chore(deps): update python packages by sassanix · Pull Request #191 · sassanix/Warracker

sassanix · 2025-11-03T01:40:36Z

This PR contains the following updates:

Package	Update	Change
APScheduler (changelog)	patch	`==3.11.0` -> `==3.11.2`
Authlib	patch	`==1.6.5` -> `==1.6.9`
Babel (source)	minor	`==2.17.0` -> `==2.18.0`
Flask (changelog)	patch	`==3.1.2` -> `==3.1.3`
PyJWT	minor	`==2.10.1` -> `==2.12.1`
Werkzeug (changelog)	patch	`==3.1.3` -> `==3.1.7`
apprise	patch	`==1.9.5` -> `==1.9.9`
requests (changelog)	minor	`==2.32.5` -> `==2.33.0`
setuptools (changelog)	minor	`==80.9.0` -> `==80.10.2`

Release Notes

agronholm/apscheduler (APScheduler)

`v3.11.2`

Compare Source

Fixed an issue where a job using a CronTrigger scheduled in a repeated time interval during DST transitions could cause the scheduler to get stuck in an infinite loop (#1021; PR by @soulofakuma)

`v3.11.1`

Compare Source

Fixed scheduler.shutdown() not raising SchedulerNotRunning (or raising the wrong exception) for asynchronous schedulers when the scheduler is in fact not running
Fixed CronTrigger sticking on a folded datetime during the fall-back DST transition (#1021 <#1021>_; PR by @berianjames)`

authlib/authlib (Authlib)

`v1.6.9`

Compare Source

Full Changelog: authlib/authlib@v1.6.8...v1.6.9

Changes in `jose` module

Not using header's jwk automatically
Add ES256K into default jwt algorithms
Remove deprecated algorithm from default registry
Generate random cek when cek length doesn't match

`v1.6.8`

Compare Source

Full Changelog: authlib/authlib@v1.6.7...v1.6.8

Add EdDSA to default jwt instance.

`v1.6.7`

Compare Source

Full Changelog: authlib/authlib@v1.6.6...v1.6.7

Set supported algorithms for the default jwt instance.

`v1.6.6`

Compare Source

What's Changed

fix(ClientAuth): fix incorrect signature when Content-Type is x-www-form-urlencoded by @shc261392 in #778
Fix: Use expires_in when expires_at is unparsable by @bendavis78 in #842
get_jwt_config takes a client parameter. by @azmeuk in #844

New Contributors

@shc261392 made their first contribution in #778
@bendavis78 made their first contribution in #842

Full Changelog: authlib/authlib@v1.6.5...v1.6.6

python-babel/babel (Babel)

`v2.18.0`

Compare Source

Happy 2026! This release is, coincidentally, also being made from FOSDEM.

We will aspire for a slightly less glacial release cadence in this year;
there are interesting features in the pipeline.

Features


* Core: Add `babel.core.get_cldr_version()` by @&#8203;akx in :gh:`1242`
* Core: Use CLDR 47 by @&#8203;tomasr8 in :gh:`1210`
* Core: Use canonical IANA zone names in zone_territories by @&#8203;akx in :gh:`1220`
* Messages: Improve extract performance via ignoring directories early during os.walk by @&#8203;akx in :gh:`968`
* Messages: Merge in per-format keywords and auto_comments by @&#8203;akx in :gh:`1243`
* Messages: Update keywords for extraction of dpgettext and dnpgettext by @&#8203;mardiros in :gh:`1235`
* Messages: Validate all plurals in Python format checker by @&#8203;tomasr8 in :gh:`1188`
* Time: Use standard library `timezone` instead of `FixedOffsetTimezone` by @&#8203;akx in :gh:`1203`

Bugfixes

Core: Fix formatting for "Empty locale identifier" exception added in #1164 by @akx in :gh:1184
Core: Improve handling of no-inheritance-marker in timezone data by @akx in :gh:1194
Core: Make the number pattern regular expression more efficient by @akx in :gh:1213
Messages: Keep translator comments next to the translation function call by @akx in :gh:1196
Numbers: Fix KeyError that occurred when formatting compact currencies of exactly one thousand in several locales by @bartbroere in :gh:1246

