Skip to content

Bump the pip group with 6 updates - #726

Merged
ezio-melotti merged 1 commit into
mainfrom
dependabot/pip/pip-27b6c5368d
Nov 1, 2026
Merged

Bump the pip group with 6 updates#726
ezio-melotti merged 1 commit into
mainfrom
dependabot/pip/pip-27b6c5368d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the pip group with 6 updates:

Package From To
aiohttp 3.14.4 3.14.5
cachetools 7.2.0 7.2.5
chardet 7.6.0 7.7.0
gidgethub 5.4.0 6.0.0
multidict 6.9.1 7.2.1
sentry-sdk 2.70.0 2.73.0

Updates aiohttp from 3.14.4 to 3.14.5
Updates cachetools from 7.2.0 to 7.2.5

Changelog

Sourced from cachetools's changelog.

v7.2.5 (2026-10-25)

  • Fix @cachedmethod with condition for decorated methods taking a pending keyword argument (broken since v7.0.0).

  • Fix pickling and deep-copying of instances using @cachedmethod (broken since v7.0.0).

  • Fix calling @cachedmethod decorated methods through the class with the receiver (self) passed as a keyword argument (broken since v7.2.4).

  • Various documentation improvements.

v7.2.4 (2026-10-19)

  • Restore autospec calls to @cachedmethod decorated methods.

  • Improve branch coverage of unit tests.

  • Minor type stub improvements.

v7.2.3 (2026-10-17)

  • Fix @cached decorator stacking behavior.

  • Minor type stub improvements.

v7.2.2 (2026-10-15)

  • Fix @cachedmethod for subclasses that override a decorated method and call the base class implementation via super().

  • Restore class access to instance methods decorated with @cachedmethod.

  • Improve TTLCache robustness when calculating expiration time fails.

  • Various unit test improvements.

v7.2.1 (2026-10-05)

... (truncated)

Commits

Updates chardet from 7.6.0 to 7.7.0

Release notes

Sourced from chardet's releases.

7.7.0

Big release: raising max_bytes to cover a huge input no longer makes detect() slow, every answer now decodes the window it was detected from, and markup declarations are read the way browsers read them. A lot of this came from new contributors, so thank you all!

Performance

  • Raising max_bytes on large inputs no longer gets slow. On compiled wheels, detect(data, max_bytes=len(data)) on 272 MiB takes about 0.2s for cp1252 and 0.5s for Shift_JIS, down from several seconds. UTF-8 validation and a final decode of the winner still read the whole window, and the other stages stop at a 256 KiB evidence cap (ADR-0006). The default 200 KB cap is still the fastest path, and default calls are unchanged.
  • The pure-Python wheel on CPython scores bigram models through operator.itemgetter instead of a Python loop, making detect() about 1.25x faster and detect_all() about 1.35x faster. (#404, thanks @​deadstrobe5)
  • Fixed three scans that went quadratic on hostile input: the UTF-7 + scan on line-wrapped base64 (128 KiB went from 5.4s to 1.2ms), unclosed <meta and <?xml tags in the markup scan, and the EBCDIC charset-declaration regex. (#403, thanks @​Samin061)

Bug Fixes

  • Every answer now decodes the examined window under the name you get back. BOMs, BOM-less UTF-16/32 null patterns, ISO-2022/HZ escapes, and <meta charset> declarations used to be trusted without decoding the rest of the window, so a confident answer could still raise further in. The 5.x/6.x display names (EUC-JP, SHIFT_JIS, Big5, ISO-2022-JP) are only used when those narrower codecs decode it too. (#394 and #396, thanks @​Samin061)
  • Markup declarations follow the WHATWG prescan: declarations inside comments are ignored, a charset= inside another attribute (like a refresh URL) no longer beats a real <meta charset>, quoted or spaced content charsets work, and an ASCII page declaring utf-16le no longer comes back as UTF-16-LE. (#389 and #398, thanks @​SashaMIT and @​xiehuanyi)
  • PEP 263 cookies resolve the way tokenize.detect_encoding resolves them, including only counting a line-2 cookie when line 1 is blank or a comment. (#391, thanks @​xiehuanyi)
  • Fixed BOM-bearing UTF-32 coming back as UTF-16 when max_bytes cuts a code unit. (#405, thanks @​AryanRG)
  • Fixed language labels on Unicode text tilting toward accent-heavy languages, so a French paragraph with a few accents no longer comes back as Hungarian. Mislabels on the test corpus's Unicode files dropped from 140 to 104.
  • Fixed a mostly-ASCII Windows-1252 file with a single Ö detecting as HP-Roman8, and English with a lone É detecting as MacRoman. (#383, thanks @​aadsm)
  • Fixed null-separated records like find -print0 output coming back as UTF-16-LE with Chinese as the language.
  • prefer_superset=True no longer swaps in a code page that can't decode the data, and now respects include_encodings/exclude_encodings. (#393, thanks @​00200200)
  • chardetect and UniversalDetector no longer mistake input cut exactly at the byte cap for the whole stream. (#392, thanks @​00200200)
  • lookup_encoding's cache is capped at 1024 entries, since charset names come from untrusted markup. (#390, thanks @​Samin061)
  • Plus smaller fixes to detect_all() ranking, EBCDIC XML MIME types, and the deprecated chardet.equivalences shim. The changelog has the full list.

Improvements

  • New -m/--mime-type flag for chardetect shows the MIME type next to the encoding, like file -i. (#384, thanks @​smi11 for the request)
  • Visual-order Hebrew is now detected, and cp864 Arabic is trained on contextually shaped text in visual order, the way real cp864 systems stored it.
  • EncodingInfo.is_multibyte is now is_multibyte_cjk. The old name still works with a DeprecationWarning and goes away in 8.0.
  • pipeline/markup.py is now compiled by mypyc (15 modules total), and CI enforces 100% test coverage.

Full Changelog: chardet/chardet@7.6.0...7.7.0

Changelog

Sourced from chardet's changelog.

7.7.0 (2026-10-17)

Features:

  • Added a -m/--mime-type flag to the chardetect CLI, which shows the detected MIME type next to the encoding, like file -i. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude, [#384](https://github.com/chardet/chardet/issues/384) <https://github.com/chardet/chardet/issues/384>_)

Accuracy:

  • Visual-order Hebrew is now detected. The ISO-8859-8 model trains on both bidi conventions, so 1990s visual-order pages come back as ISO-8859-8 while logical-order text still prefers Windows-1255. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude)
  • cp864 Arabic now trains on contextually shaped text in visual order, the way real cp864 systems stored it, instead of isolated letter forms in logical order. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude)

Performance:

  • Raising max_bytes on large inputs no longer gets slow. On the compiled build, detect(data, max_bytes=len(data)) on 272 MiB takes about 0.23s for cp1252 and 0.56s for Shift_JIS, down from several seconds. UTF-8 validation and a final decode of the winner still read the whole window, so the answer still decodes it. The other stages stop at a 256 KB evidence cap, which sits above the default max_bytes, so default calls are unchanged, and the default 200 KB cap is still the fastest path. ADR-0006 has the design. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude)
  • The UTF-7 + scan is no longer quadratic on line-wrapped base64 like PEM certificates, MIME attachments, and JWTs. 128 KiB of it went from 5.4 seconds to 1.2 milliseconds. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude)
  • A head full of unclosed <meta or <?xml tags no longer makes the markup scan quadratic, taking it from about 5 ms to about 20 µs. A literal < inside an attribute value now hides that one tag. (Dan Blanchard <https://github.com/dan-blanchard>_ via Claude)
  • An EBCDIC charset= or encoding= followed by whitespace and no value no longer makes the declaration scan backtrack quadratically. A crafted 4 KB document used to cost detect() about 60 ms. (Samina <https://github.com/Samin061>, [#403](https://github.com/chardet/chardet/issues/403) <https://github.com/chardet/chardet/pull/403>)
  • The pure-Python install on CPython scores bigram models with operator.itemgetter instead of a Python loop, making detect() about 1.25x faster and detect_all() about 1.35x faster across the test corpus. Compiled builds and PyPy keep their existing paths. (Afonso Ribeiro <https://github.com/deadstrobe5>_)

... (truncated)

Commits
  • 7a87294 Release 7.7.0
  • 1785c56 docs: label the base64 large-input rows as ascii with a footnote
  • 4ec13a0 test: take the best of three cold starts in the cold-vs-warm check
  • d7be8c7 docs: re-measure the large-input table for 7.7.0
  • d6dcc41 docs: update benchmark numbers for 7.7.0
  • cc5924a Rename EncodingInfo.is_multibyte to is_multibyte_cjk
  • e0a7ff9 docs: derive the multi-byte column from the codec
  • a3699c9 Fix UTF-32 BOM detection for truncated max_bytes windows (#405)
  • 89cab01 Score bigram models through itemgetter on interpreted CPython (#404)
  • ea3ef5f Fix quadratic backtracking in the EBCDIC charset-declaration scan (#403)
  • Additional commits viewable in compare view

Updates gidgethub from 5.4.0 to 6.0.0

Release notes

Sourced from gidgethub's releases.

6.0.0

What's Changed

New Contributors

Full Changelog: gidgethub/gidgethub@v5.3.0...v6.0.0

Changelog

Sourced from gidgethub's changelog.

6.0.0

  • Add managed GitHub App authentication to :class:gidgethub.abc.GitHubAPI through new app_id and private_key constructor arguments. JWTs are generated, cached, and refreshed automatically while explicit per-request credentials continue to take precedence. This design was inspired by Jonathan Sick's (@​jonathansick) earlier implementation in PR [#201](https://github.com/gidgethub/gidgethub/issues/201) <https://github.com/gidgethub/gidgethub/pull/201>_ (Issue [#199](https://github.com/gidgethub/gidgethub/issues/199) <https://github.com/gidgethub/gidgethub/issues/199>_). Generated JWTs now backdate their issue time by 60 seconds to tolerate clock drift, with their expiration measured from that backdated issue time so GitHub's 10 minute limit on the time between issue and expiration is respected.

  • Handle 422 responses whose errors entries are strings instead of objects, raising :exc:gidgethub.ValidationError instead of :exc:TypeError (Issue [#139](https://github.com/gidgethub/gidgethub/issues/139) <https://github.com/gidgethub/gidgethub/issues/139>_)

  • Add :meth:gidgethub.abc.GitHubAPI.manage_rate_limit as an overridable hook, along with the :attr:gidgethub.abc.GitHubAPI.requests_in_flight attribute, to let users implement their own rate-limit/backpressure strategies (Issue [#19](https://github.com/gidgethub/gidgethub/issues/19) <https://github.com/gidgethub/gidgethub/issues/19>_)

  • Add :meth:gidgethub.abc.GitHubAPI.handle_rate_limit_error as an overridable hook, allowing requests that fail with an :exc:~gidgethub.HTTPException to be retried (e.g. after a secondary rate limit or abuse-detection response) (Issue [#19](https://github.com/gidgethub/gidgethub/issues/19) <https://github.com/gidgethub/gidgethub/issues/19>_)

  • Add :attr:gidgethub.HTTPException.headers attribute (PR [#227](https://github.com/gidgethub/gidgethub/issues/227) <https://github.com/gidgethub/gidgethub/pull/227>_)

  • Add a trailing / to url and remove any leading / in base_url for :func:gidgethub.sansio.format_url (PR [#234](https://github.com/gidgethub/gidgethub/issues/234) <https://github.com/gidgethub/gidgethub/pull/234>_)

  • Use httpx2 as a drop-in replacement for httpx backend. The "httpx" extra was updated to use httpx2 and a new httpx2 extra was also added.

  • Document that :meth:gidgethub.abc.GitHubAPI.graphql returns the value of the "data" key from the JSON response (Issue [#127](https://github.com/gidgethub/gidgethub/issues/127) <https://github.com/gidgethub/gidgethub/issues/127>_)

  • Add support for Python 3.14 and 3.15, and drop support for Python 3.8 and 3.9. The minimum supported Python version is now 3.10.

Commits
  • e3755a1 6.0.0 release (#254)
  • 2cb3a93 Add Python version support entry to Unreleased changelog
  • 8a818e7 Noxfile touch ups (#253)
  • 9fc0f84 Add managed GitHub App JWT authentication (#252)
  • 8e63d7d Handle 422 responses whose errors list contains strings (#250)
  • ece9dd5 Document GitHub handling of misnamed GraphQL variables (#251)
  • 60c2c89 Document that graphql() returns the 'data' key value (#249)
  • f2e9b7b Add proactive and reactive rate limiting API (#247)
  • 7e4c788 Preserve Router.register handler signatures with ParamSpec (#246)
  • c026365 Raise minimum Python version to 3.10 (#248)
  • Additional commits viewable in compare view

Updates multidict from 6.9.1 to 7.2.1

Release notes

Sourced from multidict's releases.

7.2.1

Bug fixes

  • Fixed a regression in 7.2.0 where a subclass of MultiDictProxy or CIMultiDictProxy that converted its argument in its own __init__() raised TypeError before that __init__() ran; such a subclass got an empty multidict until its __init__() set the proxied one -- by @​asvetlov.

    Related issues and pull requests on GitHub: #1824, #1825.

7.2.0 drops Python 3.10, fixes a crash in a proxy built without __init__() and a MemoryError from a huge __length_hint__(), and is otherwise a performance release for the C extension: lookups, adds, updates and deletes each needed a few percent fewer instructions.

Bug fixes

  • Stopped a huge __length_hint__() from raising MemoryError in extend(), update() and merge(); the C extension capped the room it reserved for the hint at the largest table the constructor allocates up front -- by @​asvetlov.

    Related issues and pull requests on GitHub: #1767.

  • Fixed a segmentation fault when using a MultiDictProxy or CIMultiDictProxy built by __new__() without __init__(); __new__() started requiring the proxied multidict, the same argument as the constructor -- by @​asvetlov.

    Related issues and pull requests on GitHub: #1782.

Features

  • Sped up reading a multidict in the C extension. md[key], get() and getone() became up to 7% faster by returning the lookup's result by value instead

... (truncated)

Changelog

Sourced from multidict's changelog.

7.2.1

(2026-10-24)

Bug fixes

  • Fixed a regression in 7.2.0 where a subclass of :class:~multidict.MultiDictProxy or :class:~multidict.CIMultiDictProxy that converted its argument in its own __init__() raised :exc:TypeError before that __init__() ran; such a subclass got an empty multidict until its __init__() set the proxied one -- by :user:asvetlov.

    Related issues and pull requests on GitHub: :issue:1824, :issue:1825.

7.2.0

(2026-10-23)

7.2.0 drops Python 3.10, fixes a crash in a proxy built without __init__() and a :exc:MemoryError from a huge __length_hint__(), and is otherwise a performance release for the C extension: lookups, adds, updates and deletes each needed a few percent fewer instructions.

Bug fixes

  • Stopped a huge __length_hint__() from raising :exc:MemoryError in :meth:~multidict.MultiDict.extend, :meth:~multidict.MultiDict.update and :meth:~multidict.MultiDict.merge; the C extension capped the room it reserved for the hint at the largest table the constructor allocates up front -- by :user:asvetlov.

    Related issues and pull requests on GitHub: :issue:1767.

  • Fixed a segmentation fault when using a :class:~multidict.MultiDictProxy or :class:~multidict.CIMultiDictProxy built by __new__() without __init__(); __new__() started requiring the proxied multidict, the same argument as the constructor -- by :user:asvetlov.

... (truncated)

Commits
  • f50870c Release 7.2.1 (#1826)
  • 6526b96 Let proxy subclasses convert their argument in init() (#1825)
  • 3d08ebe Keep the sdist in the deploy group that makes the Release (#1822)
  • 17b8e41 Build(deps): Bump pypa/cibuildwheel from 4.3.1 to 4.3.2 (#1823)
  • 57ffa0c Fix the huge length hint test on 32-bit builds (#1821)
  • 8dcff50 Release 7.2.0 (#1819)
  • a2cc61c Pin Hypothesis in the MyPy hooks, drop an unused type: ignore (#1820)
  • b933263 Refresh the benchmark tables (#1818)
  • edfc84d Inline the GIL contains lookup, take an add's references after the table is r...
  • b2f65b8 Refresh the benchmark tables (#1816)
  • Additional commits viewable in compare view

Updates sentry-sdk from 2.70.0 to 2.73.0

Release notes

Sourced from sentry-sdk's releases.

2.73.0

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

Other

2.72.0

New Features ✨

Asgi

Boto3

Wsgi

... (truncated)

Changelog

Sourced from sentry-sdk's changelog.

2.73.0

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

Other

2.72.0

New Features ✨

Asgi

Boto3

Wsgi

... (truncated)

Commits
  • 54160ae release: 2.73.0
  • 25d265b fix: Exclude litellm==1.107.0 from extras (#8104)
  • 60116ac fix(celery): Don't round down beat schedule intervals (#7842)
  • 68bc4dd fix(arq): Don't monitor cron jobs with unsupported schedules (#8098)
  • 1c249d8 feat(huey): Add an option to monitor Huey periodic tasks (#8052)
  • 4e19592 feat(rq): Add an option to monitor rq-scheduler jobs (#8053)
  • f8b08b3 meta: Update AGENTS.md (#8077)
  • cfce72f chore(deps): bump uv from 0.13.0 to 0.13.4 (#8095)
  • a9553c4 feat(arq): Add an option to monitor arq cron jobs (#8051)
  • 641517a fix(attributes): Handle special float values correctly (#8067)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the pip group with 6 updates
9f4278e 
---
updated-dependencies:
- dependency-name: aiohttp
  dependency-version: 3.14.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: cachetools
  dependency-version: 7.2.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: pip
- dependency-name: chardet
  dependency-version: 7.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
- dependency-name: gidgethub
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: multidict
  dependency-version: 7.2.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: pip
- dependency-name: sentry-sdk
  dependency-version: 2.73.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: pip
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Nov 1, 2026
@codecov

codecov Bot commented Nov 1, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 100.00%. Comparing base (7befc07) to head (9f4278e).

Impacted file tree graph

@@            Coverage Diff            @@
##              main      #726   +/-   ##
=========================================
  Coverage   100.00%   100.00%           
=========================================
  Files           20        20           
  Lines         2421      2421           
  Branches       119       119           
=========================================
  Hits          2421      2421
Flag Coverage Δ
Python_3.14.9 100.00% <ø> (ø)
Python_3.15.1 100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@ezio-melotti
ezio-melotti merged commit 294cb0d into main Nov 1, 2026
11 checks passed
@ezio-melotti
ezio-melotti deleted the dependabot/pip/pip-27b6c5368d branch November 1, 2026 09:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ezio-melotti ezio-melotti ezio-melotti approved these changes

Assignees

@ezio-melotti ezio-melotti

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@ezio-melotti