An open index of dependabot pull requests across open source projects.

Bump the python-dependencies group with 16 updates

Open
Number: #246
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: Contributor
Comments: 6
Created: October 01, 2025 at 01:08 PM UTC
(2 days ago)
Updated: October 01, 2025 at 08:13 PM UTC
(1 day ago)
Labels:
dependencies python
Description:

Bumps the python-dependencies group with 16 updates:

Package From To
jupyterlab 4.4.6 4.4.9
pytest 8.4.1 8.4.2
anyio 4.10.0 4.11.0
beautifulsoup4 4.13.5 4.14.2
cffi 1.17.1 2.0.0
debugpy 1.8.16 1.8.17
ipython 9.5.0 9.6.0
jsonschema-specifications 2025.4.1 2025.9.1
lark 1.2.2 1.3.0
markupsafe 3.0.2 3.0.3
prometheus-client 0.22.1 0.23.1
psutil 7.0.0 7.1.0
pycparser 2.22 2.23
pyyaml 6.0.2 6.0.3
pyzmq 27.0.2 27.1.0
wcwidth 0.2.13 0.2.14

Updates jupyterlab from 4.4.6 to 4.4.9

Release notes

Sourced from jupyterlab's releases.

v4.4.9

4.4.9

(Full Changelog)

Bugs fixed

Contributors to this release

(GitHub contributors page for this release)

@​jupyterlab-probot | @​krassowski | @​martinRenou | @​meeseeksmachine

v4.4.8

4.4.8

(Full Changelog)

Bugs fixed

Maintenance and upkeep improvements

Documentation improvements

Contributors to this release

(GitHub contributors page for this release)

@​brichet | @​github-actions | @​HaudinFlorence | @​jtpio | @​jupyterlab-probot | @​krassowski | @​martinRenou | @​meeseeksmachine | @​Meriem-BenIsmail | @​williamstein

v4.4.7

4.4.7

... (truncated)

Commits

Updates pytest from 8.4.1 to 8.4.2

Release notes

Sourced from pytest's releases.

8.4.2

pytest 8.4.2 (2025-09-03)

Bug fixes

  • #13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.

  • #13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.

  • #13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.

    This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.

  • #13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.

  • #13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.

Improved documentation

  • #13577: Clarify that pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.

Contributor-facing changes

  • #13480: Self-testing: fixed a few test failures when run with -Wdefault or a similar override.
  • #13547: Self-testing: corrected expected message for test_doctest_unexpected_exception in Python 3.14.
  • #13684: Make pytest's own testsuite insensitive to the presence of the CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
  • bfae422 Prepare release version 8.4.2
  • 8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
  • ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
  • 975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
  • 7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
  • b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
  • 2c94c4a add missing colon (#13640) (#13641)
  • c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
  • dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
  • f87289c Fix crash with times output style and skipped module (#13573) (#13579)
  • Additional commits viewable in compare view

Updates anyio from 4.10.0 to 4.11.0

Release notes

Sourced from anyio's releases.

4.11.0

  • Added support for cancellation reasons (the reason parameter to CancelScope.cancel()) (#975)
  • Bumped the minimum version of Trio to v0.31.0
  • Added the ability to enter the event loop from foreign (non-worker) threads by passing the return value of anyio.lowlevel.current_token() to anyio.from_thread.run() and anyio.from_thread.run_sync() as the token keyword argument (#256)
  • Added pytest option (anyio_mode = "auto") to make the pytest plugin automatically handle all async tests (#971)
  • Added the anyio.Condition.wait_for() method for feature parity with asyncio (#974)
  • Changed the default type argument of anyio.abc.TaskStatus from Any to None (#964)
  • Fixed TCP listener behavior to guarantee the same ephemeral port is used for all socket listeners when local_port=0 (#857; PR by @​11kkw and @​agronholm)
  • Fixed inconsistency between Trio and asyncio where a TCP stream that previously raised a BrokenResourceError on send() would still raise BrokenResourceError after the stream was closed on asyncio, but ClosedResourceError on Trio. They now both raise a ClosedResourceError in this scenario. (#671)
Changelog

Sourced from anyio's changelog.

Version history

This library adheres to Semantic Versioning 2.0 <http://semver.org/>_.

4.11.0

  • Added support for cancellation reasons (the reason parameter to CancelScope.cancel()) ([#975](https://github.com/agronholm/anyio/issues/975) <https://github.com/agronholm/anyio/pull/975>_)
  • Bumped the minimum version of Trio to v0.31.0
  • Added the ability to enter the event loop from foreign (non-worker) threads by passing the return value of anyio.lowlevel.current_token() to anyio.from_thread.run() and anyio.from_thread.run_sync() as the token keyword argument ([#256](https://github.com/agronholm/anyio/issues/256) <https://github.com/agronholm/anyio/issues/256>_)
  • Added pytest option (anyio_mode = "auto") to make the pytest plugin automatically handle all async tests ([#971](https://github.com/agronholm/anyio/issues/971) <https://github.com/agronholm/anyio/pull/971>_)
  • Added the anyio.Condition.wait_for() method for feature parity with asyncio ([#974](https://github.com/agronholm/anyio/issues/974) <https://github.com/agronholm/anyio/pull/974>_)
  • Changed the default type argument of anyio.abc.TaskStatus from Any to None ([#964](https://github.com/agronholm/anyio/issues/964) <https://github.com/agronholm/anyio/pull/964>_)
  • Fixed TCP listener behavior to guarantee the same ephemeral port is used for all socket listeners when local_port=0 ([#857](https://github.com/agronholm/anyio/issues/857) <https://github.com/agronholm/anyio/issues/857>_; PR by @​11kkw and @​agronholm)
  • Fixed inconsistency between Trio and asyncio where a TCP stream that previously raised a BrokenResourceError on send() would still raise BrokenResourceError after the stream was closed on asyncio, but ClosedResourceError on Trio. They now both raise a ClosedResourceError in this scenario. ([#671](https://github.com/agronholm/anyio/issues/671) <https://github.com/agronholm/anyio/issues/671>_)

4.10.0

  • Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer

  • Added various class methods to wrap existing sockets as listeners or socket streams:

    • SocketListener.from_socket()
    • SocketStream.from_socket()
    • UNIXSocketStream.from_socket()
    • UDPSocket.from_socket()
    • ConnectedUDPSocket.from_socket()
    • UNIXDatagramSocket.from_socket()
    • ConnectedUNIXDatagramSocket.from_socket()
  • Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects

  • Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups ([#905](https://github.com/agronholm/anyio/issues/905) <https://github.com/agronholm/anyio/pull/905>_; PR by @​agronholm and

... (truncated)

Commits
  • 08737af Bumped up the version
  • 8bb9fe0 Fixed the inconsistent exception on sending to a closed TCP stream (#980)
  • 9637093 [pre-commit.ci] pre-commit autoupdate (#981)
  • f1bc6ee Fixed changelog entry formatting
  • 0b58964 Mentioned the sub-interpreter support in the README
  • 1ed112c Ensure same port is used for IPv4/IPv6 when creating TCP listener with local_...
  • aceeee0 Re-enabled coverage reporting on macOS
  • 6b890dc Reworded a changelog entry and added PR links to others
  • 944257d Updated pre-commit modules
  • 087975f Fixed a documentation style (#976)
  • Additional commits viewable in compare view

Updates beautifulsoup4 from 4.13.5 to 4.14.2

Updates cffi from 1.17.1 to 2.0.0

Release notes

Sourced from cffi's releases.

v2.0.0

What's Changed

  • Add Python 3.14 support.
  • Add CPython free-threaded support (3.14t+ only) - huge thanks to the folks at Quansight Labs for all the work to get this one sorted!
  • Drop Python <= 3.8 support.
  • Fix order dependency affecting nested type size calculation (#148).

Full Changelog: https://github.com/python-cffi/cffi/compare/v1.17.1...v2.0.0

v2.0.0b1

What's Changed

  • Add Python 3.14 support.
  • Add CPython free-threaded support (3.14t+ only).
  • Drop Python <= 3.8 support.
  • Fix order dependency affecting nested type size calculation (#148).

Full Changelog: https://github.com/python-cffi/cffi/compare/v1.17.1...v2.0.0b1

Commits
  • 6366c01 release 2.0.0 (#196)
  • 95c8476 2.0.0 post beta backports (#195)
  • 195cbda Release 2.0.0b1 (#183)
  • b4bbe79 fix version test to support beta
  • 7ed073d Add support for the free-threaded build (#178)
  • 67a170d Change the license from MIT to MIT-no-attribution, which is the same without ...
  • 92645ec Add Python 3.14 support/testing (#177)
  • 2b81170 doc: update test commands in Section Testing/development tips (#158)
  • 25172b8 doc: update year (#153)
  • b57a92c issue 147: force-compute nested structs before parent structs. Occurs mainly...
  • Additional commits viewable in compare view

Updates debugpy from 1.8.16 to 1.8.17

Commits

Updates ipython from 9.5.0 to 9.6.0

Commits

Updates jsonschema-specifications from 2025.4.1 to 2025.9.1

Release notes

Sourced from jsonschema-specifications's releases.

v2025.9.1

What's Changed

New Contributors

Full Changelog: https://github.com/python-jsonschema/jsonschema-specifications/compare/v2025.4.1...v2025.9.1

Commits
  • 3b84601 Update docs requirements.
  • 5a27ff3 Merge pull request #107 from branen/relocate-misplaced-metaschema
  • c2e2b75 Move 2019-09 "format" schema to correct directory
  • e2b4d6a Merge pull request #106 from python-jsonschema/pre-commit-ci-update-config
  • 1336f01 [pre-commit.ci] pre-commit autoupdate
  • 9dd6369 Merge pull request #105 from python-jsonschema/pre-commit-ci-update-config
  • c1563ea [pre-commit.ci] pre-commit autoupdate
  • cbd01ef No lockfile yet.
  • 125eafa Merge pull request #103 from python-jsonschema/pre-commit-ci-update-config
  • 9dca87c Use the setup-uv action for uv.
  • Additional commits viewable in compare view

Updates lark from 1.2.2 to 1.3.0

Release notes

Sourced from lark's releases.

1.3.0 - Introduces text-slices, Earley fix, and various small improvements

New features

  • Lark can now parse in sections of strings, using TextSlice, as a faster alternative to creating a "copy-slice" with s[i:j]. Learn more
  • Added support to match on Tree instances
  • When serializing a Lark instance, added the option to include the grammar object (before compilation).
  • Added convenience method Tree.find_token()

Bugfixes

  • Bugfix of an edge case in Earley related to representation of ambiguity.
  • Bugfixes in the standalone parser related to imports
  • Bugfix in indenter - now dedents always contain line information
  • Various small bugfixes (see PR list below)

Full list of PRs

New Contributors

... (truncated)

Commits
  • e332c2d Version bump (1.3.0)
  • aa5666c Merge pull request #1541 from pdeibert/master
  • 41934d3 Merge pull request #1553 from lark-parser/issue1552
  • 23c95ea Bugfix: issue when unpickling in the standalone parser, due to lingering
  • d1a456d Merge pull request #1547 from lark-parser/dev
  • 2e3108e UnexpectedInput.pos_in_stream now defaults to 0
  • 0d248fc Fix in indenter - now always creating dedents with line information
  • c2e2048 Merge pull request #1540 from lark-parser/pr1506
  • 2f286cc Added tests for cache_grammar
  • 8a0b02d Small fix, comments, added some types
  • Additional commits viewable in compare view

Updates markupsafe from 3.0.2 to 3.0.3

Release notes

Sourced from markupsafe's releases.

3.0.3

This is the MarkupSafe 3.0.3 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.3/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-3 Milestone: https://github.com/pallets/markupsafe/milestone/15?closed=1

  • __version__ raises DeprecationWarning instead of UserWarning. #487
  • Adopt multi-phase initialization PEP 489 for the C extension. #494
  • Build Windows ARM64 wheels. #485
  • Build Python 3.14 wheels. #503
  • Build riscv64 wheels. #505
Changelog

Sourced from markupsafe's changelog.

Version 3.0.3

Released 2025-09-27

  • __version__ raises DeprecationWarning instead of UserWarning. :issue:487
  • Adopt multi-phase initialisation (:pep:489) for the C extension. :issue:494
  • Build Windows ARM64 wheels. :issue:485
  • Build Python 3.14 wheels. :issue:503
  • Build riscv64 wheels. :issue:505
Commits

Updates prometheus-client from 0.22.1 to 0.23.1

Release notes

Sourced from prometheus-client's releases.

v0.23.1

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/client_python/compare/v0.23.0...v0.23.1

v0.23.0

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/client_python/compare/v0.22.1...v0.23.0

Commits
  • 8746c49 Release 0.23.1
  • 266beb2 fix: use tuples instead of packaging Version (#1136)
  • f947140 fix: Use asyncio.new_event_loop() to create event loop for tests (#1138)
  • b9e78a3 Release 0.23.0
  • b3fbbca Fix issue parsing double spaces after # HELP/# TYPE (#1134)
  • 47d2b41 Do not use global when only reading variable (#1133)
  • 4de31ee fix: remove space after comma in openmetrics exposition (#1132)
  • 3586355 Emit native histograms only when OM 2.0.0 is requested (#1128)
  • 9e3eb6c Fix bug which caused metric publishing to not accept query string parameters ...
  • d358f46 Bump flake8 libraries (#1127)
  • Additional commits viewable in compare view

Updates psutil from 7.0.0 to 7.1.0

Changelog

Sourced from psutil's changelog.

7.1.0

2025-09-17

Enhancements

  • 2581_, [Windows]: publish ARM64 wheels. (patch by Matthieu Darbois)
  • 2571_, [FreeBSD]: Dropped support for FreeBSD 8 and earlier. FreeBSD 8 was maintained from 2009 to 2013.
  • 2575_: introduced dprint CLI tool to format .yml and .md files.

Bug fixes

  • 2473_, [macOS]: Fix build issue on macOS 11 and lower.
  • 2494_, [Windows]: All APIs dealing with paths, such as Process.memory_maps(), Process.exe() and Process.open_files()_ does not properly handle UNC paths. Paths such as \\??\\C:\\Windows\\Temp and '\\Device\\HarddiskVolume1\\Windows\\Temp' are now converted to C:\\Windows\\Temp. (patch by Ben Peddell)
  • 2506_, [Windows]: Windows service APIs had issues with unicode services using special characters in their name.
  • 2514_, [Linux]: Process.cwd()_ sometimes fail with FileNotFoundError due to a race condition.
  • 2526_, [Linux]: Process.create_time(), which is used to univocally identify a process over time, is subject to system clock updates, and as such can lead to Process.is_running() returning a wrong result. A monotonic creation time is now used instead. (patch by Jonathan Kohler)
  • 2528_, [Linux]: Process.children()_ may raise PermissionError. It will now raise AccessDenied_ instead.
  • 2540_, [macOS]: boot_time()_ is off by 45 seconds (C precision issue).
  • 2541_, 2570_, 2578_ [Linux], [macOS], [NetBSD]: Process.create_time()_ does not reflect system clock updates.
  • 2542_: if system clock is updated Process.children()_ and Process.parent()_ may not be able to return the right information.
  • 2545_: [Illumos]: Fix handling of MIB2_UDP_ENTRY in net_connections()_.
  • 2552_, [Windows]: boot_time()_ didn't take into account the time spent during suspend / hibernation.
  • 2560_, [Linux]: Process.memory_maps()_ may crash with IndexError on RISCV64 due to a malformed /proc/{PID}/smaps file. (patch by Julien Stephan)
  • 2586_, [macOS], [CRITICAL]: fixed different places in C code which can trigger a segfault.
  • 2604_, [Linux]: virtual_memory()_ "used" memory does not match recent versions of free CLI utility. (patch by Isaac K. Ko)
  • 2605_, [Linux]: psutil.sensors_battery() reports a negative amount for seconds left.
  • 2607_, [Windows]: WindowsService.description() method may fail with ERROR_NOT_FOUND. Now it returns an empty string instead.
  • 2610:, [macOS], [CRITICAL]: fix cpu_freq()_ segfault on ARM architectures.

... (truncated)

Commits
  • 0d18187 Revert HISTORY notes about #2629. We still do publish 3.6 and 3.7 wheels.
  • 229e2de Pre-release
  • fb75b28 Chore: skip CI tests except on Python 3.8 and 3.13
  • 3a4c016 Stop publishing wheels for Python 3.6 and 3.7 (#2629)
  • 83e4f7f OSX: disable failing test
  • df0d4e2 Call GetExtended[Tcp|Udp]Table twice under free-threaded build (round 2) (#2627)
  • dcbfb81 [Windows] fix unicode issues around service APIs (#2626)
  • ef72dcd revert #2590 (Call GetExtended[Tcp|Udp]Table twice under free-threaded build)
  • 8773698 small refact around UTXENT_MUTEX_LOCK
  • 13b711f Lock around uses of getutent/setutent/endutent (#2615)
  • Additional commits viewable in compare view

Updates pycparser from 2.22 to 2.23

Release notes

Sourced from pycparser's releases.

release_v2...

Description has been truncated

Pull Request Statistics
Commits:
0
Files Changed:
0
Additions:
+0
Deletions:
-0
Package Dependencies
Package:
jupyterlab
Ecosystem:
pip
Version Change:
4.4.6 → 4.4.9
Update Type:
Patch
Package:
pytest
Ecosystem:
pip
Version Change:
8.4.1 → 8.4.2
Update Type:
Patch
Ecosystem:
pip
Version Change:
2025.4.1 → 2025.9.1
Update Type:
Minor
Package:
pyyaml
Ecosystem:
pip
Version Change:
6.0.2 → 6.0.3
Update Type:
Patch
Package:
markupsafe
Ecosystem:
pip
Version Change:
3.0.2 → 3.0.3
Update Type:
Patch
Package:
ipython
Ecosystem:
pip
Version Change:
9.5.0 → 9.6.0
Update Type:
Minor
Ecosystem:
pip
Version Change:
0.22.1 → 0.23.1
Update Type:
Minor
Ecosystem:
pip
Version Change:
4.13.5 → 4.14.2
Update Type:
Minor
Package:
psutil
Ecosystem:
pip
Version Change:
7.0.0 → 7.1.0
Update Type:
Minor
Package:
anyio
Ecosystem:
pip
Version Change:
4.10.0 → 4.11.0
Update Type:
Minor
Package:
debugpy
Ecosystem:
pip
Version Change:
1.8.16 → 1.8.17
Update Type:
Patch
Package:
pyzmq
Ecosystem:
pip
Version Change:
27.0.2 → 27.1.0
Update Type:
Minor
Package:
cffi
Ecosystem:
pip
Version Change:
1.17.1 → 2.0.0
Update Type:
Major
Package:
pycparser
Ecosystem:
pip
Version Change:
2.22 → 2.23
Package:
wcwidth
Ecosystem:
pip
Version Change:
0.2.13 → 0.2.14
Update Type:
Patch
Package:
lark
Ecosystem:
pip
Version Change:
1.2.2 → 1.3.0
Update Type:
Minor
Technical Details
ID: 9032787
UUID: 3473499965
Node ID: PR_kwDOIvlgPs6rjZ72
Host: GitHub
Repository: EliahKagan/algorithms-python