chore(deps): update uv: bump the uv-version-updates group across 2 directories with 51 updates

[dependabot]

Bumps the uv-version-updates group with 51 updates in the /.github directory:

Package	From	To
certifi	2025.6.15	2026.1.4
charset-normalizer	3.4.2	3.4.4
idna	3.10	3.11
pyyaml	6.0.2	6.0.3
requests	2.32.4	2.32.5
urllib3	2.5.0	2.6.3
cfgv	3.4.0	3.5.0
distlib	0.3.9	0.4.0
filelock	3.18.0	3.20.3
identify	2.6.12	2.6.16
nodeenv	1.9.1	1.10.0
platformdirs	4.3.8	4.5.1
pre-commit	4.2.0	4.5.1
virtualenv	20.31.2	20.36.1
bandit	1.8.5	1.9.3
markdown-it-py	3.0.0	4.0.0
pbr	6.1.1	7.0.3
rich	13.5.3	14.3.1
setuptools	80.9.0	80.10.2
stevedore	5.4.1	5.6.0
typing-extensions	4.14.0	4.15.0
attrs	25.3.0	25.4.0
boltons	21.0.0	25.0.0
click	8.1.8	8.3.1
click-option-group	0.5.7	0.5.9
deprecated	1.2.18	1.3.1
exceptiongroup	1.2.2	1.3.1
glom	22.1.0	25.12.0
googleapis-common-protos	1.70.0	1.72.0
importlib-metadata	7.1.0	8.7.1
jsonschema	4.24.0	4.26.0
jsonschema-specifications	2025.4.1	2025.9.1
opentelemetry-api	1.25.0	1.39.1
opentelemetry-exporter-otlp-proto-common	1.25.0	1.39.1
opentelemetry-exporter-otlp-proto-http	1.25.0	1.39.1
opentelemetry-instrumentation	0.46b0	0.60b1
opentelemetry-instrumentation-requests	0.46b0	0.60b1
opentelemetry-proto	1.25.0	1.39.1
opentelemetry-sdk	1.25.0	1.39.1
opentelemetry-semantic-conventions	0.46b0	0.60b1
opentelemetry-util-http	0.46b0	0.60b1
packaging	25.0	26.0
peewee	3.18.1	3.19.0
protobuf	4.25.8	6.33.4
referencing	0.36.2	0.37.0
rpds-py	0.25.1	0.30.0
ruamel-yaml	0.18.14	0.19.1
semgrep	1.126.0	1.149.0
tomli	2.0.2	2.4.0
wcmatch	8.5.2	10.1
wrapt	1.17.2	2.0.1

Bumps the uv-version-updates group with 51 updates in the /.github/workflows directory:

Package	From	To
certifi	2025.6.15	2026.1.4
charset-normalizer	3.4.2	3.4.4
idna	3.10	3.11
pyyaml	6.0.2	6.0.3
requests	2.32.4	2.32.5
urllib3	2.5.0	2.6.3
cfgv	3.4.0	3.5.0
distlib	0.3.9	0.4.0
filelock	3.18.0	3.20.3
identify	2.6.12	2.6.16
nodeenv	1.9.1	1.10.0
platformdirs	4.3.8	4.5.1
pre-commit	4.2.0	4.5.1
virtualenv	20.31.2	20.36.1
bandit	1.8.5	1.9.3
markdown-it-py	3.0.0	4.0.0
pbr	6.1.1	7.0.3
rich	13.5.3	14.3.1
setuptools	80.9.0	80.10.2
stevedore	5.4.1	5.6.0
typing-extensions	4.14.0	4.15.0
attrs	25.3.0	25.4.0
boltons	21.0.0	25.0.0
click	8.1.8	8.3.1
click-option-group	0.5.7	0.5.9
deprecated	1.2.18	1.3.1
exceptiongroup	1.2.2	1.3.1
glom	22.1.0	25.12.0
googleapis-common-protos	1.70.0	1.72.0
importlib-metadata	7.1.0	8.7.1
jsonschema	4.24.0	4.26.0
jsonschema-specifications	2025.4.1	2025.9.1
opentelemetry-api	1.25.0	1.39.1
opentelemetry-exporter-otlp-proto-common	1.25.0	1.39.1
opentelemetry-exporter-otlp-proto-http	1.25.0	1.39.1
opentelemetry-instrumentation	0.46b0	0.60b1
opentelemetry-instrumentation-requests	0.46b0	0.60b1
opentelemetry-proto	1.25.0	1.39.1
opentelemetry-sdk	1.25.0	1.39.1
opentelemetry-semantic-conventions	0.46b0	0.60b1
opentelemetry-util-http	0.46b0	0.60b1
packaging	25.0	26.0
peewee	3.18.1	3.19.0
protobuf	4.25.8	6.33.4
referencing	0.36.2	0.37.0
rpds-py	0.25.1	0.30.0
ruamel-yaml	0.18.14	0.19.1
semgrep	1.126.0	1.149.0
tomli	2.0.2	2.4.0
wcmatch	8.5.2	10.1
wrapt	1.17.2	2.0.1

Updates certifi from 2025.6.15 to 2026.1.4

Commits

• c64d9f3 2026.01.04 (#389)
• 4ac232f Bump actions/download-artifact from 6.0.0 to 7.0.0 (#387)
• 95ae4b2 Update CI workflow to use Ubuntu 24.04 and Python 3.14 stable (#386)
• b72a7b1 Bump dessant/lock-threads from 5.0.1 to 6.0.0 (#385)
• ecc2672 Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#384)
• 6a897db Bump peter-evans/create-pull-request from 7.0.11 to 8.0.0 (#383)
• 27ca98a Bump peter-evans/create-pull-request from 7.0.9 to 7.0.11 (#381)
• 56c59a6 Bump actions/checkout from 6.0.0 to 6.0.1 (#382)
• ae0021c Bump actions/setup-python from 6.0.0 to 6.1.0 (#380)
• ddf5d0b Bump actions/checkout from 5.0.1 to 6.0.0 (#378)
• Additional commits viewable in compare view

Updates charset-normalizer from 3.4.2 to 3.4.4

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.4

3.4.4 (2025-10-13)

Changed

• Bound setuptools to a specific constraint setuptools>=68,<=81.
• Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

• setuptools-scm as a build dependency.

Misc

• Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
• Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
• Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

• mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
• automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

• Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
• Support for Python 3.14

Fixed

• sdist archive contained useless directories.
• automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

• SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
• Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Changelog

Sourced from charset-normalizer's changelog.

3.4.4 (2025-10-13)

Changed

• Bound setuptools to a specific constraint setuptools>=68,<=81.
• Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

• setuptools-scm as a build dependency.

Misc

• Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
• Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
• Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

3.4.3 (2025-08-09)

Changed

• mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
• automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

• Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
• Support for Python 3.14

Fixed

• sdist archive contained useless directories.
• automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

• SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
• Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Commits

• b30ffdc 🔧 fix checksum step in cd.yml
• d3fbfcf 🔧 fix cd.yml
• dafbb95 Release 3.4.4 (#658)
• 1f18ffa ⬆️ raise mypy upper bound to 1.18.2
• ef4ac69 Merge branch 'release-3.4.4' of github.com:jawah/charset_normalizer into rele...
• 4b35dda 📝 write changelog for 3.4.4
• 0ec6452 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
• f341ede ⬆️ upgrade dependencies (dev, ci)
• a308841 📝 write changelog for 3.4.4
• 9c906da 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)
• Additional commits viewable in compare view

Updates idna from 3.10 to 3.11

Changelog

Sourced from idna's changelog.

3.11 (2025-10-12)

• Update to Unicode 16.0.0, including significant changes to UTS46 processing. As a result of Unicode ending support for it, transitional processing no longer has an effect and returns the same result.
• Add support for Python 3.14, lowest supported version is Python 3.8.
• Various updates to packaging, including PEP 740 support.

Commits

• ad949ee Release v3.11
• cae4ba7 Second release candidate for 3.11
• 8adb305 Add space in RST link
• 74cb2b6 Release candidate for 3.11
• 05dab09 Format idna-data with ruff
• 90eac78 Apply ruff formatting
• a31ce7e Remove errant test vectors
• 81f0333 Omit vectors known to be broken in test suite
• a0f3257 Merge branch 'master' into unicode-16-uts46-changes
• 38d9886 Remove extra UTS46 test vector
• Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

• Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

• yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

Commits

• 49790e7 Release 6.0.3 (#889)
• See full diff in compare view

Updates requests from 2.32.4 to 2.32.5

Release notes

Sourced from requests's releases.

v2.32.5

2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

Changelog

Sourced from requests's changelog.

2.32.5 (2025-08-18)

Bugfixes

• The SSLContext caching feature originally introduced in 2.32.0 has created a new class of issues in Requests that have had negative impact across a number of use cases. The Requests team has decided to revert this feature as long term maintenance of it is proving to be unsustainable in its current iteration.

Deprecations

• Added support for Python 3.14.
• Dropped support for Python 3.8 following its end of support.

Commits

• b25c87d v2.32.5
• 131e506 Merge pull request #7010 from psf/dependabot/github_actions/actions/checkout-...
• b336cb2 Bump actions/checkout from 4.2.0 to 5.0.0
• 46e939b Update publish workflow to use artifact-id instead of name
• 4b9c546 Merge pull request #6999 from psf/dependabot/github_actions/step-security/har...
• 7618dbe Bump step-security/harden-runner from 2.12.0 to 2.13.0
• 2edca11 Add support for Python 3.14 and drop support for Python 3.8 (#6993)
• fec96cd Update Makefile rules (#6996)
• d58d8aa docs: clarify timeout parameter uses seconds in Session.request (#6994)
• 91a3eab Bump github/codeql-action from 3.28.5 to 3.29.0
• Additional commits viewable in compare view

Updates urllib3 from 2.5.0 to 2.6.3

Release notes

Sourced from urllib3's releases.

2.6.3

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

• Fixed a security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (CVE-2026-21441 reported by @​D47A, 8.9 High, GHSA-38jv-5279-wg99)
• Started treating Retry-After times greater than 6 hours as 6 hours by default. (urllib3/urllib3#3743)
• Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten. (urllib3/urllib3#3752)

2.6.2

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

• Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. (urllib3/urllib3#3734)

2.6.1

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Changes

• Restore previously removed HTTPResponse.getheaders() and HTTPResponse.getheader() methods. (#3731)

2.6.0

🚀 urllib3 is fundraising for HTTP/2 support

urllib3 is raising ~$40,000 USD to release HTTP/2 support and ensure long-term sustainable maintenance of the project after a sharp decline in financial support. If your company or organization uses Python and would benefit from HTTP/2 support in Requests, pip, cloud SDKs, and thousands of other projects please consider contributing financially to ensure HTTP/2 support is developed sustainably and maintained for the long-haul.

Thank you for your support.

Security

• Fixed a security issue where streaming API could improperly handle highly compressed HTTP content ("decompression bombs") leading to excessive resource consumption even when a small amount of data was requested. Reading small chunks of compressed data is safer and much more efficient now. (CVE-2025-66471 reported by @​Cycloctane, 8.9 High, GHSA-2xpw-w6gg-jr37)
• Fixed a security issue where an attacker could compose an HTTP response with virtually unlimited links in the Content-Encoding header, potentially leading to a denial of service (DoS) attack by exhausting system resources during decoding. The number of allowed chained encodings is now limited to 5. (CVE-2025-66418 reported by @​illia-v, 8.9 High, GHSA-gm62-xv2j-4w53)

[!IMPORTANT]

• If urllib3 is not installed with the optional urllib3[brotli] extra, but your environment contains a Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to benefit from the security fixes and avoid warnings. Prefer using urllib3[brotli] to install a compatible Brotli package automatically.

... (truncated)

Changelog

Sourced from urllib3's changelog.

2.6.3 (2026-01-07)

• Fixed a high-severity security issue where decompression-bomb safeguards of the streaming API were bypassed when HTTP redirects were followed. (GHSA-38jv-5279-wg99 <https://github.com/urllib3/urllib3/security/advisories/GHSA-38jv-5279-wg99>__)
• Started treating Retry-After times greater than 6 hours as 6 hours by default. ([#3743](https://github.com/urllib3/urllib3/issues/3743) <https://github.com/urllib3/urllib3/issues/3743>__)
• Fixed urllib3.connection.VerifiedHTTPSConnection on Emscripten. ([#3752](https://github.com/urllib3/urllib3/issues/3752) <https://github.com/urllib3/urllib3/issues/3752>__)

2.6.2 (2025-12-11)

• Fixed HTTPResponse.read_chunked() to properly handle leftover data in the decoder's buffer when reading compressed chunked responses. ([#3734](https://github.com/urllib3/urllib3/issues/3734) <https://github.com/urllib3/urllib3/issues/3734>__)

2.6.1 (2025-12-08)

• Restore previously removed HTTPResponse.getheaders() and HTTPResponse.getheader() methods. ([#3731](https://github.com/urllib3/urllib3/issues/3731) <https://github.com/urllib3/urllib3/issues/3731>__)

2.6.0 (2025-12-05)

Security

• Fixed a security issue where streaming API could improperly handle highly compressed HTTP content ("decompression bombs") leading to excessive resource consumption even when a small amount of data was requested. Reading small chunks of compressed data is safer and much more efficient now. (GHSA-2xpw-w6gg-jr37 <https://github.com/urllib3/urllib3/security/advisories/GHSA-2xpw-w6gg-jr37>__)
• Fixed a security issue where an attacker could compose an HTTP response with virtually unlimited links in the Content-Encoding header, potentially leading to a denial of service (DoS) attack by exhausting system resources during decoding. The number of allowed chained encodings is now limited to 5. (GHSA-gm62-xv2j-4w53 <https://github.com/urllib3/urllib3/security/advisories/GHSA-gm62-xv2j-4w53>__)

.. caution::

• If urllib3 is not installed with the optional urllib3[brotli] extra, but your environment contains a Brotli/brotlicffi/brotlipy package anyway, make sure to upgrade it to at least Brotli 1.2.0 or brotlicffi 1.2.0.0 to benefit from the security fixes and avoid warnings. Prefer using

... (truncated)

Commits

• 0248277 Release 2.6.3
• 8864ac4 Merge commit from fork
• 70cecb2 Fix Scorecard issues related to vulnerable dev dependencies (#3755)
• 41f249a Move "v2.0 Migration Guide" to the end of the table of contents (#3747)
• fd4dffd Patch VerifiedHTTPSConnection for Emscripten (#3752)
• 13f0bfd Handle massive values in Retry-After when calculating time to sleep for (#3743)
• 8c480bf Bump actions/upload-artifact from 5.0.0 to 6.0.0 (#3748)
• 4b40616 Bump actions/cache from 4.3.0 to 5.0.1 (#3750)
• 82b8479 Bump actions/download-artifact from 6.0.0 to 7.0.0 (#3749)
• 34284cb Mention experimental features in the security policy (#3746)
• Additional commits viewable in compare view

Updates cfgv from 3.4.0 to 3.5.0

Commits

• c734212 v3.5.0
• d64e0cc Merge pull request #158 from asottile/key-value-map
• 641559f add KeyValueMap
• 82e2f93 Merge pull request #157 from asottile/pre-commit-ci-update-config
• 69cd020 [pre-commit.ci] pre-commit autoupdate
• 5ccc4d4 Merge pull request #156 from asottile/pre-commit-ci-update-config
• 2e7ffe5 [pre-commit.ci] pre-commit autoupdate
• ef78499 Merge pull request #155 from asottile/all-repos_autofix_all-repos-manual
• b34b882 py310+
• 724a279 Merge pull request #154 from asottile/pre-commit-ci-update-config
• Additional commits viewable in compare view

Updates distlib from 0.3.9 to 0.4.0

Changelog

Sourced from distlib's changelog.

0.4.0

Released: 2025-07-17


markers

Add the interpret_parsed function.



wheel


Fix #238: Add build tag to wheel metadata if specified.


Fix #243: Update to support free-threading version of Python (3.13t).


Fix #246: Support subdirectories in the dist-info directory. Thanks to Pieter P for the patch.


Fix #248: Fix path normalisation issue caused by the fix for #246.


Move import in script wrapper to "if name == 'main'" clause.




tests

Fix #245: Skip test_package_data if a SKIP_EXT_PACKAGE_DATA environment variable is present.

Commits

• aff2cbb Finalise version.
• 3716c4b Update change log, widen exception catching in test.
• 660bd33 Changes for 0.4.0.
• 56b4ad9 Guard script wrapper entrypoint import with if main (#242)
• fe57366 docs: update coverage results link (#250)
• c3286e5 Temporarily exclude 3.13t on windows-latest.
• e6b83d3 Normalize archive paths in dist-info (#248)
• 93baffe Skip no-longer-relevant test.
• 83f6568 Support subdirectories in .dist-info (fixes #246) (#247)
• f918abd Update test_wheel.WheelTestCase.test_abi for freethreading (#244)
• Additional commits viewable in compare view

Updates filelock from 3.18.0 to 3.20.3

Release notes

Sourced from filelock's releases.

3.20.3

What's Changed

• Fix TOCTOU symlink vulnerability in SoftFileLock by @​gaborbernat in tox-dev/filelock#465

Full Changelog: tox-dev/filelock@3.20.2...3.20.3

3.20.2

What's Changed

• Support Unix systems without O_NOFOLLOW by @​mwilliamson in tox-dev/filelock#463
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/filelock#464

New Contributors

• @​mwilliamson made their first contribution in tox-dev/filelock#463

Full Changelog: tox-dev/filelock@3.20.1...3.20.2

3.20.1

What's Changed

• CVE-2025-68146: Fix TOCTOU symlink vulnerability in lock file creation by @​gaborbernat in tox-dev/filelock#461

Full Changelog: tox-dev/filelock@3.20.0...3.20.1

3.20.0

What's Changed

• Add tox.toml to sdist by @​mtelka in tox-dev/filelock#436
• Update docs with example by @​znichollscr in tox-dev/filelock#438
• Add 3.14 support and drop 3.9 by @​gaborbernat in tox-dev/filelock#448

New Contributors

• @​mtelka made their first contribution in tox-dev/filelock#436
• @​znichollscr made their first contribution in tox-dev/filelock#438

Full Changelog: tox-dev/filelock@3.19.1...3.20.0

3.19.1

What's Changed

• add 3.14t (free threading) to matrix by @​paultiq in tox-dev/filelock#433
• Increase test coverage by @​paultiq in tox-dev/filelock#434

... (truncated)

Commits

• 41b42dd Fix TOCTOU symlink vulnerability in SoftFileLock (#465)
• f2e7d40 [pre-commit.ci] pre-commit autoupdate (#464)
• 5088854 Support Unix systems without O_NOFOLLOW (#463)
• 377f622 [pre-commit.ci] pre-commit autoupdate (#460)
• 4724d7f Fix TOCTOU symlink vulnerability in lock file creation (#461)
• cb69414 Bump actions/upload-artifact from 5 to 6 (#459)
• 0769294 Bump actions/download-artifact from 6 to 7 (#458)
• 414193a [pre-commit.ci] pre-commit autoupdate (#457)
• 1456797 [pre-commit.ci] pre-commit autoupdate (#456)
• 8d6bf90 Bump actions/checkout from 5 to 6 (#455)
• Additional commits viewable in compare view

Updates identify from 2.6.12 to 2.6.16

Commits

• e31a62b v2.6.16
• de8beb6 Merge pull request #558 from seanbudd/patch-1
• b5574ac Add support for '.xliff' file extension
• 059831f Merge pull request #555 from Roxedus/feat/ipxe
• 7e6b541 Add .ipxe extension
• 9e78792 Merge pull request #554 from pre-commit/pre-commit-ci-update-config
• a35c416 [pre-commit.ci] pre-commit autoupdate
• 5cab69e Merge pull request #553 from pre-commit/pre-commit-ci-update-config
• c8edd7e [pre-commit.ci] pre-commit autoupdate
• 47d582b Merge pull request #551 from pre-commit/pre-commit-ci-update-config
• Additional commits viewable in compare view

Updates nodeenv from 1.9.1 to 1.10.0

Release notes

Sourced from nodeenv's releases.

1.10.0 - drop

What's Changed

Fixed bugs 🐛

• Use lowercase lookup for archmap by @​robmoss2k in ekalinin/nodeenv#382

Improvements 🛠

• Add support for Python 3.13 by @​hugovk in ekalinin/nodeenv#367
• Add UV Virtual Environment support by @​Vizonex in ekalinin/nodeenv#386
• Use sh instead of bash by @​WhyNotHugo in ekalinin/nodeenv#389
• Replace additional use of which(1) with shutil.which() by @​mgorny in ekalinin/nodeenv#355

Other Changes

• Support leading v in .node-version by @​nix6839 in ekalinin/nodeenv#359
• Check host platform when finding node version by @​max0x53 in ekalinin/nodeenv#363

New Contributors

• @​hugovk made their first contribution in ekalinin/nodeenv#367
• @​nix6839 made their first contribution in ekalinin/nodeenv#359
• @​max0x53 made their first contribution in ekalinin/nodeenv#363
• @​robmoss2k made their first contribution in ekalinin/nodeenv#382
• @​Vizonex made their first contribution in ekalinin/nodeenv#386
• @​WhyNotHugo made their first contribution in ekalinin/nodeenv#389
• @​mgorny made their first contribution in ekalinin/nodeenv#355

Full Changelog: ekalinin/nodeenv@1.9.1...1.10.0

Commits

• 9dee547 chore: bump nodeenv version to 1.10.0
• d45aabb chore: add pyright ignore comments for compatibility
• 55d6c21 chore: update AUTHORS
• 5f694e6 test: update test test_node_system_creates_shim
• fa3fdfb Merge branch 'master' of github.com:ekalinin/nodeenv
• e868dbe Replace additional use of which(1) with shutil.which() (#355)
• b4cd00d test: enhance activation tests for nodeenv with custom prompts and file handling
• 0b5ea9d refactor(tests): improve readability of mock patches in nodeenv tests
• 37c0c30 ci: add GH workflow for testing and coverage in PR
• 326a7a4 test: add comprehensive tests for install_npm and install_npm_win functions
• Additional commits viewable in compare view

Updates platformdirs from 4.3.8 to 4.5.1

Release notes

Sourced from platformdirs's releases.

4.5.1

What's Changed

• Fix no-ctypes fallback on windows by @​youknowone in tox-dev/platformdirs#403

Full Changelog: tox-dev/platformdirs@4.5.0...4.5.1

4.5.0

What's Changed

• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/platformdirs#376
• Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in the all group by @​dependabot[bot] in tox-dev/platformdirs#378
• Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 in /.github/workflows by @​dependabot[bot] in tox-dev/platformdirs#379
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/platformdirs#381
• Add support for Python 3.14 by @​hugovk in tox-dev/platformdirs#382
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/platformdirs#383
• Update Windows file paths in README by @​ParadaCarleton in tox-dev/platformdirs#385
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/platformdirs#384
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in tox-dev/platformdirs#387
• Bump astral-sh/setup-uv from 6 to 7 in the all group by @​dependabot[bot] in tox-dev/platformdirs#388
• Drop 3.9 support by @​gaborbernat in tox-dev/platformdirs#389

New Contributors

• @​ParadaCarleton made their first contribution in tox-dev/platformdirs#385

Full Changelog: tox-dev/platformdirs@4.4.0...4.5.0

4.4.0

What's Changed

• feat: improve homebrew path detection by @​daeho-ro in tox-dev/platformdirs#370

New Contributors

• @​daeho-ro made their first contribution in tox-dev/platformdirs#370

Full Changelog: tox-dev/platformdirs@4.3.8...4.4.0

Commits

• e4dbdb8 Fix no-ctypes fallback on windows (#403)
• 4cc78aa [pre-commit.ci] pre-commit autoupdate (#401)
• b624d78 [pre-commit.ci] pre-commit autoupdate (#400)
• eb06e7e Bump actions/checkout from 5 to 6 in the all group (#399)
• 85efbe9 [pre-commit.ci] pre-commit autoupdate (#397)
• 704c603 [pre-commit.ci] pre-commit autoupdate (#394)
• a018178 [pre-commit.ci] pre-commit autoupdate (#393)
• 9920b9b Bump the all group with 2 updates (#392)
• c804724 [pre-commit.ci] pre-commit autoupdate (#391)
• a6a2489 [pre-commit.ci] pre-commit autoupdate (#390)
• Additional commits viewable in compare view

Updates pre-commit from 4.2.0 to 4.5.1

Release notes

Sourced from pre-commit's releases.

pre-commit v4.5.1

Fixes

• Fix language: python with repo: local without additional_dependencies.
  • #3597 PR by @​asottile.

pre-commit v4.5.0

Features

• Add pre-commit hazmat.

[github-actions]

This pull request is now marked as stale because it hasn't seen activity for a while. Add a comment or it will be closed soon. If you wish to exclude this issue from being marked as stale, add the "backlog" label.

[github-actions]

Closing this pull request as it hasn't seen activity for a while. Please add a comment @mentioning a maintainer to reopen. If you wish to exclude this issue from being marked as stale, add the "backlog" label.

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml