Skip to content

chore(deps): update python dependencies - #69

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/python-dependencies
Nov 2, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/python-dependencies

Conversation

@renovate

@renovate renovate Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
httpx2 (changelog) 2.13.1 → 2.14.0 age confidence
scim2-server 0.8.3 → 0.8.5 age confidence
sphinx (changelog) 9.0.4 → 9.1.0 age confidence

Release Notes

pydantic/httpx2 (httpx2)

v2.14.0

Compare Source

Highlights

🌐 CIDR ranges in NO_PROXY

NO_PROXY and mounts now match IP CIDR ranges like 192.168.0.0/16 and [fe80::]/10, so any address in the range bypasses the proxy (#​1165). Bracketed IPv6 addresses like [::1]:8080 are accepted, and unparseable NO_PROXY entries are ignored instead of failing client creation (#​1267).

🔐 FIPS-enforced Python support

httpx2 now imports on FIPS-enforced Python builds without hashlib.md5. DigestAuth raises ProtocolError only when the server asks for an unavailable algorithm (#​1130).

🔌 Sturdier connections and WebSocket shutdown

HTTP/2 reads no longer block when a server lowers SETTINGS_MAX_CONCURRENT_STREAMS mid-flight (#​1217), and writing after a peer closes TLS without close_notify raises WriteError (#​1263). Sync WebSocket sessions no longer hang on exit with a full event queue (#​1123), and ASGI WebSocket reads after app shutdown no longer leak anyio exceptions (#​1233).

httpx2

Added
  • Match IP CIDR ranges, like 192.168.0.0/16 and [fe80::]/10, in NO_PROXY and mounts. Requests to any address in the range now bypass the proxy; previously only the network address itself did (#​1165).
  • Accept bracketed IPv6 addresses, like [::1] and [::1]:8080, in NO_PROXY (#​1267).
Changed
  • Raise InvalidURL for a mounts key with an IP host followed by anything other than a valid CIDR prefix, like all://10.0.0.0/33 (#​1165).
Fixed
  • Ignore NO_PROXY entries that cannot be parsed, instead of raising InvalidURL when the client is created (#​1267).
  • Import httpx2 on FIPS-enforced Python builds without hashlib.md5. DigestAuth raises ProtocolError when the server asks for an unavailable algorithm (#​1130).
  • Handle reads after an ASGI WebSocket app shuts down, instead of leaking anyio exceptions (#​1233).
  • Stop the sync WebSocket session from hanging on exit when its event queue is full (#​1123).

httpcore2

Fixed
  • Keep CONNECT and absolute-form proxy targets when the request sets the target extension (#​1262).
  • Stop blocking reads when an HTTP/2 server lowers SETTINGS_MAX_CONCURRENT_STREAMS while requests are in flight (#​1217).
  • Raise WriteError instead of anyio.EndOfStream when writing after the peer closes a TLS connection without close_notify (#​1263).

Full Changelog: pydantic/httpx2@v2.13.1...v2.14.0

python-scim/scim2-server (scim2-server)

v0.8.5

Compare Source

v0.8.4

Compare Source

sphinx-doc/sphinx (sphinx)

v9.1.0

Compare Source

=====================================

Dependencies

  • #​14153: Drop Python 3.11 support.
  • #​12555: Drop Docutils 0.20 support.
    Patch by Adam Turner

Features added

  • Add :meth:~sphinx.application.Sphinx.add_static_dir for copying static
    assets from extensions to the build output.
    Patch by Jared Dillard

Bugs fixed

  • #​14189: autodoc: Fix duplicate :no-index-entry: for modules.
    Patch by Adam Turner
  • #​13713: Fix compatibility with MyST-Parser.
    Patch by Adam Turner
  • Fix tests for Python 3.15.
    Patch by Adam Turner
  • #​14089: autodoc: Fix default option parsing.
    Patch by Adam Turner
  • Remove incorrect static typing assertions.
    Patch by Adam Turner
  • #​14050: LaTeXTranslator fails to build documents using the "acronym"
    standard role.
    Patch by Günter Milde
  • LaTeX: Fix rendering for grid filled merged vertical cell.
    Patch by Tim Nordell
  • #​14228: LaTeX: Fix overrun footer for cases of merged vertical table cells.
    Patch by Tim Nordell
  • #​14207: Fix creating HTMLThemeFactory objects in third-party extensions.
    Patch by Adam Turner
  • #​3099: LaTeX: PDF build crashes if a code-block contains more than
    circa 1350 codelines (about 27 a4-sized pages at default pointsize).
    Patch by Jean-François B.
  • #​14064: LaTeX: TABs ending up in sphinxVerbatim fail to obey tab stops.
    Patch by Jean-François B.
  • #​14089: autodoc: Improve support for non-weakreferencable objects.
    Patch by Adam Turner
  • LaTeX: Fix accidental removal at 3.5.0 (#​8854) of the documentation of
    literalblockcappos key of :ref:'sphinxsetup' <latexsphinxsetup>.
    Patch by Jean-François B.

Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • "before 7am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge (squash) November 2, 2026 01:08
@renovate
renovate Bot merged commit f275026 into main Nov 2, 2026
11 checks passed
@renovate
renovate Bot deleted the renovate/python-dependencies branch November 2, 2026 01:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants