From 2e11a67ea2516e903ca21be88fba8725e2d3b875 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 10 Oct 2025 10:19:04 +0000 Subject: [PATCH 1/3] Bump rich from 14.1.0 to 14.2.0 (#11626) Bumps [rich](https://github.com/Textualize/rich) from 14.1.0 to 14.2.0.
Release notes

Sourced from rich's releases.

The Easy as Pi release

This release bumps Python compatibility to the just-released Python 3.14.

[14.2.0] - 2025-10-09

Changed

Changelog

Sourced from rich's changelog.

[14.2.0] - 2025-10-09

Changed

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rich&package-manager=pip&previous-version=14.1.0&new-version=14.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 6 +++--- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 8 insertions(+), 8 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 50e5906ad55..a52c4282da2 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -213,7 +213,7 @@ requests==2.32.5 # cherry-picker # sphinx # sphinxcontrib-spelling -rich==14.1.0 +rich==14.2.0 # via pytest-codspeed setuptools-git==1.2 # via -r requirements/test-common.in diff --git a/requirements/dev.txt b/requirements/dev.txt index 73a8fb911d2..ef97d64366b 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -207,7 +207,7 @@ requests==2.32.5 # via # cherry-picker # sphinx -rich==14.1.0 +rich==14.2.0 # via pytest-codspeed setuptools-git==1.2 # via -r requirements/test-common.in diff --git a/requirements/lint.txt b/requirements/lint.txt index dbe3dcf4013..8365c097cf2 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -10,6 +10,8 @@ annotated-types==0.7.0 # via pydantic async-timeout==5.0.1 # via valkey +backports-zstd==0.5.0 ; implementation_name == "cpython" + # via -r requirements/lint.in blockbuster==1.5.25 # via -r requirements/lint.in cffi==2.0.0 @@ -90,7 +92,7 @@ python-on-whales==0.78.0 # via -r requirements/lint.in pyyaml==6.0.3 # via pre-commit -rich==14.1.0 +rich==14.2.0 # via pytest-codspeed six==1.17.0 # via python-dateutil @@ -123,5 +125,3 @@ virtualenv==20.34.0 # via pre-commit zlib-ng==1.0.0 # via -r requirements/lint.in -backports.zstd==0.5.0 ; implementation_name == "cpython" - # via -r requirements/lint.in diff --git a/requirements/test-common.txt b/requirements/test-common.txt index 1465527db2b..4f172fd2a94 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -83,7 +83,7 @@ python-dateutil==2.9.0.post0 # via freezegun python-on-whales==0.78.0 # via -r requirements/test-common.in -rich==14.1.0 +rich==14.2.0 # via pytest-codspeed setuptools-git==1.2 # via -r requirements/test-common.in diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index f1491d4ed03..8a74612aee0 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -116,7 +116,7 @@ python-dateutil==2.9.0.post0 # via freezegun python-on-whales==0.78.0 # via -r requirements/test-common.in -rich==14.1.0 +rich==14.2.0 # via pytest-codspeed setuptools-git==1.2 # via -r requirements/test-common.in diff --git a/requirements/test.txt b/requirements/test.txt index 7a149924182..09210281833 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -116,7 +116,7 @@ python-dateutil==2.9.0.post0 # via freezegun python-on-whales==0.78.0 # via -r requirements/test-common.in -rich==14.1.0 +rich==14.2.0 # via pytest-codspeed setuptools-git==1.2 # via -r requirements/test-common.in From 7555c7e6708396867911bcd857fc4e069e47f493 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 10 Oct 2025 10:39:03 +0000 Subject: [PATCH 2/3] Bump backports-zstd from 0.5.0 to 1.0.0 (#11627) Bumps [backports-zstd](https://github.com/rogdham/backports.zstd) from 0.5.0 to 1.0.0.
Changelog

Sourced from backports-zstd's changelog.

1.0.0 - 2025-10-10

:rocket: Added

  • Update code with CPython 3.14.0 version
  • Update type hints with typeshed aa5202465
  • Update pythoncapi-compat dependency
  • Allow to use libzstd present on the system with the --system-zstd build backend argument
  • Check the libzstd version during build and at runtime

:bug: Fixes

  • Fix import order issue by importing the tarfile and zipfile modules only when needed.
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=backports-zstd&package-manager=pip&previous-version=0.5.0&new-version=1.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/base-ft.txt | 2 +- requirements/base.txt | 2 +- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/runtime-deps.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) diff --git a/requirements/base-ft.txt b/requirements/base-ft.txt index a851bf38281..6547bc1402d 100644 --- a/requirements/base-ft.txt +++ b/requirements/base-ft.txt @@ -12,7 +12,7 @@ aiosignal==1.4.0 # via -r requirements/runtime-deps.in async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==0.5.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in brotli==1.1.0 ; platform_python_implementation == "CPython" # via -r requirements/runtime-deps.in diff --git a/requirements/base.txt b/requirements/base.txt index 7e9da23c158..8522bd868fb 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -12,7 +12,7 @@ aiosignal==1.4.0 # via -r requirements/runtime-deps.in async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==0.5.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in brotli==1.1.0 ; platform_python_implementation == "CPython" # via -r requirements/runtime-deps.in diff --git a/requirements/constraints.txt b/requirements/constraints.txt index a52c4282da2..d48fea8a954 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -24,7 +24,7 @@ async-timeout==5.0.1 ; python_version < "3.11" # valkey babel==2.17.0 # via sphinx -backports-zstd==0.5.0 ; implementation_name == "cpython" +backports-zstd==1.0.0 ; implementation_name == "cpython" # via # -r requirements/lint.in # -r requirements/runtime-deps.in diff --git a/requirements/dev.txt b/requirements/dev.txt index ef97d64366b..a0a8be033c2 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -24,7 +24,7 @@ async-timeout==5.0.1 ; python_version < "3.11" # valkey babel==2.17.0 # via sphinx -backports-zstd==0.5.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via # -r requirements/lint.in # -r requirements/runtime-deps.in diff --git a/requirements/lint.txt b/requirements/lint.txt index 8365c097cf2..513b62c635b 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -10,7 +10,7 @@ annotated-types==0.7.0 # via pydantic async-timeout==5.0.1 # via valkey -backports-zstd==0.5.0 ; implementation_name == "cpython" +backports-zstd==1.0.0 ; implementation_name == "cpython" # via -r requirements/lint.in blockbuster==1.5.25 # via -r requirements/lint.in diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt index c97bd0cd4bb..c2db8f8a393 100644 --- a/requirements/runtime-deps.txt +++ b/requirements/runtime-deps.txt @@ -12,7 +12,7 @@ aiosignal==1.4.0 # via -r requirements/runtime-deps.in async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==0.5.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in brotli==1.1.0 ; platform_python_implementation == "CPython" # via -r requirements/runtime-deps.in diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 8a74612aee0..f78281bbdde 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -14,7 +14,7 @@ annotated-types==0.7.0 # via pydantic async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==0.5.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in blockbuster==1.5.25 # via -r requirements/test-common.in diff --git a/requirements/test.txt b/requirements/test.txt index 09210281833..c1c27e8deb5 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -14,7 +14,7 @@ annotated-types==0.7.0 # via pydantic async-timeout==5.0.1 ; python_version < "3.11" # via -r requirements/runtime-deps.in -backports-zstd==0.5.0 ; platform_python_implementation == "CPython" and python_version < "3.14" +backports-zstd==1.0.0 ; platform_python_implementation == "CPython" and python_version < "3.14" # via -r requirements/runtime-deps.in blockbuster==1.5.25 # via -r requirements/test-common.in From e260b15ca8d5e3a199cc9db7d0d154b3cb7350d8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 10 Oct 2025 10:46:33 +0000 Subject: [PATCH 3/3] Bump virtualenv from 20.34.0 to 20.35.1 (#11628) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [virtualenv](https://github.com/pypa/virtualenv) from 20.34.0 to 20.35.1.
Release notes

Sourced from virtualenv's releases.

20.35.1

What's Changed

Full Changelog: https://github.com/pypa/virtualenv/compare/20.34.0...20.35.1

20.35.0

What's Changed

Full Changelog: https://github.com/pypa/virtualenv/compare/20.34.0...20.35.0

Changelog

Sourced from virtualenv's changelog.

v20.35.1 (2025-10-09)

Bugfixes - 20.35.1

- Patch get_interpreter to handle missing cache and app_data
- by :user:`esafak` (:issue:`2972`)
- Fix backwards incompatible changes to ``PythonInfo`` - by
:user:`gaborbernat`. (:issue:`2975`)

v20.35.0 (2025-10-08)


Features - 20.35.0

  • Add AppData and Cache protocols to discovery for decoupling - by :user:esafak. (:issue:2074)
  • Ensure python3.exe and python3 on Windows for Python 3 - by :user:esafak. (:issue:2774)

Bugfixes - 20.35.0

- Replaced direct references to tcl/tk library paths with
getattr - by :user:`esafak` (:issue:`2944`)
- Restore absolute import of fs_is_case_sensitive - by :user:`esafak`.
(:issue:`2955`)
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=20.34.0&new-version=20.35.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index d48fea8a954..e1cdb62e90d 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -291,7 +291,7 @@ uvloop==0.21.0 ; platform_system != "Windows" # -r requirements/lint.in valkey==6.1.1 # via -r requirements/lint.in -virtualenv==20.34.0 +virtualenv==20.35.1 # via pre-commit wait-for-it==2.3.0 # via -r requirements/test-common.in diff --git a/requirements/dev.txt b/requirements/dev.txt index a0a8be033c2..08afbd10407 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -282,7 +282,7 @@ uvloop==0.21.0 ; platform_system != "Windows" and implementation_name == "cpytho # -r requirements/lint.in valkey==6.1.1 # via -r requirements/lint.in -virtualenv==20.34.0 +virtualenv==20.35.1 # via pre-commit wait-for-it==2.3.0 # via -r requirements/test-common.in diff --git a/requirements/lint.txt b/requirements/lint.txt index 513b62c635b..6096f4ca71f 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -121,7 +121,7 @@ uvloop==0.21.0 ; platform_system != "Windows" # via -r requirements/lint.in valkey==6.1.1 # via -r requirements/lint.in -virtualenv==20.34.0 +virtualenv==20.35.1 # via pre-commit zlib-ng==1.0.0 # via -r requirements/lint.in