Skip to content

Deps: Bump the dependencies group across 10 directories with 37 updates - #1792

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backport-pull-request/dependencies-c13b3ae5df
Open

Deps: Bump the dependencies group across 10 directories with 37 updates#1792
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backport-pull-request/dependencies-c13b3ae5df

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 20, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 23 updates in the /backport-pull-request directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.4.1 26.2.0
anyio 4.11.0 4.14.2
astroid 3.3.11 4.0.4
black 26.3.1 26.5.1
certifi 2025.10.5 2026.7.22
click 8.1.8 8.4.2
colorful 0.5.7 0.5.8
dill 0.4.0 0.4.1
exceptiongroup 1.3.0 1.3.1
h2 4.3.0 4.4.1
idna 3.15 3.18
isort 6.1.0 8.0.1
lxml 6.1.0 6.1.1
markdown-it-py 3.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.4.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.7.2 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0

Bumps the dependencies group with 23 updates in the /conventional-commits directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.4.1 26.2.0
anyio 4.11.0 4.14.2
astroid 4.0.1 4.0.4
black 26.3.1 26.5.1
certifi 2025.10.5 2026.7.22
click 8.3.0 8.4.2
colorful 0.5.7 0.5.8
dill 0.4.0 0.4.1
exceptiongroup 1.3.0 1.3.1
h2 4.3.0 4.4.1
idna 3.15 3.18
isort 7.0.0 8.0.1
lxml 6.1.0 6.1.1
markdown-it-py 4.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.5.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.7.2 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0

Bumps the dependencies group with 25 updates in the /detect-hidden-unicode directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.11.0 26.2.0
anyio 4.12.0 4.14.2
black 26.3.1 26.5.1
certifi 2025.11.12 2026.7.22
click 8.1.8 8.4.2
h2 4.3.0 4.4.1
idna 3.15 3.18
lxml 6.1.0 6.1.1
markdown-it-py 3.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.4.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.8.0 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0
coverage 7.10.7 7.15.4
pytest-randomly 4.0.1 4.1.0
pytest 9.0.3 9.1.1
iniconfig 2.1.0 2.3.0
librt 0.7.3 0.15.0
mypy 1.19.0 2.3.1
ruff 0.14.8 0.16.3

Bumps the dependencies group with 23 updates in the /download-artifact directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.4.1 26.2.0
anyio 4.11.0 4.14.2
astroid 3.3.11 4.0.4
black 26.3.1 26.5.1
certifi 2025.10.5 2026.7.22
click 8.1.8 8.4.2
colorful 0.5.7 0.5.8
dill 0.4.0 0.4.1
exceptiongroup 1.3.0 1.3.1
h2 4.3.0 4.4.1
idna 3.15 3.18
isort 6.1.0 8.0.1
lxml 6.1.0 6.1.1
markdown-it-py 3.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.4.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.7.2 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0

Bumps the dependencies group with 2 updates in the /generate-dependabot-config directory: packaging and pytest.
Bumps the dependencies group with 24 updates in the /helm-version-upgrade directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.4.1 26.2.0
anyio 4.11.0 4.14.2
astroid 3.3.11 4.0.4
black 26.3.1 26.5.1
certifi 2025.10.5 2026.7.22
click 8.1.8 8.4.2
colorful 0.5.7 0.5.8
dill 0.4.0 0.4.1
exceptiongroup 1.3.0 1.3.1
h2 4.3.0 4.4.1
idna 3.15 3.18
isort 6.1.0 8.0.1
lxml 6.1.0 6.1.1
markdown-it-py 3.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.4.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.7.2 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0
ruamel-yaml 0.18.16 0.19.1

Bumps the dependencies group with 26 updates in the /oci-info directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.4.1 26.2.0
anyio 4.11.0 4.14.2
black 26.3.1 26.5.1
certifi 2025.10.5 2026.7.22
click 8.1.8 8.4.2
colorful 0.5.7 0.5.8
exceptiongroup 1.3.0 1.3.1
h2 4.3.0 4.4.1
idna 3.15 3.18
lxml 6.1.0 6.1.1
markdown-it-py 3.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.4.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.7.2 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0
coverage 7.10.7 7.15.4
mypy 1.18.2 2.3.1
ruff 0.14.2 0.16.3
pydantic 2.12.3 2.13.4
annotated-types 0.7.0 0.8.0
typing-inspection 0.4.2 0.4.4

Bumps the dependencies group with 22 updates in the /pr-conventional-commit-labeler directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.4.1 26.2.0
anyio 4.11.0 4.14.2
black 26.3.1 26.5.1
certifi 2025.10.5 2026.7.22
click 8.3.0 8.4.2
colorful 0.5.7 0.5.8
exceptiongroup 1.3.0 1.3.1
h2 4.3.0 4.4.1
idna 3.15 3.18
isort 7.0.0 8.0.1
lxml 6.1.0 6.1.1
markdown-it-py 4.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.5.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.7.2 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0
ruff 0.14.2 0.16.3

Bumps the dependencies group with 22 updates in the /release-assets directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.4.1 26.2.0
anyio 4.11.0 4.14.2
black 26.3.1 26.5.1
certifi 2025.10.5 2026.7.22
click 8.1.8 8.4.2
colorful 0.5.7 0.5.8
exceptiongroup 1.3.0 1.3.1
idna 3.15 3.18
lxml 6.1.0 6.1.1
markdown-it-py 3.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.4.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.7.2 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0
coverage 7.10.7 7.15.4
mypy 1.18.2 2.3.1
ruff 0.14.2 0.16.3

Bumps the dependencies group with 23 updates in the /trigger-workflow directory:

Package From To
tomli 2.3.0 2.4.1
pontos 25.8.1 26.5.0
autohooks 25.4.1 26.2.0
anyio 4.11.0 4.14.2
astroid 3.3.11 4.0.4
black 26.3.1 26.5.1
certifi 2025.10.5 2026.7.22
click 8.1.8 8.4.2
colorful 0.5.7 0.5.8
dill 0.4.0 0.4.1
exceptiongroup 1.3.0 1.3.1
h2 4.3.0 4.4.1
idna 3.15 3.18
isort 6.1.0 8.0.1
lxml 6.1.0 6.1.1
markdown-it-py 3.0.0 4.2.0
packaging 25.0 26.3
pathspec 1.0.4 1.1.1
platformdirs 4.4.0 4.11.3
rich 14.2.0 15.0.0
shtab 1.7.2 1.11.0
tomlkit 0.13.3 0.15.1
typing-extensions 4.15.0 4.16.0

Updates tomli from 2.3.0 to 2.4.1

Changelog

Sourced from tomli's changelog.

