Bumps the all-deps group with 6 updates in the /requirements directory:
Updates twine from 6.1.0 to 6.2.0
Changelog
Sourced from twine's changelog.
twine 6.2.0 (2025年09月04日)
Features
^^^^^^^^
-
Automatically refresh short-lived PyPI token in long running Trusted
Publishing uploads.
In the event that a trusted publishing upload job is taking longer than the
validity period of a trusted publishing token (15 minutes at the time of this
writing), and we are already 10 minutes into that validity period, we will
begin to attempt to replace the token on each subsequent request. ([#1246](https://github.com/pypa/twine/issues/1246) <https://github.com/pypa/twine/issues/1246>_)
Bugfixes
^^^^^^^^
- Fix compatibility kludge for invalid License-File metadata entries emitted by
build backends to work also with
packaging version 24.0. ([#1217](https://github.com/pypa/twine/issues/1217) <https://github.com/pypa/twine/issues/1217>_)
- Fix a couple of incorrectly rendered error messages. (
[#1224](https://github.com/pypa/twine/issues/1224) <https://github.com/pypa/twine/issues/1224>_)
twine now enforces keyring >= 21.2.0, which was previously
implicitly required by API usage. ([#1229](https://github.com/pypa/twine/issues/1229) <https://github.com/pypa/twine/issues/1229>_)
twine now catches configparser.Error to prevent accidental
leaks of secret tokens or passwords to the user's console. ([#1240](https://github.com/pypa/twine/issues/1240) <https://github.com/pypa/twine/issues/1240>_)
Deprecations and Removals
^^^^^^^^^^^^^^^^^^^^^^^^^
-
Remove hacks that support --skip-existing for indexes other than PyPI and
TestPyPI.
To date, these hacks continue to accrue and there have been numerous issues
with them, not the least of which being that every time we update them, the
paid index providers change things to break the compatibility we implement
for them. Beyond that, these hacks do not work when text is internationalized
in the response from the index provider.
For a sample of past issues, see:
... (truncated)
Commits
14ceb29 Update changelog for 6.2.0 (#1264)
60e377b build(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1263)
88821f2 feat(package): remove MD5 hashing entirely (#1262)
ce5fe53 build(deps): bump actions/download-artifact from 4.3.0 to 5.0.0
6a696ed PEP 639 compliance
9175334 rename 1247.misc.rst to changelog/1247.misc.rst
d94a475 fix(tests): update expected error message
c1c02d1 Remove --skip-existing support for non-PyPI indices
a24d308 Set trusted publishing logging to INFO/WARN (#1247)
becf1a8 Fix py3.9 mypy error in __init__ around PackageMetadata
- Additional commits viewable in compare view
Updates black from 25.1.0 to 25.9.0
Release notes
Sourced from black's releases.
25.9.0
Highlights
- Remove support for pre-python 3.7
await/async as soft keywords/variable names
(#4676)
Stable style
- Fix crash while formatting a long
del statement containing tuples (#4628)
- Fix crash while formatting expressions using the walrus operator in complex
with
statements (#4630)
- Handle
# fmt: skip followed by a comment at the end of file (#4635)
- Fix crash when a tuple appears in the
as clause of a with statement (#4634)
- Fix crash when tuple is used as a context manager inside a
with statement (#4646)
- Fix crash when formatting a
\ followed by a \r followed by a comment (#4663)
- Fix crash on a
\\r\n (#4673)
- Fix crash on
await ... (where ... is a literal Ellipsis) (#4676)
- Fix crash on parenthesized expression inside a type parameter bound (#4684)
- Fix crash when using line ranges excluding indented single line decorated items
(#4670)
Preview style
- Fix a bug where one-liner functions/conditionals marked with
# fmt: skip would still
be formatted (#4552)
- Improve
multiline_string_handling with ternaries and dictionaries (#4657)
- Fix a bug where
string_processing would not split f-strings directly after
expressions (#4680)
- Wrap the
in clause of comprehensions across lines if necessary (#4699)
- Remove parentheses around multiple exception types in
except and except* without
as. (#4720)
- Add
\r style newlines to the potential newlines to normalize file newlines both from
and to (#4710)
Parser
- Rewrite tokenizer to improve performance and compliance (#4536)
- Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type
parameter bounds and defaults. (#4602)
Performance
- Avoid using an extra process when running with only one worker (#4734)
Integrations
- Fix the version check in the vim file to reject Python 3.8 (#4567)
- Enhance GitHub Action
psf/black to read Black version from an additional section in
pyproject.toml: [project.dependency-groups] (#4606)
- Build gallery docker image with python3-slim and reduce image size (#4686)
... (truncated)
Changelog
Sourced from black's changelog.
25.9.0
Highlights
- Remove support for pre-python 3.7
await/async as soft keywords/variable names
(#4676)
Stable style
- Fix crash while formatting a long
del statement containing tuples (#4628)
- Fix crash while formatting expressions using the walrus operator in complex
with
statements (#4630)
- Handle
# fmt: skip followed by a comment at the end of file (#4635)
- Fix crash when a tuple appears in the
as clause of a with statement (#4634)
- Fix crash when tuple is used as a context manager inside a
with statement (#4646)
- Fix crash when formatting a
\ followed by a \r followed by a comment (#4663)
- Fix crash on a
\\r\n (#4673)
- Fix crash on
await ... (where ... is a literal Ellipsis) (#4676)
- Fix crash on parenthesized expression inside a type parameter bound (#4684)
- Fix crash when using line ranges excluding indented single line decorated items
(#4670)
Preview style
- Fix a bug where one-liner functions/conditionals marked with
# fmt: skip would still
be formatted (#4552)
- Improve
multiline_string_handling with ternaries and dictionaries (#4657)
- Fix a bug where
string_processing would not split f-strings directly after
expressions (#4680)
- Wrap the
in clause of comprehensions across lines if necessary (#4699)
- Remove parentheses around multiple exception types in
except and except* without
as. (#4720)
- Add
\r style newlines to the potential newlines to normalize file newlines both from
and to (#4710)
Parser
- Rewrite tokenizer to improve performance and compliance (#4536)
- Fix bug where certain unusual expressions (e.g., lambdas) were not accepted in type
parameter bounds and defaults. (#4602)
Performance
- Avoid using an extra process when running with only one worker (#4734)
Integrations
- Fix the version check in the vim file to reject Python 3.8 (#4567)
- Enhance GitHub Action
psf/black to read Black version from an additional section in
pyproject.toml: [project.dependency-groups] (#4606)
... (truncated)
Commits
Updates isort from 6.0.1 to 6.1.0
Release notes
Sourced from isort's releases.
6.1.0
Changes
👷 Continuous Integration
📦 Dependencies
Commits
ec0efae Merge pull request #2410 from PyCQA/docs/discussion
8af675f Update docs discussions channel
a03dae8 Merge pull request #2409 from PyCQA/build/py314-classifier
2232a26 Add python 3.14 classifier and badge
ec48dd7 Merge pull request #2405 from dvarrazzo/fix/drop-pkg-resources
be46cd4 refactor: make importlib metadata package import lazy
18ecd0c chore: drop branch guarding unsupported Python versions
1d42e56 fix: drop use of non-standard pkg_resources API
0c8fc82 Merge pull request #2406 from PyCQA/dependabot/github_actions/github-actions-...
3478763 Bump actions/checkout from 4 to 5 in the github-actions group
- Additional commits viewable in compare view
Updates faker from 37.5.3 to 37.8.0
Release notes
Sourced from faker's releases.
Release v37.8.0
See CHANGELOG.md.
Release v37.7.0
See CHANGELOG.md.
Release v37.6.0
See CHANGELOG.md.
Changelog
Sourced from faker's changelog.
- Add Automotive providers for
ja_JP locale. Thanks @ItoRino424.
- Add Automotive providers for
ko_KR locale. Thanks @ydj515.
Commits
Updates pytest from 8.4.1 to 8.4.2
Release notes
Sourced from pytest's releases.
8.4.2
pytest 8.4.2 (2025年09月03日)
Bug fixes
-
#13478: Fixed a crash when using console_output_style{.interpreted-text role="confval"} with times and a module is skipped.
-
#13530: Fixed a crash when using pytest.approx{.interpreted-text role="func"} and decimal.Decimal{.interpreted-text role="class"} instances with the decimal.FloatOperation{.interpreted-text role="class"} trap set.
-
#13549: No longer evaluate type annotations in Python 3.14 when inspecting function signatures.
This prevents crashes during module collection when modules do not explicitly use from __future__ import annotations and import types for annotations within a if TYPE_CHECKING: block.
-
#13559: Added missing [int]{.title-ref} and [float]{.title-ref} variants to the [Literal]{.title-ref} type annotation of the [type]{.title-ref} parameter in pytest.Parser.addini{.interpreted-text role="meth"}.
-
#13563: pytest.approx{.interpreted-text role="func"} now only imports numpy if NumPy is already in sys.modules. This fixes unconditional import behavior introduced in [8.4.0]{.title-ref}.
Improved documentation
- #13577: Clarify that
pytest_generate_tests is discovered in test modules/classes; other hooks must be in conftest.py or plugins.
Contributor-facing changes
- #13480: Self-testing: fixed a few test failures when run with
-Wdefault or a similar override.
- #13547: Self-testing: corrected expected message for
test_doctest_unexpected_exception in Python 3.14.
- #13684: Make pytest's own testsuite insensitive to the presence of the
CI environment variable -- by ogrisel{.interpreted-text role="user"}.
Commits
bfae422 Prepare release version 8.4.2
8990538 Fix passenv CI in tox ini and make tests insensitive to the presence of the C...
ca676bf Merge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...
975a60a Merge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...
7723ce8 Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...
b7f0568 Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests
2c94c4a add missing colon (#13640) (#13641)
c3d7684 Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...
dc6e3be Merge pull request #13605 from The-Compiler/training-update-2025-07
f87289c Fix crash with times output style and skipped module (#13573) (#13579)
- Additional commits viewable in compare view
Updates pytest-cov from 6.2.1 to 7.0.0
Changelog
Sourced from pytest-cov's changelog.
7.0.0 (2025年09月09日)
-
Dropped support for subprocesses measurement.
It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests.
It relied on a .pth file, there was no way to opt-out and it created bad interations
with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added
in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025年07月24日>_.
To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:
.. code-block:: ini
[run]
patch = subprocess
This release also requires at least coverage 7.10.6.
-
Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for
building.
Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_
with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.
-
Removed some not really necessary testing deps like six.
6.3.0 (2025年09月06日)
- Added support for markdown reports.
Contributed by Marcos Boger in
[#712](https://github.com/pytest-dev/pytest-cov/issues/712) <https://github.com/pytest-dev/pytest-cov/pull/712>_
and [#714](https://github.com/pytest-dev/pytest-cov/issues/714) <https://github.com/pytest-dev/pytest-cov/pull/714>_.
- Fixed some formatting issues in docs.
Anonymous contribution in
[#706](https://github.com/pytest-dev/pytest-cov/issues/706) <https://github.com/pytest-dev/pytest-cov/pull/706>_.
Commits
224d896 Bump version: 6.3.0 → 7.0.0
73424e3 Cleanup the docs a bit.
36f1cc2 Bump pins in template.
f299c59 Bump the github-actions group with 2 updates
25f0b2e Update docs/config.rst
bb23eac Improve configuration docs
a19531e Switch from build/pre-commit to uv/prek - this should make this faster.
82f9993 Update changelog.
211b5cd Fix links.
97aadd7 Update some ci config, reformat and apply some lint fixes.
- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
Bumps the all-deps group with 6 updates in the /requirements directory:
6.1.06.2.025.1.025.9.06.0.16.1.037.5.337.8.08.4.18.4.26.2.17.0.0Updates
twinefrom 6.1.0 to 6.2.0Changelog
Sourced from twine's changelog.
... (truncated)
Commits
14ceb29Update changelog for 6.2.0 (#1264)60e377bbuild(deps): bump actions/checkout from 4.2.2 to 5.0.0 (#1263)88821f2feat(package): remove MD5 hashing entirely (#1262)ce5fe53build(deps): bump actions/download-artifact from 4.3.0 to 5.0.06a696edPEP 639 compliance9175334rename 1247.misc.rst to changelog/1247.misc.rstd94a475fix(tests): update expected error messagec1c02d1Remove --skip-existing support for non-PyPI indicesa24d308Set trusted publishing logging to INFO/WARN (#1247)becf1a8Fix py3.9 mypy error in__init__aroundPackageMetadataUpdates
blackfrom 25.1.0 to 25.9.0Release notes
Sourced from black's releases.
... (truncated)
Changelog
Sourced from black's changelog.
... (truncated)
Commits
af0ba72Prepare docs for release 25.9.0 (#4751)ffc01a0Fix schema generation error caused by new click version (#4750)626b32fAdd normalizing for\rstyle newlines (#4710)57a4612Fix mypy type issue (#4745)4f6ad7cWrap theinclause of comprehensions across lines if necessary (#4699)24f5169ci: Run diff-shades on unstable instead of preview (#4741)4d55e60Bump actions/setup-python from 5 to 6 (#4744)0cf39efImprove the performance of get_string_prefix (#4742)1f779deFix line ranges decorator edge case (#4670)203fd6bOptimize Line string method (#4739)Updates
isortfrom 6.0.1 to 6.1.0Release notes
Sourced from isort's releases.
Commits
ec0efaeMerge pull request #2410 from PyCQA/docs/discussion8af675fUpdate docs discussions channela03dae8Merge pull request #2409 from PyCQA/build/py314-classifier2232a26Add python 3.14 classifier and badgeec48dd7Merge pull request #2405 from dvarrazzo/fix/drop-pkg-resourcesbe46cd4refactor: make importlib metadata package import lazy18ecd0cchore: drop branch guarding unsupported Python versions1d42e56fix: drop use of non-standard pkg_resources API0c8fc82Merge pull request #2406 from PyCQA/dependabot/github_actions/github-actions-...3478763Bump actions/checkout from 4 to 5 in the github-actions groupUpdates
fakerfrom 37.5.3 to 37.8.0Release notes
Sourced from faker's releases.
Changelog
Sourced from faker's changelog.
Commits
4bde8f5Bump version: 37.7.0 → 37.8.0f542f36📝 Update CHANGELOG.mde28d7cbfix teste4305b0fix paddinga359441💄 format code0e3f0bdAdd Automotive providers forja_JPlocale (#2251)d4fa69dBump version: 37.6.0 → 37.7.0f636f06📝 Update CHANGELOG.md9a482dd💄 Format code2493b2dfix: fix minor grammar typo (#2259)Updates
pytestfrom 8.4.1 to 8.4.2Release notes
Sourced from pytest's releases.
Commits
bfae422Prepare release version 8.4.28990538Fix passenv CI in tox ini and make tests insensitive to the presence of the C...ca676bfMerge pull request #13687 from pytest-dev/patchback/backports/8.4.x/e63f6e51c...975a60aMerge pull request #13686 from pytest-dev/patchback/backports/8.4.x/12bde8af6...7723ce8Merge pull request #13683 from even-even/fix_Exeption_to_Exception_in_errorMe...b7f0568Merge pull request #13685 from CoretexShadow/fix/docs-pytest-generate-tests2c94c4aadd missing colon (#13640) (#13641)c3d7684Merge pull request #13606 from pytest-dev/patchback/backports/8.4.x/5f9938563...dc6e3beMerge pull request #13605 from The-Compiler/training-update-2025-07f87289cFix crash withtimesoutput style and skipped module (#13573) (#13579)Updates
pytest-covfrom 6.2.1 to 7.0.0Changelog
Sourced from pytest-cov's changelog.
Commits
224d896Bump version: 6.3.0 → 7.0.073424e3Cleanup the docs a bit.36f1cc2Bump pins in template.f299c59Bump the github-actions group with 2 updates25f0b2eUpdate docs/config.rstbb23eacImprove configuration docsa19531eSwitch from build/pre-commit to uv/prek - this should make this faster.82f9993Update changelog.211b5cdFix links.97aadd7Update some ci config, reformat and apply some lint fixes.Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions