Bump the minor-and-patch group in /backend with 3 updates

[dependabot]

Bumps the minor-and-patch group in /backend with 3 updates: ruff, charset-normalizer and docling.

Updates ruff from 0.16.2 to 0.16.3

Release notes

Sourced from ruff's releases.

0.16.3

Release Notes

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.3

Released on 2026-08-13.

Preview features

• [pylint] Fix false negatives on negative numbers (PLR6104) (#27251)
• [pyupgrade] Add rule to replace while 1 with while True (UP048) (#27190)

Bug fixes

• [flake8-bandit] Also check keyword arguments (S602, S603, S607, S609) (#27687)
• [pylint] Allow continue in finally on Python 3.8 (#27626)
• [pylint] Fix PLE1307 false positive with bools (#27651)
• [pylint] Fix false positives and negatives with %b format character (PLE1300, PLE1307) (#27560)
• [pylint] Improve handling of concatenated strings (PLE1300) (#27659)

Rule changes

• [numpy] Make np.chararray autofix backwards-compatible (NPY201) (#27527)

Performance

• Enable PGO for Linux x86-64 Ruff releases (#27570)
• Enable PGO for Linux ARM64 Ruff releases (#27574)
• Enable PGO for Windows x86-64 Ruff releases (#27573)
• Enable PGO for macOS ARM64 Ruff releases (#27572)
• Reduce Expr size to 64 bytes (#27591)

CLI

• Hyperlink rule codes in ruff check --statistics output (#27646)

Documentation

• [ruff] Also suggest asyncio.TaskGroup (RUF006) (#27461)

Other changes

• Use mimalloc v3 (#27586)

Contributors

• @​Andrej730
• @​alonfaraj
• @​romero-deshaw
• @​Avasam
• @​tjkuson
• @​charliermarsh
• @​chirizxc

... (truncated)

Commits

• b0e4702 Bump 0.16.3 (#27723)
• ecdd401 [ty] Separate script and uv modules from project metadata (#27720)
• 1263524 [ty] Simplify display implementations with std::fmt::from_fn (#27718)
• 59196ba [ty] Unify polarity-aware relation construction (#27707)
• b8c5e73 [ty] Disable CodSpeed cycle estimation for instrumented benchmarks (#27706)
• 2b0d210 [ty] Centralize matched argument relations (#27705)
• a9130f3 [pyupgrade] Add rule to replace while 1 with while True (while-one, `...
• c64c7d6 [ty] Model try exception flow with operation checkpoints (#27471)
• 9dea5ef [ty] Avoid deriving sequents for typevars with concrete bounds (#27587)
• 9798e88 [ty] Preserve enum exhaustiveness with custom missing methods (#27700)
• Additional commits viewable in compare view

Updates charset-normalizer from 3.4.9 to 3.5.1

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.1

3.5.1 (2026-08-15)

Changed

• Raised upper bound of setuptools to v84 (#794)
• Cache performance access optimization for our CharInfo struct (prebuilt only).

Fixed

• No longer decoding large content when the noise detector output give a high entropy. Only impacted large content input >1M bytes.

Version 3.5.0

3.5.0 (2026-08-12)

Added

• Explicit support for Python 3.15

Fixed

• Comparing a CharsetMatch to a non-alias encoding strings (#773)
• Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
• A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
• iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

• Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
• Applied micro-optimization on several utils.
• CharsetMatches no longer sort on each match insertion.

Misc

• Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).

Changelog

Sourced from charset-normalizer's changelog.

3.5.1 (2026-08-15)

Changed

• Raised upper bound of setuptools to v84 (#794)
• Cache performance access optimization for our CharInfo struct (prebuilt only).

Fixed

• No longer decoding large content when the noise detector output give a high entropy. Only impacted large content input >1M bytes.

3.5.0 (2026-08-12)

Added

• Explicit support for Python 3.15

Fixed

• Comparing a CharsetMatch to a non-alias encoding strings (#773)
• Return 0.0 CharsetMatch.multi_byte_usage for empty payloads instead of crashing (#774)
• A file with both a charset declaration and BOM/SIG did not verify first the BOM/SIG charset.
• iso2022* cases misdetected due to a flaw in our multibyte chunking logic.

Changed

• Replaced the optional mypyc build with Cython extensions while retaining the pure Python fallback. The previous engine (mypyc) started to hit rough limit around the optimization of our noise/coherence detector while Cython allows us to steer the engine toward the right generated optimized sources. This change SHOULD not impact bundler (e.g. Pyinstaller) as the module are immediately discoverable (i.e. not hidden import like mypyc did). Moreover, a long wished distribution is the abi3 wheels, this will allow us to no longer rush each year when a new Python interpreter is released. We still distribute the interpreter specific wheels for faster performance.
• Applied micro-optimization on several utils.
• CharsetMatches no longer sort on each match insertion.

Misc

• Removed an old performance optimization attempt in apy.py (success_fast_tracked+payload_result_cache).