2.4.1

  • Fixed
    • Limit number of parts of a TOML key to address quadratic time complexity

2.4.0

  • Added
    • TOML v1.1.0 compatibility
    • Binary wheels for Windows arm64
Commits
  • c5f4469 Bump version: 2.4.0 → 2.4.1
  • 2bcd262 Add change log for 2.4.1 and 2.3.1
  • e1fdb94 Limit number of parts of a key (#286)
  • c20c491 pre-commit autoupdate
  • 920e20b Update performance benchmark and results
  • 064e492 Merge pull request #280 from hukkin/version-2.4.0
  • a678e6f Bump version: 2.3.0 → 2.4.0
  • b8a1358 Tests: remove now needless "TOML compliance"->"burntsushi" format conversion
  • 4979375 Update GitHub actions
  • f890dd1 Update pre-commit hooks
  • Additional commits viewable in compare view

Updates pontos from 25.8.1 to 26.5.0

Release notes

Sourced from pontos's releases.

pontos 26.5.0

26.5.0 - 2026-05-19

👷 Changed

🚢 Dependencies

pontos 26.4.3

26.4.3 - 2026-04-29

✨ Added

pontos 26.4.2

26.4.2 - 2026-04-27

✨ Added

👷 Changed

🐛 Bug Fixes

🔧 Miscellaneous

🚢 Dependencies

pontos 26.4.1

[26.4.1] - 2026-04-21

... (truncated)

Commits
  • a380de6 Automatic release to 26.5.0
  • 12b9dd2 Change: Rename "Status Change" to "CVE Status Change"
  • fd0a178 Deps: Bump urllib3 from 2.6.3 to 2.7.0
  • 00adf54 Update: Greenbone license header
  • a793376 Automatic adjustments after release [skip ci]
  • 7e3dffb Automatic release to 26.4.3
  • f2f0401 Add: CVE Change event name "Data Remediation" (#1214)
  • a81ba03 Automatic adjustments after release [skip ci]
  • 46c3185 Automatic release to 26.4.2
  • 31d0465 Use snake_case for release-version output variables
  • Additional commits viewable in compare view

Updates autohooks from 25.4.1 to 26.2.0

Release notes

Sourced from autohooks's releases.

autohooks 26.2.0

26.2.0 - 2026-02-25

Added

Changed

Dependencies

  • Bump the dependencies group across 1 directory with 4 updates edf8288
  • Bump ruff from 0.14.14 to 0.15.0 in the dependencies group ed561e2
  • Bump the dependencies group across 1 directory with 7 updates 9ccd4f2
  • Bump the dependencies group with 4 updates 83af4d2
  • Bump the dependencies group across 1 directory with 4 updates 8c2c3cd
  • Bump urllib3 from 2.6.2 to 2.6.3 cc2fac6
  • Bump the dependencies group with 2 updates 690bed5
  • Bump librt from 0.7.4 to 0.7.5 in the dependencies group b1ad308
  • Bump the dependencies group with 6 updates 307e261
  • Bump the dependencies group with 2 updates 59f09ca
  • Bump actions/checkout from 5 to 6 in the dependencies group 5b0c306
  • Bump the dependencies group across 1 directory with 5 updates 1e257b0
  • Bump the dependencies group across 1 directory with 4 updates 2b8fbb7

autohooks 25.11.0

[25.11.0] - 2025-11-12

Added

Dependencies

  • Bump the dependencies group with 3 updates 20ebe2e
  • Bump the dependencies group with 2 updates 23aa3ce
  • Bump ruff from 0.14.1 to 0.14.2 in the dependencies group 281256f
  • Bump the dependencies group with 3 updates 854ad74
  • Bump the dependencies group with 4 updates d300d01
  • Bump github/codeql-action from 3 to 4 in the dependencies group 3a831d3
  • Bump the dependencies group across 1 directory with 11 updates 884f854
  • Bump the dependencies group with 2 updates 9c353bd
  • Bump ruff from 0.12.11 to 0.12.12 in the dependencies group 83b15f6
  • Bump the dependencies group with 5 updates 4406ed8
  • Bump actions/checkout from 4 to 5 in the dependencies group cb2ace3
  • Bump the dependencies group with 7 updates cb1e5ed
  • Bump the dependencies group across 1 directory with 5 updates d9ea536
  • Bump the dependencies group across 1 directory with 7 updates a285e18
  • Bump the dependencies group with 3 updates f86ae40

... (truncated)

Commits
  • 00c9ab4 Automatic release to 26.2.0
  • 2c1bd9d Change: Make ruff & black happy
  • 37739c4 Change: Update documentation
  • fe57e13 Add: Unit tests for uv mode
  • 329294f Add: Support for uv
  • edf8288 Deps: Bump the dependencies group across 1 directory with 4 updates
  • ed561e2 Deps: Bump ruff from 0.14.14 to 0.15.0 in the dependencies group
  • 9ccd4f2 Deps: Bump the dependencies group across 1 directory with 7 updates
  • 83af4d2 Deps: Bump the dependencies group with 4 updates
  • 8c2c3cd Deps: Bump the dependencies group across 1 directory with 4 updates
  • Additional commits viewable in compare view

Updates anyio from 4.11.0 to 4.14.2

Release notes

Sourced from anyio's releases.

4.14.2

  • Changed ByteReceiveStream.receive() implementations to raise a ValueError when max_bytes is not a positive integer (#1191)
  • Fixed CapacityLimiter.total_tokens rejecting float("inf") when the limiter was instantiated outside of an event loop. The adapter setter checked for infinity by identity (value is math.inf), so only the exact math.inf singleton was accepted, while every backend setter (using math.isinf()) accepts any positive infinity (#1189; PR by @​greymoth-jp).
  • Fixed to_process.run_sync() deadlocking when the worker function writes enough data to sys.stderr to fill the (undrained) pipe buffer. The worker process now redirects sys.stderr to os.devnull as well, matching the documented behavior
  • Fixed TLSStream.wrap() matching an internationalized (unicode) host name against the peer certificate using IDNA 2003 (via the standard library) instead of IDNA 2008, which could cause the host name to be matched against the wrong certificate (#1208)
  • Fixed anyio.open_process() (and run_process()) ignoring the extra_groups argument, as it mistakenly passed the value of the group argument instead (#1209)
  • Fixed CapacityLimiter.acquire_nowait() and CapacityLimiter.acquire_nowait_on_behalf_of() raising trio.WouldBlock instead of anyio.WouldBlock on the trio backend when there are no tokens available (#1218)
  • Fixed CapacityLimiter on the asyncio backend over-granting tokens (borrowed_tokens exceeding total_tokens and available_tokens going negative) when a non-blocking acquire was made in the window between a token being released and the notified waiter resuming. The freed token is now reserved for the woken waiter right away, so the non-blocking acquire correctly raises WouldBlock (#1170; PR by @​gaoflow)
  • Fixed unnecessary CPU spin when delivering cancellation from CancelScope on asyncio under certain conditions, including improper cancel scope nesting (#1111)

4.14.1

  • Fixed teardown of higher-scoped async fixtures failing on asyncio with RuntimeError: Attempted to exit cancel scope in a different task than it was entered in when an async test raise an outcome exception (e.g., pytest.skip(), pytest.xfail(), or pytest.fail()) (#1179; PR by @​EmmanuelNiyonshuti)
  • Fixed CapacityLimiter.total_tokens rejecting a value of 0 when the limiter was instantiated outside of an event loop, contradicting the documented behavior of allowing 0 total tokens (#1183; PR by @​nyxst4ck)

