From 5262053efcaffd20264cf94b38c113d447a1a32c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 Aug 2025 15:44:00 +0000
Subject: [PATCH 1/5] Bump identify from 2.6.12 to 2.6.13 (#11412)

Bumps [identify](https://github.com/pre-commit/identify) from 2.6.12 to
2.6.13.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pre-commit/identify/commit/af4da9c69b07a41dfbfc1f3ec60d27d9aa0654dc"><code>af4da9c</code></a>
v2.6.13</li>
<li><a
href="https://github.com/pre-commit/identify/commit/bdf9c05f99c426e7ab115f68cf62bd0a70b33012"><code>bdf9c05</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/identify/issues/530">#530</a>
from dirtcrusher/feature/special_cpp_extensions</li>
<li><a
href="https://github.com/pre-commit/identify/commit/1a6b03cde137b43d4aa6bfd5ea80a762b923efa0"><code>1a6b03c</code></a>
Added C++ 'ipp' and 'tpp' file extensions</li>
<li><a
href="https://github.com/pre-commit/identify/commit/1a3399b87beba789ab56ab395737a9b7453ad58f"><code>1a3399b</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/identify/issues/529">#529</a>
from pre-commit/pre-commit-ci-update-config</li>
<li><a
href="https://github.com/pre-commit/identify/commit/1097f76716bf2c93d86fea0e802c8c19df471c5c"><code>1097f76</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/pre-commit/identify/commit/bbfa5787afa5dce7508f4d91fea70fa1fb6b3dd8"><code>bbfa578</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/identify/issues/528">#528</a>
from pre-commit/pre-commit-ci-update-config</li>
<li><a
href="https://github.com/pre-commit/identify/commit/536d75194e326b7bdb6c5d6e0a66a6658d4a98ff"><code>536d751</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/pre-commit/identify/commit/e1c38fedb35173288c0b7abdabb8545e4ad46290"><code>e1c38fe</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/identify/issues/526">#526</a>
from pre-commit/pre-commit-ci-update-config</li>
<li><a
href="https://github.com/pre-commit/identify/commit/d084d035b45bdf83a9d28b64977ae4629cacf2c2"><code>d084d03</code></a>
[pre-commit.ci] pre-commit autoupdate</li>
<li><a
href="https://github.com/pre-commit/identify/commit/40af39f8124a4e8029ff3716c2b0bbf2e1e5fb1e"><code>40af39f</code></a>
Merge pull request <a
href="https://redirect.github.com/pre-commit/identify/issues/524">#524</a>
from pre-commit/pre-commit-ci-update-config</li>
<li>Additional commits viewable in <a
href="https://github.com/pre-commit/identify/compare/v2.6.12...v2.6.13">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=identify&package-manager=pip&previous-version=2.6.12&new-version=2.6.13)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements/constraints.txt | 2 +-
 requirements/dev.txt         | 2 +-
 requirements/lint.txt        | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 92c62c691d6..88d19bcb466 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -86,7 +86,7 @@ gidgethub==5.4.0
     # via cherry-picker
 gunicorn==23.0.0
     # via -r requirements/base.in
-identify==2.6.12
+identify==2.6.13
     # via pre-commit
 idna==3.6
     # via
diff --git a/requirements/dev.txt b/requirements/dev.txt
index af047b92626..7f6111dddf5 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -84,7 +84,7 @@ gidgethub==5.4.0
     # via cherry-picker
 gunicorn==23.0.0
     # via -r requirements/base.in
-identify==2.6.12
+identify==2.6.13
     # via pre-commit
 idna==3.6
     # via
diff --git a/requirements/lint.txt b/requirements/lint.txt
index c0682c41460..175b73d2f64 100644
--- a/requirements/lint.txt
+++ b/requirements/lint.txt
@@ -33,7 +33,7 @@ forbiddenfruit==0.1.4
     # via blockbuster
 freezegun==1.5.4
     # via -r requirements/lint.in
-identify==2.6.12
+identify==2.6.13
     # via pre-commit
 idna==3.7
     # via trustme

From b3bfa1ca94fcab18f2664cc68e0ed8202ff953ab Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 Aug 2025 16:26:22 +0000
Subject: [PATCH 2/5] Bump actions/checkout from 4 to 5 (#11413)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to
5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
<li>Prepare v5.0.0 release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li>
</ul>
<h2>⚠️ Minimum Compatible Runner Version</h2>
<p><strong>v2.327.1</strong><br />
<a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
Notes</a></p>
<p>Make sure your runner is updated to this version or newer to use this
release.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v5.0.0">https://github.com/actions/checkout/compare/v4...v5.0.0</a></p>
<h2>v4.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
<li>Prepare release v4.3.0 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2237">actions/checkout#2237</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/motss"><code>@​motss</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li><a href="https://github.com/mouismail"><code>@​mouismail</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li><a href="https://github.com/benwells"><code>@​benwells</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li><a href="https://github.com/nebuk89"><code>@​nebuk89</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li><a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v4.3.0">https://github.com/actions/checkout/compare/v4...v4.3.0</a></p>
<h2>v4.2.2</h2>
<h2>What's Changed</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.1...v4.2.2">https://github.com/actions/checkout/compare/v4.2.1...v4.2.2</a></p>
<h2>v4.2.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Jcambass"><code>@​Jcambass</code></a>
made their first contribution in <a
href="https://redirect.github.com/actions/checkout/pull/1919">actions/checkout#1919</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4.2.0...v4.2.1">https://github.com/actions/checkout/compare/v4.2.0...v4.2.1</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/blob/main/CHANGELOG.md">actions/checkout's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>V5.0.0</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
</ul>
<h2>V4.3.0</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
<li>Adjust positioning of user email note and permissions heading by <a
href="https://github.com/joshmgross"><code>@​joshmgross</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2044">actions/checkout#2044</a></li>
<li>Update README.md by <a
href="https://github.com/nebuk89"><code>@​nebuk89</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2194">actions/checkout#2194</a></li>
<li>Update CODEOWNERS for actions by <a
href="https://github.com/TingluoHuang"><code>@​TingluoHuang</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2224">actions/checkout#2224</a></li>
<li>Update package dependencies by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2236">actions/checkout#2236</a></li>
</ul>
<h2>v4.2.2</h2>
<ul>
<li><code>url-helper.ts</code> now leverages well-known environment
variables by <a href="https://github.com/jww3"><code>@​jww3</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/1941">actions/checkout#1941</a></li>
<li>Expand unit test coverage for <code>isGhes</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1946">actions/checkout#1946</a></li>
</ul>
<h2>v4.2.1</h2>
<ul>
<li>Check out other refs/* by commit if provided, fall back to ref by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1924">actions/checkout#1924</a></li>
</ul>
<h2>v4.2.0</h2>
<ul>
<li>Add Ref and Commit outputs by <a
href="https://github.com/lucacome"><code>@​lucacome</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1180">actions/checkout#1180</a></li>
<li>Dependency updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>- <a
href="https://redirect.github.com/actions/checkout/pull/1777">actions/checkout#1777</a>,
<a
href="https://redirect.github.com/actions/checkout/pull/1872">actions/checkout#1872</a></li>
</ul>
<h2>v4.1.7</h2>
<ul>
<li>Bump the minor-npm-dependencies group across 1 directory with 4
updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1739">actions/checkout#1739</a></li>
<li>Bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1697">actions/checkout#1697</a></li>
<li>Check out other refs/* by commit by <a
href="https://github.com/orhantoy"><code>@​orhantoy</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1774">actions/checkout#1774</a></li>
<li>Pin actions/checkout's own workflows to a known, good, stable
version. by <a href="https://github.com/jww3"><code>@​jww3</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1776">actions/checkout#1776</a></li>
</ul>
<h2>v4.1.6</h2>
<ul>
<li>Check platform to set archive extension appropriately by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1732">actions/checkout#1732</a></li>
</ul>
<h2>v4.1.5</h2>
<ul>
<li>Update NPM dependencies by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1703">actions/checkout#1703</a></li>
<li>Bump github/codeql-action from 2 to 3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1694">actions/checkout#1694</a></li>
<li>Bump actions/setup-node from 1 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1696">actions/checkout#1696</a></li>
<li>Bump actions/upload-artifact from 2 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1695">actions/checkout#1695</a></li>
<li>README: Suggest <code>user.email</code> to be
<code>41898282+github-actions[bot]@users.noreply.github.com</code> by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1707">actions/checkout#1707</a></li>
</ul>
<h2>v4.1.4</h2>
<ul>
<li>Disable <code>extensions.worktreeConfig</code> when disabling
<code>sparse-checkout</code> by <a
href="https://github.com/jww3"><code>@​jww3</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1692">actions/checkout#1692</a></li>
<li>Add dependabot config by <a
href="https://github.com/cory-miller"><code>@​cory-miller</code></a> in
<a
href="https://redirect.github.com/actions/checkout/pull/1688">actions/checkout#1688</a></li>
<li>Bump the minor-actions-dependencies group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1693">actions/checkout#1693</a></li>
<li>Bump word-wrap from 1.2.3 to 1.2.5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1643">actions/checkout#1643</a></li>
</ul>
<h2>v4.1.3</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/actions/checkout/commit/08c6903cd8c0fde910a37f88322edcfb5dd907a8"><code>08c6903</code></a>
Prepare v5.0.0 release (<a
href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li>
<li><a
href="https://github.com/actions/checkout/commit/9f265659d3bb64ab1440b03b12f4d47a24320917"><code>9f26565</code></a>
Update actions checkout to use node 24 (<a
href="https://redirect.github.com/actions/checkout/issues/2226">#2226</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/checkout/compare/v4...v5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 .github/workflows/ci-cd.yml             | 14 +++++++-------
 .github/workflows/codeql.yml            |  2 +-
 .github/workflows/update-pre-commit.yml |  2 +-
 3 files changed, 9 insertions(+), 9 deletions(-)

diff --git a/.github/workflows/ci-cd.yml b/.github/workflows/ci-cd.yml
index 78dcc99b6cf..bc021ccf184 100644
--- a/.github/workflows/ci-cd.yml
+++ b/.github/workflows/ci-cd.yml
@@ -36,7 +36,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         submodules: true
     - name: >-
@@ -105,7 +105,7 @@ jobs:
     timeout-minutes: 5
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         submodules: true
     - name: Cache llhttp generated files
@@ -161,7 +161,7 @@ jobs:
     continue-on-error: ${{ matrix.experimental }}
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         submodules: true
     - name: Setup Python ${{ matrix.pyver }}
@@ -260,7 +260,7 @@ jobs:
     timeout-minutes: 9
     steps:
     - name: Checkout project
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         submodules: true
     - name: Setup Python 3.13.2
@@ -328,7 +328,7 @@ jobs:
     needs: pre-deploy
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         submodules: true
     - name: Setup Python
@@ -395,7 +395,7 @@ jobs:
           musl: musllinux
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         submodules: true
     - name: Set up QEMU
@@ -466,7 +466,7 @@ jobs:
 
     steps:
     - name: Checkout
-      uses: actions/checkout@v4
+      uses: actions/checkout@v5
       with:
         submodules: true
     - name: Login
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 601d45a35ad..be954079132 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -26,7 +26,7 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v5
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v3
diff --git a/.github/workflows/update-pre-commit.yml b/.github/workflows/update-pre-commit.yml
index 85cd5cf4d8e..e2426524529 100644
--- a/.github/workflows/update-pre-commit.yml
+++ b/.github/workflows/update-pre-commit.yml
@@ -8,7 +8,7 @@ jobs:
     if: github.repository_owner == 'aiohttp'
     runs-on: ubuntu-latest
     steps:
-    - uses: actions/checkout@v4
+    - uses: actions/checkout@v5
     - name: Set up Python
       uses: actions/setup-python@v5
       with:

From 9da32417e4a55d23720856df0fabab16ba2b2307 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 Aug 2025 16:41:29 +0000
Subject: [PATCH 3/5] Bump multidict from 6.6.3 to 6.6.4 (#11415)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [multidict](https://github.com/aio-libs/multidict) from 6.6.3 to
6.6.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/multidict/releases">multidict's
releases</a>.</em></p>
<blockquote>
<h2>6.6.4</h2>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed <code>MutliDict</code> &amp; <code>CIMultiDict</code> memory
leak when deleting values or clearing them
-- by :user:<code>Vizonex</code></p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/multidict/issues/1233">#1233</a>.</p>
</li>
</ul>
<h2>Contributor-facing changes</h2>
<ul>
<li>
<p>The type preciseness coverage report generated by <code>MyPy
&lt;https://mypy-lang.org&gt;</code>__ is now uploaded to
<code>Coveralls
&lt;https://coveralls.io/github/aio-libs/multidict&gt;</code>__ and
will not be included in the <code>Codecov views
&lt;https://app.codecov.io/gh/aio-libs/multidict&gt;</code>__ going
forward
-- by :user:<code>webknjaz</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/multidict/issues/1122">#1122</a>,
<a
href="https://redirect.github.com/aio-libs/multidict/issues/1231">#1231</a>.</p>
</li>
<li>
<p>Added memory leak test for popping or deleting attributes from a
multidict to prevent future issues or bogus claims.