Commits

• e239bdc Merge pull request #795 from jawah/release-3.5.1
• 648ad77 docs: update faq
• fab2749 docs: write changelog for 3.5.1
• 7d32774 chore: bump version to 3.5.1
• 9a69f60 docs: update data/info
• 5dcc6dd perf: charinfo cache access optimization in cython
• ea3b447 fix: do not validate-decode large payload when md says it's noise
• a05917f chore: allow setuptools 84 builds (#794)
• 3325d87 Merge pull request #792 from jawah/update-cibuildwheel-action
• 77203b1 chore: reformat noxfile.py
• Additional commits viewable in compare view

Updates docling from 2.118.1 to 2.120.1

Release notes

Sourced from docling's releases.

v2.120.1

Fix

• Update release CI (#3998) (7b3fbb2)

v2.120.0

Feature

• pdf: Infer heading levels from font weight, slant and case (#3984) (e74a905)
• cli: Add --layout-engine and --table-structure-engine (#3994) (6fee680)
• Add docling-client pypi package (#3977) (c2e9829)
• cli: Add --page-range to convert (#3966) (6c61bee)

Fix

• pptx: Handle unsupported 3-D chart types without crashing (#3972) (d06de69)
• pptx: Keep the bbox of shapes positioned at x = 0 EMU (#3990) (086e965)
• odt: Populate TextItem.hyperlink for anchor elements (#3949) (ade64c9)
• html: Stop a header-only rowspan table from crashing the backend (#3827) (e00be1d)
• docx: Prevent KeyError in _manage_list_structure when use_level … (#3973) (c2e4e47)
• video: Attach TrackSource via add_picture(source=...) (#3974) (a8d60fe)
• mets-gbs: Page missing image/coordOCR metadata crashes instead of skipping (#3930) (df18ae4)
• vlm: Record MLX generated token counts (#3954) (f95633f)

Documentation

• Add installation of docling skills via uvx (#3969) (49106bc)

v2.119.0

Feature

• email: Add Outlook .msg support and optional attachment listing (#3873) (fad0ee2)
• vlm: Parse Unlimited-OCR grounding output (#3944) (d4e65ef)

Fix

• Missing dclx in response ArtifactRef (#3968) (50fcc4d)
• asr: Require whisper-s2t-reborn>=1.7.1 for WhisperS2T correctness fixes (#3941) (8f6ba40)
• asr: Handle DocumentStream input in MLX Whisper (#3885) (8050c42)

Changelog

Sourced from docling's changelog.

v2.120.1 - 2026-08-14

Fix

• Update release CI (#3998) (7b3fbb2)

v2.120.0 - 2026-08-14

Feature

• pdf: Infer heading levels from font weight, slant and case (#3984) (e74a905)
• cli: Add --layout-engine and --table-structure-engine (#3994) (6fee680)
• Add docling-client pypi package (#3977) (c2e9829)
• cli: Add --page-range to convert (#3966) (6c61bee)

Fix

• pptx: Handle unsupported 3-D chart types without crashing (#3972) (d06de69)
• pptx: Keep the bbox of shapes positioned at x = 0 EMU (#3990) (086e965)
• odt: Populate TextItem.hyperlink for anchor elements (#3949) (ade64c9)
• html: Stop a header-only rowspan table from crashing the backend (#3827) (e00be1d)
• docx: Prevent KeyError in _manage_list_structure when use_level … (#3973) (c2e4e47)
• video: Attach TrackSource via add_picture(source=...) (#3974) (a8d60fe)
• mets-gbs: Page missing image/coordOCR metadata crashes instead of skipping (#3930) (df18ae4)
• vlm: Record MLX generated token counts (#3954) (f95633f)

Documentation

• Add installation of docling skills via uvx (#3969) (49106bc)

v2.119.0 - 2026-08-10

Feature

• email: Add Outlook .msg support and optional attachment listing (#3873) (fad0ee2)
• vlm: Parse Unlimited-OCR grounding output (#3944) (d4e65ef)

Fix

• Missing dclx in response ArtifactRef (#3968) (50fcc4d)
• asr: Require whisper-s2t-reborn>=1.7.1 for WhisperS2T correctness fixes (#3941) (8f6ba40)
• asr: Handle DocumentStream input in MLX Whisper (#3885) (8050c42)

Commits

• 3ef863f chore: bump version to 2.120.1 [skip ci]
• 7b3fbb2 fix: update release CI (#3998)
• 4e51767 chore: bump version to 2.120.0 [skip ci]
• e74a905 feat(pdf): infer heading levels from font weight, slant and case (#3984)
• 6fee680 feat(cli): add --layout-engine and --table-structure-engine (#3994)
• d06de69 fix(pptx): handle unsupported 3-D chart types without crashing (#3972)
• 086e965 fix(pptx): keep the bbox of shapes positioned at x = 0 EMU (#3990)
• ade64c9 fix(odt): populate TextItem.hyperlink for anchor elements (#3949)
• 127debc refactor(gbs): remove 'assert' statements, annotation modernization (#3987)
• e00be1d fix(html): stop a header-only rowspan table from crashing the backend (#3827)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Labels

The following labels could not be found: backend, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.