4.14.0

  • Added support for Python 3.15

  • Added an asynchronous implementation of the itertools module (#998; PR by @​11kkw)

  • Added the local_port parameter to connect_tcp() to allow binding to a specific local port before connecting (#1067; PR by @​nullwiz)

  • Added support for custom capacity limiters in async path and file I/O functions and classes

  • Added the create_task() task group method for easier asyncio migration (returns a TaskHandle) (#1098)

  • Changed TaskGroup.start_soon() to return a TaskHandle

  • Added an option for TaskGroup.start() to return a TaskHandle (which then contains the start value in the start_value property)

  • Added the cancel() convenience method to TaskGroup as a shortcut for cancelling the task group's cancel scope

  • Improved the error message when a known backend is not installed to suggest the install command (#1115; PR by @​EmmanuelNiyonshuti)

  • Improved anyio.Path to preserve subclass types by returning Self in methods that return path objects (#1130; PR by @​EmmanuelNiyonshuti)

  • Changed the parameter type annotation in anyio.Path.write_bytes() to accept any ReadableBuffer, thus allowing it to accept bytearray and memoryview to match pathlib.Path.write_bytes() (#1135; PR by @​SAY-5)

  • Changed several type annotations to only accept callables returning coroutine-like objects instead of arbitrary awaitables:

    • TaskGroup.start_soon()
    • TaskGroup.start()
    • anyio.from_thread.run()

    This reverts an earlier change from v3.7.0 which was made in error. (#1153)

  • Changed anyio.run to support callables returning arbitrary awaitables at runtime on all backends. Previously, this only worked on asyncio (#1171; PR by @​gschaffner)

  • Changed several classes (and their subclasses) to have __slots__ (with __weakref__):

    • anyio.CancelScope

... (truncated)

Commits
  • c384f99 Bumped up the version
  • dbba29d Fixed 100% CPU spin on cancel scope misuse (#1217)
  • 6bbc6c3 Fix CapacityLimiter over-granting tokens on asyncio (#1172)
  • 6f82b25 Refactored TestTLSStream.test_receive_invalid_max_bytes() to be less flaky
  • be24b04 Relaxed timeouts to fix test flakiness
  • 8113506 Fix test flakiness caused by slow callback duration logging
  • 1e988b6 Fixed CapacityLimiter raising trio.WouldBlock instead of anyio.WouldBlock (#1...
  • 44713f3 Pin setup-uv to a commit sha across downstream jobs (#1213)
  • f1b7301 Fixed stderr writes in a worker subprocess causing a deadlock (#1207)
  • 212be93 Fix flaky test_tcp_listener_same_port using a hardcoded port (#1206)
  • Additional commits viewable in compare view

Updates astroid from 3.3.11 to 4.0.4

Release notes

Sourced from astroid's releases.

v4.0.4

What's New in astroid 4.0.4?

Release date: 2026-02-07

  • Fix is_namespace() crash when search locations contain pathlib.Path objects.

    Closes #2942

v4.0.3

What's New in astroid 4.0.3?

Release date: 2026-01-03

  • Fix inference of IfExp (ternary expression) nodes to avoid prematurely narrowing results in the face of inference ambiguity.

    Closes #2899

  • Fix base class inference for dataclasses using the PEP 695 typing syntax.

    Refs pylint-dev/pylint#10788

v4.0.2

What's New in astroid 4.0.2?

Release date: 2025-11-09

  • Handle FunctionDef blockstart_tolineno edge cases correctly.

    Refs #2880

  • Add HTTPMethod enum support to brain module for Python 3.11+.

    Refs pylint-dev/pylint#10624 Closes #2877

v4.0.1

What's New in astroid 4.0.1?

Release date: 2025-10-11

  • Suppress SyntaxWarning for invalid escape sequences and return in finally on Python 3.14 when parsing modules.

  • Assign Import and ImportFrom nodes to module locals if used with global.

    Closes pylint-dev/pylint#10632

v4.0.0

... (truncated)

Changelog

Sourced from astroid's changelog.

What's New in astroid 4.0.4?

Release date: 2026-02-07

  • Fix is_namespace() crash when search locations contain pathlib.Path objects.

    Closes #2942

What's New in astroid 4.0.3?

Release date: 2026-01-03

  • Fix inference of IfExp (ternary expression) nodes to avoid prematurely narrowing results in the face of inference ambiguity.

    Closes #2899

  • Fix base class inference for dataclasses using the PEP 695 typing syntax.

    Refs pylint-dev/pylint#10788

What's New in astroid 4.0.2?

Release date: 2025-11-09

  • Handle FunctionDef blockstart_tolineno edge cases correctly.

    Refs #2880

  • Add HTTPMethod enum support to brain module for Python 3.11+.

    Refs pylint-dev/pylint#10624 Closes #2877

What's New in astroid 4.0.1?

Release date: 2025-10-11

  • Suppress SyntaxWarning for invalid escape sequences and return in finally on Python 3.14 when parsing modules.

  • Assign Import and ImportFrom nodes to module locals if used with global.

    Closes pylint-dev/pylint#10632

What's New in astroid 4.0.0?

Release date: 2025-10-05

  • Support constraints from ternary expressions in inference.

... (truncated)

Commits
  • 019feb6 Bump astroid to 4.0.4, update changelog
  • b25ee05 Fix namespace detection crash (#2949)
  • b978037 Bump astroid to 4.0.3, update changelog
  • 5476bc3 [Backport maintenance/4.0.x] Wrong inference with default argument values (#2...
  • ae761dc [Backport maintenance/4.0.x] Fix base class inference for dataclasses with PE...
  • 077c51f [Backport maintenance/4.0.x] [typing] Add sys check guard for typing.Self for...
  • f3255d1 [Backport maintenance/4.0.x] Skip mypy install for pypy (#2906)
  • d2823f2 [Backport maintenance/4.0.x] [ci] Fix windows cache key (#2903)
  • 05c79e1 [Backport maintenance/4.0.x] Improve self argument typing (#2904)
  • a068430 Bump astroid to 4.0.2, update changelog
  • Additional commits viewable in compare view

Updates black from 26.3.1 to 26.5.1

Release notes

Sourced from black's releases.

26.5.1

Stable style

  • Fix unstable formatting of annotated assignments whose subscript annotation contains an inline comment (e.g. x: list[ # pyright: ignore[...]) (#5130)
  • Preserve inline comments (including # type: ignore) immediately before a # fmt: skip line, avoiding AST equivalence failures (#5139)

Packaging

  • Correct the version in the published executables (#5137)

Documentation

  • Add Neovim integration guide covering conform.nvim, ALE, and simple command approaches (#5124)

26.5.0

Highlights

  • Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)
  • Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

  • Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)
  • Add syntactic support for Python 3.15 (#5048)
  • Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)
  • Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

  • Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)
  • Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)
  • Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

Output

... (truncated)

Changelog

Sourced from black's changelog.

Version 26.5.1

Stable style

  • Fix unstable formatting of annotated assignments whose subscript annotation contains an inline comment (e.g. x: list[ # pyright: ignore[...]) (#5130)
  • Preserve inline comments (including # type: ignore) immediately before a # fmt: skip line, avoiding AST equivalence failures (#5139)

Packaging

  • Correct the version in the published executables (#5137)

Documentation

  • Add Neovim integration guide covering conform.nvim, ALE, and simple command approaches (#5124)

Version 26.5.0

Highlights

  • Add support for unpacking in comprehensions (PEP 798) and for lazy imports (PEP 810), both new syntactic features in Python 3.15 (#5048)
  • Python 3.15 is now supported. Compiled wheels are not yet provided for Python 3.15, so performance may be slower than on existing Python versions. Wheels will be provided once Python 3.15 is later in its release cycle. (#5127)

Stable style

  • Fix # fmt: skip being ignored in nested if expressions with parenthesized in clauses (#4903)
  • Add syntactic support for Python 3.15 (#5048)
  • Fix crash when an f-string follows a # fmt: off comment inside brackets (#5097)
  • Preserve multiline compound statement headers when # fmt: skip is placed on the colon line (#5117)

Preview style

  • Improve heuristics around whether blank lines should appear before, within and after groups of same-name decorated functions (such as @overload groups) in .pyi stub files (#5021)
  • Fix blank lines being removed between a function and a decorated class in .pyi stub files (#5092)
  • Prevent string merger from creating unsplittable long lines when a pragma comment (e.g. # type: ignore) follows the closing bracket (#5096)

Packaging

... (truncated)

Commits

Updates certifi from 2025.10.5 to 2026.7.22

Commits

Updates click from 8.1.8 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

  • Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
  • Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
  • A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
  • echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
  • echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
  • Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
  • {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32

  • get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
  • Zsh completion scripts parse correctly on Windows. #3277 # 3466
  • Shell completion of Choice Enum values produces a valid completion result. #3015
  • Fix empty byte-string handling in echo. #3487
  • Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our [Version Support Policy][version] on our website.

... (truncated)

Changelog

Sourced from

Bumps the dependencies group with 23 updates in the /backport-pull-request directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.4.1` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.14.2` |
| [astroid](https://github.com/pylint-dev/astroid) | `3.3.11` | `4.0.4` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [colorful](https://github.com/timofurrer/colorful) | `0.5.7` | `0.5.8` |
| [dill](https://github.com/uqfoundation/dill) | `0.4.0` | `0.4.1` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.3.0` | `1.3.1` |
| [h2](https://github.com/python-hyper/h2) | `4.3.0` | `4.4.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [isort](https://github.com/PyCQA/isort) | `6.1.0` | `8.0.1` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.4.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.7.2` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |

Bumps the dependencies group with 23 updates in the /conventional-commits directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.4.1` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.14.2` |
| [astroid](https://github.com/pylint-dev/astroid) | `4.0.1` | `4.0.4` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.3.0` | `8.4.2` |
| [colorful](https://github.com/timofurrer/colorful) | `0.5.7` | `0.5.8` |
| [dill](https://github.com/uqfoundation/dill) | `0.4.0` | `0.4.1` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.3.0` | `1.3.1` |
| [h2](https://github.com/python-hyper/h2) | `4.3.0` | `4.4.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [isort](https://github.com/PyCQA/isort) | `7.0.0` | `8.0.1` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `4.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.5.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.7.2` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |

Bumps the dependencies group with 25 updates in the /detect-hidden-unicode directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.11.0` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.12.0` | `4.14.2` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.11.12` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [h2](https://github.com/python-hyper/h2) | `4.3.0` | `4.4.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.4.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.8.0` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.10.7` | `7.15.4` |
| [pytest-randomly](https://github.com/pytest-dev/pytest-randomly) | `4.0.1` | `4.1.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.3` | `9.1.1` |
| [iniconfig](https://github.com/pytest-dev/iniconfig) | `2.1.0` | `2.3.0` |
| [librt](https://github.com/mypyc/librt) | `0.7.3` | `0.15.0` |
| [mypy](https://github.com/python/mypy) | `1.19.0` | `2.3.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.8` | `0.16.3` |

Bumps the dependencies group with 23 updates in the /download-artifact directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.4.1` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.14.2` |
| [astroid](https://github.com/pylint-dev/astroid) | `3.3.11` | `4.0.4` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [colorful](https://github.com/timofurrer/colorful) | `0.5.7` | `0.5.8` |
| [dill](https://github.com/uqfoundation/dill) | `0.4.0` | `0.4.1` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.3.0` | `1.3.1` |
| [h2](https://github.com/python-hyper/h2) | `4.3.0` | `4.4.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [isort](https://github.com/PyCQA/isort) | `6.1.0` | `8.0.1` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.4.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.7.2` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |

Bumps the dependencies group with 2 updates in the /generate-dependabot-config directory: [packaging](https://github.com/pypa/packaging) and [pytest](https://github.com/pytest-dev/pytest).
Bumps the dependencies group with 24 updates in the /helm-version-upgrade directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.4.1` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.14.2` |
| [astroid](https://github.com/pylint-dev/astroid) | `3.3.11` | `4.0.4` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [colorful](https://github.com/timofurrer/colorful) | `0.5.7` | `0.5.8` |
| [dill](https://github.com/uqfoundation/dill) | `0.4.0` | `0.4.1` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.3.0` | `1.3.1` |
| [h2](https://github.com/python-hyper/h2) | `4.3.0` | `4.4.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [isort](https://github.com/PyCQA/isort) | `6.1.0` | `8.0.1` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.4.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.7.2` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |
| ruamel-yaml | `0.18.16` | `0.19.1` |

Bumps the dependencies group with 26 updates in the /oci-info directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.4.1` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.14.2` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [colorful](https://github.com/timofurrer/colorful) | `0.5.7` | `0.5.8` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.3.0` | `1.3.1` |
| [h2](https://github.com/python-hyper/h2) | `4.3.0` | `4.4.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.4.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.7.2` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.10.7` | `7.15.4` |
| [mypy](https://github.com/python/mypy) | `1.18.2` | `2.3.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.2` | `0.16.3` |
| [pydantic](https://github.com/pydantic/pydantic) | `2.12.3` | `2.13.4` |
| [annotated-types](https://github.com/annotated-types/annotated-types) | `0.7.0` | `0.8.0` |
| [typing-inspection](https://github.com/pydantic/typing-inspection) | `0.4.2` | `0.4.4` |

Bumps the dependencies group with 22 updates in the /pr-conventional-commit-labeler directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.4.1` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.14.2` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.3.0` | `8.4.2` |
| [colorful](https://github.com/timofurrer/colorful) | `0.5.7` | `0.5.8` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.3.0` | `1.3.1` |
| [h2](https://github.com/python-hyper/h2) | `4.3.0` | `4.4.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [isort](https://github.com/PyCQA/isort) | `7.0.0` | `8.0.1` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `4.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.5.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.7.2` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.2` | `0.16.3` |

