deps: bump the pip-dependencies group across 1 directory with 23 updates #11

dependabot · 2026-02-02T02:57:59Z

Bumps the pip-dependencies group with 22 updates in the / directory:

Package	From	To
markdown	`3.7`	`3.10.1`
mkdocs-material	`9.5.44`	`9.7.1`
pymdown-extensions	`10.12`	`10.20.1`
jinja2	`3.1.4`	`3.1.6`
isort	`5.13.2`	`7.0.0`
coveralls	`4.0.1`	`4.0.2`
pytest	`8.3.3`	`9.0.2`
pytest-cov	`6.0.0`	`7.0.0`
pytest-random-order	`1.1.1`	`1.2.0`
ruff	`0.7.4`	`0.14.14`
pytest-mock	`3.14.0`	`3.15.1`
pre-commit	`4.0.1`	`4.5.1`
mypy	`1.15.0`	`1.19.1`
fastapi	`0.116.1`	`0.128.0`
sqlalchemy	`2.0.41`	`2.0.46`
asyncpg	`0.30.0`	`0.31.0`
alembic	`1.16.4`	`1.18.3`
pyjwt	`2.10.1`	`2.11.0`
celery	`5.5.3`	`5.6.2`
pydantic	`2.11.7`	`2.12.5`
python-dotenv	`1.1.1`	`1.2.1`
pydantic-settings	`2.10.1`	`2.12.0`

Updates markdown from 3.7 to 3.10.1

Release notes

Sourced from markdown's releases.

Release 3.10.1

Fixed

Ensure nested elements inside inline comments are properly unescaped (#1571).

Make the docs build successfully with mkdocstrings-python 2.0 (#1575).

Fix infinite loop when multiple bogus or unclosed HTML comments appear in input (#1578).

Fix another infinite loop when handling bad comments (#1586).

Release 3.10.0

Changed

Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).

Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

Release 3.9.0

Changed

Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

Ensure inline processing iterates through elements in document order (#1546).

Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

Release 3.8.2

Fixed

Fix codecs deprecation in Python 3.14.

Fix issue with unclosed comment parsing in Python 3.14.

Fix issue with unclosed declarations in Python 3.14.

Fix issue with unclosed HTML tag <foo and Python 3.14.

Release 3.8.1

Fixed

Ensure incomplete markup declaration in raw HTML doesn't crash parser (#1534).

Fixed dropped content in md_in_html (#1526).

Fixed HTML handling corner case that prevented some content from not being rendered (#1528).

... (truncated)

Changelog

Sourced from markdown's changelog.

[3.10.1] - 2026-01-21

Fixed

Ensure nested elements inside inline comments are properly unescaped (#1571).

Make the docs build successfully with mkdocstrings-python 2.0 (#1575).

Fix infinite loop when multiple bogus or unclosed HTML comments appear in input (#1578).

Fix another infinite loop when handling bad comments (#1586).

[3.10.0] - 2025-11-03

Changed

Officially support Python 3.14 and PyPy 3.11 and drop support for Python 3.9 and PyPy 3.9.

Fixed

Fix an HTML comment parsing case in some Python versions that can cause an infinite loop (#1554).

Revert the default behavior of USE_DEFINITION_ORDER (to True). The new behavior introduced in 3.9.0 is experimental and results are inconsistent. It should not have been made the default behavior (#1561).

[3.9.0] - 2025-09-04

Changed

Footnotes are now ordered by the occurrence of their references in the document. A new configuration option for the footnotes extension, USE_DEFINITION_ORDER, has been added to support restoring the previous behavior of ordering footnotes by the occurrence of definitions (#1367).

Fixed

Ensure inline processing iterates through elements in document order (#1546).

Fix handling of incomplete HTML tags in code spans in Python 3.14 (#1547).

[3.8.2] - 2025-06-19

Fixed

Fix codecs deprecation in Python 3.14 (#1537).

Fix issue with unclosed comment parsing in Python 3.14 (#1537).

Fix issue with unclosed declarations in Python 3.14 (#1537).

Fix issue with unclosed HTML tag <foo and Python 3.14 (#1537).

[3.8.1] - 2025-06-18

Fixed

... (truncated)

Commits

e5fa5b8 Bump version to 3.10.1
f925349 More HTML fixes
9933a0a Revert "Allow reference links with backticks"
07dfa4e Allow reference links with backticks
fb6b27a Fix infinite loop when text contains multiple unclosed comments
89112c2 Make the docs build successfully with mkdocstrings-python 2.0
961856c Update link
2b49115 Ensure nested elements inside inline comments are properly unescaped.
22e89c1 Bump version to 3.10
c138aea + PY314 - PY39
Additional commits viewable in compare view

Updates mkdocs-material from 9.5.44 to 9.7.1

Release notes

Sourced from mkdocs-material's releases.

mkdocs-material-9.7.1

[!WARNING]

Material for MkDocs is in maintenance mode

Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs until November 2026.

Read the full announcement on our blog

Changes

Updated requests to 2.30+ to mitigate CVE in urllib

Fixed privacy plugin not picking up protocol-relative URLs

Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0

[!WARNING]

Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The [projects] and [typeset] plugins are included in this release, but must be considered deprecated. Both plugins proved unsustainable to maintain and represent architectural dead ends. They are provided as-is without ongoing support.

Changes:

Added support for projects plugin (for compat, now deprecated)

Added support for typeset plugin (for compat, now deprecated)

Added support for pinned blog posts and author profiles

Added support for customizing pagination for blog index pages

Added support for customizing blog category sort order

Added support for staying on page when switching languages

Added support for disabling tags in table of contents

Added support for nested tags and shadow tags

Added support for footnote tooltips

Added support for instant previews

Added support for instant prefetching

Added support for custom social card layouts

Added support for custom social card background images

Added support for selectable rangs in code blocks

Added support for custom selectors for code annotations

Added support for configurable log level in privacy plugin

Added support for processing of external links in privacy plugin

... (truncated)

Changelog

Sourced from mkdocs-material's changelog.

mkdocs-material-9.7.1 (2025-12-18)

Updated requests to 2.30+ to mitigate CVE in urllib

Fixed privacy plugin not picking up protocol-relative URLs

Fixed #8542: false positives and negatives captured in privacy plugin

mkdocs-material-9.7.0 (2025-11-11)

⚠️ Material for MkDocs is now in maintenance mode

This is the last release of Material for MkDocs that will receive new features. Going forward, the Material for MkDocs team focuses on Zensical, a next-gen static site generator built from first principles. We will provide critical bug fixes and security updates for Material for MkDocs for 12 months at least.

Read the full announcement on our blog: https://squidfunk.github.io/mkdocs-material/blog/2025/11/05/zensical/

This release includes all features that were previously exclusive to the Insiders edition. These features are now freely available to everyone.

Note on deprecated plugins: The projects and typeset plugins are included in this release, but must be considered deprecated. Both plugins proved unsustainable to maintain and represent architectural dead ends. They are provided as-is without ongoing support.

Changes:

Added support for pinned blog posts and author profiles

Added support for customizing pagination for blog index pages

Added support for customizing blog category sort order

Added support for staying on page when switching languages

Added support for disabling tags in table of contents

Added support for nested tags and shadow tags

Added support for footnote tooltips

Added support for instant previews

Added support for instant prefetching

Added support for custom social card layouts

Added support for custom social card background images

Added support for selectable rangs in code blocks

Added support for custom selectors for code annotations

Added support for configurable log level in privacy plugin

Added support for processing of external links in privacy plugin

Added support for automatic image optimization via optimize plugin

Added support for navigation paths (breadcrumbs)

Fixed #8519: Vector accents do not render when using KaTeX

mkdocs-material-9.6.23 (2025-11-01)

Updated Burmese translation

... (truncated)

Commits

7e236f6 Temporarily disable publishing
3941491 Fixed CI
034eaf7 Prepare 9.7.1 release
79ba428 Fixed privacy plugin not picking up protocol-relative URLs
61cad24 Updated dependencies
dde13ce Fixed false positives and negatives captured in privacy plugin (#8542)
291012d Updated requests to 2.30+ to mitigate CVE in urllib
673d8ca Fixed links
1722784 Documentation
aee925f Fixed links
Additional commits viewable in compare view

Updates pymdown-extensions from 10.12 to 10.20.1

Release notes

Sourced from pymdown-extensions's releases.

10.20

NEW: Quotes: New blockquotes extension added that uses a more modern approach when compared to Python Markdown's default. Quotes specifically will not group consecutive blockquotes together in the same lazy fashion that the default Python Markdown does which follows a more modern trend to how parsers these days handle block quotes.

In addition, Quotes also provides an optional feature to enable specifying callouts/alerts in the style used by GitHub and Obsidian.

10.19.1

FIX: Arithmatex: Fix issue where block $$ math used inline within a paragraph could result in nested math parsing.

10.19

NEW: Emoji: Update Twemoji to use Unicode 16.

NEW: Critic: Roll back view mode deprecation as some still like to use it, though further enhancements to this mode are not planned.

10.18

NEW: Critic: view mode has been deprecated. To avoid warnings or future issues, explicitly set mode to either accept or reject. In the future, the new default will be accept and the view mode will be removed entirely.

