chore(deps): update mend: high confidence minor and patch dependency updates

[mend-for-gitlite.zycloud.tk]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
MarkupSafe (changelog)	==2.0.1 → ==2.1.5
appnope	==0.1.2 → ==0.1.4
attrs (changelog)	==21.2.0 → ==21.4.0
bcrypt	==3.2.0 → ==3.2.2
beautifulsoup4 (changelog)	==4.9.3 → ==4.14.3
cffi (changelog)	==1.14.5 → ==1.17.1
cfgv	==3.3.0 → ==3.5.0
distlib	==0.3.2 → ==0.4.0
docutils (changelog)	==0.17.1 → ==0.22.4
filelock	==3.0.12 → ==3.29.0
ipdb	==0.13.9 → ==0.13.13
itsdangerous (changelog)	==2.0.1 → ==2.2.0
jedi	==0.18.0 → ==0.19.2
matplotlib-inline	==0.1.2 → ==0.2.1
mccabe	==0.6.1 → ==0.7.0
mypy-extensions	==0.4.3 → ==0.4.4
nodeenv	==1.6.0 → ==1.10.0
paramiko (changelog)	==2.7.2 → ==2.12.0
pathspec (changelog)	==0.9.0 → ==0.12.1
pexpect (source, changelog)	==4.8.0 → ==4.9.0
prompt-toolkit	==3.0.18 → ==3.0.52
py	==1.10.0 → ==1.11.0
pycparser	==2.20 → ==2.23
pymongo	==3.11.4 → ==3.13.0
python-dateutil	==2.8.2 → ==2.9.0.post0
regex	==2021.4.4 → ==2021.11.10
rsa	==4.7.2 → ==4.9.1
six	==1.16.0 → ==1.17.0
soupsieve	==2.2.1 → ==2.8.3
traitlets	==5.0.5 → ==5.14.3
typed-ast	==1.4.3 → ==1.5.5
typing-extensions (changelog)	==3.10.0.0 → ==3.10.0.2
undetected-chromedriver	==3.0.1 → ==3.5.5
validators (changelog)	==0.18.2 → ==0.35.0
wcwidth	==0.2.5 → ==0.6.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

pallets/markupsafe (MarkupSafe)

v2.1.5

Compare Source

Released 2024-02-02

• Fix striptags not collapsing spaces. :issue:417

v2.1.4

Compare Source

Released 2024-01-19

• Don't use regular expressions for striptags, avoiding a performance
  issue. :pr:413

v2.1.3

Compare Source

Released 2023-06-02

• Implement format_map, casefold, removeprefix, and removesuffix
  methods. :issue:370
• Fix static typing for basic str methods on Markup. :issue:358
• Use Self for annotating return types. :pr:379

v2.1.2

Compare Source

Released 2023-01-17

• Fix striptags not stripping tags containing newlines.
  :issue:310

v2.1.1

Compare Source

Released 2022-03-14

• Avoid ambiguous regex matches in striptags. :pr:293

v2.1.0

Compare Source

Released 2022-02-17

• Drop support for Python 3.6. :pr:262
• Remove soft_unicode, which was previously deprecated. Use
  soft_str instead. :pr:261
• Raise error on missing single placeholder during string
  interpolation. :issue:225
• Disable speedups module for GraalPython. :issue:277

minrk/appnope (appnope)

v0.1.4

Compare Source

v0.1.3

Compare Source

python-attrs/attrs (attrs)

v21.4.0

Compare Source

Changes

• Fixed the test suite on PyPy3.8 where cloudpickle does not work.
  #​892
• Fixed coverage report for projects that use attrs and don't set a --source.
  #​895,
  #​896

v21.3.0

Compare Source

Backward-incompatible Changes

• When using @define, converters are now run by default when setting an attribute on an instance -- additionally to validators.
  Meaning: the new default is on_setattr=[attrs.setters.convert, attrs.setters.validate].

  This is unfortunately a breaking change, but it was an oversight, impossible to raise a DeprecationWarning about, and it's better to fix it now while the APIs are very fresh with few users.
  #​835,
  #​886

• import attrs has finally landed!
  As of this release, you can finally import attrs using its proper name.

  Not all names from the attr namespace have been transferred; most notably attr.s and attr.ib are missing.
  See attrs.define and attrs.field if you haven't seen our next-generation APIs yet.
  A more elaborate explanation can be found On The Core API Names

  This feature is at least for one release provisional.
  We don't plan on changing anything, but such a big change is unlikely to go perfectly on the first strike.

  The API docs have been mostly updated, but it will be an ongoing effort to change everything to the new APIs.
  Please note that we have not moved -- or even removed -- anything from attr!

  Please do report any bugs or documentation inconsistencies!
  #​887

Changes

• attr.asdict(retain_collection_types=False) (default) dumps collection-esque keys as tuples.
  #​646,
  #​888
• __match_args__ are now generated to support Python 3.10's
  Structural Pattern Matching.
  This can be controlled by the match_args argument to the class decorators on Python 3.10 and later.
  On older versions, it is never added and the argument is ignored.
  #​815
• If the class-level on_setattr is set to attrs.setters.validate (default in @define and @mutable) but no field defines a validator, pretend that it's not set.
  #​817
• The generated __repr__ is significantly faster on Pythons with f-strings.
  #​819
• Attributes transformed via field_transformer are wrapped with AttrsClass again.
  #​824
• Generated source code is now cached more efficiently for identical classes.
  #​828
• Added attrs.converters.to_bool().
  #​830
• attrs.resolve_types() now resolves types of subclasses after the parents are resolved.
  #​842
  #​843
• Added new validators: lt(val) (< val), le(va) (≤ val), ge(val) (≥ val), gt(val) (> val), and maxlen(n).
  #​845
• attrs classes are now fully compatible with cloudpickle (no need to disable repr anymore).
  #​857
• Added new context manager attrs.validators.disabled() and functions attrs.validators.(set|get)_disabled().
  They deprecate attrs.(set|get)_run_validators().
  All functions are interoperable and modify the same internal state.
  They are not – and never were – thread-safe, though.
  #​859
• attrs.validators.matches_re() now accepts pre-compiled regular expressions in addition to pattern strings.
  #​877

---

python-cffi/cffi (cffi)

v1.17.1

Compare Source

• Fix failing distutils.msvc9compiler imports under Windows (#​118).
• ffibuilder.emit_python_code() and ffibuiler.emit_c_code() accept file-like objects (#​115).
• ffiplatform calls are bypassed by ffibuilder.emit_python_code() and ffibuilder.emit_c_code() (#​81).

Full Changelog: python-cffi/cffi@v1.17.0...v1.17.1

v1.17.0

Compare Source

• Add support for Python 3.13.
  • Free-threaded CPython builds (i.e. python3.13t and the 3.13t ABI) are not currently supported.
• In API mode, when you get a function from a C library by writing
  fn = lib.myfunc, you get an object of a special type for performance
  reasons, instead of a <cdata 'C-function-type'>. Before version 1.17
  you could only call such objects. You could write
  ffi.addressof(lib, "myfunc") in order to get a real <cdata> object,
  based on the idea that in these cases in C you'd usually write &myfunc
  instead of myfunc. In version 1.17, the special object
  lib.myfunc can now be passed in many places where CFFI expects
  a regular <cdata> object. For example, you can now pass
  it as a callback to a C function call, or write it inside a C
  structure field of the correct pointer-to-function type, or use
  ffi.cast() or ffi.typeof() on it.

Full Changelog: python-cffi/cffi@v1.16.0...v1.17.0

v1.16.0

Compare Source

• Add support for Python 3.12. With the removal of distutils from Python 3.12, projects
  using CFFI features that depend on distutils at runtime must add a dependency on
  setuptools to function under Python 3.12+. CFFI does not declare a runtime setuptools
  requirement to avoid an unnecessary dependency for projects that do not require it.
• Drop support for end-of-life Python versions (2.7, 3.6, 3.7).
• Add support for PEP517 builds; setuptools is now a required build dependency.
• Declare python_requires metadata for Python 3.8+. This allows unsupported Pythons
  to continue using previously released sdists and wheels.
• Move project source under src/; a more standard layout that also enables CI to more easily
  catch packaging errors.

v1.15.1

Compare Source

(retroactive GitHub release for current stable version 1.15.1)

• If you call ffi.embedding_api() but don't write any extern "Python" function there, then the resulting C code would fail an assert. Fixed.
• Updated Windows/arm64 embedded libffi static lib to v3.4.2, and scripted to ease future updates (thanks Niyas Sait!)

Full Changelog: python-cffi/cffi@v1.15.0...v1.15.1

v1.15.0

Compare Source

v1.14.6

Compare Source

asottile/cfgv (cfgv)

v3.5.0

Compare Source

v3.4.0

Compare Source

v3.3.1

Compare Source

pypa/distlib (distlib)

v0.4.0

Compare Source

v0.3.9

Compare Source

v0.3.8

Compare Source

v0.3.7

Compare Source

v0.3.6: Bug-fix / Minor Enhancements Release

Compare Source

• Fixed #​175: Updated launcher executables to better handle the relationship between launcher and child process in the Job API.

Though no changes have been made to distlib code since the previous release, this release is to facilitate vendoring into pip.

Releases are normally signed using a GnuPG key with the user id vinay_sajip@yahoo.co.uk and the following fingerprint:

CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86

v0.3.5: Bug-fix / Minor Enhancements Release

Compare Source

• Fixed #​161: Updated test case.

• Fixed #​164: Improved support for reproducible builds by allowing a fixed
  date/time to be inserted into created .exe files. Thanks to Somber Night for the
  patch.

• Fixed #​169: Removed usage of deprecated imp module in favour of importlib.

• Fixed #​170: Corrected implementation of get_required_dists().

• Fixed #​172: Compute ABI correctly for Python < 3.8.

• Changed the default locator configuration.

• Made updates in support of PEP 643 / Metadata 2.2.

• Updated launcher executables. Thanks to Michael Bikovitsky for his help with
  the launcher changes.

• Updated to write archive path of RECORD to RECORD instead of staging path.
  Thanks to Pieter Pas for the patch.

Releases are normally signed using a GnuPG key with the user id vinay_sajip@yahoo.co.uk and the following fingerprint:

CA74 9061 914E AC13 8E66 EADB 9147 B477 339A 9B86

v0.3.4: Bug-fix / Minor Enhancements Release

Compare Source

• Fixed #​153: Raise warnings in get_distributions() if bad metadata seen, but keep going.

• Fixed #​154: Determine Python versions correctly for Python >= 3.10.

• Updated launcher executables with changes to handle duplication logic.

Code relating to support for Python 2.6 was also removed (support for Python 2.6 was dropped in an earlier release, but supporting code wasn't removed until now).

v0.3.3

Compare Source

tox-dev/py-filelock (filelock)

v3.29.0

Compare Source

What's Changed

• 🐛 fix(async): use single-thread executor for lock consistency by @​gaborbernat in tox-dev/filelock#533
• ✨ feat(soft): enable stale lock detection on Windows by @​gaborbernat in tox-dev/filelock#534

Full Changelog: tox-dev/filelock@3.28.0...3.29.0

v3.28.0

Compare Source

What's Changed

• 🐛 fix(ci): unbreak release workflow, publish to PyPI again by @​gaborbernat in tox-dev/filelock#529

Full Changelog: tox-dev/filelock@3.27.0...3.28.0

v3.25.2

Compare Source

What's Changed

• 🐛 fix(unix): suppress EIO on close in Docker bind mounts by @​gaborbernat in tox-dev/filelock#513

Full Changelog: tox-dev/filelock@3.25.1...3.25.2

v3.25.1

Compare Source

What's Changed

• 📝 docs(logo): add branded project logo by @​gaborbernat in tox-dev/filelock#507
• 🐛 fix(win): restore best-effort lock file cleanup on release by @​gaborbernat in tox-dev/filelock#511

Full Changelog: tox-dev/filelock@3.25.0...3.25.1

v3.25.0

Compare Source

What's Changed

• Add permissions to check workflow by @​gaborbernat in tox-dev/filelock#500
• Move SECURITY.md to .github/SECURITY.md by @​gaborbernat in tox-dev/filelock#501
• Standardize .github files to .yaml suffix by @​gaborbernat in tox-dev/filelock#504
• ✨ feat(async): add AsyncReadWriteLock by @​gaborbernat in tox-dev/filelock#506

Full Changelog: tox-dev/filelock@3.24.4...3.25.0

v3.24.3

Compare Source

What's Changed

• 🐛 fix(ci): add trailing blank line after changelog entries by @​gaborbernat in tox-dev/filelock#492
• 🐛 fix(unix): handle ENOENT race on FUSE/NFS during acquire by @​gaborbernat in tox-dev/filelock#495

Full Changelog: tox-dev/filelock@3.24.2...3.24.3

v3.24.2

Compare Source

What's Changed

• 📝 docs: restructure using Diataxis framework by @​gaborbernat in tox-dev/filelock#489
• 🐛 fix(test): resolve flaky write non-starvation test by @​gaborbernat in tox-dev/filelock#490
• 🐛 fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race by @​gaborbernat in tox-dev/filelock#491

Full Changelog: tox-dev/filelock@3.24.1...3.24.2

v3.24.1

Compare Source

What's Changed

• 🐛 fix(soft): resolve Windows deadlock and test race condition by @​gaborbernat in tox-dev/filelock#488

Full Changelog: tox-dev/filelock@3.24.0...3.24.1

v3.24.0

Compare Source

What's Changed

• 🐛 fix(unix): auto-fallback to SoftFileLock on ENOSYS by @​gaborbernat in tox-dev/filelock#480
• ✨ feat(lock): add poll_interval to constructor by @​gaborbernat in tox-dev/filelock#482
• 🐛 fix(win): eliminate lock file race in threaded usage by @​gaborbernat in tox-dev/filelock#484
• ✨ feat(mode): respect POSIX default ACL inheritance by @​gaborbernat in tox-dev/filelock#483
• 🐛 fix(api): detect same-thread self-deadlock by @​gaborbernat in tox-dev/filelock#481
• ✨ feat(lock): add cancel_check to acquire by @​gaborbernat in tox-dev/filelock#487
• ✨ feat(lock): add lifetime parameter for lock expiration by @​gaborbernat in tox-dev/filelock#486

Full Changelog: tox-dev/filelock@3.23.0...3.24.0

v3.23.0

Compare Source

What's Changed

• 📝 docs: add fasteners to similar libraries by @​gaborbernat in tox-dev/filelock#478
• 📝 docs: move from Unlicense to MIT by @​gaborbernat in tox-dev/filelock#479

Full Changelog: tox-dev/filelock@3.22.0...3.23.0

v3.22.0

Compare Source

What's Changed

• ✨ feat(soft): detect and break stale locks by @​gaborbernat in tox-dev/filelock#476
• 🐛 fix(soft): skip stale lock detection on Windows by @​gaborbernat in tox-dev/filelock#477

Full Changelog: tox-dev/filelock@3.21.2...3.22.0

v3.21.2

Compare Source

What's Changed

• 🐛 fix: catch ImportError for missing sqlite3 C library by @​gaborbernat in tox-dev/filelock#475

Full Changelog: tox-dev/filelock@3.21.1...3.21.2

v3.21.1

Compare Source

What's Changed

• 🐛 fix: gracefully handle missing sqlite3 when importing ReadWriteLock by @​bayandin in tox-dev/filelock#473

New Contributors

• @​bayandin made their first contribution in tox-dev/filelock#473

Full Changelog: tox-dev/filelock@3.21.0...3.21.1

v3.21.0

Compare Source

What's Changed

• 🔧 chore: modernize tooling and bump deps by @​gaborbernat in tox-dev/filelock#470
• ✨ feat(lock): add SQLite-based ReadWriteLock by @​leventov in tox-dev/filelock#399
• Enable removal of UNIX lock files by @​sbc100 in tox-dev/filelock#408
• 👷 ci(release): persist changelog on release by @​gaborbernat in tox-dev/filelock#471
• 👷 ci(release): commit changelog and use release config by @​gaborbernat in tox-dev/filelock#472

New Contributors

• @​leventov made their first contribution in tox-dev/filelock#399
• @​sbc100 made their first contribution in tox-dev/filelock#408

Full Changelog: tox-dev/filelock@3.20.3...3.21.0

v3.20.4

Compare Source

What's Changed

• 🔧 chore: modernize tooling and bump deps by @​gaborbernat in tox-dev/filelock#470
• ✨ feat(lock): add SQLite-based ReadWriteLock by @​leventov in tox-dev/filelock#399
• Enable removal of UNIX lock files by @​sbc100 in tox-dev/filelock#408
• 👷 ci(release): persist changelog on release by @​gaborbernat in tox-dev/filelock#471
• 👷 ci(release): commit changelog and use release config by @​gaborbernat in tox-dev/filelock#472

New Contributors

• @​leventov made their first contribution in tox-dev/filelock#399
• @​sbc100 made their first contribution in tox-dev/filelock#408

Full Changelog: tox-dev/filelock@3.20.3...3.20.4

v3.20.3

Compare Source

What's Changed

• Fix TOCTOU symlink vulnerability in SoftFileLock by @​gaborbernat in tox-dev/filelock#465

Full Changelog: tox-dev/filelock@3.20.2...3.20.3

v3.20.2

Compare Source

What's Changed

• Support Unix systems without O_NOFOLLOW by @​mwilliamson in tox-dev/filelock#463
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/filelock#464

New Contributors

• @​mwilliamson made their first contribution in tox-dev/filelock#463

Full Changelog: tox-dev/filelock@3.20.1...3.20.2

v3.20.1

Compare Source

What's Changed

• CVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation by @​gaborbernat in tox-dev/filelock#461

Full Changelog: tox-dev/filelock@3.20.0...3.20.1

v3.20.0

Compare Source

What's Changed

• Add tox.toml to sdist by @​mtelka in tox-dev/filelock#436
• Update docs with example by @​znichollscr in tox-dev/filelock#438
• Add 3.14 support and drop 3.9 by @​gaborbernat in tox-dev/filelock#448

New Contributors

• @​mtelka made their first contribution in tox-dev/filelock#436
• @​znichollscr made their first contribution in tox-dev/filelock#438

Full Changelog: tox-dev/filelock@3.19.1...3.20.0

v3.19.1

Compare Source

What's Changed

• add 3.14t (free threading) to matrix by @​paultiq in tox-dev/filelock#433
• Increase test coverage by @​paultiq in tox-dev/filelock#434

New Contributors

• @​paultiq made their first contribution in tox-dev/filelock#433

Full Changelog: tox-dev/filelock@3.19.0...3.19.1

v3.18.0

Compare Source

What's Changed

• Indicate that locks are exclusive/write locks. by @​bicarlsen in tox-dev/filelock#394
• Support fcntl check on Emscripten by @​juntyr in tox-dev/filelock#398

New Contributors

• @​bicarlsen made their first contribution in tox-dev/filelock#394
• @​juntyr made their first contribution in tox-dev/filelock#398

Full Changelog: tox-dev/filelock@3.17.0...3.18.0

v3.17.0: Drop 3.8

Compare Source

Full Changelog: tox-dev/filelock@3.16.1...3.17.0

v3.16.1

Compare Source

What's Changed

• CI improvements by @​gaborbernat in tox-dev/filelock#362

Full Changelog: tox-dev/filelock@3.16.0...3.16.1

v3.16.0

Compare Source

What's Changed

• Test Python 3.13 by @​hugovk in tox-dev/filelock#352
• Add 3.13 to CI by @​gaborbernat in tox-dev/filelock#359

Full Changelog: tox-dev/filelock@3.15.4...3.16.0

v3.15.4

Compare Source

What's Changed

• Pass file_lock as positional argument by @​kwist-sgr in tox-dev/filelock#347

Full Changelog: tox-dev/filelock@3.15.3...3.15.4

v3.15.3

Compare Source

What's Changed

• Add test for virtualenv stability by @​gaborbernat in tox-dev/filelock#344
• Fix TypeError: _CountedFileLock.__init__() got an unexpected keyword argument 'timeout' by @​kwist-sgr in tox-dev/filelock#345

Full Changelog: tox-dev/filelock@3.15.2...3.15.3

v3.15.2

Compare Source

What's Changed

• Use a metaclass to implement the singleton pattern by @​kwist-sgr in tox-dev/filelock#340

New Contributors

• @​kwist-sgr made their first contribution in tox-dev/filelock#340

Full Changelog: tox-dev/filelock@3.15.1...3.15.2

v3.15.1

[Compare Source](https://redirect.github.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box