Bumps the dependencies group with 22 updates in the /release-assets directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.4.1` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.14.2` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [colorful](https://github.com/timofurrer/colorful) | `0.5.7` | `0.5.8` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.3.0` | `1.3.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.4.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.7.2` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |
| [coverage](https://github.com/coveragepy/coveragepy) | `7.10.7` | `7.15.4` |
| [mypy](https://github.com/python/mypy) | `1.18.2` | `2.3.1` |
| [ruff](https://github.com/astral-sh/ruff) | `0.14.2` | `0.16.3` |

Bumps the dependencies group with 23 updates in the /trigger-workflow directory:

| Package | From | To |
| --- | --- | --- |
| [tomli](https://github.com/hukkin/tomli) | `2.3.0` | `2.4.1` |
| [pontos](https://github.com/greenbone/pontos) | `25.8.1` | `26.5.0` |
| [autohooks](https://github.com/greenbone/autohooks) | `25.4.1` | `26.2.0` |
| [anyio](https://github.com/agronholm/anyio) | `4.11.0` | `4.14.2` |
| [astroid](https://github.com/pylint-dev/astroid) | `3.3.11` | `4.0.4` |
| [black](https://github.com/psf/black) | `26.3.1` | `26.5.1` |
| [certifi](https://github.com/certifi/python-certifi) | `2025.10.5` | `2026.7.22` |
| [click](https://github.com/pallets/click) | `8.1.8` | `8.4.2` |
| [colorful](https://github.com/timofurrer/colorful) | `0.5.7` | `0.5.8` |
| [dill](https://github.com/uqfoundation/dill) | `0.4.0` | `0.4.1` |
| [exceptiongroup](https://github.com/agronholm/exceptiongroup) | `1.3.0` | `1.3.1` |
| [h2](https://github.com/python-hyper/h2) | `4.3.0` | `4.4.1` |
| [idna](https://github.com/kjd/idna) | `3.15` | `3.18` |
| [isort](https://github.com/PyCQA/isort) | `6.1.0` | `8.0.1` |
| [lxml](https://github.com/lxml/lxml) | `6.1.0` | `6.1.1` |
| [markdown-it-py](https://github.com/executablebooks/markdown-it-py) | `3.0.0` | `4.2.0` |
| [packaging](https://github.com/pypa/packaging) | `25.0` | `26.3` |
| [pathspec](https://github.com/cpburnz/python-pathspec) | `1.0.4` | `1.1.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.4.0` | `4.11.3` |
| [rich](https://github.com/Textualize/rich) | `14.2.0` | `15.0.0` |
| [shtab](https://github.com/tqdm/shtab) | `1.7.2` | `1.11.0` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.13.3` | `0.15.1` |
| [typing-extensions](https://github.com/python/typing_extensions) | `4.15.0` | `4.16.0` |



Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.4.1 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.11.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `astroid` from 3.3.11 to 4.0.4
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](https://github.com/pylint-dev/astroid/compare/v3.3.11...v4.0.4)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.10.5 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `colorful` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/timofurrer/colorful/releases)
- [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/timofurrer/colorful/compare/v0.5.7...v0.5.8)

Updates `dill` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/uqfoundation/dill/releases)
- [Commits](https://github.com/uqfoundation/dill/compare/0.4.0...0.4.1)

Updates `exceptiongroup` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.3.0...1.3.1)

Updates `h2` from 4.3.0 to 4.4.1
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/h2/compare/v4.3.0...v4.4.1)

Updates `hpack` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/hpack/compare/v4.1.0...v4.2.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `isort` from 6.1.0 to 8.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/6.1.0...8.0.1)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pathspec` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.0.4...v1.1.1)

Updates `platformdirs` from 4.4.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.4.0...4.11.3)

Updates `pylint` from 3.3.9 to 4.0.7
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](https://github.com/pylint-dev/pylint/compare/v3.3.9...v4.0.7)

Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v14.2.0...v15.0.0)

Updates `shtab` from 1.7.2 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](https://github.com/tqdm/shtab/compare/v1.7.2...v1.11.0)

Updates `tomlkit` from 0.13.3 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python-poetry/tomlkit/compare/0.13.3...0.15.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0)

Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.4.1 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.11.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `astroid` from 4.0.1 to 4.0.4
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](https://github.com/pylint-dev/astroid/compare/v3.3.11...v4.0.4)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.10.5 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.3.0 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `colorful` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/timofurrer/colorful/releases)
- [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/timofurrer/colorful/compare/v0.5.7...v0.5.8)

Updates `dill` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/uqfoundation/dill/releases)
- [Commits](https://github.com/uqfoundation/dill/compare/0.4.0...0.4.1)

Updates `exceptiongroup` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.3.0...1.3.1)

Updates `h2` from 4.3.0 to 4.4.1
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/h2/compare/v4.3.0...v4.4.1)

Updates `hpack` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/hpack/compare/v4.1.0...v4.2.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `isort` from 7.0.0 to 8.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/6.1.0...8.0.1)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 4.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pathspec` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.0.4...v1.1.1)

Updates `platformdirs` from 4.5.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.4.0...4.11.3)

Updates `pylint` from 4.0.2 to 4.0.7
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](https://github.com/pylint-dev/pylint/compare/v3.3.9...v4.0.7)

Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v14.2.0...v15.0.0)

Updates `shtab` from 1.7.2 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](https://github.com/tqdm/shtab/compare/v1.7.2...v1.11.0)

Updates `tomlkit` from 0.13.3 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python-poetry/tomlkit/compare/0.13.3...0.15.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0)

Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.11.0 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.12.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.11.12 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `h2` from 4.3.0 to 4.4.1
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/h2/compare/v4.3.0...v4.4.1)

Updates `hpack` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/hpack/compare/v4.1.0...v4.2.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pathspec` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.0.4...v1.1.1)

Updates `platformdirs` from 4.4.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.4.0...4.11.3)

Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v14.2.0...v15.0.0)

Updates `shtab` from 1.8.0 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](https://github.com/tqdm/shtab/compare/v1.7.2...v1.11.0)

Updates `tomlkit` from 0.13.3 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python-poetry/tomlkit/compare/0.13.3...0.15.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0)

Updates `coverage` from 7.10.7 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](https://github.com/coveragepy/coveragepy/compare/7.10.7...7.15.4)

Updates `pytest-randomly` from 4.0.1 to 4.1.0
- [Changelog](https://github.com/pytest-dev/pytest-randomly/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-randomly/compare/4.0.1...4.1.0)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.1)

Updates `iniconfig` from 2.1.0 to 2.3.0
- [Release notes](https://github.com/pytest-dev/iniconfig/releases)
- [Changelog](https://github.com/pytest-dev/iniconfig/blob/main/CHANGELOG)
- [Commits](https://github.com/pytest-dev/iniconfig/compare/v2.1.0...v2.3.0)

Updates `librt` from 0.7.3 to 0.15.0
- [Commits](https://github.com/mypyc/librt/compare/v0.7.3...v0.15.0)

Updates `mypy` from 1.19.0 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v1.19.0...v2.3.1)

Updates `ruff` from 0.14.8 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.14.8...0.16.3)

Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.4.1 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.11.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `astroid` from 3.3.11 to 4.0.4
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](https://github.com/pylint-dev/astroid/compare/v3.3.11...v4.0.4)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.10.5 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `colorful` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/timofurrer/colorful/releases)
- [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/timofurrer/colorful/compare/v0.5.7...v0.5.8)

Updates `dill` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/uqfoundation/dill/releases)
- [Commits](https://github.com/uqfoundation/dill/compare/0.4.0...0.4.1)

Updates `exceptiongroup` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.3.0...1.3.1)

Updates `h2` from 4.3.0 to 4.4.1
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/h2/compare/v4.3.0...v4.4.1)

Updates `hpack` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/hpack/compare/v4.1.0...v4.2.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `isort` from 6.1.0 to 8.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/6.1.0...8.0.1)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pathspec` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.0.4...v1.1.1)

Updates `platformdirs` from 4.4.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.4.0...4.11.3)

Updates `pylint` from 3.3.9 to 4.0.7
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](https://github.com/pylint-dev/pylint/compare/v3.3.9...v4.0.7)

Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v14.2.0...v15.0.0)

Updates `shtab` from 1.7.2 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](https://github.com/tqdm/shtab/compare/v1.7.2...v1.11.0)

Updates `tomlkit` from 0.13.3 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python-poetry/tomlkit/compare/0.13.3...0.15.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pytest` from 9.0.3 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.3...9.1.1)

Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.4.1 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.11.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `astroid` from 3.3.11 to 4.0.4
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](https://github.com/pylint-dev/astroid/compare/v3.3.11...v4.0.4)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.10.5 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `colorful` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/timofurrer/colorful/releases)
- [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/timofurrer/colorful/compare/v0.5.7...v0.5.8)

Updates `dill` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/uqfoundation/dill/releases)
- [Commits](https://github.com/uqfoundation/dill/compare/0.4.0...0.4.1)

Updates `exceptiongroup` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.3.0...1.3.1)

Updates `h2` from 4.3.0 to 4.4.1
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/h2/compare/v4.3.0...v4.4.1)

Updates `hpack` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/hpack/compare/v4.1.0...v4.2.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `isort` from 6.1.0 to 8.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/6.1.0...8.0.1)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pathspec` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.0.4...v1.1.1)

Updates `platformdirs` from 4.4.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.4.0...4.11.3)

Updates `pylint` from 3.3.9 to 4.0.7
- [Release notes](https://github.com/pylint-dev/pylint/releases)
- [Commits](https://github.com/pylint-dev/pylint/compare/v3.3.9...v4.0.7)

Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v14.2.0...v15.0.0)

Updates `shtab` from 1.7.2 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](https://github.com/tqdm/shtab/compare/v1.7.2...v1.11.0)

Updates `tomlkit` from 0.13.3 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python-poetry/tomlkit/compare/0.13.3...0.15.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0)

Updates `ruamel-yaml` from 0.18.16 to 0.19.1

Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.4.1 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.11.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.10.5 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `colorful` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/timofurrer/colorful/releases)
- [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/timofurrer/colorful/compare/v0.5.7...v0.5.8)

Updates `exceptiongroup` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.3.0...1.3.1)

Updates `h2` from 4.3.0 to 4.4.1
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/h2/compare/v4.3.0...v4.4.1)

Updates `hpack` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/hpack/compare/v4.1.0...v4.2.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pathspec` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.0.4...v1.1.1)

Updates `platformdirs` from 4.4.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.4.0...4.11.3)

Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v14.2.0...v15.0.0)

Updates `shtab` from 1.7.2 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](https://github.com/tqdm/shtab/compare/v1.7.2...v1.11.0)

Updates `tomlkit` from 0.13.3 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python-poetry/tomlkit/compare/0.13.3...0.15.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0)

Updates `coverage` from 7.10.7 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](https://github.com/coveragepy/coveragepy/compare/7.10.7...7.15.4)

Updates `mypy` from 1.18.2 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v1.19.0...v2.3.1)

Updates `ruff` from 0.14.2 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.14.8...0.16.3)

Updates `pydantic` from 2.12.3 to 2.13.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/compare/v2.12.3...v2.13.4)

Updates `annotated-types` from 0.7.0 to 0.8.0
- [Release notes](https://github.com/annotated-types/annotated-types/releases)
- [Commits](https://github.com/annotated-types/annotated-types/compare/v0.7.0...v0.8.0)

Updates `pydantic-core` from 2.41.4 to 2.46.4
- [Release notes](https://github.com/pydantic/pydantic/releases)
- [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/pydantic/commits/core-v2.46.4)

Updates `typing-inspection` from 0.4.2 to 0.4.4
- [Release notes](https://github.com/pydantic/typing-inspection/releases)
- [Changelog](https://github.com/pydantic/typing-inspection/blob/main/HISTORY.md)
- [Commits](https://github.com/pydantic/typing-inspection/compare/v0.4.2...v0.4.4)

Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.4.1 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.11.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.10.5 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.3.0 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `colorful` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/timofurrer/colorful/releases)
- [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/timofurrer/colorful/compare/v0.5.7...v0.5.8)

Updates `exceptiongroup` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.3.0...1.3.1)

Updates `h2` from 4.3.0 to 4.4.1
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/h2/compare/v4.3.0...v4.4.1)

Updates `hpack` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/hpack/compare/v4.1.0...v4.2.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `isort` from 7.0.0 to 8.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/6.1.0...8.0.1)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 4.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pathspec` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.0.4...v1.1.1)

Updates `platformdirs` from 4.5.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.4.0...4.11.3)

Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v14.2.0...v15.0.0)

Updates `shtab` from 1.7.2 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](https://github.com/tqdm/shtab/compare/v1.7.2...v1.11.0)

Updates `tomlkit` from 0.13.3 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python-poetry/tomlkit/compare/0.13.3...0.15.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0)

Updates `ruff` from 0.14.2 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.14.8...0.16.3)

Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.4.1 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.11.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.10.5 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `colorful` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/timofurrer/colorful/releases)
- [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/timofurrer/colorful/compare/v0.5.7...v0.5.8)

Updates `exceptiongroup` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.3.0...1.3.1)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executablebooks/markdown-it-py/releases)
- [Changelog](https://github.com/executablebooks/markdown-it-py/blob/master/CHANGELOG.md)
- [Commits](https://github.com/executablebooks/markdown-it-py/compare/v3.0.0...v4.2.0)

Updates `packaging` from 25.0 to 26.3
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pypa/packaging/compare/25.0...26.3)

Updates `pathspec` from 1.0.4 to 1.1.1
- [Release notes](https://github.com/cpburnz/python-pathspec/releases)
- [Changelog](https://github.com/cpburnz/python-pathspec/blob/master/CHANGES.rst)
- [Commits](https://github.com/cpburnz/python-pathspec/compare/v1.0.4...v1.1.1)

Updates `platformdirs` from 4.4.0 to 4.11.3
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.4.0...4.11.3)

Updates `rich` from 14.2.0 to 15.0.0
- [Release notes](https://github.com/Textualize/rich/releases)
- [Changelog](https://github.com/Textualize/rich/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Textualize/rich/compare/v14.2.0...v15.0.0)

Updates `shtab` from 1.7.2 to 1.11.0
- [Release notes](https://github.com/tqdm/shtab/releases)
- [Commits](https://github.com/tqdm/shtab/compare/v1.7.2...v1.11.0)

Updates `tomlkit` from 0.13.3 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python-poetry/tomlkit/compare/0.13.3...0.15.1)

Updates `typing-extensions` from 4.15.0 to 4.16.0
- [Release notes](https://github.com/python/typing_extensions/releases)
- [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md)
- [Commits](https://github.com/python/typing_extensions/compare/4.15.0...4.16.0)

Updates `coverage` from 7.10.7 to 7.15.4
- [Release notes](https://github.com/coveragepy/coveragepy/releases)
- [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst)
- [Commits](https://github.com/coveragepy/coveragepy/compare/7.10.7...7.15.4)

Updates `mypy` from 1.18.2 to 2.3.1
- [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md)
- [Commits](https://github.com/python/mypy/compare/v1.19.0...v2.3.1)

Updates `ruff` from 0.14.2 to 0.16.3
- [Release notes](https://github.com/astral-sh/ruff/releases)
- [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md)
- [Commits](https://github.com/astral-sh/ruff/compare/0.14.8...0.16.3)

Updates `tomli` from 2.3.0 to 2.4.1
- [Changelog](https://github.com/hukkin/tomli/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hukkin/tomli/compare/2.3.0...2.4.1)

Updates `pontos` from 25.8.1 to 26.5.0
- [Release notes](https://github.com/greenbone/pontos/releases)
- [Commits](https://github.com/greenbone/pontos/compare/v25.8.1...v26.5.0)

Updates `autohooks` from 25.4.1 to 26.2.0
- [Release notes](https://github.com/greenbone/autohooks/releases)
- [Commits](https://github.com/greenbone/autohooks/compare/v25.4.1...v26.2.0)

Updates `anyio` from 4.11.0 to 4.14.2
- [Release notes](https://github.com/agronholm/anyio/releases)
- [Commits](https://github.com/agronholm/anyio/compare/4.11.0...4.14.2)

Updates `astroid` from 3.3.11 to 4.0.4
- [Release notes](https://github.com/pylint-dev/astroid/releases)
- [Changelog](https://github.com/pylint-dev/astroid/blob/main/ChangeLog)
- [Commits](https://github.com/pylint-dev/astroid/compare/v3.3.11...v4.0.4)

Updates `black` from 26.3.1 to 26.5.1
- [Release notes](https://github.com/psf/black/releases)
- [Changelog](https://github.com/psf/black/blob/main/CHANGES.md)
- [Commits](https://github.com/psf/black/compare/26.3.1...26.5.1)

Updates `certifi` from 2025.10.5 to 2026.7.22
- [Commits](https://github.com/certifi/python-certifi/compare/2025.10.05...2026.07.22)

Updates `click` from 8.1.8 to 8.4.2
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](https://github.com/pallets/click/compare/8.1.8...8.4.2)

Updates `colorful` from 0.5.7 to 0.5.8
- [Release notes](https://github.com/timofurrer/colorful/releases)
- [Changelog](https://github.com/timofurrer/colorful/blob/master/CHANGELOG.md)
- [Commits](https://github.com/timofurrer/colorful/compare/v0.5.7...v0.5.8)

Updates `dill` from 0.4.0 to 0.4.1
- [Release notes](https://github.com/uqfoundation/dill/releases)
- [Commits](https://github.com/uqfoundation/dill/compare/0.4.0...0.4.1)

Updates `exceptiongroup` from 1.3.0 to 1.3.1
- [Release notes](https://github.com/agronholm/exceptiongroup/releases)
- [Changelog](https://github.com/agronholm/exceptiongroup/blob/main/CHANGES.rst)
- [Commits](https://github.com/agronholm/exceptiongroup/compare/1.3.0...1.3.1)

Updates `h2` from 4.3.0 to 4.4.1
- [Changelog](https://github.com/python-hyper/h2/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/h2/compare/v4.3.0...v4.4.1)

Updates `hpack` from 4.1.0 to 4.2.0
- [Changelog](https://github.com/python-hyper/hpack/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/python-hyper/hpack/compare/v4.1.0...v4.2.0)

Updates `idna` from 3.15 to 3.18
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.15...v3.18)

Updates `isort` from 6.1.0 to 8.0.1
- [Release notes](https://github.com/PyCQA/isort/releases)
- [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md)
- [Commits](https://github.com/PyCQA/isort/compare/6.1.0...8.0.1)

Updates `lxml` from 6.1.0 to 6.1.1
- [Release notes](https://github.com/lxml/lxml/releases)
- [Changelog](https://github.com/lxml/lxml/blob/master/CHANGES.txt)
- [Commits](https://github.com/lxml/lxml/compare/lxml-6.1.0...lxml-6.1.1)

Updates `markdown-it-py` from 3.0.0 to 4.2.0
- [Release notes](https://github.com/executabl...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from a team as a code owner August 20, 2026 05:02
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 20, 2026
@greenbonebot
greenbonebot enabled auto-merge (rebase) August 20, 2026 05:03
@github-actions

Copy link
Copy Markdown

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 69d2cd8.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

OpenSSF Scorecard

Scorecard details
PackageVersionScoreDetails
pip/anyio 4.14.2 UnknownUnknown
pip/astroid 4.0.4 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/colorful 0.5.8 🟢 3.4
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/dill 0.4.1 🟢 5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 2Found 5/23 approved changesets -- score normalized to 2
Dangerous-Workflow⚠️ -1no workflows found
Maintained🟢 1010 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ -1No tokens found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/exceptiongroup 1.3.1 UnknownUnknown
pip/h2 4.4.1 UnknownUnknown
pip/hpack 4.2.0 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/isort 8.0.1 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/pylint 4.0.7 UnknownUnknown
pip/rich 15.0.0 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown
pip/anyio 4.14.2 UnknownUnknown
pip/astroid 4.0.4 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/colorful 0.5.8 🟢 3.4
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/dill 0.4.1 🟢 5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 2Found 5/23 approved changesets -- score normalized to 2
Dangerous-Workflow⚠️ -1no workflows found
Maintained🟢 1010 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ -1No tokens found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/exceptiongroup 1.3.1 UnknownUnknown
pip/h2 4.4.1 UnknownUnknown
pip/hpack 4.2.0 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/isort 8.0.1 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/pylint 4.0.7 UnknownUnknown
pip/rich 15.0.0 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown
pip/anyio 4.14.2 UnknownUnknown
pip/ast-serialize 0.8.0 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/coverage 7.15.4 UnknownUnknown
pip/h2 4.4.1 UnknownUnknown
pip/hpack 4.2.0 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/iniconfig 2.3.0 UnknownUnknown
pip/librt 0.15.0 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/mypy 2.3.1 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/pytest 9.1.1 UnknownUnknown
pip/pytest-randomly 4.1.0 UnknownUnknown
pip/rich 15.0.0 UnknownUnknown
pip/ruff 0.16.3 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown
pip/anyio 4.14.2 UnknownUnknown
pip/astroid 4.0.4 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/colorful 0.5.8 🟢 3.4
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/dill 0.4.1 🟢 5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 2Found 5/23 approved changesets -- score normalized to 2
Dangerous-Workflow⚠️ -1no workflows found
Maintained🟢 1010 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ -1No tokens found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/exceptiongroup 1.3.1 UnknownUnknown
pip/h2 4.4.1 UnknownUnknown
pip/hpack 4.2.0 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/isort 8.0.1 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/pylint 4.0.7 UnknownUnknown
pip/rich 15.0.0 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pytest 9.1.1 UnknownUnknown
pip/anyio 4.14.2 UnknownUnknown
pip/astroid 4.0.4 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/colorful 0.5.8 🟢 3.4
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/dill 0.4.1 🟢 5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 2Found 5/23 approved changesets -- score normalized to 2
Dangerous-Workflow⚠️ -1no workflows found
Maintained🟢 1010 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ -1No tokens found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/exceptiongroup 1.3.1 UnknownUnknown
pip/h2 4.4.1 UnknownUnknown
pip/hpack 4.2.0 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/isort 8.0.1 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/pylint 4.0.7 UnknownUnknown
pip/rich 15.0.0 UnknownUnknown
pip/ruamel-yaml 0.19.1 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown
pip/annotated-types 0.8.0 UnknownUnknown
pip/anyio 4.14.2 UnknownUnknown
pip/ast-serialize 0.8.0 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/colorful 0.5.8 🟢 3.4
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/coverage 7.15.4 UnknownUnknown
pip/exceptiongroup 1.3.1 UnknownUnknown
pip/h2 4.4.1 UnknownUnknown
pip/hpack 4.2.0 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/librt 0.15.0 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/mypy 2.3.1 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/pydantic 2.13.4 UnknownUnknown
pip/pydantic-core 2.46.4 🟢 6.6
Details
CheckScoreReason
Code-Review🟢 3Found 11/29 approved changesets -- score normalized to 3
Maintained🟢 1030 commit(s) and 13 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Binary-Artifacts🟢 10no binaries found in the repo
Branch-Protection🟢 3branch protection is not maximal on development and all release branches
Fuzzing🟢 10project is fuzzed
Pinned-Dependencies🟢 8dependency not pinned by hash detected -- score normalized to 8
Signed-Releases⚠️ -1no releases found
Security-Policy🟢 10security policy file detected
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/rich 15.0.0 UnknownUnknown
pip/ruff 0.16.3 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown
pip/typing-inspection 0.4.4 UnknownUnknown
pip/anyio 4.14.2 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/colorful 0.5.8 🟢 3.4
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/exceptiongroup 1.3.1 UnknownUnknown
pip/h2 4.4.1 UnknownUnknown
pip/hpack 4.2.0 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/isort 8.0.1 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/rich 15.0.0 UnknownUnknown
pip/ruff 0.16.3 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown
pip/anyio 4.14.2 UnknownUnknown
pip/ast-serialize 0.8.0 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/colorful 0.5.8 🟢 3.4
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/coverage 7.15.4 UnknownUnknown
pip/exceptiongroup 1.3.1 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/librt 0.15.0 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/mypy 2.3.1 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/rich 15.0.0 UnknownUnknown
pip/ruff 0.16.3 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown
pip/anyio 4.14.2 UnknownUnknown
pip/astroid 4.0.4 UnknownUnknown
pip/autohooks 26.2.0 UnknownUnknown
pip/black 26.5.1 UnknownUnknown
pip/certifi 2026.7.22 🟢 6.4
Details
CheckScoreReason
Code-Review🟢 3Found 1/3 approved changesets -- score normalized to 3
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Security-Policy🟢 10security policy file detected
Pinned-Dependencies🟢 5dependency not pinned by hash detected -- score normalized to 5
Token-Permissions🟢 10GitHub workflow tokens follow principle of least privilege
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 9license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/click 8.4.2 UnknownUnknown
pip/colorful 0.5.8 🟢 3.4
Details
CheckScoreReason
Maintained⚠️ 00 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 0
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Binary-Artifacts🟢 10no binaries found in the repo
Code-Review⚠️ 2Found 3/11 approved changesets -- score normalized to 2
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Packaging🟢 10packaging workflow detected
Security-Policy⚠️ 0security policy file not detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/dill 0.4.1 🟢 5
Details
CheckScoreReason
Packaging⚠️ -1packaging workflow not detected
Code-Review⚠️ 2Found 5/23 approved changesets -- score normalized to 2
Dangerous-Workflow⚠️ -1no workflows found
Maintained🟢 1010 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions⚠️ -1No tokens found
Binary-Artifacts🟢 10no binaries found in the repo
Pinned-Dependencies⚠️ -1no dependencies found
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Fuzzing🟢 10project is fuzzed
License🟢 9license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
Security-Policy🟢 10security policy file detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0
pip/exceptiongroup 1.3.1 UnknownUnknown
pip/h2 4.4.1 UnknownUnknown
pip/hpack 4.2.0 UnknownUnknown
pip/idna 3.18 UnknownUnknown
pip/isort 8.0.1 UnknownUnknown
pip/lxml 6.1.1 UnknownUnknown
pip/markdown-it-py 4.2.0 UnknownUnknown
pip/packaging 26.3 UnknownUnknown
pip/pathspec 1.1.1 UnknownUnknown
pip/platformdirs 4.11.3 UnknownUnknown
pip/pontos 26.5.0 UnknownUnknown
pip/pylint 4.0.7 UnknownUnknown
pip/rich 15.0.0 UnknownUnknown
pip/shtab 1.11.0 UnknownUnknown
pip/tomli 2.4.1 UnknownUnknown
pip/tomlkit 0.15.1 UnknownUnknown
pip/typing-extensions 4.16.0 UnknownUnknown

Scanned Files

  • backport-pull-request/poetry.lock
  • conventional-commits/poetry.lock
  • detect-hidden-unicode/poetry.lock
  • download-artifact/poetry.lock
  • generate-dependabot-config/poetry.lock
  • helm-version-upgrade/poetry.lock
  • oci-info/poetry.lock
  • pr-conventional-commit-labeler/poetry.lock
  • release-assets/poetry.lock
  • trigger-workflow/poetry.lock

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants