From 6f0675e994c28d93c6366f3c70b606500f14f93d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 12:32:57 +0000 Subject: [PATCH 1/8] chore(deps-dev): bump ruff from 0.16.1 to 0.16.2 Bumps [ruff](https://github.com/astral-sh/ruff) from 0.16.1 to 0.16.2. - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](https://github.com/astral-sh/ruff/compare/0.16.1...0.16.2) --- updated-dependencies: - dependency-name: ruff dependency-version: 0.16.2 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements-dev.in | 2 +- requirements-dev.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements-dev.in b/requirements-dev.in index 0faa6549..7c620d79 100644 --- a/requirements-dev.in +++ b/requirements-dev.in @@ -5,7 +5,7 @@ pytest>=8.4.1 pytest-cov>=7.1.0 pytest-xdist>=3.8.0 coverage>=7.15.2 -ruff>=0.16.1 +ruff>=0.16.2 setuptools>=80.9.0 pygments>=2.20.0 # Note: ty is run via uvx, not installed as a dependency diff --git a/requirements-dev.txt b/requirements-dev.txt index 6a84ccca..65ff489f 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -35,7 +35,7 @@ pytest-cov==7.1.0 # via -r requirements-dev.in pytest-xdist==3.8.0 # via -r requirements-dev.in -ruff==0.16.1 +ruff==0.16.2 # via -r requirements-dev.in tomli==2.4.1 # via From f4ef3c83fd1a798e726f9027e496a37949d92f1a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 12:33:07 +0000 Subject: [PATCH 2/8] chore(deps): bump starlette from 1.3.1 to 1.6.0 in /docs Bumps [starlette](https://github.com/Kludex/starlette) from 1.3.1 to 1.6.0. - [Release notes](https://github.com/Kludex/starlette/releases) - [Changelog](https://github.com/Kludex/starlette/blob/main/docs/release-notes.md) - [Commits](https://github.com/Kludex/starlette/compare/1.3.1...1.6.0) --- updated-dependencies: - dependency-name: starlette dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- docs/requirements.in | 2 +- docs/requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/requirements.in b/docs/requirements.in index 7196bbdd..28aedf71 100644 --- a/docs/requirements.in +++ b/docs/requirements.in @@ -11,6 +11,6 @@ autodoc==0.5.0 tornado==6.5.7 jinja2==3.1.6 idna==3.18 -starlette==1.3.1 +starlette==1.6.0 requests>=2.34.2 \ No newline at end of file diff --git a/docs/requirements.txt b/docs/requirements.txt index 8e77f4a0..cb9f3a59 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -97,7 +97,7 @@ sphinxcontrib-qthelp==2.0.0 # via sphinx sphinxcontrib-serializinghtml==2.0.0 # via sphinx -starlette==1.3.1 +starlette==1.6.0 # via # -r requirements.in # sphinx-autobuild From 93ba4c1c664d2fff18cccc9de933f32351ed3ffc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 12:33:12 +0000 Subject: [PATCH 3/8] chore(deps-dev): bump coverage from 7.15.3 to 7.15.4 Bumps [coverage](https://github.com/coveragepy/coveragepy) from 7.15.3 to 7.15.4. - [Release notes](https://github.com/coveragepy/coveragepy/releases) - [Changelog](https://github.com/coveragepy/coveragepy/blob/main/CHANGES.rst) - [Commits](https://github.com/coveragepy/coveragepy/compare/7.15.3...7.15.4) --- updated-dependencies: - dependency-name: coverage dependency-version: 7.15.4 dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- requirements-dev.in | 2 +- requirements-dev.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/requirements-dev.in b/requirements-dev.in index 0faa6549..057ccbe7 100644 --- a/requirements-dev.in +++ b/requirements-dev.in @@ -4,7 +4,7 @@ xmltodict>=0.14.2 pytest>=8.4.1 pytest-cov>=7.1.0 pytest-xdist>=3.8.0 -coverage>=7.15.2 +coverage>=7.15.4 ruff>=0.16.1 setuptools>=80.9.0 pygments>=2.20.0 diff --git a/requirements-dev.txt b/requirements-dev.txt index 6a84ccca..22966fd4 100644 --- a/requirements-dev.txt +++ b/requirements-dev.txt @@ -4,7 +4,7 @@ # # pip-compile requirements-dev.in # -coverage[toml]==7.15.3 +coverage[toml]==7.15.4 # via # -r requirements-dev.in # pytest-cov From cc1506d30b69f29b03ea45915bb32390457cc587 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 12:33:31 +0000 Subject: [PATCH 4/8] chore(deps): bump sphinx-autodoc-typehints in /docs Bumps [sphinx-autodoc-typehints](https://github.com/tox-dev/sphinx-autodoc-typehints) from 3.13.0 to 3.13.2. - [Release notes](https://github.com/tox-dev/sphinx-autodoc-typehints/releases) - [Commits](https://github.com/tox-dev/sphinx-autodoc-typehints/compare/3.13.0...3.13.2) --- updated-dependencies: - dependency-name: sphinx-autodoc-typehints dependency-version: 3.13.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- docs/requirements.in | 2 +- docs/requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/requirements.in b/docs/requirements.in index 7196bbdd..14558e3e 100644 --- a/docs/requirements.in +++ b/docs/requirements.in @@ -3,7 +3,7 @@ sphinx==9.1.0 sphinx-autobuild==2025.8.25 # if using typehints -sphinx-autodoc-typehints==3.13.0 +sphinx-autodoc-typehints==3.13.2 mock==5.2.0 autodoc==0.5.0 diff --git a/docs/requirements.txt b/docs/requirements.txt index 8e77f4a0..346c92a1 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -81,7 +81,7 @@ sphinx==9.1.0 # sphinx-basic-ng sphinx-autobuild==2025.8.25 # via -r requirements.in -sphinx-autodoc-typehints==3.13.0 +sphinx-autodoc-typehints==3.13.2 # via -r requirements.in sphinx-basic-ng==1.0.0b2 # via furo From 83571a7f70805634ae3c9c014d138583089945e8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 12:33:55 +0000 Subject: [PATCH 5/8] chore(deps): bump tornado from 6.5.7 to 6.5.8 in /docs Bumps [tornado](https://github.com/tornadoweb/tornado) from 6.5.7 to 6.5.8. - [Changelog](https://github.com/tornadoweb/tornado/blob/master/docs/releases.rst) - [Commits](https://github.com/tornadoweb/tornado/compare/v6.5.7...v6.5.8) --- updated-dependencies: - dependency-name: tornado dependency-version: 6.5.8 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- docs/requirements.in | 2 +- docs/requirements.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/requirements.in b/docs/requirements.in index 7196bbdd..96be476e 100644 --- a/docs/requirements.in +++ b/docs/requirements.in @@ -8,7 +8,7 @@ sphinx-autodoc-typehints==3.13.0 mock==5.2.0 autodoc==0.5.0 -tornado==6.5.7 +tornado==6.5.8 jinja2==3.1.6 idna==3.18 starlette==1.3.1 diff --git a/docs/requirements.txt b/docs/requirements.txt index 8e77f4a0..c5c2a4de 100644 --- a/docs/requirements.txt +++ b/docs/requirements.txt @@ -101,7 +101,7 @@ starlette==1.3.1 # via # -r requirements.in # sphinx-autobuild -tornado==6.5.7 +tornado==6.5.8 # via -r requirements.in typing-extensions==4.12.2 # via beautifulsoup4 From 5cd4336fe75daacbefb7c6895b05e42feb9407b7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 12:35:04 +0000 Subject: [PATCH 6/8] chore(deps): bump github/codeql-action/autobuild from 4.37.5 to 4.37.6 Bumps [github/codeql-action/autobuild](https://github.com/github/codeql-action) from 4.37.5 to 4.37.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/d1ba80a13dd99fba24a470575428917156a28b43...5595ccaf912efad79be6eef63a5619ff05969be3) --- updated-dependencies: - dependency-name: github/codeql-action/autobuild dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e2c8790e..1c94153b 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -36,7 +36,7 @@ jobs: queries: +security-and-quality - name: Autobuild - uses: github/codeql-action/autobuild@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/autobuild@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 - name: Perform CodeQL Analysis uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 From d6f3ef513589a1590066edb5717e07a51757a332 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 12:36:27 +0000 Subject: [PATCH 7/8] chore(deps): bump github/codeql-action/init from 4.37.5 to 4.37.6 Bumps [github/codeql-action/init](https://github.com/github/codeql-action) from 4.37.5 to 4.37.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/d1ba80a13dd99fba24a470575428917156a28b43...5595ccaf912efad79be6eef63a5619ff05969be3) --- updated-dependencies: - dependency-name: github/codeql-action/init dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e2c8790e..aac32330 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -30,7 +30,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/init@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: languages: ${{ matrix.language }} queries: +security-and-quality From 38846966e7e4909ef062007037b184cd0a24e807 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 13 Aug 2026 12:37:40 +0000 Subject: [PATCH 8/8] chore(deps): bump github/codeql-action/analyze from 4.37.5 to 4.37.6 Bumps [github/codeql-action/analyze](https://github.com/github/codeql-action) from 4.37.5 to 4.37.6. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/d1ba80a13dd99fba24a470575428917156a28b43...5595ccaf912efad79be6eef63a5619ff05969be3) --- updated-dependencies: - dependency-name: github/codeql-action/analyze dependency-version: 4.37.6 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index e2c8790e..92ae5240 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -39,6 +39,6 @@ jobs: uses: github/codeql-action/autobuild@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@d1ba80a13dd99fba24a470575428917156a28b43 # v4.37.5 + uses: github/codeql-action/analyze@5595ccaf912efad79be6eef63a5619ff05969be3 # v4.37.6 with: category: "/language:${{ matrix.language }}"