Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 8.2.3 to
9.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sphinx-doc/sphinx/releases">sphinx's
releases</a>.</em></p>
<blockquote>
<h2>Sphinx 9.0.0</h2>
<p>Changelog: <a
href="https://www.sphinx-doc.org/en/master/changes.html">https://www.sphinx-doc.org/en/master/changes.html</a></p>
<h2>Dependencies</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13786">#13786</a>:
Support <a
href="https://docutils.sourceforge.io/RELEASE-NOTES.html#release-0-22-2026-07-29">Docutils
0.22</a>. Patch by Adam Turner.</li>
</ul>
<h2>Incompatible changes</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13639">#13639</a>:
<code>SphinxComponentRegistry.create_source_parser</code> no longer
has an <em>app</em> parameter, instead taking <em>config</em> and
<em>env</em>.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13679">#13679</a>:
Non-decodable characters in source files now raise an error.
Such bytes have been replaced with '?' along with logging a warning
since Sphinx 2.0.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13751">#13751</a>,
<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/14089">#14089</a>:
<code>sphinx.ext.autodoc</code> has been substantially rewritten,
and there may be some incompatible changes in edge cases, especially
when
extensions interact with autodoc internals.
The <code>autodoc_use_legacy_class_based</code> option has been added to
use the legacy (pre-9.0) implementation of autodoc.
Patches by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13355">#13355</a>:
Don't include escaped title content in the search index.
Patch by Will Lachance.</li>
</ul>
<h2>Deprecated</h2>
<ul>
<li>13627: Deprecate remaining public <code>app</code> attributes,
including <code>builder.app</code>, <code>env.app</code>,
<code>events.app</code>,
and <code>SphinxTransform.app</code>.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13637">#13637</a>:
Deprecate the <code>set_application</code> method
of <code>Parser</code> objects.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13644">#13644</a>:
Deprecate the <code>Parser.config</code> and <code>env</code>
attributes.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13665">#13665</a>:
Deprecate support for non-UTF 8 source encodings,
scheduled for removal in Sphinx 10.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13682">#13682</a>:
Deprecate <code>sphinx.io</code>.
Sphinx no longer uses the <code>sphinx.io</code> classes,
having replaced them with standard Python I/O.
The entire <code>sphinx.io</code> module will be removed in Sphinx 10.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13631">#13631</a>:
<code>sphinx.environment.adapters.toctree.global_toctree_for_doc</code>
and
<code>sphinx.environment.BuildEnvironment.get_and_resolve_doctree</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sphinx-doc/sphinx/blob/master/CHANGES.rst">sphinx's
changelog</a>.</em></p>
<blockquote>
<h1>Release 9.0.0 (released Nov 30, 2025)</h1>
<h2>Dependencies</h2>
<ul>
<li>
<p><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13786">#13786</a>:
Support <code>Docutils 0.22</code>_. Patch by Adam Turner.</p>
<p>.. _Docutils 0.22: <a
href="https://docutils.sourceforge.io/RELEASE-NOTES.html#release-0-22-2026-07-29">https://docutils.sourceforge.io/RELEASE-NOTES.html#release-0-22-2026-07-29</a></p>
</li>
</ul>
<h2>Incompatible changes</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13639">#13639</a>:
:py:meth:<code>!SphinxComponentRegistry.create_source_parser</code> no
longer
has an <em>app</em> parameter, instead taking <em>config</em> and
<em>env</em>.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13679">#13679</a>:
Non-decodable characters in source files now raise an error.
Such bytes have been replaced with '?' along with logging a warning
since Sphinx 2.0.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13751">#13751</a>,
<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/14089">#14089</a>:
:mod:<code>sphinx.ext.autodoc</code> has been substantially rewritten,
and there may be some incompatible changes in edge cases, especially
when
extensions interact with autodoc internals.
The :confval:<code>autodoc_use_legacy_class_based</code> option has been
added to
use the legacy (pre-9.0) implementation of autodoc.
Patches by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13355">#13355</a>:
Don't include escaped title content in the search index.
Patch by Will Lachance.</li>
</ul>
<h2>Deprecated</h2>
<ul>
<li>13627: Deprecate remaining public :py:attr:<code>!.app</code>
attributes,
including <code>builder.app</code>, <code>env.app</code>,
<code>events.app</code>,
and <code>SphinxTransform.app</code>.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13637">#13637</a>:
Deprecate the :py:meth:<code>!set_application</code> method
of :py:class:<code>~sphinx.parsers.Parser</code> objects.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13644">#13644</a>:
Deprecate the :py:attr:<code>!Parser.config</code> and
:py:attr:<code>!env</code> attributes.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13665">#13665</a>:
Deprecate support for non-UTF 8 source encodings,
scheduled for removal in Sphinx 10.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13682">#13682</a>:
Deprecate :py:mod:<code>!sphinx.io</code>.
Sphinx no longer uses the :py:mod:<code>!sphinx.io</code> classes,
having replaced them with standard Python I/O.
The entire :py:mod:<code>!sphinx.io</code> module will be removed in
Sphinx 10.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13631">#13631</a>:
:func:<code>!sphinx.environment.adapters.toctree.global_toctree_for_doc</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="aea90c92aa"><code>aea90c9</code></a>
Bump to 9.0.0 final</li>
<li><a
href="28c31aa576"><code>28c31aa</code></a>
Fix CHANGES entry for non-decodable bytes</li>
<li><a
href="a22dfabe03"><code>a22dfab</code></a>
Permit filtering warnings generated during source code parsing (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13894">#13894</a>)</li>
<li><a
href="2d0a416c9b"><code>2d0a416</code></a>
Fix intersphinx file cache (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/14130">#14130</a>)</li>
<li><a
href="3cd545fad2"><code>3cd545f</code></a>
Bump version</li>
<li><a
href="17380a536d"><code>17380a5</code></a>
Bump to 9.0.0 candidate 4</li>
<li><a
href="4a3bd13b6a"><code>4a3bd13</code></a>
js domain: Remove extra brackets from function arguments and errors (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13569">#13569</a>)</li>
<li><a
href="4f23c99300"><code>4f23c99</code></a>
Fix .gitattributes for latin-1 encoded files</li>
<li><a
href="766976f6a8"><code>766976f</code></a>
Run the ty type checker in CI (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/14129">#14129</a>)</li>
<li><a
href="2ac430c6df"><code>2ac430c</code></a>
Fix autodoc event handler in sphinx.ext.napoleon (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/14127">#14127</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sphinx-doc/sphinx/compare/v8.2.3...v9.0.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [pynacl](https://github.com/pyca/pynacl) from 1.6.0 to 1.6.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst">pynacl's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.1 (2025-11-10)</h2>
<ul>
<li>The <code>MAKE</code> environment variable can now be used to
specify the <code>make</code>
binary that should be used in the build process.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="077559e610"><code>077559e</code></a>
bump for 1.6.1 (<a
href="https://redirect.github.com/pyca/pynacl/issues/906">#906</a>)</li>
<li><a
href="4f2eada50c"><code>4f2eada</code></a>
Bump actions/upload-artifact from 4 to 5 (<a
href="https://redirect.github.com/pyca/pynacl/issues/904">#904</a>)</li>
<li><a
href="d8185db3ce"><code>d8185db</code></a>
Bump actions/download-artifact from 5.0.0 to 6.0.0 (<a
href="https://redirect.github.com/pyca/pynacl/issues/903">#903</a>)</li>
<li><a
href="f986caa8de"><code>f986caa</code></a>
Update Python version from 3.14t-dev to 3.14t (<a
href="https://redirect.github.com/pyca/pynacl/issues/901">#901</a>)</li>
<li><a
href="e8d3bc7a6f"><code>e8d3bc7</code></a>
use 3.14.0 in CI (<a
href="https://redirect.github.com/pyca/pynacl/issues/900">#900</a>)</li>
<li><a
href="f08cb9c399"><code>f08cb9c</code></a>
build macOS wheels on macos-15 (arm64) (<a
href="https://redirect.github.com/pyca/pynacl/issues/898">#898</a>)</li>
<li><a
href="eb41815aba"><code>eb41815</code></a>
Update macOS runner version in CI workflow (<a
href="https://redirect.github.com/pyca/pynacl/issues/897">#897</a>)</li>
<li><a
href="7f418a0894"><code>7f418a0</code></a>
Honor MAKE environment variable (<a
href="https://redirect.github.com/pyca/pynacl/issues/895">#895</a>)</li>
<li><a
href="84afafd90e"><code>84afafd</code></a>
Require CFFI 2.0.0 or newer on Python >= 3.9 (<a
href="https://redirect.github.com/pyca/pynacl/issues/894">#894</a>)</li>
<li>See full diff in <a
href="https://github.com/pyca/pynacl/compare/1.6.0...1.6.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [checkdmarc](https://github.com/domainaware/checkdmarc) from
5.10.2 to 5.10.12.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/domainaware/checkdmarc/releases">checkdmarc's
releases</a>.</em></p>
<blockquote>
<h2>5.10.12</h2>
<ul>
<li>Proper checking for the start of an SPF record (PR <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/184">#184</a>)</li>
<li>Improve error messages and fix typos (Close issue <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/182">#182</a>)</li>
<li>Remove warning when no MX records are found</li>
</ul>
<h2>5.10.8</h2>
<ul>
<li>Return the proper error message when checking an SOA record for a
domain that exist</li>
</ul>
<h2>5.10.7</h2>
<ul>
<li>Set <code>use_signals=False</code> when using timeout decorator to
allow it to be used in multithreaded applications such as web
applications.</li>
</ul>
<h2>5.10.6</h2>
<ul>
<li>Fix BIMI certificate validation error generation, close <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/177">#177</a></li>
<li>Add support for the avp bimi tag, close <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/179">#179</a></li>
</ul>
<h2>5.10.5</h2>
<ul>
<li>Switch from DNS over UDP to DNS over TCP for DNSSEC and TLSA queries
(Close <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/176">#176</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/domainaware/checkdmarc/blob/master/CHANGELOG.md">checkdmarc's
changelog</a>.</em></p>
<blockquote>
<h2>5.10.12</h2>
<ul>
<li>Proper checking for the start of an SPF record (PR <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/184">#184</a>)</li>
<li>Improve error messages and fix typos (Close issue <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/182">#182</a>)</li>
<li>Remove warning when no MX records are found</li>
</ul>
<h2>5.10.11</h2>
<ul>
<li>Make BIMI error messages clearer</li>
</ul>
<h2>5.10.10</h2>
<ul>
<li>Add missing periods at the end of BIMI error messages and
warnings</li>
</ul>
<h2>5.10.9</h2>
<ul>
<li>Add periods at the end of error messages to make them nicer for web
apps</li>
</ul>
<h2>5.10.8</h2>
<ul>
<li>Return the proper error message when checking an SOA record for a
domain that exist</li>
</ul>
<h2>5.10.7</h2>
<ul>
<li>Set <code>use_signals=False</code> when using timeout decorator to
allow it to be used in multithreaded applications such as web
applications</li>
</ul>
<h2>5.10.6</h2>
<ul>
<li>Fix BIMI certificate validation error generation, close <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/177">#177</a></li>
<li>Add support for the avp bimi tag, closes <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/179">#179</a></li>
</ul>
<h2>5.10.5</h2>
<ul>
<li>Switch from DNS over UDP to DNS over TCP for DNSSEC and TLSA queries
(Close <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/176">#176</a>)</li>
</ul>
<h2>5.10.4</h2>
<ul>
<li>Provide a clearer description of SPF void lookup warnings <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/173">#173</a></li>
</ul>
<h2>5.10.3</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/domainaware/checkdmarc/commits/5.10.12">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Krzysztof Zając <krzysztof.zajac@cert.pl>
Bumps [pynacl](https://github.com/pyca/pynacl) from 1.5.0 to 1.6.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst">pynacl's
changelog</a>.</em></p>
<blockquote>
<h2>1.6.0 (2025-09-11)</h2>
<ul>
<li><strong>BACKWARDS INCOMPATIBLE:</strong> Removed support for Python
3.6 and 3.7.</li>
<li>Added support for the low level AEAD AES bindings.</li>
<li>Added support for
<code>crypto_core_ed25519_from_uniform</code>.</li>
<li>Update <code>libsodium</code> to 1.0.20-stable (2025-08-27
build).</li>
<li>Added support for free-threaded Python 3.14.</li>
<li>Added support for Windows on ARM wheels.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3209bf1df1"><code>3209bf1</code></a>
release 1.6.0 (<a
href="https://redirect.github.com/pyca/pynacl/issues/891">#891</a>)</li>
<li><a
href="15bc45d16f"><code>15bc45d</code></a>
upgrade to libsodium 1.0.20-stable 2025-08-27 build (<a
href="https://redirect.github.com/pyca/pynacl/issues/890">#890</a>)</li>
<li><a
href="ac958e0258"><code>ac958e0</code></a>
fix doc mistake (<a
href="https://redirect.github.com/pyca/pynacl/issues/892">#892</a>)</li>
<li><a
href="593fb5ea06"><code>593fb5e</code></a>
update changelog and drop support for python 3.7 (<a
href="https://redirect.github.com/pyca/pynacl/issues/888">#888</a>)</li>
<li><a
href="7bc612606b"><code>7bc6126</code></a>
fix var casing in wheel builder (<a
href="https://redirect.github.com/pyca/pynacl/issues/889">#889</a>)</li>
<li><a
href="59f9595ffd"><code>59f9595</code></a>
Support Python 3.14 and 3.14t (<a
href="https://redirect.github.com/pyca/pynacl/issues/880">#880</a>)</li>
<li><a
href="2860f9884c"><code>2860f98</code></a>
Bump actions/setup-python from 5 to 6 (<a
href="https://redirect.github.com/pyca/pynacl/issues/887">#887</a>)</li>
<li><a
href="b712d60990"><code>b712d60</code></a>
Update CI for the new staticnode location (<a
href="https://redirect.github.com/pyca/pynacl/issues/885">#885</a>)</li>
<li><a
href="1780489967"><code>1780489</code></a>
Bump actions/checkout from 4.2.2 to 4.3.0 (<a
href="https://redirect.github.com/pyca/pynacl/issues/883">#883</a>)</li>
<li><a
href="e03ffee35d"><code>e03ffee</code></a>
Bump actions/download-artifact from 4.3.0 to 5.0.0 (<a
href="https://redirect.github.com/pyca/pynacl/issues/882">#882</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pyca/pynacl/compare/1.5.0...1.6.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [requests](https://github.com/psf/requests) from 2.32.4 to 2.32.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/psf/requests/releases">requests's
releases</a>.</em></p>
<blockquote>
<h2>v2.32.5</h2>
<h2>2.32.5 (2025-08-18)</h2>
<p><strong>Bugfixes</strong></p>
<ul>
<li>The SSLContext caching feature originally introduced in 2.32.0 has
created
a new class of issues in Requests that have had negative impact across a
number
of use cases. The Requests team has decided to revert this feature as
long term
maintenance of it is proving to be unsustainable in its current
iteration.</li>
</ul>
<p><strong>Deprecations</strong></p>
<ul>
<li>Added support for Python 3.14.</li>
<li>Dropped support for Python 3.8 following its end of support.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/psf/requests/blob/main/HISTORY.md">requests's
changelog</a>.</em></p>
<blockquote>
<h2>2.32.5 (2025-08-18)</h2>
<p><strong>Bugfixes</strong></p>
<ul>
<li>The SSLContext caching feature originally introduced in 2.32.0 has
created
a new class of issues in Requests that have had negative impact across a
number
of use cases. The Requests team has decided to revert this feature as
long term
maintenance of it is proving to be unsustainable in its current
iteration.</li>
</ul>
<p><strong>Deprecations</strong></p>
<ul>
<li>Added support for Python 3.14.</li>
<li>Dropped support for Python 3.8 following its end of support.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b25c87d7cb"><code>b25c87d</code></a>
v2.32.5</li>
<li><a
href="131e506079"><code>131e506</code></a>
Merge pull request <a
href="https://redirect.github.com/psf/requests/issues/7010">#7010</a>
from psf/dependabot/github_actions/actions/checkout-...</li>
<li><a
href="b336cb2bc6"><code>b336cb2</code></a>
Bump actions/checkout from 4.2.0 to 5.0.0</li>
<li><a
href="46e939b552"><code>46e939b</code></a>
Update publish workflow to use <code>artifact-id</code> instead of
<code>name</code></li>
<li><a
href="4b9c546aa3"><code>4b9c546</code></a>
Merge pull request <a
href="https://redirect.github.com/psf/requests/issues/6999">#6999</a>
from psf/dependabot/github_actions/step-security/har...</li>
<li><a
href="7618dbef01"><code>7618dbe</code></a>
Bump step-security/harden-runner from 2.12.0 to 2.13.0</li>
<li><a
href="2edca11103"><code>2edca11</code></a>
Add support for Python 3.14 and drop support for Python 3.8 (<a
href="https://redirect.github.com/psf/requests/issues/6993">#6993</a>)</li>
<li><a
href="fec96cd597"><code>fec96cd</code></a>
Update Makefile rules (<a
href="https://redirect.github.com/psf/requests/issues/6996">#6996</a>)</li>
<li><a
href="d58d8aa2f4"><code>d58d8aa</code></a>
docs: clarify timeout parameter uses seconds in Session.request (<a
href="https://redirect.github.com/psf/requests/issues/6994">#6994</a>)</li>
<li><a
href="91a3eabd3d"><code>91a3eab</code></a>
Bump github/codeql-action from 3.28.5 to 3.29.0</li>
<li>Additional commits viewable in <a
href="https://github.com/psf/requests/compare/v2.32.4...v2.32.5">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [requests](https://github.com/psf/requests) from 2.32.3 to 2.32.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/psf/requests/releases">requests's
releases</a>.</em></p>
<blockquote>
<h2>v2.32.4</h2>
<h2>2.32.4 (2025-06-10)</h2>
<p><strong>Security</strong></p>
<ul>
<li>CVE-2024-47081 Fixed an issue where a maliciously crafted URL and
trusted
environment will retrieve credentials for the wrong hostname/machine
from a
netrc file. (<a
href="https://redirect.github.com/psf/requests/issues/6965">#6965</a>)</li>
</ul>
<p><strong>Improvements</strong></p>
<ul>
<li>Numerous documentation improvements</li>
</ul>
<p><strong>Deprecations</strong></p>
<ul>
<li>Added support for pypy 3.11 for Linux and macOS. (<a
href="https://redirect.github.com/psf/requests/issues/6926">#6926</a>)</li>
<li>Dropped support for pypy 3.9 following its end of support. (<a
href="https://redirect.github.com/psf/requests/issues/6926">#6926</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/psf/requests/blob/main/HISTORY.md">requests's
changelog</a>.</em></p>
<blockquote>
<h2>2.32.4 (2025-06-10)</h2>
<p><strong>Security</strong></p>
<ul>
<li>CVE-2024-47081 Fixed an issue where a maliciously crafted URL and
trusted
environment will retrieve credentials for the wrong hostname/machine
from a
netrc file.</li>
</ul>
<p><strong>Improvements</strong></p>
<ul>
<li>Numerous documentation improvements</li>
</ul>
<p><strong>Deprecations</strong></p>
<ul>
<li>Added support for pypy 3.11 for Linux and macOS.</li>
<li>Dropped support for pypy 3.9 following its end of support.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="021dc729f0"><code>021dc72</code></a>
Polish up release tooling for last manual release</li>
<li><a
href="821770e822"><code>821770e</code></a>
Bump version and add release notes for v2.32.4</li>
<li><a
href="59f8aa2adf"><code>59f8aa2</code></a>
Add netrc file search information to authentication documentation (<a
href="https://redirect.github.com/psf/requests/issues/6876">#6876</a>)</li>
<li><a
href="5b4b64c346"><code>5b4b64c</code></a>
Add more tests to prevent regression of CVE 2024 47081</li>
<li><a
href="7bc45877a8"><code>7bc4587</code></a>
Add new test to check netrc auth leak (<a
href="https://redirect.github.com/psf/requests/issues/6962">#6962</a>)</li>
<li><a
href="96ba401c12"><code>96ba401</code></a>
Only use hostname to do netrc lookup instead of netloc</li>
<li><a
href="7341690e84"><code>7341690</code></a>
Merge pull request <a
href="https://redirect.github.com/psf/requests/issues/6951">#6951</a>
from tswast/patch-1</li>
<li><a
href="6716d7c9f2"><code>6716d7c</code></a>
remove links</li>
<li><a
href="a7e1c745dc"><code>a7e1c74</code></a>
Update docs/conf.py</li>
<li><a
href="c799b8167a"><code>c799b81</code></a>
docs: fix dead links to kenreitz.org</li>
<li>Additional commits viewable in <a
href="https://github.com/psf/requests/compare/v2.32.3...v2.32.4">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [checkdmarc](https://github.com/domainaware/checkdmarc) from 5.8.3
to 5.8.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/domainaware/checkdmarc/releases">checkdmarc's
releases</a>.</em></p>
<blockquote>
<h2>5.8.6</h2>
<ul>
<li>Ignore unhandled critical extensions for mark certificates (PR <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/162">#162</a>
closes issue <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/161">#161</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/domainaware/checkdmarc/blob/master/CHANGELOG.md">checkdmarc's
changelog</a>.</em></p>
<blockquote>
<h2>5.8.6</h2>
<ul>
<li>Ignore unhandled critical extensions for mark certificates (PR <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/162">#162</a>
closes issue <a
href="https://redirect.github.com/domainaware/checkdmarc/issues/161">#161</a>)</li>
</ul>
<h2>5.8.5</h2>
<ul>
<li>Remove Entrust VMC root</li>
<li>Add GlobalSign VMC root</li>
</ul>
<h2>5.8.4</h2>
<ul>
<li>Update JSON output for BIMI
<ul>
<li>Rename the <code>expires</code> field to
<code>not_valid_after</code></li>
<li>Add <code>not_valid_before</code> field</li>
<li>Add <code>expired</code> boolean field</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/domainaware/checkdmarc/commits/5.8.6">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [checkdmarc](https://github.com/domainaware/checkdmarc) from 5.8.2
to 5.8.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/domainaware/checkdmarc/blob/master/CHANGELOG.md">checkdmarc's
changelog</a>.</em></p>
<blockquote>
<h2>5.8.3</h2>
<ul>
<li>Use timeout values for HTTP client timeouts</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li>See full diff in <a
href="https://github.com/domainaware/checkdmarc/commits">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [checkdmarc](https://github.com/domainaware/checkdmarc) from 5.8.1
to 5.8.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/domainaware/checkdmarc/releases">checkdmarc's
releases</a>.</em></p>
<blockquote>
<h2>5.8.2</h2>
<ul>
<li>Add SSL.com root MVC CA certificates to <code>MVCCAs.pem</code></li>
<li>Replace deprecated <code>importlib.resources.path</code> call with
<code>importlib.resources.file</code>
<ul>
<li>Use <code>importlib-resources</code> to support older versions of
Python</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/domainaware/checkdmarc/blob/master/CHANGELOG.md">checkdmarc's
changelog</a>.</em></p>
<blockquote>
<h2>5.8.2</h2>
<ul>
<li>Add SSL.com root VMC CA certificates to <code>MVCCAs.pem</code></li>
<li>Replace deprecated <code>importlib.resources.path</code> call with
<code>importlib.resources.file</code>
<ul>
<li>Use <code>importlib-resources</code> to support older versions of
Python</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="749b122372"><code>749b122</code></a>
5.8.2</li>
<li><a
href="7524634dc2"><code>7524634</code></a>
Fix use of package resources</li>
<li><a
href="74a4aae151"><code>74a4aae</code></a>
Fix requirements</li>
<li><a
href="09e1114d99"><code>09e1114</code></a>
Fix importlib_resources backport support</li>
<li><a
href="31d8c9c0c6"><code>31d8c9c</code></a>
Replace deprecated importlib.resources.path call with
importlib.resources.file</li>
<li><a
href="ba8c5494f4"><code>ba8c549</code></a>
Add SSL.com CAs</li>
<li>See full diff in <a
href="https://github.com/domainaware/checkdmarc/compare/5.8.1...5.8.2">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.5 to 3.1.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pallets/jinja/releases">jinja2's
releases</a>.</em></p>
<blockquote>
<h2>3.1.6</h2>
<p>This is the Jinja 3.1.6 security release, which fixes security issues
but does not otherwise change behavior and should not result in breaking
changes compared to the latest feature release.</p>
<p>PyPI: <a
href="https://pypi.org/project/Jinja2/3.1.6/">https://pypi.org/project/Jinja2/3.1.6/</a>
Changes: <a
href="https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6">https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6</a></p>
<ul>
<li>The <code>|attr</code> filter does not bypass the environment's
attribute lookup, allowing the sandbox to apply its checks. <a
href="https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7">https://github.com/pallets/jinja/security/advisories/GHSA-cpwx-vrp4-4pq7</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pallets/jinja/blob/main/CHANGES.rst">jinja2's
changelog</a>.</em></p>
<blockquote>
<h2>Version 3.1.6</h2>
<p>Released 2025-03-05</p>
<ul>
<li>The <code>|attr</code> filter does not bypass the environment's
attribute lookup,
allowing the sandbox to apply its checks.
:ghsa:<code>cpwx-vrp4-4pq7</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="15206881c0"><code>1520688</code></a>
release version 3.1.6</li>
<li><a
href="90457bbf33"><code>90457bb</code></a>
Merge commit from fork</li>
<li><a
href="065334d1ee"><code>065334d</code></a>
attr filter uses env.getattr</li>
<li><a
href="033c20015c"><code>033c200</code></a>
start version 3.1.6</li>
<li><a
href="bc68d4efa9"><code>bc68d4e</code></a>
use global contributing guide (<a
href="https://redirect.github.com/pallets/jinja/issues/2070">#2070</a>)</li>
<li><a
href="247de5e0c5"><code>247de5e</code></a>
use global contributing guide</li>
<li><a
href="ab8218c7a1"><code>ab8218c</code></a>
use project advisory link instead of global</li>
<li><a
href="b4ffc8ff29"><code>b4ffc8f</code></a>
release version 3.1.5 (<a
href="https://redirect.github.com/pallets/jinja/issues/2066">#2066</a>)</li>
<li>See full diff in <a
href="https://github.com/pallets/jinja/compare/3.1.5...3.1.6">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Krzysztof Zając <krzysztof.zajac2@gmail.com>
Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 8.2.1 to
8.2.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sphinx-doc/sphinx/releases">sphinx's
releases</a>.</em></p>
<blockquote>
<h2>Sphinx 8.2.3</h2>
<p>Changelog: <a
href="https://www.sphinx-doc.org/en/master/changes/8.2.html">https://www.sphinx-doc.org/en/master/changes/8.2.html</a></p>
<h2>Sphinx 8.2.2</h2>
<p>Changelog: <a
href="https://www.sphinx-doc.org/en/master/changes/8.2.html">https://www.sphinx-doc.org/en/master/changes/8.2.html</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="847ad0c991"><code>847ad0c</code></a>
Bump to 8.2.3 final</li>
<li><a
href="4091fe3354"><code>4091fe3</code></a>
Add CHANGES for Sphinx 8.2.3</li>
<li><a
href="c84c21ff93"><code>c84c21f</code></a>
Correct the date for Sphinx 8.2.2</li>
<li><a
href="b3881bb234"><code>b3881bb</code></a>
Fix _CurrentDocument membership testing with
'{c,cpp}:parent_symbol'</li>
<li><a
href="92b5303219"><code>92b5303</code></a>
Define <code>_StrPath.__radd__()</code></li>
<li><a
href="5739a9d58d"><code>5739a9d</code></a>
Bump version</li>
<li><a
href="ee96ef3042"><code>ee96ef3</code></a>
Bump to 8.2.2 final</li>
<li><a
href="3e0021c7aa"><code>3e0021c</code></a>
Move Sphinx 8.2.2 CHANGES to doc/changes</li>
<li><a
href="1a62f3170a"><code>1a62f31</code></a>
Fix apidoc extension not setting default header/package name (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13391">#13391</a>)</li>
<li><a
href="13d2899666"><code>13d2899</code></a>
Replace <code>None</code> filename with <code>''</code> in
<code>Sphinx.add_js_file()</code> (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13402">#13402</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sphinx-doc/sphinx/compare/v8.2.1...v8.2.3">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [sphinx](https://github.com/sphinx-doc/sphinx) from 8.1.3 to
8.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sphinx-doc/sphinx/releases">sphinx's
releases</a>.</em></p>
<blockquote>
<h2>Sphinx 8.2.1</h2>
<p>Changelog: <a
href="https://www.sphinx-doc.org/en/master/changes/8.2.html">https://www.sphinx-doc.org/en/master/changes/8.2.html</a></p>
<h2>Sphinx 8.2.0</h2>
<p>Changelog: <a
href="https://www.sphinx-doc.org/en/master/changes/8.2.html">https://www.sphinx-doc.org/en/master/changes/8.2.html</a></p>
<h2>Dependencies</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13000">#13000</a>:
Drop Python 3.10 support.</li>
</ul>
<h2>Incompatible changes</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13044">#13044</a>:
Remove the internal and undocumented <code>has_equations</code> data
from the <code>MathDomain</code> domain.
The undocumented <code>MathDomain.has_equations</code> method
now unconditionally returns <code>True</code>.
These are replaced by the <code>has_maths_elements</code> key of the
page context dict.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13227">#13227</a>:
HTML output for sequences of keys in the <code>kbd</code> role
no longer uses a <code><kbd class="kbd compound"></code>
element to wrap
the keys and separators, but places them directly in the relevant parent
node.
This means that CSS rulesets targeting <code>kbd.compound</code> or
<code>.kbd.compound</code>
will no longer have any effect.
Patch by Adam Turner.</li>
</ul>
<h2>Deprecated</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13037">#13037</a>:
Deprecate the <code>SingleHTMLBuilder.fix_refuris</code> method.
Patch by James Addison.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13083">#13083</a>,
<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13330">#13330</a>:
Un-deprecate <code>sphinx.util.import_object</code>.
Patch by Matthias Geier.</li>
</ul>
<h2>Features added</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13173">#13173</a>:
Add a new <code>duplicate_declaration</code> warning type,
with <code>duplicate_declaration.c</code> and
<code>duplicate_declaration.cpp</code> subtypes.
Patch by Julien Lecomte and Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/11824">#11824</a>:
linkcode: Allow extensions to add support for a domain by defining
the keys that should be present.
Patch by Nicolas Peugnet.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13144">#13144</a>:
Add a <code>class</code> option to the <code>autosummary</code>
directive.
Patch by Tim Hoffmann.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13146">#13146</a>:
Napoleon: Unify the type preprocessing logic to allow
Google-style docstrings to use the optional and default keywords.
Patch by Chris Barrick.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sphinx-doc/sphinx/blob/v8.2.1/CHANGES.rst">sphinx's
changelog</a>.</em></p>
<blockquote>
<h1>Release 8.2.1 (released Feb 21, 2025)</h1>
<h2>Bugs fixed</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13367">#13367</a>:
Correct spelling of <code>highlighting_failure</code> in warning
sub-type.
Patch by Bart Kamphorst.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13377">#13377</a>:
Restore support for using <code>sphinx.testing.path</code> paths with
<code>sphinx.testing.fixtures</code>.
Patch by Kazuya Takei.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13380">#13380</a>:
viewcode: Fix importing modules more than once.
Patch by Dave Hoese.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13382">#13382</a>:
Napoleon: Use the right valid types for configuration values.
Patch by Adam Turner.</li>
<li>13376: Fix copying assets from a relative
:confval:<code>html_static_path</code> entry.
Patch by Adam Turner.</li>
</ul>
<h1>Release 8.2.0 (released Feb 18, 2025)</h1>
<h2>Dependencies</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13000">#13000</a>:
Drop Python 3.10 support.</li>
</ul>
<h2>Incompatible changes</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13044">#13044</a>:
Remove the internal and undocumented <code>has_equations</code> data
from the :py:class:<code>!MathDomain</code> domain.
The undocumented :py:meth:<code>!MathDomain.has_equations</code> method
now unconditionally returns <code>True</code>.
These are replaced by the <code>has_maths_elements</code> key of the
page context dict.
Patch by Adam Turner.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13227">#13227</a>:
HTML output for sequences of keys in the :rst:role:<code>kbd</code> role
no longer uses a <code><kbd class="kbd compound"></code>
element to wrap
the keys and separators, but places them directly in the relevant parent
node.
This means that CSS rulesets targeting <code>kbd.compound</code> or
<code>.kbd.compound</code>
will no longer have any effect.
Patch by Adam Turner.</li>
</ul>
<h2>Deprecated</h2>
<ul>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13037">#13037</a>:
Deprecate the <code>SingleHTMLBuilder.fix_refuris</code> method.
Patch by James Addison.</li>
<li><a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13083">#13083</a>,
<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13330">#13330</a>:
Un-deprecate <code>sphinx.util.import_object</code>.
Patch by Matthias Geier.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0215a73cbf"><code>0215a73</code></a>
Bump to 8.2.1 final</li>
<li><a
href="53b79139f6"><code>53b7913</code></a>
Remove background colours from (un)translated classes</li>
<li><a
href="58e64d4016"><code>58e64d4</code></a>
Fix <code>_relative_path()</code> for unresolved paths</li>
<li><a
href="1a3d1def22"><code>1a3d1de</code></a>
Add missing CHANGES entry</li>
<li><a
href="d847d736ec"><code>d847d73</code></a>
Bump Ruff to 0.9.7</li>
<li><a
href="7ba762870f"><code>7ba7628</code></a>
Napoleon: Fix valid types for configuration values (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13382">#13382</a>)</li>
<li><a
href="8ef07089ee"><code>8ef0708</code></a>
Fix viewcode extension importing modules more than once (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13380">#13380</a>)</li>
<li><a
href="7e1bf28c28"><code>7e1bf28</code></a>
Restore support for <code>sphinx.testing.path</code> paths in
``sphinx.testing.fixture...</li>
<li><a
href="d099161878"><code>d099161</code></a>
Revert "Mark autodoc singledispatchmethod tests as expected
failures" (<a
href="https://redirect.github.com/sphinx-doc/sphinx/issues/13381">#13381</a>)</li>
<li><a
href="ba3c729b70"><code>ba3c729</code></a>
Switch transifex workflow trigger from 'push' to 'pull_request'</li>
<li>Additional commits viewable in <a
href="https://github.com/sphinx-doc/sphinx/compare/v8.1.3...v8.2.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [jinja2](https://github.com/pallets/jinja) from 3.1.4 to 3.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pallets/jinja/releases">jinja2's
releases</a>.</em></p>
<blockquote>
<h2>3.1.5</h2>
<p>This is the Jinja 3.1.5 security fix release, which fixes security
issues and bugs but does not otherwise change behavior and should not
result in breaking changes compared to the latest feature release.</p>
<p>PyPI: <a
href="https://pypi.org/project/Jinja2/3.1.5/">https://pypi.org/project/Jinja2/3.1.5/</a>
Changes: <a
href="https://jinja.palletsprojects.com/changes/#version-3-1-5">https://jinja.palletsprojects.com/changes/#version-3-1-5</a>
Milestone: <a
href="https://github.com/pallets/jinja/milestone/16?closed=1">https://github.com/pallets/jinja/milestone/16?closed=1</a></p>
<ul>
<li>The sandboxed environment handles indirect calls to
<code>str.format</code>, such as by passing a stored reference to a
filter that calls its argument. <a
href="https://github.com/pallets/jinja/security/advisories/GHSA-q2x7-8rv6-6q7h">GHSA-q2x7-8rv6-6q7h</a></li>
<li>Escape template name before formatting it into error messages, to
avoid issues with names that contain f-string syntax. <a
href="https://redirect.github.com/pallets/jinja/issues/1792">#1792</a>,
<a
href="https://github.com/pallets/jinja/security/advisories/GHSA-gmj6-6f8f-6699">GHSA-gmj6-6f8f-6699</a></li>
<li>Sandbox does not allow <code>clear</code> and <code>pop</code> on
known mutable sequence types. <a
href="https://redirect.github.com/pallets/jinja/issues/2032">#2032</a></li>
<li>Calling sync <code>render</code> for an async template uses
<code>asyncio.run</code>. <a
href="https://redirect.github.com/pallets/jinja/issues/1952">#1952</a></li>
<li>Avoid unclosed <code>auto_aiter</code> warnings. <a
href="https://redirect.github.com/pallets/jinja/issues/1960">#1960</a></li>
<li>Return an <code>aclose</code>-able <code>AsyncGenerator</code> from
<code>Template.generate_async</code>. <a
href="https://redirect.github.com/pallets/jinja/issues/1960">#1960</a></li>
<li>Avoid leaving <code>root_render_func()</code> unclosed in
<code>Template.generate_async</code>. <a
href="https://redirect.github.com/pallets/jinja/issues/1960">#1960</a></li>
<li>Avoid leaving async generators unclosed in blocks, includes and
extends. <a
href="https://redirect.github.com/pallets/jinja/issues/1960">#1960</a></li>
<li>The runtime uses the correct <code>concat</code> function for the
current environment when calling block references. <a
href="https://redirect.github.com/pallets/jinja/issues/1701">#1701</a></li>
<li>Make <code>|unique</code> async-aware, allowing it to be used after
another async-aware filter. <a
href="https://redirect.github.com/pallets/jinja/issues/1781">#1781</a></li>
<li><code>|int</code> filter handles <code>OverflowError</code> from
scientific notation. <a
href="https://redirect.github.com/pallets/jinja/issues/1921">#1921</a></li>
<li>Make compiling deterministic for tuple unpacking in a <code>{% set
... %}</code> call. <a
href="https://redirect.github.com/pallets/jinja/issues/2021">#2021</a></li>
<li>Fix dunder protocol (<code>copy</code>/<code>pickle</code>/etc)
interaction with <code>Undefined</code> objects. <a
href="https://redirect.github.com/pallets/jinja/issues/2025">#2025</a></li>
<li>Fix <code>copy</code>/<code>pickle</code> support for the internal
<code>missing</code> object. <a
href="https://redirect.github.com/pallets/jinja/issues/2027">#2027</a></li>
<li><code>Environment.overlay(enable_async)</code> is applied correctly.
<a
href="https://redirect.github.com/pallets/jinja/issues/2061">#2061</a></li>
<li>The error message from <code>FileSystemLoader</code> includes the
paths that were searched. <a
href="https://redirect.github.com/pallets/jinja/issues/1661">#1661</a></li>
<li><code>PackageLoader</code> shows a clearer error message when the
package does not contain the templates directory. <a
href="https://redirect.github.com/pallets/jinja/issues/1705">#1705</a></li>
<li>Improve annotations for methods returning copies. <a
href="https://redirect.github.com/pallets/jinja/issues/1880">#1880</a></li>
<li><code>urlize</code> does not add <code>mailto:</code> to values like
<code>@a@b</code>. <a
href="https://redirect.github.com/pallets/jinja/issues/1870">#1870</a></li>
<li>Tests decorated with <code>@pass_context</code> can be used with the
<code>|select</code> filter. <a
href="https://redirect.github.com/pallets/jinja/issues/1624">#1624</a></li>
<li>Using <code>set</code> for multiple assignment (<code>a, b = 1,
2</code>) does not fail when the target is a namespace attribute. <a
href="https://redirect.github.com/pallets/jinja/issues/1413">#1413</a></li>
<li>Using <code>set</code> in all branches of <code>{% if %}{% elif %}{%
else %}</code> blocks does not cause the variable to be considered
initially undefined. <a
href="https://redirect.github.com/pallets/jinja/issues/1253">#1253</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pallets/jinja/blob/main/CHANGES.rst">jinja2's
changelog</a>.</em></p>
<blockquote>
<h2>Version 3.1.5</h2>
<p>Released 2024-12-21</p>
<ul>
<li>The sandboxed environment handles indirect calls to
<code>str.format</code>, such as
by passing a stored reference to a filter that calls its argument.