FIX: Block Admonition: important should have always been available as a default.

10.17.2

FIX: Blocks: Blocks extensions will now better handle nesting of indented style Admonitions, Details, and Tabbed and other non-conflicting blocks.

10.17.1

FIX: Fix an issue where Highlight can override another extension in the "registered" list in Python Markdown.

10.17

NEW: Allow specifying static IDs in caption block headers via #id syntax.

10.6.1

10.16.1

FIX: Inefficient regular expression pattern for figure caption numbers.

10.16

NEW: Add early support for Python 3.14.

NEW: Drop support for Python 3.8.

NEW: Snippets: Added max_retries and backoff_retries options to configure new retry logic for HTTP 429

... (truncated)

Commits

See full diff in compare view

Updates jinja2 from 3.1.4 to 3.1.6

Release notes

Sourced from jinja2's releases.

3.1.6

This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.6/ Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6

The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. GHSA-cpwx-vrp4-4pq7

3.1.5

This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/Jinja2/3.1.5/ Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5 Milestone: https://github.com/pallets/jinja/milestone/16?closed=1

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h

Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699

Sandbox does not allow clear and pop on known mutable sequence types. #2032

Calling sync render for an async template uses asyncio.run. #1952

Avoid unclosed auto_aiter warnings. #1960

Return an aclose-able AsyncGenerator from Template.generate_async. #1960

Avoid leaving root_render_func() unclosed in Template.generate_async. #1960

Avoid leaving async generators unclosed in blocks, includes and extends. #1960

The runtime uses the correct concat function for the current environment when calling block references. #1701

Make |unique async-aware, allowing it to be used after another async-aware filter. #1781

|int filter handles OverflowError from scientific notation. #1921

Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021

Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025

Fix copy/pickle support for the internal missing object. #2027

Environment.overlay(enable_async) is applied correctly. #2061

The error message from FileSystemLoader includes the paths that were searched. #1661

PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705

Improve annotations for methods returning copies. #1880

urlize does not add mailto: to values like @a@b. #1870

Tests decorated with @pass_context can be used with the |select filter. #1624

Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413

Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253

Changelog

Sourced from jinja2's changelog.

Version 3.1.6

Released 2025-03-05

The |attr filter does not bypass the environment's attribute lookup, allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7

Version 3.1.5

Released 2024-12-21

The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. :ghsa:q2x7-8rv6-6q7h

Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. :issue:1792, :ghsa:gmj6-6f8f-6699

Sandbox does not allow clear and pop on known mutable sequence types. :issue:2032

Calling sync render for an async template uses asyncio.run. :pr:1952

Avoid unclosed auto_aiter warnings. :pr:1960

Return an aclose-able AsyncGenerator from Template.generate_async. :pr:1960

Avoid leaving root_render_func() unclosed in Template.generate_async. :pr:1960

Avoid leaving async generators unclosed in blocks, includes and extends. :pr:1960

The runtime uses the correct concat function for the current environment when calling block references. :issue:1701

Make |unique async-aware, allowing it to be used after another async-aware filter. :issue:1781

|int filter handles OverflowError from scientific notation. :issue:1921

Make compiling deterministic for tuple unpacking in a {% set ... %} call. :issue:2021

Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. :issue:2025

Fix copy/pickle support for the internal missing object. :issue:2027

Environment.overlay(enable_async) is applied correctly. :pr:2061

The error message from FileSystemLoader includes the paths that were searched. :issue:1661

PackageLoader shows a clearer error message when the package does not contain the templates directory. :issue:1705

Improve annotations for methods returning copies. :pr:1880

urlize does not add mailto: to values like @a@b. :pr:1870

... (truncated)

Commits

1520688 release version 3.1.6
90457bb Merge commit from fork
065334d attr filter uses env.getattr
033c200 start version 3.1.6
bc68d4e use global contributing guide (#2070)
247de5e use global contributing guide
ab8218c use project advisory link instead of global
b4ffc8f release version 3.1.5 (#2066)
877f6e5 release version 3.1.5
8d58859 remove test pypi
Additional commits viewable in compare view

Updates isort from 5.13.2 to 7.0.0

Release notes

Sourced from isort's releases.

7.0.0

Changes

💥 Breaking Changes

Drop support for Python 3.9 (#2430) @DanielNoord

🚀 Features

Show absolute paths in skipped file messages (#2416) @pranlawate

🪲 Fixes

Some fixes for Python 3.14 (#2433) @DanielNoord

Test on 3.14 and fix any bugs (#2425) @DanielNoord

Update CHANGELOG.md + Fix Formatting and Grammar (#2419) @lukbrew25

Fix output of hanging indent for long lines with noqa (#2407) @matan1008

👷 Continuous Integration

Format with ruff instead of black (#2432) @DanielNoord

Target 3.10 for ruff (#2431) @DanielNoord

Update development dependencies to latest version (#2426) @DanielNoord

docs: update pre-commit examples to version 6.1.0 (#2413) @pranlawate

Small cleanup for developer environment (#2418) @DanielNoord

📦 Dependencies

Bump actions/setup-python from 5 to 6 in the github-actions group (#2411) @dependabot[bot]

6.1.0

Changes

Update docs discussions channel (#2410) @staticdev

Add python 3.14 classifier and badge (#2409) @staticdev

Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

Use working isort version in pre-commit example (#2402) @iainelder

fix typo in _get_files_from_dir_cached test (#2392) @tiltingpenguin

Resolve bandit warnings (#2379) @kurtmckee

Add tox for cross-platform, parallel test suite execution (#2378) @kurtmckee

Add Project URLs to PyPI Side Panel (#2387) @guillermodotn

Fix typos (#2376) @co63oc

👷 Continuous Integration

Add make bash scripts portable (#2377) @staticdev

📦 Dependencies

Bump actions/checkout from 4 to 5 in the github-actions group (#2406) @dependabot[bot]

... (truncated)

Changelog

Sourced from isort's changelog.

Changelog

NOTE: isort follows the semver versioning standard. Find out more about isort's release policy here.

Unreleased

Removed --old-finders and --magic-placement flags and old_finders configuration option. The legacy finder logic that relied on environment introspection has been removed (#2445) @joao-faria-dev

Update the plone profile to not clash with black (#2456) @ale-rt

6.1.0 October 1 2025

Add python 3.14 classifier and badge (#2409) @staticdev

Drop use of non-standard pkg_resources API (#2405) @dvarrazzo

6.0.1 Febuary 26 2025

Add OSError handling in find_imports_in_file (#2331) @kobarity

6.0.0 January 27 2025

Remove support for Python 3.8 (#2327) @DanielNoord

Python 3.13 support (#2306) @mayty

Speed up exists_case_sensitive calls (#2264) @correctmost

Ensure that split_on_trailing_comma works with as imports (#2340) @DanielNoord

Black profile: enable magic comma (#2236) @MrMino

Update line_length and single_line_exclusions in google profile (#2149) @jagapiou

Allow --diff to be used with --jobs (#2302) @mnakama

Fix wemake profile to have correct character limit (#2241) @sobolevn

Fix sort_reexports code mangling (#2283) @Helveg

Fix correct group by package tokenization (#2136) @glasnt

Commits

0a09c78 Merge pull request #2433 from DanielNoord/python-314
0fee794 Add 3.14 to stdlibds
332a1ad Bump zstandard for 3.14 compat
f756e56 Merge pull request #2432 from DanielNoord/ruff-it-up
52f5134 Format with ruff instead of black
012aa69 Merge pull request #2431 from DanielNoord/ruff-it-up
89773db Target 3.10 with ruff
933e382 Merge pull request #2430 from DanielNoord/drop-39
8b6e00c Remove support for Python 3.9
b5f9f29 Bump profile plugin to 3.10+ and re-lock
Additional commits viewable in compare view

Updates coveralls from 4.0.1 to 4.0.2

Release notes

Sourced from coveralls's releases.

4.0.2 (2025-11-07)

Internal

update python support: drop EOL'd versions (3.8, 3.9), begin testing on new versions (3.13, 3.14), and mark explicit future compatibility up to <4.0

Changelog

Sourced from coveralls's changelog.

4.0.2 (2025-11-07)

Internal

update python support: drop EOL'd versions (3.8, 3.9), begin testing on new versions (3.13, 3.14), and mark explicit future compatibility up to <4.0

Commits

3304564 chore: re-lock poetry lockfile
113f52f chore(release): bump version
120cf1e chore(compat): bump pythons
a0d0cf6 chore(deps): update dependency docker to v4 (#616)
fd2302a chore(deps): update pandoc/core docker tag to v3.8.2 (#630)
12ad037 chore(deps): lock file maintenance (#629)
d357cc4 chore(deps): lock file maintenance (#627)
8feab27 chore(deps): update actions/dependency-review-action action to v4.8.1 (#624)
9bc44a4 chore(deps): lock file maintenance (#622)
7ff4351 chore(deps): update actions/dependency-review-action action to v4.8.0 (#620)
Additional commits viewable in compare view

Updates pytest from 8.3.3 to 9.0.2

Release notes

Sourced from pytest's releases.

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

#13896: The terminal progress feature added in pytest 9.0.0 has been disabled by default, except on Windows, due to compatibility issues with some terminal emulators.

You may enable it again by passing -p terminalprogress. We may enable it by default again once compatibility improves in the future.

Additionally, when the environment variable TERM is dumb, the escape codes are no longer emitted, even if the plugin is enabled.

#13904: Fixed the TOML type of the tmp_path_retention_count settings in the API reference from number to string.

#13946: The private config.inicfg attribute was changed in a breaking manner in pytest 9.0.0. Due to its usage in the ecosystem, it is now restored to working order using a compatibility shim. It will be deprecated in pytest 9.1 and removed in pytest 10.

#13965: Fixed quadratic-time behavior when handling unittest subtests in Python 3.10.

Improved documentation

#4492: The API Reference now contains cross-reference-able documentation of pytest's command-line flags <command-line-flags>.

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

#13895: Restore support for skipping tests via raise unittest.SkipTest.

#13896: The terminal progress plugin added in pytest 9.0 is now automatically disabled when iTerm2 is detected, it generated desktop notifications instead of the desired functionality.

#13904: Fixed the TOML type of the verbosity settings in the API reference from number to string.

#13910: Fixed UserWarning: Do not expect file_or_dir on some earlier Python 3.12 and 3.13 point versions.

Packaging updates and notes for downstreams

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

Contributor-facing changes

#13891, #13942: The CI/CD part of the release automation is now capable of creating GitHub Releases without having a Git checkout on disk -- by bluetech and webknjaz.

#13933: The tox configuration has been adjusted to make sure the desired version string can be passed into its package_env through the SETUPTOOLS_SCM_PRETEND_VERSION_FOR_PYTEST environment variable as a part of the release process -- by webknjaz.

... (truncated)

Commits

3d10b51 Prepare release version 9.0.2
188750b Merge pull request #14030 from pytest-dev/patchback/backports/9.0.x/1e4b01d1f...
b7d7bef Merge pull request #14014 from bluetech/compat-note
bd08e85 Merge pull request #14013 from pytest-dev/patchback/backports/9.0.x/922b60377...
bc78386 Add CLI options reference documentation (#13930)
5a4e398 Fix docs typo (#14005) (#14008)
d7ae6df Merge pull request #14006 from pytest-dev/maintenance/update-plugin-list-tmpl...
556f6a2 pre-commit: fix rst-lint after new release (#13999) (#14001)
c60fbe6 Fix quadratic-time behavior when handling unittest subtests in Python 3.10 ...
73d9b01 Merge pull request #13995 from nicoddemus/patchback/backports/9.0.x/1b5200c0f...
Additional commits viewable in compare view

Updates pytest-cov from 6.0.0 to 7.0.0

Changelog

Sourced from pytest-cov's changelog.

7.0.0 (2025-09-09)

Dropped support for subprocesses measurement.

It was a feature added long time ago when coverage lacked a nice way to measure subprocesses created in tests. It relied on a .pth file, there was no way to opt-out and it created bad interations with coverage's new patch system <https://coverage.readthedocs.io/en/latest/config.html#run-patch>_ added in 7.10 <https://coverage.readthedocs.io/en/7.10.6/changes.html#version-7-10-0-2025-07-24>_.

To migrate to this release you might need to enable the suprocess patch, example for .coveragerc:

.. code-block:: ini

[run] patch = subprocess

This release also requires at least coverage 7.10.6.

Switched packaging to have metadata completely in pyproject.toml and use hatchling <https://pypi.org/project/hatchling/>_ for building. Contributed by Ofek Lev in [#551](https://github.com/pytest-dev/pytest-cov/issues/551) <https://github.com/pytest-dev/pytest-cov/pull/551>_ with some extras in [#716](https://github.com/pytest-dev/pytest-cov/issues/716) <https://github.com/pytest-dev/pytest-cov/pull/716>_.

Removed some not really necessary testing deps like six.

6.3.0 (2025-09-06)

Added support for markdown reports. Contributed by Marcos Boger in [#712](https://github.com/pytest-dev/pytest-cov/issues/712) <https://github.com/pytest-dev/pytest-cov/pull/712>_ and [#714](https://github.com/pytest-dev/pytest-cov/issues/714) <https://github.com/pytest-dev/pytest-cov/pull/714>_.

Fixed some formatting issues in docs. Anonymous contribution in [#706](https://github.com/pytest-dev/pytest-cov/issues/706) <https://github.com/pytest-dev/pytest-cov/pull/706>_.

6.2.1 (2025-06-12)

Added a version requirement for pytest's pluggy dependency (1.2.0, released 2023-06-21) that has the required new-style hookwrapper API.

Removed deprecated license classifier (packaging).

Disabled coverage warnings in two more situations where they have no value:

"module-not-measured" in workers

"already-imported" in subprocesses

6.2.0 (2025-06-11)

The plugin now adds 3 rules in the filter warnings configuration to prevent common coverage warnings being raised as obscure errors::

default:unclosed database in <sqlite3.Connection object at:ResourceWarning once::PytestCovWarning

... (truncated)

Commits

224d896 Bump version: 6.3.0 → 7.0.0
73424e3 Cleanup the docs a bit.
36f1cc2 Bump pins in template.
f299c59 Bump the github-actions group with 2 updates
25f0b2e Update docs/config.rst
bb23eac Improve configuration docs
a19531e Switch from build/pre-commit to uv/prek - this should make this faster.
82f9993 Update changelog.
211b5cd Fix links.
97aadd7 Update some ci config, reformat and apply some lint fixes.
Additional commits viewable in compare view

Updates pytest-random-order from 1.1.1 to 1.2.0

Changelog

Sourced from pytest-random-order's changelog.

1.2.0 +++++

2025-06-22

Dropped support for EOL Python versions and added support for Python 3.13.

Fix [#58](https://github.com/jbasko/pytest-random-order/issues/58) <https://github.com/pytest-dev/pytest-random-order/issues/58>_: return in a finally block swallows exceptions and raises a warning in Python 3.14.

Commits

1bddb0f Fix RELEASING.rst instructions
43803c8 Release 1.2.0
754a8e4 Remove return from finally block (#60)
a8f09eb Fix setuptools-scm configuration
e898111 Remove return from finally block
90a346f Modernize CI and configuration (#59)
76c4d58 Merge pull request #57 from euri10/python_versions
32f0ef7 ci: added 3.11 and 3.12
ac1369a Comment to guard against removing 'none' option as suggested in #40
See full diff in compare view

Updates ruff from 0.7.4 to 0.14.14

Release notes

Sourced from ruff's releases.

0.14.14

Release Notes

Released on 2026-01-22.

Preview features

Preserve required parentheses in lambda bodies (#22747)

Combine range suppression code diagnostics (#22613)

[airflow] Second positional argument to Asset/Dataset should not be a dictionary (AIR303) (#22453)

[ruff] Detect duplicate entries in __all__ (RUF068) (#22114)

Bug fixes

[pyupgrade] Allow shadowing non-builtin bindings (UP029) (#22749)

[pyupgrade] Apply UP045 to string arguments of typing.cast (#22320)

[flake8-pie] Detect duplicated declared class fields in PIE794 (#22717)

Rule changes

[flake8-pyi] Fix inconsistent handling of forward references for __new__, __enter__, __aenter__ in PYI034 (#22798)

[flake8-pytest-style] Support check parameter in PT011 (#22725)

[ruff] Add exception for ctypes.Structure._fields_ (RUF012) (#22559)

Many fixes are now marked unsafe if they would remove comments:

[flake8-bugbear] B009, B010, B013, B014, B033

[flake8-simplify] SIM910, SIM911

[pyupgrade] UP007, UP039, UP041, UP045

[refurb] FURB105, FURB116, FURB136, FURB140, FURB145, FURB154, FURB157, FURB164,FURB181, FURB188
Description has been truncated

Bumps the pip-dependencies group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [markdown](https://github.com/Python-Markdown/markdown) | `3.7` | `3.10.1` | | [mkdocs-material](https://github.com/squidfunk/mkdocs-material) | `9.5.44` | `9.7.1` | | [pymdown-extensions](https://github.com/facelessuser/pymdown-extensions) | `10.12` | `10.20.1` | | [jinja2](https://github.com/pallets/jinja) | `3.1.4` | `3.1.6` | | [isort](https://github.com/PyCQA/isort) | `5.13.2` | `7.0.0` | | [coveralls](https://github.com/TheKevJames/coveralls-python) | `4.0.1` | `4.0.2` | | [pytest](https://github.com/pytest-dev/pytest) | `8.3.3` | `9.0.2` | | [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `6.0.0` | `7.0.0` | | [pytest-random-order](https://github.com/jbasko/pytest-random-order) | `1.1.1` | `1.2.0` | | [ruff](https://github.com/astral-sh/ruff) | `0.7.4` | `0.14.14` | | [pytest-mock](https://github.com/pytest-dev/pytest-mock) | `3.14.0` | `3.15.1` | | [pre-commit](https://github.com/pre-commit/pre-commit) | `4.0.1` | `4.5.1` | | [mypy](https://github.com/python/mypy) | `1.15.0` | `1.19.1` | | [fastapi](https://github.com/fastapi/fastapi) | `0.116.1` | `0.128.0` | | [sqlalchemy](https://github.com/sqlalchemy/sqlalchemy) | `2.0.41` | `2.0.46` | | [asyncpg](https://github.com/MagicStack/asyncpg) | `0.30.0` | `0.31.0` | | [alembic](https://github.com/sqlalchemy/alembic) | `1.16.4` | `1.18.3` | | [pyjwt](https://github.com/jpadilla/pyjwt) | `2.10.1` | `2.11.0` | | [celery](https://github.com/celery/celery) | `5.5.3` | `5.6.2` | | [pydantic](https://github.com/pydantic/pydantic) | `2.11.7` | `2.12.5` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.1.1` | `1.2.1` | | [pydantic-settings](https://github.com/pydantic/pydantic-settings) | `2.10.1` | `2.12.0` | Updates `markdown` from 3.7 to 3.10.1 - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](Python-Markdown/markdown@3.7...3.10.1) Updates `mkdocs-material` from 9.5.44 to 9.7.1 - [Release notes](https://github.com/squidfunk/mkdocs-material/releases) - [Changelog](https://github.com/squidfunk/mkdocs-material/blob/master/CHANGELOG) - [Commits](squidfunk/mkdocs-material@9.5.44...9.7.1) Updates `pymdown-extensions` from 10.12 to 10.20.1 - [Release notes](https://github.com/facelessuser/pymdown-extensions/releases) - [Commits](https://github.com/facelessuser/pymdown-extensions/commits) Updates `jinja2` from 3.1.4 to 3.1.6 - [Release notes](https://github.com/pallets/jinja/releases) - [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst) - [Commits](pallets/jinja@3.1.4...3.1.6) Updates `isort` from 5.13.2 to 7.0.0 - [Release notes](https://github.com/PyCQA/isort/releases) - [Changelog](https://github.com/PyCQA/isort/blob/main/CHANGELOG.md) - [Commits](PyCQA/isort@5.13.2...7.0.0) Updates `coveralls` from 4.0.1 to 4.0.2 - [Release notes](https://github.com/TheKevJames/coveralls-python/releases) - [Changelog](https://github.com/TheKevJames/coveralls-python/blob/master/CHANGELOG.md) - [Commits](TheKevJames/coveralls-python@4.0.1...4.0.2) Updates `pytest` from 8.3.3 to 9.0.2 - [Release notes](https://github.com/pytest-dev/pytest/releases) - [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest@8.3.3...9.0.2) Updates `pytest-cov` from 6.0.0 to 7.0.0 - [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst) - [Commits](pytest-dev/pytest-cov@v6.0.0...v7.0.0) Updates `pytest-random-order` from 1.1.1 to 1.2.0 - [Release notes](https://github.com/jbasko/pytest-random-order/releases) - [Changelog](https://github.com/pytest-dev/pytest-random-order/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest-random-order@v1.1.1...v1.2.0) Updates `ruff` from 0.7.4 to 0.14.14 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.7.4...0.14.14) Updates `pytest-mock` from 3.14.0 to 3.15.1 - [Release notes](https://github.com/pytest-dev/pytest-mock/releases) - [Changelog](https://github.com/pytest-dev/pytest-mock/blob/main/CHANGELOG.rst) - [Commits](pytest-dev/pytest-mock@v3.14.0...v3.15.1) Updates `pre-commit` from 4.0.1 to 4.5.1 - [Release notes](https://github.com/pre-commit/pre-commit/releases) - [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md) - [Commits](pre-commit/pre-commit@v4.0.1...v4.5.1) Updates `mypy` from 1.15.0 to 1.19.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.15.0...v1.19.1) Updates `pytest-asyncio` from 1.1.0 to 1.3.0 - [Release notes](https://github.com/pytest-dev/pytest-asyncio/releases) - [Commits](pytest-dev/pytest-asyncio@v1.1.0...v1.3.0) Updates `fastapi` from 0.116.1 to 0.128.0 - [Release notes](https://github.com/fastapi/fastapi/releases) - [Commits](fastapi/fastapi@0.116.1...0.128.0) Updates `sqlalchemy` from 2.0.41 to 2.0.46 - [Release notes](https://github.com/sqlalchemy/sqlalchemy/releases) - [Changelog](https://github.com/sqlalchemy/sqlalchemy/blob/main/CHANGES.rst) - [Commits](https://github.com/sqlalchemy/sqlalchemy/commits) Updates `asyncpg` from 0.30.0 to 0.31.0 - [Release notes](https://github.com/MagicStack/asyncpg/releases) - [Commits](MagicStack/asyncpg@v0.30.0...v0.31.0) Updates `alembic` from 1.16.4 to 1.18.3 - [Release notes](https://github.com/sqlalchemy/alembic/releases) - [Changelog](https://github.com/sqlalchemy/alembic/blob/main/CHANGES) - [Commits](https://github.com/sqlalchemy/alembic/commits) Updates `pyjwt` from 2.10.1 to 2.11.0 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.10.1...2.11.0) Updates `celery` from 5.5.3 to 5.6.2 - [Release notes](https://github.com/celery/celery/releases) - [Changelog](https://github.com/celery/celery/blob/main/Changelog.rst) - [Commits](celery/celery@v5.5.3...v5.6.2) Updates `pydantic` from 2.11.7 to 2.12.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/main/HISTORY.md) - [Commits](pydantic/pydantic@v2.11.7...v2.12.5) Updates `python-dotenv` from 1.1.1 to 1.2.1 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.1.1...v1.2.1) Updates `pydantic-settings` from 2.10.1 to 2.12.0 - [Release notes](https://github.com/pydantic/pydantic-settings/releases) - [Commits](pydantic/pydantic-settings@2.10.1...v2.12.0) --- updated-dependencies: - dependency-name: markdown dependency-version: 3.10.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: mkdocs-material dependency-version: 9.7.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: pymdown-extensions dependency-version: 10.20.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: jinja2 dependency-version: 3.1.6 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip-dependencies - dependency-name: isort dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip-dependencies - dependency-name: coveralls dependency-version: 4.0.2 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: pip-dependencies - dependency-name: pytest dependency-version: 9.0.2 dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip-dependencies - dependency-name: pytest-cov dependency-version: 7.0.0 dependency-type: direct:development update-type: version-update:semver-major dependency-group: pip-dependencies - dependency-name: pytest-random-order dependency-version: 1.2.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: ruff dependency-version: 0.14.14 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: pytest-mock dependency-version: 3.15.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: pre-commit dependency-version: 4.5.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: mypy dependency-version: 1.19.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: pytest-asyncio dependency-version: 1.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: fastapi dependency-version: 0.128.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: sqlalchemy dependency-version: 2.0.46 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: pip-dependencies - dependency-name: asyncpg dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: alembic dependency-version: 1.18.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: pyjwt dependency-version: 2.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: celery dependency-version: 5.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: pydantic dependency-version: 2.12.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: python-dotenv dependency-version: 1.2.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-dependencies - dependency-name: pydantic-settings dependency-version: 2.12.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: pip-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Feb 2, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the pip-dependencies group across 1 directory with 23 updates #11

deps: bump the pip-dependencies group across 1 directory with 23 updates #11

Uh oh!

dependabot bot commented on behalf of github Feb 2, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

deps: bump the pip-dependencies group across 1 directory with 23 updates #11

Are you sure you want to change the base?

deps: bump the pip-dependencies group across 1 directory with 23 updates #11

Uh oh!

Conversation

dependabot bot commented on behalf of github Feb 2, 2026

Release 3.10.1

Fixed

Release 3.10.0

Changed

Fixed

Release 3.9.0

Changed

Fixed

Release 3.8.2

Fixed

Release 3.8.1

Fixed

[3.10.1] - 2026-01-21

Fixed

[3.10.0] - 2025-11-03

Changed

Fixed

[3.9.0] - 2025-09-04

Changed

Fixed

[3.8.2] - 2025-06-19

Fixed

[3.8.1] - 2025-06-18

Fixed

mkdocs-material-9.7.1

Changes

mkdocs-material-9.7.0

10.20

10.19.1

10.19

10.18

10.17.2

10.17.1

10.17

10.6.1

10.16.1

10.16

3.1.6

3.1.5

Version 3.1.6

Version 3.1.5

7.0.0

Changes

💥 Breaking Changes

🚀 Features

🪲 Fixes

👷 Continuous Integration

📦 Dependencies

6.1.0

Changes

👷 Continuous Integration

📦 Dependencies

Changelog

Unreleased

6.1.0 October 1 2025

6.0.1 Febuary 26 2025

6.0.0 January 27 2025

4.0.2 (2025-11-07)

Internal

4.0.2 (2025-11-07)

Internal

9.0.2

pytest 9.0.2 (2025-12-06)

Bug fixes

Improved documentation

9.0.1

pytest 9.0.1 (2025-11-12)

Bug fixes

Packaging updates and notes for downstreams

Contributor-facing changes

7.0.0 (2025-09-09)

6.3.0 (2025-09-06)

6.2.1 (2025-06-12)

6.2.0 (2025-06-11)