() now provides a nicer error when main.spec is None. (#331)

v7.0.0

Deprecations and Removals

Remove compatibility shim for deprecated parameter package in :func:importlib.resources.files. Patch by Semyon Moroz. (#332)

Commits

78c697d Finalize
5a2bffc A better error message from importlib.resources.files() when module spec is None
d80822a Add news fragment.
6e2183f Revise the test for clarity and traceability.
ee94f7c Merge branch 'main' into error-message-none-spec-module
a542188 Extract method to encapsulate the validation.
74f308a Revert unrelated change to wrap_spec.
c6773a1 Prefer bare asserts. They read better and they render nicer under pytest.
935b189 Replace UTF-16 BOM handling with a more direct helper.
4049971 Finalize
Additional commits viewable in compare view

Updates pillow from 12.1.1 to 12.2.0

Release notes

Sourced from pillow's releases.

12.2.0

https://pillow.readthedocs.io/en/stable/releasenotes/12.2.0.html

Documentation

Update 12.2.0 release notes #9522 [@hugovk]

Add loader plugins: AMOS abk, Atari Degas, 40+ more obscure formats via Netpbm #9482 [@bitplane]

Update Python versions #9515 [@radarhere]

Jeffrey A. Clark -> Jeffrey 'Alex' Clark #9513 [@aclark4life]

Add release notes for #9394, #9419 and #9456 #9467 [@radarhere]

Add Amiga Workbench .info loader to 3rd party plugins list #9459 [@bitplane]

Merge PFM documentation into PPM #9434 [@radarhere]

Update macOS tested Pillow versions #9431 [@radarhere]

Fix CVE number #9430 [@hugovk]

Dependencies

Update xz to 5.8.3 #9523 [@radarhere]

Update libjpeg-turbo to 3.1.4.1 #9507 [@radarhere]

Update libpng to 1.6.56 #9499 [@radarhere]

Update freetype to 2.14.3 #9485 [@radarhere]

Updated libavif to 1.4.1 #9479 [@radarhere]

Updated harfbuzz to 13.2.1 #9461 [@radarhere]

Update Ghostscript to 10.7.0 #9469 [@radarhere]

Update harfbuzz to 13.0.1 #9453 [@radarhere]

Update libavif to 1.4.0 #9460 [@radarhere]

Update freetype to 2.14.2 #9449 [@radarhere]

Update actions/download-artifact action to v8 #9451 [@renovate[bot]]

Updated libpng to 1.6.55 #9425 [@radarhere]

Testing

Cleanup .spider extension in the same test where it is added #9517 [@radarhere]

Run tests in parallel via tox for 3.5x speedup #9516 [@hugovk]

Enable colour in CI logs #9486 [@hugovk]

Update Ghostscript to 10.7.0 #9469 [@radarhere]

Simplify TGA test code #9477 [@radarhere]

Update tests to check for ValueError when encoding an empty image #9464 [@radarhere]

Upgrade CI from macos-15-intel to macos-26-intel #9454 [@hugovk]

Add check-case-conflict hook #9446 [@radarhere]

Specify platform when pulling docker image #9440 [@radarhere]

GHA: Cache libavif and webp builds for Ubuntu #9437 [@hugovk]

Update macOS tested Pillow versions #9431 [@radarhere]

Other changes

Check calloc return value #9527 [@radarhere]

Check all allocs in the Arrow tree #9488 [@wiredfool]

Reject non-numeric elements inside list coords #9526 [@hugovk]

Move variable declaration inside define #9525 [@radarhere]

... (truncated)

Commits

3c41c09 12.2.0 version bump
cdaa29e Check calloc return value (#9527)
585b2f5 Check calloc return value
ecf011e Check all allocs in the Arrow tree (#9488)
cf6de8c Reject non-numeric elements inside list coords (#9526)
ffdcede Update 12.2.0 release notes (#9522)
7929d77 Added security release notes (#149)
c4f7aa5 Added security release notes
22cdb5f Move variable declaration inside define (#9525)
fc15b3b Resize tall images vertically first (#9524)
Additional commits viewable in compare view

Updates pydantic from 2.12.5 to 2.13.3

Release notes

Sourced from pydantic's releases.

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

Handle AttributeError subclasses with from_attributes by @Viicos in #13096

Full Changelog: pydantic/pydantic@v2.13.2...v2.13.3

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

Fix ValidationInfo.field_name missing with model_validate_json() by @Viicos in #13084

Full Changelog: pydantic/pydantic@v2.13.1...v2.13.2

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

Fix ValidationInfo.data missing with model_validate_json() by @davidhewitt in #13079

Full Changelog: pydantic/pydantic@v2.13.0...v2.13.1

v2.13.0 2026-04-13

v2.13.0 (2026-04-13)

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

Packaging

Add zizmor for GitHub Actions workflow linting by @Viicos in #13039

Update jiter to v0.14.0 to fix a segmentation fault on musl Linux by @Viicos in #13064

... (truncated)

Changelog

Sourced from pydantic's changelog.

v2.13.3 (2026-04-20)

GitHub release

What's Changed

Fixes

Handle AttributeError subclasses with from_attributes by @Viicos in #13096

v2.13.2 (2026-04-17)

GitHub release

What's Changed

Fixes

Fix ValidationInfo.field_name missing with model_validate_json() by @Viicos in #13084

v2.13.1 (2026-04-15)

GitHub release

What's Changed

Fixes

Fix ValidationInfo.data missing with model_validate_json() by @davidhewitt in #13079

v2.13.0 (2026-04-13)

GitHub release

The highlights of the v2.13 release are available in the blog post. Several minor changes (considered non-breaking changes according to our versioning policy) are also included in this release. Make sure to look into them before upgrading.

This release contains the updated pydantic.v1 namespace, matching version 1.10.26 which includes support for Python 3.14.

What's Changed

See the beta releases for all changes sinces 2.12.

New Features

Allow default factories of private attributes to take validated model data by @Viicos in #13013

Changes

... (truncated)

Commits

9e9a111 Fix backported test
1ec8c6a Prepare release v2.13.3
fb4f204 Handle AttributeError subclasses with from_attributes
ca3ddd1 Prepare release v2.13.2
000e823 Fix ValidationInfo.field_name missing with model_validate_json()
d45d8be Prepare release 2.13.1
54aca60 Fix ValidationInfo.data missing with model_validate_json()
46bf4fa Fix Pydantic release workflow (#13067)
1b359ed Prepare release v2.13.0 (#13065)
b1bf194 Fix model equality when using runtime extra configuration (#13062)
Additional commits viewable in compare view

Updates pydantic-core from 2.42.0 to 2.46.3

Commits

See full diff in compare view

Updates pygments from 2.19.2 to 2.20.0

Release notes

Sourced from pygments's releases.

2.20.0

New lexers:

Rell (#2914)

Updated lexers:

archetype: Fix catastrophic backtracking in GUID and ID patterns (#3064)

ASN.1: Recognize minus sign and fix range operator (#3014, #3060)

C++: Add C++26 keywords (#2955), add integer literal suffixes (#2966)

ComponentPascal: Fix analyse_text (#3028, #3032)

Coq renamed to Rocq (#2883, #2908)

Cython: Various improvements (#2932, #2933)

Debian control: Improve architecture parsing (#3052)

Devicetree: Add support for overlay/fragments (#3021), add bytestring support (#3022), fix catastrophic backtracking (#3057)

Fennel: Various improvements (#2911)

Haskell: Handle escape sequences in character literals (#3069, #1795)

Java: Add module keywords (#2955)

Lean4: Add operators ]', ]?, ]! (#2946)

LESS: Support single-line comments (#3005)

LilyPond: Update to 2.25.29 (#2974)

LLVM: Support C-style comments (#3023, #2978)

Lua(u): Fix catastrophic backtracking (#3047)

Macaulay2: Update to 1.25.05 (#2893), 1.25.11 (#2988)

Mathematica: Various improvements (#2957)

meson: Add additional operators (#2919)

MySQL: Update keywords (#2970)

org-Mode: Support both schedule and deadline (#2899)

PHP: Add __PROPERTY__ magic constant (#2924), add reserved keywords (#3002)

PostgreSQL: Add more keywords (#2985)

protobuf: Fix namespace tokenization (#2929)

Python: Add t-string support (#2973, #3009, #3010)

Tablegen: Fix infinite loop (#2972, #2940)

Tera Term macro: Add commands introduced in v5.3 through v5.6 (#2951)

TOML: Support TOML 1.1.0 (#3026, #3027)

Turtle: Allow empty comment lines (#2980)

XML: Added .xbrl as file ending (#2890, #2891)

Drop Python 3.8, and add Python 3.14 as a supported version (#2987, #3012)

Various improvements to autopygmentize (#2894)

Update onedark style to support more token types (#2977)

Update rtt style to support more token types (#2895)

Cache entry points to improve performance (#2979)

Fix xterm-256 color table (#3043)

Fix kwargs dictionary getting mutated on each call (#3044)

Changelog

Sourced from pygments's changelog.

Version 2.20.0

(released March 29th, 2026)

New lexers:

Rell (#2914)

Updated lexers:

archetype: Fix catastrophic backtracking in GUID and ID patterns (#3064)

ASN.1: Recognize minus sign and fix range operator (#3014, #3060)

C++: Add C++26 keywords (#2955), add integer literal suffixes (#2966)

ComponentPascal: Fix analyse_text (#3028, #3032)

Coq renamed to Rocq (#2883, #2908)

Cython: Various improvements (#2932, #2933)

Debian control: Improve architecture parsing (#3052)

Devicetree: Add support for overlay/fragments (#3021), add bytestring support (#3022), fix catastrophic backtracking (#3057)

Fennel: Various improvements (#2911)

Haskell: Handle escape sequences in character literals (#3069, #1795)

Java: Add module keywords (#2955)

Lean4: Add operators ]', ]?, ]! (#2946)

LESS: Support single-line comments (#3005)

LilyPond: Update to 2.25.29 (#2974)

LLVM: Support C-style comments (#3023, #2978)

Lua(u): Fix catastrophic backtracking (#3047)

Macaulay2: Update to 1.25.05 (#2893), 1.25.11 (#2988)

Mathematica: Various improvements (#2957)

meson: Add additional operators (#2919)

MySQL: Update keywords (#2970)

org-Mode: Support both schedule and deadline (#2899)

PHP: Add __PROPERTY__ magic constant (#2924), add reserved keywords (#3002)

PostgreSQL: Add more keywords (#2985)

protobuf: Fix namespace tokenization (#2929)

Python: Add t-string support (#2973, #3009, #3010)

Tablegen: Fix infinite loop (#2972, #2940)

Tera Term macro: Add commands introduced in v5.3 through v5.6 (#2951)

TOML: Support TOML 1.1.0 (#3026, #3027)

Turtle: Allow empty comment lines (#2980)

XML: Added .xbrl as file ending (#2890, #2891)

Drop Python 3.8, and add Python 3.14 as a supported version (#2987, #3012)

Various improvements to autopygmentize (#2894)

Update onedark style to support more token types (#2977)

Update rtt style to support more token types (#2895)

Cache entry points to improve performance (#2979)

Fix xterm-256 color table (#3043)

Fix kwargs dictionary getting mutated on each call (#3044)

Commits

Bumps the python-dependencies group with 16 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.12.1` | `4.13.0` | | [certifi](https://github.com/certifi/python-certifi) | `2026.2.25` | `2026.4.22` | | [click](https://github.com/pallets/click) | `8.3.1` | `8.3.3` | | [fastapi](https://github.com/fastapi/fastapi) | `0.135.1` | `0.136.0` | | [idna](https://github.com/kjd/idna) | `3.11` | `3.13` | | [importlib-resources](https://github.com/python/importlib_resources) | `6.5.2` | `7.1.0` | | [pillow](https://github.com/python-pillow/Pillow) | `12.1.1` | `12.2.0` | | [pydantic](https://github.com/pydantic/pydantic) | `2.12.5` | `2.13.3` | | [pydantic-core](https://github.com/pydantic/pydantic) | `2.42.0` | `2.46.3` | | [pygments](https://github.com/pygments/pygments) | `2.19.2` | `2.20.0` | | [python-multipart](https://github.com/Kludex/python-multipart) | `0.0.22` | `0.0.26` | | [rich](https://github.com/Textualize/rich) | `14.3.3` | `15.0.0` | | [setuptools](https://github.com/pypa/setuptools) | `82.0.0` | `82.0.1` | | [starlette](https://github.com/Kludex/starlette) | `0.52.1` | `1.0.0` | | [typer](https://github.com/fastapi/typer) | `0.24.1` | `0.24.2` | | [uvicorn](https://github.com/Kludex/uvicorn) | `0.41.0` | `0.45.0` | Updates `anyio` from 4.12.1 to 4.13.0 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.12.1...4.13.0) Updates `certifi` from 2026.2.25 to 2026.4.22 - [Commits](certifi/python-certifi@2026.02.25...2026.04.22) Updates `click` from 8.3.1 to 8.3.3 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/8.3.3/CHANGES.rst) - [Commits](pallets/click@8.3.1...8.3.3) Updates `fastapi` from 0.135.1 to 0.136.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.135.1...0.136.0) Updates `idna` from 3.11 to 3.13 - [Release notes](https://github.com/kjd/idna/releases) - [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst) - [Commits](kjd/idna@v3.11...v3.13) Updates `importlib-resources` from 6.5.2 to 7.1.0 - [Release notes](https://github.com/python/importlib_resources/releases) - [Changelog](https://github.com/python/importlib_resources/blob/main/NEWS.rst) - [Commits](python/importlib_resources@v6.5.2...v7.1.0) Updates `pillow` from 12.1.1 to 12.2.0 - [Release notes](https://github.com/python-pillow/Pillow/releases) - [Changelog](https://github.com/python-pillow/Pillow/blob/main/CHANGES.rst) - [Commits](python-pillow/Pillow@12.1.1...12.2.0) Updates `pydantic` from 2.12.5 to 2.13.3 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.12.5...v2.13.3) Updates `pydantic-core` from 2.42.0 to 2.46.3 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](https://github.com/pydantic/pydantic/commits) Updates `pygments` from 2.19.2 to 2.20.0 - [Release notes](https://github.com/pygments/pygments/releases) - [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES) - [Commits](pygments/pygments@2.19.2...2.20.0) Updates `python-multipart` from 0.0.22 to 0.0.26 - [Release notes](https://github.com/Kludex/python-multipart/releases) - [Changelog](https://github.com/Kludex/python-multipart/blob/master/CHANGELOG.md) - [Commits](Kludex/python-multipart@0.0.22...0.0.26) Updates `rich` from 14.3.3 to 15.0.0 - [Release notes](https://github.com/Textualize/rich/releases) - [Changelog](https://github.com/Textualize/rich/blob/master/CHANGELOG.md) - [Commits](Textualize/rich@v14.3.3...v15.0.0) Updates `setuptools` from 82.0.0 to 82.0.1 - [Release notes](https://github.com/pypa/setuptools/releases) - [Changelog](https://github.com/pypa/setuptools/blob/main/NEWS.rst) - [Commits](pypa/setuptools@v82.0.0...v82.0.1) Updates `starlette` from 0.52.1 to 1.0.0 - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](Kludex/starlette@0.52.1...1.0.0) Updates `typer` from 0.24.1 to 0.24.2 - [Release notes](https://github.com/fastapi/typer/releases) - [Changelog](https://github.com/fastapi/typer/blob/master/docs/release-notes.md) - [Commits](fastapi/typer@0.24.1...0.24.2) Updates `uvicorn` from 0.41.0 to 0.45.0 - [Release notes](https://github.com/Kludex/uvicorn/releases) - [Changelog](https://github.com/Kludex/uvicorn/blob/main/docs/release-notes.md) - [Commits](Kludex/uvicorn@0.41.0...0.45.0) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: certifi dependency-version: 2026.4.22 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: click dependency-version: 8.3.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: fastapi dependency-version: 0.136.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: idna dependency-version: '3.13' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: importlib-resources dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: pillow dependency-version: 12.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pydantic dependency-version: 2.13.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pydantic-core dependency-version: 2.46.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: pygments dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies - dependency-name: python-multipart dependency-version: 0.0.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: rich dependency-version: 15.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: setuptools dependency-version: 82.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: starlette dependency-version: 1.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python-dependencies - dependency-name: typer dependency-version: 0.24.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python-dependencies - dependency-name: uvicorn dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Apr 23, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the python-dependencies group across 1 directory with 16 updates#18

Bump the python-dependencies group across 1 directory with 16 updates#18
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/pip/python-dependencies-cca5778adb

dependabot Bot commented on behalf of github Apr 23, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Apr 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

4.13.0

8.3.3

8.3.2

Version 8.3.3

Version 8.3.2

0.136.0

Upgrades

0.135.4

Refactors

Internal

0.135.3

Features

Docs

Internal

0.135.2

Upgrades

Docs

v7.1.0

Features

v7.0.0

Deprecations and Removals

12.2.0

Documentation

Dependencies

Testing

Other changes

v2.13.3 2026-04-20

v2.13.3 (2026-04-20)

What's Changed

Fixes

v2.13.2 2026-04-17

v2.13.2 (2026-04-17)

What's Changed

Fixes

v2.13.1 2026-04-15

v2.13.1 (2026-04-15)

What's Changed

Fixes

v2.13.0 2026-04-13

v2.13.0 (2026-04-13)

What's Changed

Packaging

v2.13.3 (2026-04-20)

What's Changed

Fixes

v2.13.2 (2026-04-17)

What's Changed

Fixes

v2.13.1 (2026-04-15)

What's Changed

Fixes

v2.13.0 (2026-04-13)

What's Changed

New Features

Changes

2.20.0

Version 2.20.0

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Apr 23, 2026 •

edited

Loading