chore(deps): update uv: bump the uv-version-updates group across 2 directories with 52 updates

[dependabot]

Bumps the uv-version-updates group with 52 updates in the /.github directory:

Package	From	To
bandit	1.8.5	1.9.4
markdown-it-py	3.0.0	4.0.0
pbr	6.1.1	7.0.3
pyyaml	6.0.2	6.0.3
rich	13.5.3	14.3.3
setuptools	80.9.0	82.0.0
stevedore	5.4.1	5.7.0
typing-extensions	4.14.0	4.15.0
cfgv	3.4.0	3.5.0
distlib	0.3.9	0.4.0
filelock	3.18.0	3.24.3
identify	2.6.12	2.6.16
nodeenv	1.9.1	1.10.0
platformdirs	4.3.8	4.9.2
pre-commit	4.2.0	4.5.1
virtualenv	20.31.2	21.1.0
attrs	25.3.0	25.4.0
boltons	21.0.0	25.0.0
certifi	2025.6.15	2026.2.25
charset-normalizer	3.4.2	3.4.4
click	8.1.8	8.3.1
click-option-group	0.5.7	0.5.9
deprecated	1.2.18	1.3.1
exceptiongroup	1.2.2	1.3.1
face	24.0.0	26.0.0
glom	22.1.0	25.12.0
googleapis-common-protos	1.70.0	1.72.0
idna	3.10	3.11
importlib-metadata	7.1.0	8.7.1
jsonschema	4.24.0	4.26.0
jsonschema-specifications	2025.4.1	2025.9.1
opentelemetry-api	1.25.0	1.39.1
opentelemetry-exporter-otlp-proto-common	1.25.0	1.39.1
opentelemetry-exporter-otlp-proto-http	1.25.0	1.39.1
opentelemetry-instrumentation	0.46b0	0.60b1
opentelemetry-instrumentation-requests	0.46b0	0.60b1
opentelemetry-proto	1.25.0	1.39.1
opentelemetry-sdk	1.25.0	1.39.1
opentelemetry-semantic-conventions	0.46b0	0.60b1
opentelemetry-util-http	0.46b0	0.60b1
packaging	25.0	26.0
peewee	3.18.1	4.0.0
protobuf	4.25.8	7.34.0
referencing	0.36.2	0.37.0
requests	2.32.4	2.32.5
rpds-py	0.25.1	0.30.0
ruamel-yaml	0.18.14	0.19.1
semgrep	1.126.0	1.153.1
tomli	2.0.2	2.4.0
urllib3	2.5.0	2.6.3
wcmatch	8.5.2	10.1
wrapt	1.17.2	2.1.1

Bumps the uv-version-updates group with 52 updates in the /.github/workflows directory:

Package	From	To
bandit	1.8.5	1.9.4
markdown-it-py	3.0.0	4.0.0
pbr	6.1.1	7.0.3
pyyaml	6.0.2	6.0.3
rich	13.5.3	14.3.3
setuptools	80.9.0	82.0.0
stevedore	5.4.1	5.7.0
typing-extensions	4.14.0	4.15.0
cfgv	3.4.0	3.5.0
distlib	0.3.9	0.4.0
filelock	3.18.0	3.24.3
identify	2.6.12	2.6.16
nodeenv	1.9.1	1.10.0
platformdirs	4.3.8	4.9.2
pre-commit	4.2.0	4.5.1
virtualenv	20.31.2	21.1.0
attrs	25.3.0	25.4.0
boltons	21.0.0	25.0.0
certifi	2025.6.15	2026.2.25
charset-normalizer	3.4.2	3.4.4
click	8.1.8	8.3.1
click-option-group	0.5.7	0.5.9
deprecated	1.2.18	1.3.1
exceptiongroup	1.2.2	1.3.1
face	24.0.0	26.0.0
glom	22.1.0	25.12.0
googleapis-common-protos	1.70.0	1.72.0
idna	3.10	3.11
importlib-metadata	7.1.0	8.7.1
jsonschema	4.24.0	4.26.0
jsonschema-specifications	2025.4.1	2025.9.1
opentelemetry-api	1.25.0	1.39.1
opentelemetry-exporter-otlp-proto-common	1.25.0	1.39.1
opentelemetry-exporter-otlp-proto-http	1.25.0	1.39.1
opentelemetry-instrumentation	0.46b0	0.60b1
opentelemetry-instrumentation-requests	0.46b0	0.60b1
opentelemetry-proto	1.25.0	1.39.1
opentelemetry-sdk	1.25.0	1.39.1
opentelemetry-semantic-conventions	0.46b0	0.60b1
opentelemetry-util-http	0.46b0	0.60b1
packaging	25.0	26.0
peewee	3.18.1	4.0.0
protobuf	4.25.8	7.34.0
referencing	0.36.2	0.37.0
requests	2.32.4	2.32.5
rpds-py	0.25.1	0.30.0
ruamel-yaml	0.18.14	0.19.1
semgrep	1.126.0	1.153.1
tomli	2.0.2	2.4.0
urllib3	2.5.0	2.6.3
wcmatch	8.5.2	10.1
wrapt	1.17.2	2.1.1

Updates bandit from 1.8.5 to 1.9.4

Release notes

Sourced from bandit's releases.

1.9.4

What's Changed

• chore: fixed some typos in comments by @​jakob1379 in PyCQA/bandit#1351
• Bump docker/login-action from 3.6.0 to 3.7.0 by @​dependabot[bot] in PyCQA/bandit#1353
• Bump docker/build-push-action from 6.18.0 to 6.19.2 by @​dependabot[bot] in PyCQA/bandit#1357
• Fix B613 crash when reading from stdin by @​worksbyfriday in PyCQA/bandit#1361
• Include filename in nosec 'no failed test' warning by @​worksbyfriday in PyCQA/bandit#1363
• Fix B615 false positive when revision is set via variable by @​worksbyfriday in PyCQA/bandit#1358
• Lower version guard in check_ast_node to Python 3.12 by @​rcgray in PyCQA/bandit#1355
• Fix B106 reporting wrong line number on multiline function calls by @​worksbyfriday in PyCQA/bandit#1360

New Contributors

• @​jakob1379 made their first contribution in PyCQA/bandit#1351
• @​worksbyfriday made their first contribution in PyCQA/bandit#1361
• @​rcgray made their first contribution in PyCQA/bandit#1355

Full Changelog: PyCQA/bandit@1.9.3...1.9.4

1.9.3

What's Changed

• Bump actions/checkout from 5 to 6 by @​dependabot[bot] in PyCQA/bandit#1334
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in PyCQA/bandit#1335
• Fix B608 to detect VALUES( without space by @​kfess in PyCQA/bandit#1337
• Add check for hardcoded passwords in dicts. by @​alanverresen in PyCQA/bandit#1338
• [pre-commit.ci] pre-commit autoupdate by @​pre-commit-ci[bot] in PyCQA/bandit#1341
• Update tox tests for Python 3.10 by @​willschlitzer in PyCQA/bandit#1346
• Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 by @​dependabot[bot] in PyCQA/bandit#1347
• Limit B614 to torch.load deserializers by @​dibussoc in PyCQA/bandit#1348

New Contributors

• @​kfess made their first contribution in PyCQA/bandit#1337
• @​alanverresen made their first contribution in PyCQA/bandit#1338
• @​willschlitzer made their first contribution in PyCQA/bandit#1346
• @​dibussoc made their first contribution in PyCQA/bandit#1348

Full Changelog: PyCQA/bandit@1.9.2...1.9.3

1.9.2

What's Changed

• Argparse Python 3.14 enhancements by @​ericwb in PyCQA/bandit#1331
• Check whether Constant value is str by @​ericwb in PyCQA/bandit#1333

Full Changelog: PyCQA/bandit@1.9.1...1.9.2

1.9.1

What's Changed

• More Python version related fixes by @​ericwb in PyCQA/bandit#1327

... (truncated)

Commits

• 92ae8b8 Fix B106 reporting wrong line number on multiline function calls (#1360)
• c8c8a55 Lower version guard in check_ast_node to Python 3.12 (#1355)
• 8f2f928 Fix B615 false positive when revision is set via variable (#1358)
• e27493f Include filename in nosec 'no failed test' warning (#1363)
• b69b336 Fix B613 crash when reading from stdin (#1361)
• e418b79 Bump docker/build-push-action from 6.18.0 to 6.19.2 (#1357)
• ff646fd Bump docker/login-action from 3.6.0 to 3.7.0 (#1353)
• c0def6c chore: fixed some typos in comments (#1351)
• 765f00d Limit B614 to torch.load deserializers (#1348)
• 06fbbab Bump docker/setup-buildx-action from 3.11.1 to 3.12.0 (#1347)
• Additional commits viewable in compare view

Updates markdown-it-py from 3.0.0 to 4.0.0

Release notes

Sourced from markdown-it-py's releases.

v4.0.0

What's Changed

This primarily drops support for Python 3.8 and 3.9, adds support for Python 3.13, and updates the parser to comply with Commonmark 0.31.2 and Markdown-It v14.1.0.

Upgrades

• ⬆️ Drop Python 3.8, test 3.13 by @​chrisjsewell in executablebooks/markdown-it-py#342
• ⬆️ Drop support for Python 3.9 by @​chrisjsewell in executablebooks/markdown-it-py#360
• ⬆️ Comply with Commonmark 0.31.2 by @​chrisjsewell in executablebooks/markdown-it-py#362

Improvements

• 👌 Improve performance of "text" inline rule by @​hukkin in executablebooks/markdown-it-py#347
• 👌 Use str.removesuffix by @​hukkin in executablebooks/markdown-it-py#348
• 👌 limit the number of autocompleted cells in a table by @​chrisjsewell in executablebooks/markdown-it-py#364
• 👌 fix quadratic complexity in reference parser by @​chrisjsewell in executablebooks/markdown-it-py#367

Bug fixes

• 🐛 Fix emphasis inside raw links bugs by @​tsutsu3 in executablebooks/markdown-it-py#320

Maintenance

• 🔧 Replace black and isort with ruff formatter by @​chrisjsewell in executablebooks/markdown-it-py#313
• 🔧 Fixed Code Style paragraph still referring to flake8 by @​venthur in executablebooks/markdown-it-py#309
• 🔧 Add "store_labels" to OptionsType by @​chrisjsewell in executablebooks/markdown-it-py#343
• 🔧 Move code_style to dependency group by @​chrisjsewell in executablebooks/markdown-it-py#344
• 🔧 Update codecov action by @​chrisjsewell in executablebooks/markdown-it-py#345
• 🔧 Update pre-commit and upload-artifact by @​chrisjsewell in executablebooks/markdown-it-py#359
• 🔧 Improve spec update script by @​chrisjsewell in executablebooks/markdown-it-py#361
• 🔧 simplify logic in scanDelims by @​chrisjsewell in executablebooks/markdown-it-py#365
• 🧪 Add CI testing for Python 3.12 by @​hugovk in executablebooks/markdown-it-py#303
• 🧪 Fix codecov by @​chrisjsewell in executablebooks/markdown-it-py#332

Documentation

• 📚 Fix typo by @​bwagner in executablebooks/markdown-it-py#315
• 📚 Fix RTD build by @​chrisjsewell in executablebooks/markdown-it-py#322
• 📚 DOCS: Fix a few old URLs by @​elijahgreenstein in executablebooks/markdown-it-py#358
• 📚 Improve README by @​mrmurilo75 in executablebooks/markdown-it-py#340
• 📚 Fix CI badge link by @​tsutsu3 in executablebooks/markdown-it-py#291
• 📚 Update docs by @​chrisjsewell in executablebooks/markdown-it-py#292
• 📚 Add icon to readme by @​chrisjsewell in executablebooks/markdown-it-py#293
• 📚 Update icon by @​chrisjsewell in executablebooks/markdown-it-py#294
• 📚 DOCS: Clarify docs regarding security configuration by @​djramones in executablebooks/markdown-it-py#296
• 📚 Fix the RTD build by @​chrisjsewell in executablebooks/markdown-it-py#311
• 📚 DOCS: Fix typos by @​elijahgreenstein in executablebooks/markdown-it-py#366

... (truncated)

Changelog

Sourced from markdown-it-py's changelog.

4.0.0 - 2024-08-10

This primarily drops support for Python 3.9, adds support for Python 3.13, and updates the parser to comply with Commonmark 0.31.2 and Markdown-It v14.1.0.

• ⬆️ Drop support for Python 3.9 in #360
• ⬆️ Comply with Commonmark 0.31.2 in #362
• 👌 Improve performance of "text" inline rule in #347
• 👌 Use str.removesuffix in #348
• 👌 limit the number of autocompleted cells in a table in #364
• 👌 fix quadratic complexity in reference parser in #367
• 🐛 Fix emphasis inside raw links bugs in #320

Full Changelog: executablebooks/markdown-it-py@v3.0.0...v4.0.0

Commits

• c62983f 🚀 RELEASE v4.0.0 (#368)
• 9e93bd5 👌 fix quadratic complexity in reference parser (#367)
• da45c87 📚 DOCS: Fix typos (#366)
• 87b16e2 🔧 simplify logic in scanDelims (#365)
• e400964 👌 limit the number of autocompleted cells in a table (#364)
• 4535d77 ⬆️ Comply with Commonmark 0.31.2 (#362)
• 8eb20ac 🔧 Improve spec update script (#361)
• fb9d3ab ⬆️ Drop support for Python 3.9 (#360)
• 9ffe841 📚 DOCS: Fix a few old URLs (#358)
• 154fe43 🔧 Update pre-commit and upload-artifact (#359)
• Additional commits viewable in compare view

Updates pbr from 6.1.1 to 7.0.3

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

• Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

• yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

Commits

• 49790e7 Release 6.0.3 (#889)
• See full diff in compare view

Updates rich from 13.5.3 to 14.3.3

Release notes

Sourced from rich's releases.

The infinite Release

Fixed a infinite loop in split_graphemes

[14.3.3] - 2026-02-19

Fixed

• Fixed infinite loop with cells.split_graphemes Textualize/rich#4006

The ZWJy release

A fix for cell_len edge cases

[14.3.2] - 2026-02-01

Fixed

• Fixed solo ZWJ crash Textualize/rich#3953
• Fixed control codes reporting width of 1 Textualize/rich#3953

The Nerdy Fix release

Fixed issue with characters outside of unicode range reporting 0 cell size

[14.3.1] - 2026-01-24

Fixed

• Fixed characters out of unicode range reporting a cell size if 0 Textualize/rich#3944

The more emojis release

Rich now has support for multi-codepoint emojis. There have also been some Markdown improvements, and a number of fixes. See the release notes below for details.

[14.3.0] - 2026-01-24

Fixed

• IPython now respects when a Console instance is passed to pretty.install Textualize/rich#3915
• Fixed extraneous blank line on non-interactive disabled Progress Textualize/rich#3905
• Fixed extra padding on first cell in columns Textualize/rich#3935
• Fixed trailing whitespace removed when soft_wrap=True Textualize/rich#3937
• Fixed style new-lines when soft_wrap = True and a print style is set Textualize/rich#3938

Added

• Added support for some multi-codepopint glyphs (will fix alignment issues for these characters) Textualize/rich#3930
• Added support for UNICODE_VERSION environment variable Textualize/rich#3930
• Added last_render_height property to LiveRender Textualize/rich#3934
• Expose locals_max_depth and locals_overflow in traceback.install Textualize/rich#3906
• Added Segment.split_lines_terminator Textualize/rich#3938

Changed

... (truncated)

Changelog

Sourced from rich's changelog.

[14.3.3] - 2026-02-19

Fixed

• Fixed infinite loop with cells.split_graphemes Textualize/rich#4006

[14.3.2] - 2026-02-01

Fixed

• Fixed solo ZWJ crash Textualize/rich#3953
• Fixed control codes reporting width of 1 Textualize/rich#3953

[14.3.1] - 2026-01-24

Fixed

• Fixed characters out of unicode range reporting a cell size if 0 Textualize/rich#3944

[14.3.0] - 2026-01-24

Fixed

• IPython now respects when a Console instance is passed to pretty.install Textualize/rich#3915
• Fixed extraneous blank line on non-interactive disabled Progress Textualize/rich#3905
• Fixed extra padding on first cell in columns Textualize/rich#3935
• Fixed trailing whitespace removed when soft_wrap=True Textualize/rich#3937
• Fixed style new-lines when soft_wrap = True and a print style is set Textualize/rich#3938

Added

• Added support for some multi-codepopint glyphs (will fix alignment issues for these characters) Textualize/rich#3930
• Added support for UNICODE_VERSION environment variable Textualize/rich#3930
• Added last_render_height property to LiveRender Textualize/rich#3934
• Expose locals_max_depth and locals_overflow in traceback.install Textualize/rich#3906
• Added Segment.split_lines_terminator Textualize/rich#3938

Changed

• cells.cell_len now has a unicode_version parameter (that you probably should never change) Textualize/rich#3930
• Live will not write a new line if there was nothing rendered Textualize/rich#3934
• Changed style of Markdown headers Textualize/rich#3942
• Changed style of Markdown tables, added markdown.table.header and markdown.table.border styles Textualize/rich#3942
• Changed style of Markdown rules Textualize/rich#3942

[14.2.0] - 2025-10-09

Changed

• Python3.14 compatibility Textualize/rich#3861

... (truncated)

Commits

• ce01188 Merge pull request #4008 from Textualize/bump1433
• 14a47c9 bump
• f54bfe0 Merge pull request #4007 from Textualize/copilot/sub-pr-4006
• 7338cb9 Merge pull request #4006 from Textualize/fix-grapheme-stuck
• 905b397 Update tests/test_cells.py
• b031dca Update tests/test_cells.py
• f07a3fc Add regression tests for VS16 after zero-width chars in split_graphemes
• b618ccc spelling
• 378c34b Initial plan
• 87e7ca2 refinements, and tests
• Additional commits viewable in compare view

Updates setuptools from 80.9.0 to 82.0.0

Changelog

Sourced from setuptools's changelog.

v82.0.0

Deprecations and Removals

• pkg_resources has been removed from Setuptools. Most common uses of pkg_resources have been superseded by the importlib.resources <https://docs.python.org/3/library/importlib.resources.html>_ and importlib.metadata <https://docs.python.org/3/library/importlib.metadata.html>_ projects. Projects and environments relying on pkg_resources for namespace packages or other behavior should depend on older versions of setuptools. (#3085)

v81.0.0

Deprecations and Removals

• Removed support for the --dry-run parameter to setup.py. This one feature by its nature threads through lots of core and ancillary functionality, adding complexity and friction. Removal of this parameter will help decouple the compiler functionality from distutils and thus the eventual full integration of distutils. These changes do affect some class and function signatures, so any derivative functionality may require some compatibility shims to support their expected interface. Please report any issues to the Setuptools project for investigation. (#4872)

v80.10.2

Bugfixes

• Update vendored dependencies. (#5159)

Misc

• #5115, #5128

v80.10.1

Misc

• #5152

v80.10.0

Features

• Remove post-release tags on setuptools' own build. (#4530)
• Refreshed vendored dependencies. (#5139)

... (truncated)

Commits

• 03f3615 Bump version: 81.0.0 → 82.0.0
• 530d114 Merge pull request #5007 from pypa/feature/remove-more-pkg_resources
• 11efe9f Merge branch 'maint/75.3'
• 118f129 Bump version: 75.3.3 → 75.3.4
• 90561ff Merge pull request #5150 from UladzimirTrehubenka/backport_cve_47273
• 4595034 Add news fragment.
• fc00800 Merge pull request #5171 from cclauss/ruff-v0.15.0
• 127e561 Remove tests reliant on pkg_resources, rather than xfailing them.
• 64bc21e Reference the superseding libraries.
• cf1ff45 Merge branch 'main' into debt/pbr-without-pkg_resources
• Additional commits viewable in compare view

Updates stevedore from 5.4.1 to 5.7.0

Updates typing-extensions from 4.14.0 to 4.15.0

Release notes

Sourced from typing-extensions's releases.

4.15.0

No user-facing changes since 4.15.0rc1.

New features since 4.14.1:

• Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
• Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
• Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.15.0rc1

• Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
• Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
• Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.14.1

Release 4.14.1 (July 4, 2025)

• Fix usage of typing_extensions.TypedDict nested inside other types (e.g., typing.Type[typing_extensions.TypedDict]). This is not allowed by the type system but worked on older versions, so we maintain support.

Changelog

Sourced from typing-extensions's changelog.

Release 4.15.0 (August 25, 2025)

No user-facing changes since 4.15.0rc1.

Release 4.15.0rc1 (August 18, 2025)

• Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.
• Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.
• Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

Release 4.14.1 (July 4, 2025)

• Fix usage of typing_extensions.TypedDict nested inside other types (e.g., typing.Type[typing_extensions.TypedDict]). This is not allowed by the type system but worked on older versions, so we maintain support.

Commits

• 9d1637e Prepare release 4.15.0 (#658)
• 4bd67c5 Coverage: exclude some noise (#656)
• e589a26 Coverage: add detailed report to job summary (#655)
• 67d37fe Coverage: Implement fail_under (#654)
• e9ae26f Don't delete previous coverage comment (#653)
• ac80bb7 Add Coverage workflow (#623)
• abaaafd Prepare release 4.15.0rc1 (#650)
• 9810405 Add @disjoint_base (PEP 800) (#634)
• 7ee9e05 Backport type_params fix from CPython (#646)
• 1e8eb9c Do not refer to PEP 705 as being experimental (#648)
• Additional commits viewable in compare view

Updates cfgv from 3.4.0 to 3.5.0

Commits

• c734212 v3.5.0
• d64e0cc Merge pull request #158 from asottile/key-value-map
• 641559f add KeyValueMap
• 82e2f93 Merge pull request #157 from asottile/pre-commit-ci-update-config
• 69cd020 [pre-commit.ci] pre-commit autoupdate
• 5ccc4d4 Merge pull request #156 from asottile/pre-commit-ci-update-config
• 2e7ffe5 [pre-commit.ci] pre-commit autoupdate
• ef78499 Merge pull request #155 from asottile/all-repos_autofix_all-repos-manual
• b34b882 py310+
• 724a279 Merge pull request #154 from asottile/pre-commit-ci-update-config
• Additional commits viewable in compare view

Updates distlib from 0.3.9 to 0.4.0

Changelog

Sourced from distlib's changelog.

0.4.0

Released: 2025-07-17


markers

Add the interpret_parsed function.



wheel


Fix #238: Add build tag to wheel metadata if specified.


Fix #243: Update to support free-threading version of Python (3.13t).


Fix #246: Support subdirectories in the dist-info directory. Thanks to Pieter P for the patch.


Fix #248: Fix path normalisation issue caused by the fix for #246.


Move import in script wrapper to "if name == 'main'" clause.




tests

Fix #245: Skip test_package_data if a SKIP_EXT_PACKAGE_DATA environment variable is present.

Commits

• aff2cbb Finalise version.
• 3716c4b Update change log, widen exception catching in test.
• 660bd33 Changes for 0.4.0.
• 56b4ad9 Guard script wrapper entrypoint import with if main (#242)
• fe57366 docs: update coverage results link (#250)
• c3286e5 Temporarily exclude 3.13t on windows-latest.
• e6b83d3 Normalize archive paths in dist-info (#248)
• 93baffe Skip no-longer-relevant test.
• 83f6568 Support subdirectories in .dist-info (fixes #246) (#247)
• f918abd Update test_wheel.WheelTestCase.test_abi for freethreading (#244)
• Additional commits viewable in compare view

Updates filelock from 3.18.0 to 3.24.3

Release notes

Sourced from filelock's releases.

3.24.3

What's Changed

• 🐛 fix(ci): add trailing blank line after changelog entries by @​gaborbernat in tox-dev/filelock#492
• 🐛 fix(unix): handle ENOENT race on FUSE/NFS during acquire by @​gaborbernat in tox-dev/filelock#495

Full Changelog: tox-dev/filelock@3.24.2...3.24.3

3.24.2

What's Changed

• 📝 docs: restructure using Diataxis framework by @​gaborbernat in tox-dev/filelock#489
• 🐛 fix(test): resolve flaky write non-starvation test by @​gaborbernat in tox-dev/filelock#490
• 🐛 fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race by @​gaborbernat in tox-dev/filelock#491

Full Changelog: tox-dev/filelock@3.24.1...3.24.2

3.24.1

What's Changed

• 🐛 fix(soft): resolve Windows deadlock and test race condition by @​gaborbernat in tox-dev/filelock#488

Full Changelog: tox-dev/filelock@3.24.0...3.24.1

3.24.0

What's Changed

• 🐛 fix(unix): auto-fallback to SoftFileLock on ENOSYS by @​gaborbernat in tox-dev/filelock#480
• ✨ feat(lock): add poll_interval to constructor by @​gaborbernat in tox-dev/filelock#482
• 🐛 fix(win): eliminate lock file race in threaded usage by @​gaborbernat in tox-dev/filelock#484
• ✨ feat(mode): respect POSIX default ACL inheritance by @​gaborbernat in tox-dev/filelock#483
• 🐛 fix(api): detect same-thread self-deadlock by @​gaborbernat in tox-dev/filelock#481
• ✨ feat(lock): add cancel_check to acquire by @​gaborbernat in tox-dev/filelock#487
• ✨ feat(lock): add lifetime parameter for lock expiration by @​gaborbernat in tox-dev/filelock#486

Full Changelog: tox-dev/filelock@3.23.0...3.24.0

3.23.0

What's Changed

• 📝 docs: add fasteners to similar libraries by @​gaborbernat in tox-dev/filelock#478

... (truncated)

Changelog

Sourced from filelock's changelog.

########### Changelog ###########

---

3.24.3 (2026-02-19)

---

• 🐛 fix(unix): handle ENOENT race on FUSE/NFS during acquire :pr:495
• 🐛 fix(ci): add trailing blank line after changelog entries :pr:492

---

3.24.2 (2026-02-16)

---

• 🐛 fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race :pr:491
• 🐛 fix(test): resolve flaky write non-starvation test :pr:490
• 📝 docs: restructure using Diataxis framework :pr:489

---

3.24.1 (2026-02-15)

---

• 🐛 fix(soft): resolve Windows deadlock and test race condition :pr:488

---

3.24.0 (2026-02-14)

---

• ✨ feat(lock): add lifetime parameter for lock expiration (#68) :pr:486
• ✨ feat(lock): add cancel_check to acquire (#309) :pr:487
• 🐛 fix(api): detect same-thread self-deadlock :pr:481
• ✨ feat(mode): respect POSIX default ACLs (#378) :pr:483
• 🐛 fix(win): eliminate lock file race in threaded usage :pr:484
• ✨ feat(lock): add poll_interval to constructor :pr:482
• 🐛 fix(unix): auto-fallback to SoftFileLock on ENOSYS :pr:480

---

3.23.0 (2026-02-14)

---

• 📝 docs: move from Unlicense to MIT :pr:479
• 📝 docs: add fasteners to similar libraries :pr:478

---

3.22.0 (2026-02-14)

---

• 🐛 fix(soft): skip stale detection on Windows :pr:477
• ✨ feat(soft): detect and break stale locks :pr:476

... (truncated)

Commits

• b34b3df Release 3.24.3
• e266937 🐛 fix(unix): handle ENOENT race on FUSE/NFS during acquire (#495)
• e65c3b8 [pre-commit.ci] pre-commit autoupdate (#493)
• a67ae00 🐛 fix(ci): add trailing blank line after changelog entries (#492)
• db3e05a Release 3.24.2
• ab6b90e 🐛 fix(rw): close sqlite3 cursors and skip SoftFileLock Windows race (#491)
• 98b4ee9 ...

  Description has been truncated

[dependabot]

Superseded by #23.