Other improvements


* Core: Avoid unnecessary uses of `map()` by @&#8203;akx in :gh:`1180`
* Messages: Have init-catalog create directories too by @&#8203;akx in :gh:`1244`
* Messages: Optimizations for read_po by @&#8203;akx in :gh:`1200`
* Messages: Use pathlib.Path() in catalog frontend; improve test coverage by @&#8203;akx in :gh:`1204`

Infrastructure and documentation

CI: Renovate CI & lint tools by @akx in :gh:1228
CI: Tighten up CI with Zizmor by @akx in :gh:1230
CI: make job permissions explicit by @akx in :gh:1227
Docs: Add SECURITY.md by @akx in :gh:1229
Docs: Remove u string prefix from docs by @verhovsky in :gh:1174
Docs: Update dates.rst with current unicode.org tr35 link by @clach04 in :gh:1189
General: Add some PyPI classifiers by @tomasr8 in :gh:1186
General: Apply reformatting by hand and with Ruff by @akx in :gh:1202
General: Test on and declare support for Python 3.14 by @akx in :gh:1233
Tests: Convert Unittest testcases with setup/teardown to fixtures by @akx in :gh:1240
Tests: Mark PyPy CI flake as xfail by @akx in :gh:1197
Tests: Move pytest config to pyproject.toml by @tomasr8 in :gh:1187
Tests: Unwrap most unittest test cases to bare functions by @akx in :gh:1241

pallets/flask (Flask)

`v3.1.3`

Compare Source

Released 2026-02-18

The session is marked as accessed for operations that only access the keys
but not the values, such as in and len. :ghsa:68rp-wp8r-4726

jpadilla/pyjwt (PyJWT)

`v2.12.1`

Compare Source

Changed


- Migrate the ``dev``, ``docs``, and ``tests`` package extras to dependency groups by @&#8203;kurtmckee in `#&#8203;1152 <https://github.com/jpadilla/pyjwt/pull/1152>`__

`v2.12.1 <https://github.com/jpadilla/pyjwt/compare/2.12.0...2.12.1>`__
------------------------------------------------------------------------

Fixed
~~~~~

- Add missing ``typing_extensions`` dependency for Python < 3.11 in `#&#8203;1150 <https://github.com/jpadilla/pyjwt/issues/1150>`__

`v2.12.0 <https://github.com/jpadilla/pyjwt/compare/2.11.0...2.12.0>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Annotate PyJWKSet.keys for pyright by @&#8203;tamird in `#&#8203;1134 <https://github.com/jpadilla/pyjwt/pull/1134>`__
- Close ``HTTPError`` response to prevent ``ResourceWarning`` on Python 3.14 by @&#8203;veeceey in `#&#8203;1133 <https://github.com/jpadilla/pyjwt/pull/1133>`__
- Do not keep ``algorithms`` dict in PyJWK instances by @&#8203;akx in `#&#8203;1143 <https://github.com/jpadilla/pyjwt/pull/1143>`__
- Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by @&#8203;dmbs335 in `GHSA-752w-5fwx-jx9f <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-752w-5fwx-jx9f>`__
- Use PyJWK algorithm when encoding without explicit algorithm in `#&#8203;1148 <https://github.com/jpadilla/pyjwt/pull/1148>`__

Added
~~~~~

- Docs: Add ``PyJWKClient`` API reference and document the two-tier caching system (JWK Set cache and signing key LRU cache).

`v2.11.0 <https://github.com/jpadilla/pyjwt/compare/2.10.1...2.11.0>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Enforce ECDSA curve validation per RFC 7518 Section 3.4.
- Fix build system warnings by @&#8203;kurtmckee in `#&#8203;1105 <https://github.com/jpadilla/pyjwt/pull/1105>`__
- Validate key against allowed types for Algorithm family in `#&#8203;964 <https://github.com/jpadilla/pyjwt/pull/964>`__
- Add iterator for JWKSet in `#&#8203;1041 <https://github.com/jpadilla/pyjwt/pull/1041>`__
- Validate `iss` claim is a string during encoding and decoding by @&#8203;pachewise in `#&#8203;1040 <https://github.com/jpadilla/pyjwt/pull/1040>`__
- Improve typing/logic for `options` in decode, decode_complete by @&#8203;pachewise in `#&#8203;1045 <https://github.com/jpadilla/pyjwt/pull/1045>`__
- Declare float supported type for lifespan and timeout by @&#8203;nikitagashkov in `#&#8203;1068 <https://github.com/jpadilla/pyjwt/pull/1068>`__
- Fix ``SyntaxWarning``\s/``DeprecationWarning``\s caused by invalid escape sequences by @&#8203;kurtmckee in `#&#8203;1103 <https://github.com/jpadilla/pyjwt/pull/1103>`__
- Development: Build a shared wheel once to speed up test suite setup times by @&#8203;kurtmckee in `#&#8203;1114 <https://github.com/jpadilla/pyjwt/pull/1114>`__
- Development: Test type annotations across all supported Python versions,
  increase the strictness of the type checking, and remove the mypy pre-commit hook
  by @&#8203;kurtmckee in `#&#8203;1112 <https://github.com/jpadilla/pyjwt/pull/1112>`__

Added
~~~~~

- Support Python 3.14, and test against PyPy 3.10 and 3.11 by @&#8203;kurtmckee in `#&#8203;1104 <https://github.com/jpadilla/pyjwt/pull/1104>`__
- Development: Migrate to ``build`` to test package building in CI by @&#8203;kurtmckee in `#&#8203;1108 <https://github.com/jpadilla/pyjwt/pull/1108>`__
- Development: Improve coverage config and eliminate unused test suite code by @&#8203;kurtmckee in `#&#8203;1115 <https://github.com/jpadilla/pyjwt/pull/1115>`__
- Docs: Standardize CHANGELOG links to PRs by @&#8203;kurtmckee in `#&#8203;1110 <https://github.com/jpadilla/pyjwt/pull/1110>`__
- Docs: Fix Read the Docs builds by @&#8203;kurtmckee in `#&#8203;1111 <https://github.com/jpadilla/pyjwt/pull/1111>`__
- Docs: Add example of using leeway with nbf by @&#8203;djw8605 in `#&#8203;1034 <https://github.com/jpadilla/pyjwt/pull/1034>`__
- Docs: Refactored docs with ``autodoc``; added ``PyJWS`` and ``jwt.algorithms`` docs by @&#8203;pachewise in `#&#8203;1045 <https://github.com/jpadilla/pyjwt/pull/1045>`__
- Docs: Documentation improvements for "sub" and "jti" claims by @&#8203;cleder in `#&#8203;1088 <https://github.com/jpadilla/pyjwt/pull/1088>`__
- Development: Add pyupgrade as a pre-commit hook by @&#8203;kurtmckee in `#&#8203;1109 <https://github.com/jpadilla/pyjwt/pull/1109>`__
- Add minimum key length validation for HMAC and RSA keys (CWE-326).
  Warns by default via ``InsecureKeyLengthWarning`` when keys are below
  minimum recommended lengths per RFC 7518 Section 3.2 (HMAC) and
  NIST SP 800-131A (RSA). Pass ``enforce_minimum_key_length=True`` in
  options to ``PyJWT`` or ``PyJWS`` to raise ``InvalidKeyError`` instead.
- Refactor ``PyJWT`` to own an internal ``PyJWS`` instance instead of
  calling global ``api_jws`` functions.

`v2.10.1 <https://github.com/jpadilla/pyjwt/compare/2.10.0...2.10.1>`__
-----------------------------------------------------------------------

Fixed
~~~~~

- Prevent partial matching of `iss` claim by @&#8203;fabianbadoi in `GHSA-75c5-xw7c-p5pm <https://github.com/jpadilla/pyjwt/security/advisories/GHSA-75c5-xw7c-p5pm>`__

`v2.10.0 <https://github.com/jpadilla/pyjwt/compare/2.9.0...2.10.0>`__
-----------------------------------------------------------------------

Changed

Remove algorithm requirement from JWT API, instead relying on JWS API for enforcement, by @luhn in #975 <https://github.com/jpadilla/pyjwt/pull/975>__
Use Sequence for parameter types rather than List where applicable by @imnotjames in #970 <https://github.com/jpadilla/pyjwt/pull/970>__
Add JWK support to JWT encode by @luhn in #979 <https://github.com/jpadilla/pyjwt/pull/979>__
Encoding and decoding payloads using the none algorithm by @jpadilla in #c2629f6 <https://github.com/jpadilla/pyjwt/commit/c2629f66c593459e02616048443231ccbe18be16>__

Before:

.. code-block:: pycon

import jwt
jwt.encode({"payload": "abc"}, key=None, algorithm=None)

After:

.. code-block:: pycon

import jwt
jwt.encode({"payload": "abc"}, key=None, algorithm="none")
Added validation for 'sub' (subject) and 'jti' (JWT ID) claims in tokens by @Divan009 in #1005 <https://github.com/jpadilla/pyjwt/pull/1005>__
Refactor project configuration files from setup.cfg to pyproject.toml by @cleder in #995 <https://github.com/jpadilla/pyjwt/pull/995>__
Ruff linter and formatter changes by @gagandeepp in #1001 <https://github.com/jpadilla/pyjwt/pull/1001>__
Drop support for Python 3.8 (EOL) by @kkirsche in #1007 <https://github.com/jpadilla/pyjwt/pull/1007>__

Fixed


- Encode EC keys with a fixed bit length by @&#8203;etianen in `#&#8203;990 <https://github.com/jpadilla/pyjwt/pull/990>`__
- Add an RTD config file to resolve Read the Docs build failures by @&#8203;kurtmckee in `#&#8203;977 <https://github.com/jpadilla/pyjwt/pull/977>`__
- Docs: Update ``iat`` exception docs by @&#8203;pachewise in `#&#8203;974 <https://github.com/jpadilla/pyjwt/pull/974>`__
- Docs: Fix ``decode_complete`` scope and algorithms by @&#8203;RbnRncn in `#&#8203;982 <https://github.com/jpadilla/pyjwt/pull/982>`__
- Fix doctest for ``docs/usage.rst`` by @&#8203;pachewise in `#&#8203;986 <https://github.com/jpadilla/pyjwt/pull/986>`__
- Fix ``test_utils.py`` not to xfail by @&#8203;pachewise in `#&#8203;987 <https://github.com/jpadilla/pyjwt/pull/987>`__
- Docs: Correct `jwt.decode` audience param doc expression by @&#8203;peter279k in `#&#8203;994 <https://github.com/jpadilla/pyjwt/pull/994>`__

Added

Add support for python 3.13 by @hugovk in #972 <https://github.com/jpadilla/pyjwt/pull/972>__
Create SECURITY.md by @auvipy and @jpadilla in #973 <https://github.com/jpadilla/pyjwt/pull/973>__
Docs: Add PS256 encoding and decoding usage by @peter279k in #992 <https://github.com/jpadilla/pyjwt/pull/992>__
Docs: Add API docs for PyJWK by @luhn in #980 <https://github.com/jpadilla/pyjwt/pull/980>__
Docs: Add EdDSA algorithm encoding/decoding usage by @peter279k in #993 <https://github.com/jpadilla/pyjwt/pull/993>__
Include checkers and linters for pyproject.toml in pre-commit by @cleder in #1002 <https://github.com/jpadilla/pyjwt/pull/1002>__
Docs: Add ES256 decoding usage by @Gautam-Hegde in #1003 <https://github.com/jpadilla/pyjwt/pull/1003>__

`v2.12.0`

Compare Source

Security

Validate the crit (Critical) Header Parameter defined in RFC 7515 §4.1.11. by @dmbs335 in GHSA-752w-5fwx-jx9f

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1132
chore(docs): fix docs build by @tamird in #1137
Annotate PyJWKSet.keys for pyright by @tamird in #1134
fix: close HTTPError to prevent ResourceWarning on Python 3.14 by @veeceey in #1133
chore: remove superfluous constants by @tamird in #1136
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1135
chore(tests): enable mypy by @tamird in #1138
Bump actions/download-artifact from 7 to 8 by @dependabot[bot] in #1142
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1141
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1145
fix: do not store reference to algorithms dict on PyJWK by @akx in #1143
Use PyJWK algorithm when encoding without explicit algorithm by @jpadilla in #1148

New Contributors

@tamird made their first contribution in #1137
@veeceey made their first contribution in #1133

Full Changelog: jpadilla/pyjwt@2.11.0...2.12.0

`v2.11.0`

Compare Source

What's Changed

Fixed type error in comment by @shuhaib-aot in #1026
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1018
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1033
Make note of use of leeway with nbf by @djw8605 in #1034
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1035
Fixes #964: Validate key against allowed types for Algorithm family by @pachewise in #985
Feat #1024: Add iterator for PyJWKSet by @pachewise in #1041
Fixes #1039: Add iss, issuer type checks by @pachewise in #1040
Fixes #660: Improve typing/logic for options in decode, decode_complete; Improve docs by @pachewise in #1045
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1042
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1052
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1053
Fix #1022: Map algorithm=None to "none" by @qqii in #1056
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1055
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1058
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1060
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1061
Fixes #1047: Correct PyJWKClient.get_signing_key_from_jwt annotation by @khvn26 in #1048
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1062
Fixed doc string typo in _validate_jti() function #1063 by @kuldeepkhatke in #1064
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1065
Update SECURITY.md by @auvipy in #1057
Typing fix: use float instead of int for lifespan and timeout by @nikitagashkov in #1068
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1067
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1071
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1076
Fix TYP header documentation by @fobiasmog in #1046
doc: Document claims sub and jti by @cleder in #1088
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1077
Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #1089
Bump actions/stale from 8 to 10 by @dependabot[bot] in #1090
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #1083
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1091
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1093
[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in #1096
Resolve package build warnings by @kurtmckee in #1105
Support Python 3.14, and test against PyPy 3.10+ by @kurtmckee in #1104
Fix a SyntaxWarning caused by invalid escape sequences by @kurtmckee in #1103
Standardize CHANGELOG links to PRs by @kurtmckee in #1110
Migrate from pep517, which is deprecated, to build by @kurtmckee in #1108
Fix incorrectly-named test suite function by @kurtmckee in #1116
Fix Read the Docs builds by @kurtmckee in #1111
Bump actions/download-artifact from 4 to 6 by @dependabot[bot] in #1118
Escalate test suite warnings to errors by @kurtmckee in #1107
Add pyupgrade as a pre-commit hook by @kurtmckee in #1109
Simplify the test suite decorators by @kurtmckee in #1113
Improve coverage config and eliminate unused test suite code by @kurtmckee in #1115
Build a shared wheel once in the test suite by @kurtmckee in #1114
Bump actions/checkout from 5 to 6 by @dependabot[bot] in #1122
Thoroughly test type annotations, and resolve errors by @kurtmckee in #1112
Fix leeway value in usage documentation by @Matthew1471 in #1124
Bump actions/download-artifact from 6 to 7 by @dependabot[bot] in #1125

New Contributors

@shuhaib-aot made their first contribution in #1026
@qqii made their first contribution in #1056
@khvn26 made their first contribution in #1048
@kuldeepkhatke made their first contribution in #1064
@nikitagashkov made their first contribution in #1068
@fobiasmog made their first contribution in #1046
@Matthew1471 made their first contribution in #1124

Full Changelog: jpadilla/pyjwt@2.10.1...2.11.0

pallets/werkzeug (Werkzeug)

`v3.1.7`

Compare Source

Released 2026-03-23

parse_list_header preserves partially quoted items, discards empty
items, and returns empty for unclosed quoted values. :pr:3128
WWWAuthenticate.to_header does not produce a trailing space when there
are no parameters. :issue:3127
Transfer-Encoding is parsed as a set. :pr:3134
Request.host, get_host, and host_is_trusted validate the
characters of the value. An empty value is no longer allowed. A Unix socket
server address is ignored. The trusted_list argument to
host_is_trusted is optional. :pr:3113
Fix multipart form parser handling of newline at boundary. :issue:3088
Response.make_conditional sets the Accept-Ranges header even if it
is not a satisfiable range request. :issue:3108
merge_slashes merges any number of consecutive slashes. :issue:3121

`v3.1.6`

Compare Source

Released 2026-02-19

safe_join on Windows does not allow special devices names in
multi-segment paths. :ghsa:29vq-49wr-vm6x
Response.make_conditional sets the Accept-Ranges header even if it
is not a satisfiable range request. :issue:3108

`v3.1.5`

Compare Source

Released 2026-01-08

safe_join on Windows does not allow more special device names, regardless
of extension or surrounding spaces. :ghsa:87hc-h4r5-73f7
The multipart form parser handles a \r\n sequence at a chunk boundary.
This fixes the previous attempt, which caused incorrect content lengths.
:issue:3065 :issue:3077
Fix AttributeError when initializing DebuggedApplication with
pin_security=False. :issue:3075

`v3.1.4`

Compare Source

Released 2025-11-28

safe_join on Windows does not allow special device names. This prevents
reading from these when using send_from_directory. secure_filename
already prevented writing to these. :ghsa:hgf8-39gv-g3f2
The debugger pin fails after 10 attempts instead of 11. :pr:3020
The multipart form parser handles a \r\n sequence at a chunk boundary.
:issue:3065
Improve CPU usage during Watchdog reloader. :issue:3054
Request.json annotation is more accurate. :issue:3067
Traceback rendering handles when the line number is beyond the available
source lines. :issue:3044
HTTPException.get_response annotation and doc better conveys the
distinction between WSGI and sans-IO responses. :issue:3056

caronc/apprise (apprise)

`v1.9.9`

Compare Source

What's Changed

This is a mini release, but it fixes some issues with XMPP and adds other improvements to how the plugins are defined. This release will complete all the steps needed to open up the new URL Builder.

🐞 Bugfixes

xmpp asyncio test cases improvements in #1544
xmpp send/disconnect race condition in #1543
Resolved 'file can not be opened for read' AttachMemory issue in #1553
Matrix v2 API improvements in #1552

💡 Features

XMPP Multi-User Chat support in #1551

❤️ Life-Cycle Support

Specifically URL Builder Preparration:

details() can now be provided in a json response in #1545
cleanup to repo to reflect URL-Builder coming in #1547

Installation

Apprise is available on PyPI through pip:

# Install Apprise v1.9.9 from PyPI
pip install apprise==1.9.9

Full Changelog: caronc/apprise@v1.9.8...v1.9.9

`v1.9.8`

Compare Source

What's Changed

It's been a few months now; Apprise is due for a release containing all of the issues that have been resolved. I feel the big highlights of this release are IRC, Fluxer, and the return of XMPP support!

Continue to refer to https://AppriseIt.com for your documentation needs.

📣 New Notification Services:

Viber Bot Support in #1501
IRC Support (includes support for ZNC Bouncer) in #1503
XMPP support restored using Slixmpp in #1505
- also followup improvements in #1507, #1509, and #1526
jellyfin:// support (Emby alias) added for convenience in #1518
Fluxer support in #1536
Support for Slack rotation OAuth Bot Support in #1534

🐞 Bugfixes

n/a

💡 Features

Add Mattermost icon override support by @CWSpear in #1504
GMX Email Template added in #1517
Added mattermost:// bot support in #1522
bark:// ?format=markdown support for Markdown rendering by @HerbertGao in #1513
matrix:// homeserver not requred by default in #1514

❤️ Life-Cycle Support

Standardize linting by enabling Ruff preview rules and updating code base in #1510
Remove unnecessary pytest rpm dependencies in #1515
CLI test cases compatible now with Python v3.15 in #1516
Updated copyright notices to reflect 2026 in #1540

Installation

Apprise is available on PyPI through pip:

# Install Apprise v1.9.8 from PyPI
pip install apprise==1.9.8

New Contributors

@CWSpear made their first contribution in #1504

Full Changelog: caronc/apprise@v1.9.7...v1.9.8

`v1.9.7`

Compare Source

What's Changed

Big changes of this release is we're back at 100% test coverage plus a new documentation source: https://AppriseIt.com

🐞 Bugfixes

discord:// improvements to ping= handling in #1470
Bugzilla 2424601 resolved - no NotifyType enum leaking in #1473
resolves reoccurring warning for GdkPixbuf in #1488
Improved Matrix room handling in #1492

💡 Features

Config YAML support for 'tags' (in addition to 'tag') in #1471
Improved response handling in #1472
Signal API support for "text_mode=styled" in #1487
Update LoC badge by @github-actions[bot] in #1495
Fix contribute link by @erik434 in #1496

❤️ Life-Cycle Support

🔥 Adapt appriseit.com as new documentation source in #1486
Improved documentation surrounding tagging in #1489
improved on notification manger customization in #1490
🚀 100% test coverage in #1491

New Contributors

@github-actions[bot] made their first contribution in #1495
@erik434 made their first contribution in #1496

Installation

Apprise is available on PyPI through pip:

# Install Apprise v1.9.7 from PyPI
pip install apprise==1.9.7

Full Changelog: caronc/apprise@v1.9.6...v1.9.7

`v1.9.6`

Compare Source

What's Changed

📣 New Notification Services:

🐞 Bugfixes

Updated RPM Spec file to fix rpmbuild errors on koji in #1421
Added py.typed back into repository and Manifest in #1426
fix(telegram): support <code> blocks wrapped in <pre> for syntax highlighting by @hmnd in #1423
Apprise API payload bugfix in #1428
Matrix room/alias accepted characters re-aligned - bugfix in #1442
fix parsing of USA callsigns--specifically different prefix/suffix counts like 1x2 and 1x3 calls by @NeilHanlon in #1418
dot:// setup_url to align with other apprise ones in #1449 (extension to #1445 in same release)
fixed handling of non-standard matrix:// ports in #1450
Fix Reply-To header variable consistency by @slavaGanzin in #1446

💡 Features

increase of Pushover attachment size to 5MB in #1427
Added basic support for ntfy Actions by @ivangrimaldi in #1436
feat(bark): Add 'call' parameter support to NotifyBark for ringtone r… by @HerbertGao in #1444
Improved TRUNCATE and SPLIT with smart text splitting in #1459
Added support for slack-gov.com to slack:// in #1463
Nextcloud group notification implementation by @dev-KingMaster in #1440
Resend plugin improvements adding improved support for name=, cc=, reply=, and to= in #1465
discord:// supports ping= feature now in #1466

❤️ Life-Cycle Support

EPEL10 GitHub workflow added - RPM Building in #1460 and #1451
Added additional test coverage for Apprise configuration parsing in #1454
Added additional workflow:// test case in #1458
Spelling mistakes + minor code alignment in #1439

New Contributors

@hmnd made their first contribution in #1423
@ivangrimaldi made their first contribution in #1436
@NeilHanlon made their first contribution in #1418
@slavaGanzin made their first contribution in #1446
@dev-KingMaster made their first contribution in #1440

Installation

Apprise is available on PyPI through pip:

# Install Apprise v1.9.6 from PyPI
pip install apprise==1.9.6

Full Changelog: caronc/apprise@v1.9.5...v1.9.6

psf/requests (requests)

`v2.33.0`

Compare Source

Announcements

📣 Requests is adding inline types. If you have a typed code base that
uses Requests, please take a look at #7271. Give it a try, and report
any gaps or feedback you may have in the issue. 📣

Security

CVE-2026-25645 requests.utils.extract_zipped_paths now extracts
contents to a non-deterministic location to prevent malicious file
replacement. This does not affect default usage of Requests, only
applications calling the utility function directly.

Improvements

Migrated to a PEP 517 build system using setuptools. (#7012)

Bugfixes

Fixed an issue where an empty netrc entry could cause
malformed authentication to be applied to Requests on
Python 3.11+. (#7205)

Deprecations

Dropped support for Python 3.9 following its end of support. (#7196)

Documentation

Various typo fixes and doc improvements.

pypa/setuptools (setuptools)

`v80.10.2`

Compare Source

`v80.10.1`

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

sassanix added the dependencies label Nov 3, 2025

sassanix changed the title ~~Update dependency APScheduler to v3.11.1 (from 3.11.0)~~ chore(deps): update dependency apscheduler to v3.11.1 (from 3.11.0) Nov 10, 2025

sassanix force-pushed the renovate/python-packages branch from 9c48b61 to 6452d63 Compare December 1, 2025 01:55

sassanix changed the title ~~chore(deps): update dependency apscheduler to v3.11.1 (from 3.11.0)~~ chore(deps): update python packages Dec 1, 2025

sassanix force-pushed the renovate/python-packages branch from 6452d63 to 61d6c3d Compare December 8, 2025 01:42

sassanix force-pushed the renovate/python-packages branch from 61d6c3d to 1160527 Compare December 15, 2025 01:47

sassanix force-pushed the renovate/python-packages branch from 1160527 to edde7b1 Compare December 22, 2025 01:48

sassanix force-pushed the renovate/python-packages branch from edde7b1 to e9f8bc1 Compare January 12, 2026 01:51

sassanix force-pushed the renovate/python-packages branch from e9f8bc1 to 23742c4 Compare January 26, 2026 01:56

sassanix force-pushed the renovate/python-packages branch from 23742c4 to 0e228ab Compare February 2, 2026 02:11

sassanix force-pushed the renovate/python-packages branch 2 times, most recently from 74d3e3f to 6c689e1 Compare February 16, 2026 02:10

sassanix force-pushed the renovate/python-packages branch from 6c689e1 to f0bfd37 Compare February 23, 2026 02:11

sassanix force-pushed the renovate/python-packages branch from f0bfd37 to 963315f Compare March 9, 2026 02:09

sassanix force-pushed the renovate/python-packages branch 2 times, most recently from cf8b6b1 to c91a2b3 Compare March 23, 2026 02:22

chore(deps): update python packages

b19f8f6

sassanix force-pushed the renovate/python-packages branch from c91a2b3 to b19f8f6 Compare March 30, 2026 02:32

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update python packages#191

chore(deps): update python packages#191
sassanix wants to merge 1 commit intomainfrom
renovate/python-packages

sassanix commented Nov 3, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

sassanix commented Nov 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Changes in jose module

What's Changed

New Contributors

Security

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

🐞 Bugfixes

💡 Features

❤️ Life-Cycle Support

Installation

What's Changed

📣 New Notification Services:

🐞 Bugfixes

💡 Features

❤️ Life-Cycle Support

Installation

New Contributors

What's Changed

🐞 Bugfixes

💡 Features

❤️ Life-Cycle Support

New Contributors

Installation

What's Changed

📣 New Notification Services:

🐞 Bugfixes

💡 Features

❤️ Life-Cycle Support

New Contributors

Installation

Configuration

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

sassanix commented Nov 3, 2025 •

edited

Loading

Changes in `jose` module