-- by :user:<code>Vizonex</code></p>
<p><em>Related issues and pull requests on GitHub:</em>
<a
href="https://redirect.github.com/aio-libs/multidict/issues/1233">#1233</a>.</p>
</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aio-libs/multidict/blob/master/CHANGES.rst">multidict's
changelog</a>.</em></p>
<blockquote>
<h1>6.6.4</h1>
<p><em>(2025-08-11)</em></p>
<h2>Bug fixes</h2>
<ul>
<li>
<p>Fixed <code>MutliDict</code> &amp; <code>CIMultiDict</code> memory
leak when deleting values or clearing them
-- by :user:<code>Vizonex</code></p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1233</code>.</p>
</li>
</ul>
<h2>Contributor-facing changes</h2>
<ul>
<li>
<p>The type preciseness coverage report generated by <code>MyPy
&lt;https://mypy-lang.org&gt;</code>__ is now uploaded to
<code>Coveralls
&lt;https://coveralls.io/github/aio-libs/multidict&gt;</code>__ and
will not be included in the <code>Codecov views
&lt;https://app.codecov.io/gh/aio-libs/multidict&gt;</code>__ going
forward
-- by :user:<code>webknjaz</code>.</p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1122</code>, :issue:<code>1231</code>.</p>
</li>
<li>
<p>Added memory leak test for popping or deleting attributes from a
multidict to prevent future issues or bogus claims.
-- by :user:<code>Vizonex</code></p>
<p><em>Related issues and pull requests on GitHub:</em>
:issue:<code>1233</code>.</p>
</li>
</ul>
<hr />
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aio-libs/multidict/commit/e0e61c28e9f66efcdce01cde9d6772518f6e9224"><code>e0e61c2</code></a>
Release 6.6.4 (<a
href="https://redirect.github.com/aio-libs/multidict/issues/1234">#1234</a>)</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/820631f83e976d294c450c9f1d3aa6666857cce0"><code>820631f</code></a>
Fix Memory leaks and add tests to prevent memory leaks during md_clear
from p...</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/00e3803fd6edb599de926c0870836c252f4152e9"><code>00e3803</code></a>
Merge branch 'maintenance/1122-coveralls-mypy'</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/736f1797fd9981ace6b553472ef5eabc2d6ddbc3"><code>736f179</code></a>
📝 Add a change note for PR <a
href="https://redirect.github.com/aio-libs/multidict/issues/1231">#1231</a></li>
<li><a
href="https://github.com/aio-libs/multidict/commit/19f085e90e681d2ebaa6d15bf3ebfa78251987e4"><code>19f085e</code></a>
🩹 Drop MyPy 3.9 ref from the linters workflow</li>
<li><a
href="https://github.com/aio-libs/multidict/commit/97ce0edf25b227feb23d1c7cf35bf14d29eceb1f"><code>97ce0ed</code></a>
Move reporting MyPy type preciseness to Coveralls</li>
<li>See full diff in <a
href="https://github.com/aio-libs/multidict/compare/v6.6.3...v6.6.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=multidict&package-manager=pip&previous-version=6.6.3&new-version=6.6.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements/base.txt         | 2 +-
 requirements/constraints.txt  | 2 +-
 requirements/cython.txt       | 4 ++--
 requirements/dev.txt          | 2 +-
 requirements/multidict.txt    | 2 +-
 requirements/runtime-deps.txt | 2 +-
 requirements/test.txt         | 2 +-
 7 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/requirements/base.txt b/requirements/base.txt
index 3faddb12da8..2b4d315e33f 100644
--- a/requirements/base.txt
+++ b/requirements/base.txt
@@ -24,7 +24,7 @@ gunicorn==23.0.0
     # via -r requirements/base.in
 idna==3.6
     # via yarl
-multidict==6.6.3
+multidict==6.6.4
     # via
     #   -r requirements/runtime-deps.in
     #   yarl
diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 88d19bcb466..81444bd9b27 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -113,7 +113,7 @@ markupsafe==3.0.2
     # via jinja2
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.6.3
+multidict==6.6.4
     # via
     #   -r requirements/multidict.in
     #   -r requirements/runtime-deps.in
diff --git a/requirements/cython.txt b/requirements/cython.txt
index 39257b77599..b80de4842de 100644
--- a/requirements/cython.txt
+++ b/requirements/cython.txt
@@ -6,7 +6,7 @@
 #
 cython==3.1.2
     # via -r requirements/cython.in
-multidict==6.6.3
-    # via -r /home/dependabot/dependabot-updater/tmp/20250715-1382-lngh7e/dependabot_20250715-1382-a7k872/requirements/multidict.in
+multidict==6.6.4
+    # via -r requirements/multidict.in
 typing-extensions==4.14.1
     # via multidict
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 7f6111dddf5..7e0b0f8d351 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -111,7 +111,7 @@ markupsafe==3.0.2
     # via jinja2
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.6.3
+multidict==6.6.4
     # via
     #   -r requirements/runtime-deps.in
     #   yarl
diff --git a/requirements/multidict.txt b/requirements/multidict.txt
index 6f90d5c4c34..8330b558883 100644
--- a/requirements/multidict.txt
+++ b/requirements/multidict.txt
@@ -4,7 +4,7 @@
 #
 #    pip-compile --allow-unsafe --output-file=requirements/multidict.txt --resolver=backtracking --strip-extras requirements/multidict.in
 #
-multidict==6.6.3
+multidict==6.6.4
     # via -r requirements/multidict.in
 typing-extensions==4.14.1
     # via multidict
diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt
index 327fae9055b..3cbcc7e0f11 100644
--- a/requirements/runtime-deps.txt
+++ b/requirements/runtime-deps.txt
@@ -22,7 +22,7 @@ frozenlist==1.7.0
     #   aiosignal
 idna==3.6
     # via yarl
-multidict==6.6.3
+multidict==6.6.4
     # via
     #   -r requirements/runtime-deps.in
     #   yarl
diff --git a/requirements/test.txt b/requirements/test.txt
index 7bfa1c7a195..112a974b1e3 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -57,7 +57,7 @@ markdown-it-py==3.0.0
     # via rich
 mdurl==0.1.2
     # via markdown-it-py
-multidict==6.6.3
+multidict==6.6.4
     # via
     #   -r requirements/runtime-deps.in
     #   yarl

From 628685cb5ef993fb5c2309ab4a73431d7fa80d24 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 Aug 2025 16:45:41 +0000
Subject: [PATCH 4/5] Bump coverage from 7.10.2 to 7.10.3 (#11416)
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Bumps [coverage](https://github.com/nedbat/coveragepy) from 7.10.2 to
7.10.3.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/nedbat/coveragepy/blob/master/CHANGES.rst">coverage's
changelog</a>.</em></p>
<blockquote>
<h2>Version 7.10.3 — 2025-08-10</h2>
<ul>
<li>
<p>Fixes for <code>patch = subprocess</code>:</p>
<ul>
<li>
<p>If subprocesses spawned yet more subprocesses simultaneously, some
coverage
could be missed. This is now fixed, closing <code>issue
2024</code>_.</p>
</li>
<li>
<p>If subprocesses were created in other directories, their data files
were
stranded there and not combined into the totals, as described in
<code>issue 2025</code>_. This is now fixed.</p>
</li>
<li>
<p>On Windows (or maybe only some Windows?) the patch would fail with a
<code>ModuleNotFound</code> error trying to import coverage. This is now
fixed,
closing <code>issue 2022</code>_.</p>
</li>
<li>
<p>Originally only options set in the coverage configuration file would
apply
to subprocesses. Options set on the <code>coverage run</code> command
line (such as
<code>--branch</code>) wouldn't be communicated to the subprocesses.
This could
lead to combining failures, as described in <code>issue 2021</code>_.
Now the entire
configuration is used in subprocesses, regardless of its origin.</p>
</li>
<li>
<p>Added <code>debug=patch</code> to help diagnose problems.</p>
</li>
</ul>
</li>
<li>
<p>Fix: really close all SQLite databases, even in-memory ones. Closes
<code>issue 2017</code>_.</p>
</li>
</ul>
<p>.. _issue 2017: <a
href="https://redirect.github.com/nedbat/coveragepy/issues/2017">nedbat/coveragepy#2017</a>
.. _issue 2021: <a
href="https://redirect.github.com/nedbat/coveragepy/issues/2021">nedbat/coveragepy#2021</a>
.. _issue 2022: <a
href="https://redirect.github.com/nedbat/coveragepy/issues/2022">nedbat/coveragepy#2022</a>
.. _issue 2024: <a
href="https://redirect.github.com/nedbat/coveragepy/issues/2024">nedbat/coveragepy#2024</a>
.. _issue 2025: <a
href="https://redirect.github.com/nedbat/coveragepy/issues/2025">nedbat/coveragepy#2025</a></p>
<p>.. _changes_7-10-2:</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/nedbat/coveragepy/commit/0691ce5d08ae2eb6cae51f879ffe609aeb14d221"><code>0691ce5</code></a>
docs: sample HTML for 7.10.3</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/34c9aca951d2c89ab0af5343a9a1c5cc7b00aefd"><code>34c9aca</code></a>
docs: prep for 7.10.3</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/fd83f218e21058f43c7544a3cb01ce84714965f7"><code>fd83f21</code></a>
style: lists for homogenous collections</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/d9618002dde634898613f5935092cefbb29035f0"><code>d961800</code></a>
docs: remove an unused reference</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/697d4bb3950b31dc7f5d39d9dcf67fabde9db241"><code>697d4bb</code></a>
fix: subprocesses inherit the entire configuration. <a
href="https://redirect.github.com/nedbat/coveragepy/issues/2021">#2021</a></li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/b6db3b7e52e4820bd1d3e43b29f700a5f31f3937"><code>b6db3b7</code></a>
build: show the total during local metacov</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/cfbceb584b18f87fdc6228fc4a8202d789e030cc"><code>cfbceb5</code></a>
docs: reverted <a
href="https://redirect.github.com/nedbat/coveragepy/issues/2018">#2018</a></li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/264bbd3d2c2ee9eca32248c5874423c0b6ff6287"><code>264bbd3</code></a>
refactor: more patch logging</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/3ecdfafc74bd2b007b561e6ac6b080c04e598b06"><code>3ecdfaf</code></a>
chore: bump the action-dependencies group with 2 updates (<a
href="https://redirect.github.com/nedbat/coveragepy/issues/2026">#2026</a>)</li>
<li><a
href="https://github.com/nedbat/coveragepy/commit/41a225698710c9005da822978930be69312d1676"><code>41a2256</code></a>
fix: revert &quot;thread safe resume (<a
href="https://redirect.github.com/nedbat/coveragepy/issues/2018">#2018</a>)&quot;
(<a
href="https://redirect.github.com/nedbat/coveragepy/issues/2027">#2027</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/nedbat/coveragepy/compare/7.10.2...7.10.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=coverage&package-manager=pip&previous-version=7.10.2&new-version=7.10.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements/constraints.txt | 2 +-
 requirements/dev.txt         | 2 +-
 requirements/test.txt        | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index 81444bd9b27..a6d8a1c7c4f 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -52,7 +52,7 @@ click==8.1.8
     #   slotscheck
     #   towncrier
     #   wait-for-it
-coverage==7.10.2
+coverage==7.10.3
     # via
     #   -r requirements/test.in
     #   pytest-cov
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 7e0b0f8d351..36f6dcbd6ea 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -52,7 +52,7 @@ click==8.1.8
     #   slotscheck
     #   towncrier
     #   wait-for-it
-coverage==7.10.2
+coverage==7.10.3
     # via
     #   -r requirements/test.in
     #   pytest-cov
diff --git a/requirements/test.txt b/requirements/test.txt
index 112a974b1e3..8a4a5388823 100644
--- a/requirements/test.txt
+++ b/requirements/test.txt
@@ -25,7 +25,7 @@ cffi==1.17.1
     #   pytest-codspeed
 click==8.1.8
     # via wait-for-it
-coverage==7.10.2
+coverage==7.10.3
     # via
     #   -r requirements/test.in
     #   pytest-cov

From a31e990ded2cb08f9c759a731f6e0e13c41a0ac5 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Tue, 12 Aug 2025 16:49:10 +0000
Subject: [PATCH 5/5] Bump charset-normalizer from 3.4.2 to 3.4.3 (#11417)

Bumps [charset-normalizer](https://github.com/jawah/charset_normalizer)
from 3.4.2 to 3.4.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jawah/charset_normalizer/releases">charset-normalizer's
releases</a>.</em></p>
<blockquote>
<h2>Version 3.4.3</h2>
<h2><a
href="https://github.com/Ousret/charset_normalizer/compare/3.4.2...3.4.3">3.4.3</a>
(2025-08-09)</h2>
<h3>Changed</h3>
<ul>
<li>mypy(c) is no longer a required dependency at build time if
<code>CHARSET_NORMALIZER_USE_MYPYC</code> isn't set to <code>1</code>.
(<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/595">#595</a>)
(<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/583">#583</a>)</li>
<li>automatically lower confidence on small bytes samples that are not
Unicode in <code>detect</code> output legacy function. (<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/391">#391</a>)</li>
</ul>
<h3>Added</h3>
<ul>
<li>Custom build backend to overcome inability to mark mypy as an
optional dependency in the build phase.</li>
<li>Support for Python 3.14</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>sdist archive contained useless directories.</li>
<li>automatically fallback on valid UTF-16 or UTF-32 even if the md says
it's noisy. (<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/633">#633</a>)</li>
</ul>
<h3>Misc</h3>
<ul>
<li>SBOM are automatically published to the relevant GitHub release to
comply with regulatory changes.
Each published wheel comes with its SBOM. We choose CycloneDX as the
format.</li>
<li>Prebuilt optimized wheel are no longer distributed by default for
CPython 3.7 due to a change in cibuildwheel.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md">charset-normalizer's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/Ousret/charset_normalizer/compare/3.4.2...3.4.3">3.4.3</a>
(2025-08-09)</h2>
<h3>Changed</h3>
<ul>
<li>mypy(c) is no longer a required dependency at build time if
<code>CHARSET_NORMALIZER_USE_MYPYC</code> isn't set to <code>1</code>.
(<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/595">#595</a>)
(<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/583">#583</a>)</li>
<li>automatically lower confidence on small bytes samples that are not
Unicode in <code>detect</code> output legacy function. (<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/391">#391</a>)</li>
</ul>
<h3>Added</h3>
<ul>
<li>Custom build backend to overcome inability to mark mypy as an
optional dependency in the build phase.</li>
<li>Support for Python 3.14</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>sdist archive contained useless directories.</li>
<li>automatically fallback on valid UTF-16 or UTF-32 even if the md says
it's noisy. (<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/633">#633</a>)</li>
</ul>
<h3>Misc</h3>
<ul>
<li>SBOM are automatically published to the relevant GitHub release to
comply with regulatory changes.
Each published wheel comes with its SBOM. We choose CycloneDX as the
format.</li>
<li>Prebuilt optimized wheel are no longer distributed by default for
CPython 3.7 due to a change in cibuildwheel.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/46f662da20edeced520c8819965a37eefbbc85de"><code>46f662d</code></a>
Release 3.4.3 (<a
href="https://redirect.github.com/jawah/charset_normalizer/issues/638">#638</a>)</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/1a059b26c155dd5fca408b0e0145c930633c4bf2"><code>1a059b2</code></a>
:wrench: skip building on freethreaded as we're not confident it is
stable</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/2275e3d3fea2bf6232661f1e9c21e7b81428e2a6"><code>2275e3d</code></a>
:pencil: final note in CHANGELOG.md</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/c96acdfdb34b5b1deb6f70803167bae89b209832"><code>c96acdf</code></a>
:pencil: update release date on CHANGELOG.md</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/43e5460518003df24ad1a3e7b5c0a34445395012"><code>43e5460</code></a>
:pencil: update README.md</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/f277074e281a070cfa64fc91c46f8291043fc37c"><code>f277074</code></a>
:wrench: automatically lower confidence on small bytes str on non
Unicode res...</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/15ae2411072b5e026f2c9d6ec81b55f75af7dcf2"><code>15ae241</code></a>
:bug: automatically fallback on valid UTF-16 or UTF-32 even if the md
says it...</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/37397c1799a05454ab42fbbc94a7643cdb277924"><code>37397c1</code></a>
:wrench: enable 3.14 in nox test_mypyc session</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/cb82537ecad195f48383b92e330351cea1fc6bc8"><code>cb82537</code></a>
:rewind: revert license due to compat python 3.7 issue setuptools</li>
<li><a
href="https://github.com/jawah/charset_normalizer/commit/6a2efeb4c6e205964b61008b0c36ddf88c321543"><code>6a2efeb</code></a>
:art: fix linter errors</li>
<li>Additional commits viewable in <a
href="https://github.com/jawah/charset_normalizer/compare/3.4.2...3.4.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=charset-normalizer&package-manager=pip&previous-version=3.4.2&new-version=3.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
---
 requirements/constraints.txt  | 2 +-
 requirements/dev.txt          | 2 +-
 requirements/doc-spelling.txt | 2 +-
 requirements/doc.txt          | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/requirements/constraints.txt b/requirements/constraints.txt
index a6d8a1c7c4f..d4019dc6c6b 100644
--- a/requirements/constraints.txt
+++ b/requirements/constraints.txt
@@ -41,7 +41,7 @@ cffi==1.17.1
     #   pytest-codspeed
 cfgv==3.4.0
     # via pre-commit
-charset-normalizer==3.4.2
+charset-normalizer==3.4.3
     # via requests
 cherry-picker==2.5.0
     # via -r requirements/dev.in
diff --git a/requirements/dev.txt b/requirements/dev.txt
index 36f6dcbd6ea..687e8788b42 100644
--- a/requirements/dev.txt
+++ b/requirements/dev.txt
@@ -41,7 +41,7 @@ cffi==1.17.1
     #   pytest-codspeed
 cfgv==3.4.0
     # via pre-commit
-charset-normalizer==3.4.2
+charset-normalizer==3.4.3
     # via requests
 cherry-picker==2.5.0
     # via -r requirements/dev.in
diff --git a/requirements/doc-spelling.txt b/requirements/doc-spelling.txt
index f5326b51507..6fe7bbc9f3d 100644
--- a/requirements/doc-spelling.txt
+++ b/requirements/doc-spelling.txt
@@ -12,7 +12,7 @@ babel==2.17.0
     # via sphinx
 certifi==2025.8.3
     # via requests
-charset-normalizer==3.4.2
+charset-normalizer==3.4.3
     # via requests
 click==8.1.8
     # via towncrier
diff --git a/requirements/doc.txt b/requirements/doc.txt
index e4f88bcda19..901551e0bf5 100644
--- a/requirements/doc.txt
+++ b/requirements/doc.txt
@@ -12,7 +12,7 @@ babel==2.17.0
     # via sphinx
 certifi==2025.8.3
     # via requests
-charset-normalizer==3.4.2
+charset-normalizer==3.4.3
     # via requests
 click==8.1.8
     # via towncrier