:ghsa:<code>q2x7-8rv6-6q7h</code></li>
<li>Escape template name before formatting it into error messages, to
avoid
issues with names that contain f-string syntax.
:issue:<code>1792</code>, :ghsa:<code>gmj6-6f8f-6699</code></li>
<li>Sandbox does not allow <code>clear</code> and <code>pop</code> on
known mutable sequence
types. :issue:<code>2032</code></li>
<li>Calling sync <code>render</code> for an async template uses
<code>asyncio.run</code>.
:pr:<code>1952</code></li>
<li>Avoid unclosed <code>auto_aiter</code> warnings.
:pr:<code>1960</code></li>
<li>Return an <code>aclose</code>-able <code>AsyncGenerator</code> from
<code>Template.generate_async</code>. :pr:<code>1960</code></li>
<li>Avoid leaving <code>root_render_func()</code> unclosed in
<code>Template.generate_async</code>. :pr:<code>1960</code></li>
<li>Avoid leaving async generators unclosed in blocks, includes and
extends.
:pr:<code>1960</code></li>
<li>The runtime uses the correct <code>concat</code> function for the
current environment
when calling block references. :issue:<code>1701</code></li>
<li>Make <code>|unique</code> async-aware, allowing it to be used after
another
async-aware filter. :issue:<code>1781</code></li>
<li><code>|int</code> filter handles <code>OverflowError</code> from
scientific notation.
:issue:<code>1921</code></li>
<li>Make compiling deterministic for tuple unpacking in a <code>{% set
... %}</code>
call. :issue:<code>2021</code></li>
<li>Fix dunder protocol (<code>copy</code>/<code>pickle</code>/etc)
interaction with <code>Undefined</code>
objects. :issue:<code>2025</code></li>
<li>Fix <code>copy</code>/<code>pickle</code> support for the internal
<code>missing</code> object.
:issue:<code>2027</code></li>
<li><code>Environment.overlay(enable_async)</code> is applied correctly.
:pr:<code>2061</code></li>
<li>The error message from <code>FileSystemLoader</code> includes the
paths that were
searched. :issue:<code>1661</code></li>
<li><code>PackageLoader</code> shows a clearer error message when the
package does not
contain the templates directory. :issue:<code>1705</code></li>
<li>Improve annotations for methods returning copies.
:pr:<code>1880</code></li>
<li><code>urlize</code> does not add <code>mailto:</code> to values like
<code>@a@b</code>. :pr:<code>1870</code></li>
<li>Tests decorated with <code>@pass_context`` can be used with the
``|select`` filter. :issue:</code>1624`</li>
<li>Using <code>set</code> for multiple assignment (<code>a, b = 1,
2</code>) does not fail when the
target is a namespace attribute. :issue:<code>1413</code></li>
<li>Using <code>set</code> in all branches of <code>{% if %}{% elif %}{%
else %}</code> blocks
does not cause the variable to be considered initially undefined.
:issue:<code>1253</code></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="877f6e51be"><code>877f6e5</code></a>
release version 3.1.5</li>
<li><a
href="8d58859265"><code>8d58859</code></a>
remove test pypi</li>
<li><a
href="eda8fe86fd"><code>eda8fe8</code></a>
update dev dependencies</li>
<li><a
href="c8fdce1e03"><code>c8fdce1</code></a>
Fix bug involving calling set on a template parameter within all
branches of ...</li>
<li><a
href="66587ce989"><code>66587ce</code></a>
Fix bug where set would sometimes fail within if</li>
<li><a
href="fbc3a696c7"><code>fbc3a69</code></a>
Add support for namespaces in tuple parsing (<a
href="https://redirect.github.com/pallets/jinja/issues/1664">#1664</a>)</li>
<li><a
href="b8f4831d41"><code>b8f4831</code></a>
more comments about nsref assignment</li>
<li><a
href="ee832194cd"><code>ee83219</code></a>
Add support for namespaces in tuple assignment</li>
<li><a
href="1d55cddbb2"><code>1d55cdd</code></a>
Triple quotes in docs (<a
href="https://redirect.github.com/pallets/jinja/issues/2064">#2064</a>)</li>
<li><a
href="8a8eafc6b9"><code>8a8eafc</code></a>
edit block assignment section</li>
<li>Additional commits viewable in <a
href="https://github.com/pallets/jinja/compare/3.1.4...3.1.5">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Krzysztof Zając <krzysztof.zajac2@gmail.com>
Bumps
[sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) from
3.0.1 to 3.0.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst">sphinx-rtd-theme's
changelog</a>.</em></p>
<blockquote>
<h1>3.0.2</h1>
<ul>
<li>Show current translation when the flyout is attached</li>
<li>Fix JavaScript issue that didn't allow users to disable
selectors</li>
</ul>
<p>.. _release-3.0.1:</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5f03347239"><code>5f03347</code></a>
Release 3.0.2</li>
<li><a
href="17c0685be9"><code>17c0685</code></a>
Attached flyout: show the current translation (<a
href="https://redirect.github.com/readthedocs/sphinx_rtd_theme/issues/1629">#1629</a>)</li>
<li><a
href="5db7796b6e"><code>5db7796</code></a>
Allow disabling selectors (<a
href="https://redirect.github.com/readthedocs/sphinx_rtd_theme/issues/1626">#1626</a>)</li>
<li>See full diff in <a
href="https://github.com/readthedocs/sphinx_rtd_theme/compare/3.0.1...3.0.2">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>