Bump the python group with 13 updates #808

dependabot · 2025-10-01T19:04:49Z

Bumps the python group with 13 updates:

Package	From	To
cffi	`1.17.1`	`2.0.0`
cryptography	`45.0.6`	`46.0.1`
jsonschema-specifications	`2025.4.1`	`2025.9.1`
pycparser	`2.22`	`2.23`
pygithub	`2.7.0`	`2.8.1`
pynacl	`1.5.0`	`1.6.0`
rpds-py	`0.27.0`	`0.27.1`
typing-extensions	`4.14.1`	`4.15.0`
zstandard	`0.24.0`	`0.25.0`
mypy	`1.17.1`	`1.18.1`
ruff	`0.12.9`	`0.13.0`
types-jsonschema	`4.25.0.20250809`	`4.25.1.20250822`
types-pyyaml	`6.0.12.20250809`	`6.0.12.20250915`

Updates cffi from 1.17.1 to 2.0.0

Release notes

Sourced from cffi's releases.

v2.0.0

What's Changed

Add Python 3.14 support.

Add CPython free-threaded support (3.14t+ only) - huge thanks to the folks at Quansight Labs for all the work to get this one sorted!

Drop Python <= 3.8 support.

Fix order dependency affecting nested type size calculation (#148).

Full Changelog: python-cffi/cffi@v1.17.1...v2.0.0

v2.0.0b1

What's Changed

Add Python 3.14 support.

Add CPython free-threaded support (3.14t+ only).

Drop Python <= 3.8 support.

Fix order dependency affecting nested type size calculation (#148).

Full Changelog: python-cffi/cffi@v1.17.1...v2.0.0b1

Commits

6366c01 release 2.0.0 (#196)
95c8476 2.0.0 post beta backports (#195)
195cbda Release 2.0.0b1 (#183)
b4bbe79 fix version test to support beta
7ed073d Add support for the free-threaded build (#178)
67a170d Change the license from MIT to MIT-no-attribution, which is the same without ...
92645ec Add Python 3.14 support/testing (#177)
2b81170 doc: update test commands in Section Testing/development tips (#158)
25172b8 doc: update year (#153)
b57a92c issue 147: force-compute nested structs before parent structs. Occurs mainly...
Additional commits viewable in compare view

Updates cryptography from 45.0.6 to 46.0.1

Changelog

Sourced from cryptography's changelog.

46.0.1 - 2025-09-16
* Fixed an issue where users installing via ``pip`` on Python 3.14 development
  versions would not properly install a dependency.
* Fixed an issue building the free-threaded macOS 3.14 wheels.
.. _v46-0-0:
46.0.0 - 2025-09-16
BACKWARDS INCOMPATIBLE: Support for Python 3.7 has been removed.

Support for OpenSSL < 3.0 is deprecated and will be removed in the next release.

Support for x86_64 macOS (including publishing wheels) is deprecated and will be removed in two releases. We will switch to publishing an arm64 only wheel for macOS.

Support for 32-bit Windows (including publishing wheels) is deprecated and will be removed in two releases. Users should move to a 64-bit Python installation.

Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 3.5.3.

We now build ppc64le manylinux wheels and publish them to PyPI.

We now build win_arm64 (Windows on Arm) wheels and publish them to PyPI.

Added support for free-threaded Python 3.14.

Removed the deprecated get_attribute_for_oid method on :class:~cryptography.x509.CertificateSigningRequest. Users should use :meth:~cryptography.x509.Attributes.get_attribute_for_oid instead.

Removed the deprecated CAST5, SEED, IDEA, and Blowfish classes from the cipher module. These are still available in :doc:/hazmat/decrepit/index.

In X.509, when performing a PSS signature with a SHA-3 hash, it is now encoded with the official NIST SHA3 OID.

.. _v45-0-7:

45.0.7 - 2025-09-01
* Added a function to support an upcoming ``pyOpenSSL`` release.
.. _v45-0-6:

Commits

e735cfc release 46.0.1 (#13450)
4e457ff Explicitly specify python in mac uv build invocation (#13447)
2726efd Depend on CFFI 2.0.0 or newer on Python > 3.8 (#13448)
6223062 release 46.0.0 (#13446)
563c491 Update comment for pyopenssl-release tag (#13445)
d2f6f7f Bump downstream dependencies in CI (#13439)
e7ab02b we'll ship this with 3.5.3 why not (#13442)
0b68a4b Another pair of bump dependencies fix (#13444)
e076d08 Attempt to fix commit message for bump downstreams (#13440)
6835ce8 Put correct version bounds for pyenchant in pins (#13441)
Additional commits viewable in compare view

Updates jsonschema-specifications from 2025.4.1 to 2025.9.1

Release notes

Sourced from jsonschema-specifications's releases.

v2025.9.1

What's Changed

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#94

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#96

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#98

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#99

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#100

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#101

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#102

Bump actions/checkout from 4 to 5 by @dependabot[bot] in python-jsonschema/jsonschema-specifications#104

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#103

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#105

[pre-commit.ci] pre-commit autoupdate by @pre-commit-ci[bot] in python-jsonschema/jsonschema-specifications#106

Move 2019-09 "format" schema to correct directory by @branen in python-jsonschema/jsonschema-specifications#107

New Contributors

@branen made their first contribution in python-jsonschema/jsonschema-specifications#107

Full Changelog: python-jsonschema/jsonschema-specifications@v2025.4.1...v2025.9.1

Commits

3b84601 Update docs requirements.
5a27ff3 Merge pull request #107 from branen/relocate-misplaced-metaschema
c2e2b75 Move 2019-09 "format" schema to correct directory
e2b4d6a Merge pull request #106 from python-jsonschema/pre-commit-ci-update-config
1336f01 [pre-commit.ci] pre-commit autoupdate
9dd6369 Merge pull request #105 from python-jsonschema/pre-commit-ci-update-config
c1563ea [pre-commit.ci] pre-commit autoupdate
cbd01ef No lockfile yet.
125eafa Merge pull request #103 from python-jsonschema/pre-commit-ci-update-config
9dca87c Use the setup-uv action for uv.
Additional commits viewable in compare view

Updates pycparser from 2.22 to 2.23

Release notes

Sourced from pycparser's releases.

release_v2.23

What's Changed

Allow abstract declarator "static" (GH issue #539) by @gperciva in eliben/pycparser#545

Add support for Python 3.13 by @hugovk in eliben/pycparser#550

Add dirent and socket typedefs. by @MegaManSec in eliben/pycparser#558

Support for labels with no statement by @ignatirabo in eliben/pycparser#562

Accept empty 'case' or 'default' labels by @ignatirabo in eliben/pycparser#564

fix: preserve parentheses for statement exprs by @zawan-ila in eliben/pycparser#566

fix: hex float types by @zawan-ila in eliben/pycparser#567

Explicit error for comments, with README link by @cellularmitosis in eliben/pycparser#569

showemptyattrs option on Node.show() by @cellularmitosis in eliben/pycparser#570

Add fake typedefs for GNU Extension 128-bit integers. by @dj-wednesday in eliben/pycparser#577

Typedef for __kernel_sa_family_t in linux/socket.h by @crosser in eliben/pycparser#578

New Contributors

@gperciva made their first contribution in eliben/pycparser#545

@MegaManSec made their first contribution in eliben/pycparser#558

@ignatirabo made their first contribution in eliben/pycparser#562

@zawan-ila made their first contribution in eliben/pycparser#566

@cellularmitosis made their first contribution in eliben/pycparser#569

@dj-wednesday made their first contribution in eliben/pycparser#577

@crosser made their first contribution in eliben/pycparser#578

Full Changelog: eliben/pycparser@release_v2.22...release_v2.23

Commits

5b60167 Prepare for release 2.23
7b24736 Typedef for __kernel_sa_family_t in _fake_typedefs.h (#578)
90184f1 Add fake typedefs for GNU Extension 128-bit integers. (#577)
f04fdcd showemptyattrs option on Node.show() (#570)
156eae7 Explicit error for comments, with README link (#569)
2215299 fix: hex float types (#567)
037bd31 fix: preserve parentheses for statement exprs (#566)
9cecc09 Accept empty 'case' or 'default' labels (#564)
7ae671d Support for labels with no statement (#562)
42b5423 Add dirent and socket typedefs. (#558)
Additional commits viewable in compare view

Updates pygithub from 2.7.0 to 2.8.1

Release notes

Sourced from pygithub's releases.

v2.8.1

What's Changed

Bug Fixes

Use default type if known type is not supported by @EnricoMi in PyGithub/PyGithub#3365

Full Changelog: PyGithub/PyGithub@v2.8.0...v2.8.1

v2.8.0

What's Changed

New Features

Add self hosted runner management to Organization by @billnapier in PyGithub/PyGithub#3203

Add support to generate release notes by @mball-agathos in PyGithub/PyGithub#3022

Improvements

Fix connection pooling to improve connection performance by @chriskuehl in PyGithub/PyGithub#3289

Add Repository.get_automated_security_fixes method by @zstyblik in PyGithub/PyGithub#3303

Sync Issue class with API spec by @EnricoMi in PyGithub/PyGithub#3338

Return more union classes like NamedUser | Organization | Enterprise by @EnricoMi in PyGithub/PyGithub#3224

Sync Enterprise class with API spec by @EnricoMi in PyGithub/PyGithub#3342

Sync GitReleaseAsset class with API spec by @EnricoMi in PyGithub/PyGithub#3343

Sync many class with OpenAPI spec by @EnricoMi in PyGithub/PyGithub#3344

Point deprecation warnings to the caller code rather than inner class by @xmo-odoo in PyGithub/PyGithub#3275

Allow for repo strings in all Team repo methods by @EnricoMi in PyGithub/PyGithub#3356

Bug Fixes

Fix API path of Repository.get_git_ref by @csalerno-asml in PyGithub/PyGithub#2992

Rework redirection URL allowance check by @EnricoMi in PyGithub/PyGithub#3329

Fix GitRelease.name, deprecate GitRelease.title by @EnricoMi in PyGithub/PyGithub#3346

Remove "COMMENT" as the default event for create_review by @eddie-santos in PyGithub/PyGithub#3078

Add support for public release assets by @aolieman in PyGithub/PyGithub#3339

Fix GitHub breaking API change of maintainers in Organization.create_team by @interifter in PyGithub/PyGithub#3291

Maintenance

Minor fix to release.yml by @EnricoMi in PyGithub/PyGithub#3201

Reduce test replay data by @EnricoMi in PyGithub/PyGithub#3243

Add check to OpenAPI script to check doc-string verbs by @EnricoMi in PyGithub/PyGithub#3332

Improve apply OpenAPI schemas by @EnricoMi in PyGithub/PyGithub#3333

Add config to OpenAPI script to ignore schemas by @EnricoMi in PyGithub/PyGithub#3334

Add suggest and create method feature to OpenAPI script by @EnricoMi in PyGithub/PyGithub#3318

Fix CI OpenApi apply command by @EnricoMi in PyGithub/PyGithub#3341

Improve OpenAPI scripts by @EnricoMi in PyGithub/PyGithub#3340

Improve OpenAPI CI by @EnricoMi in PyGithub/PyGithub#3347

Rework test framework by @EnricoMi in PyGithub/PyGithub#3271

Some minor fixes to OpenAPI scripts by @EnricoMi in PyGithub/PyGithub#3350

Add manual workflow to fix auto-fixable issues by @EnricoMi in PyGithub/PyGithub#3351

Bump actions/download-artifact from 4 to 5 by @dependabot[bot] in PyGithub/PyGithub#3330

Use default per-page const in PaginatedList by @sam93210 in PyGithub/PyGithub#3039

Bump actions/setup-python from 4 to 5 by @dependabot[bot] in PyGithub/PyGithub#3283

Bump actions/checkout from 3 to 5 by @dependabot[bot] in PyGithub/PyGithub#3348

Various minor OpenAPI scripts fixes by @EnricoMi in PyGithub/PyGithub#3353

Add union class support to OpenAPI script by @EnricoMi in PyGithub/PyGithub#3354

Add github_actions label to Maintenance section by @EnricoMi in PyGithub/PyGithub#3357

Upgrade docformatter pre-commit hook by @EnricoMi in PyGithub/PyGithub#3359

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.8.1 (September 02, 2025)

Bug Fixes ^^^^^^^^^

Use default type if known type is not supported ([#3365](https://github.com/pygithub/pygithub/issues/3365) <https://github.com/PyGithub/PyGithub/pull/3365>) (40506415 <https://github.com/PyGithub/PyGithub/commit/40506415>)

Version 2.8.0 (September 02, 2025)

New Features ^^^^^^^^^^^^

Add self hosted runner management to Organization ([#3203](https://github.com/pygithub/pygithub/issues/3203) <https://github.com/PyGithub/PyGithub/pull/3203>) (4ea1c4e2 <https://github.com/PyGithub/PyGithub/commit/4ea1c4e2>)

Add support to generate release notes ([#3022](https://github.com/pygithub/pygithub/issues/3022) <https://github.com/PyGithub/PyGithub/pull/3022>) (e359b83a <https://github.com/PyGithub/PyGithub/commit/e359b83a>)

Improvements ^^^^^^^^^^^^

Fix connection pooling to improve connection performance ([#3289](https://github.com/pygithub/pygithub/issues/3289) <https://github.com/PyGithub/PyGithub/pull/3289>_)

Add Repository.get_automated_security_fixes method ([#3303](https://github.com/pygithub/pygithub/issues/3303) <https://github.com/PyGithub/PyGithub/pull/3303>) (22048d83 <https://github.com/PyGithub/PyGithub/commit/22048d83>)

Sync Issue class with API spec ([#3338](https://github.com/pygithub/pygithub/issues/3338) <https://github.com/PyGithub/PyGithub/pull/3338>) (62da467a <https://github.com/PyGithub/PyGithub/commit/62da467a>)

Return more union classes like NamedUser | Organization | Enterprise ([#3224](https://github.com/pygithub/pygithub/issues/3224) <https://github.com/PyGithub/PyGithub/pull/3224>) (aea64148 <https://github.com/PyGithub/PyGithub/commit/aea64148>)

Sync Enterprise class with API spec ([#3342](https://github.com/pygithub/pygithub/issues/3342) <https://github.com/PyGithub/PyGithub/pull/3342>) (01bb5ab1 <https://github.com/PyGithub/PyGithub/commit/01bb5ab1>)

Sync GitReleaseAsset class with API spec ([#3343](https://github.com/pygithub/pygithub/issues/3343) <https://github.com/PyGithub/PyGithub/pull/3343>) (74449fed <https://github.com/PyGithub/PyGithub/commit/74449fed>)

Sync many class with OpenAPI spec ([#3344](https://github.com/pygithub/pygithub/issues/3344) <https://github.com/PyGithub/PyGithub/pull/3344>_)

Point deprecation warnings to the caller code rather than inner class ([#3275](https://github.com/pygithub/pygithub/issues/3275) <https://github.com/PyGithub/PyGithub/pull/3275>) (99bb5270 <https://github.com/PyGithub/PyGithub/commit/99bb5270>)

Allow for repo strings in all Team repo methods ([#3356](https://github.com/pygithub/pygithub/issues/3356) <https://github.com/PyGithub/PyGithub/pull/3356>) (3234a21f <https://github.com/PyGithub/PyGithub/commit/3234a21f>)

Bug Fixes ^^^^^^^^^

Fix API path of Repository.get_git_ref ([#2992](https://github.com/pygithub/pygithub/issues/2992) <https://github.com/PyGithub/PyGithub/pull/2992>) (a6965031 <https://github.com/PyGithub/PyGithub/commit/a6965031>)

Rework redirection URL allowance check ([#3329](https://github.com/pygithub/pygithub/issues/3329) <https://github.com/PyGithub/PyGithub/pull/3329>) (065b1319 <https://github.com/PyGithub/PyGithub/commit/065b1319>)

Fix GitRelease.name, deprecate GitRelease.title ([#3346](https://github.com/pygithub/pygithub/issues/3346) <https://github.com/PyGithub/PyGithub/pull/3346>) (fb51957f <https://github.com/PyGithub/PyGithub/commit/fb51957f>)

Remove "COMMENT" as the default event for create_review ([#3078](https://github.com/pygithub/pygithub/issues/3078) <https://github.com/PyGithub/PyGithub/pull/3078>) (8494da5c <https://github.com/PyGithub/PyGithub/commit/8494da5c>)

Add support for public release assets ([#3339](https://github.com/pygithub/pygithub/issues/3339) <https://github.com/PyGithub/PyGithub/pull/3339>) (abad296e <https://github.com/PyGithub/PyGithub/commit/abad296e>)

Fix GitHub breaking API change of maintainers in Organization.create_team ([#3291](https://github.com/pygithub/pygithub/issues/3291) <https://github.com/PyGithub/PyGithub/pull/3291>) (17bc4df4 <https://github.com/PyGithub/PyGithub/commit/17bc4df4>)

Maintenance ^^^^^^^^^^^

Minor fix to release.yml ([#3201](https://github.com/pygithub/pygithub/issues/3201) <https://github.com/PyGithub/PyGithub/pull/3201>) (f1fc6e7c <https://github.com/PyGithub/PyGithub/commit/f1fc6e7c>)

Reduce test replay data ([#3243](https://github.com/pygithub/pygithub/issues/3243) <https://github.com/PyGithub/PyGithub/pull/3243>) (19426454 <https://github.com/PyGithub/PyGithub/commit/19426454>)

Add check to OpenAPI script to check doc-string verbs ([#3332](https://github.com/pygithub/pygithub/issues/3332) <https://github.com/PyGithub/PyGithub/pull/3332>) (3efde77d <https://github.com/PyGithub/PyGithub/commit/3efde77d>)

Improve apply OpenAPI schemas ([#3333](https://github.com/pygithub/pygithub/issues/3333) <https://github.com/PyGithub/PyGithub/pull/3333>) (ec189dd6 <https://github.com/PyGithub/PyGithub/commit/ec189dd6>)

Add config to OpenAPI script to ignore schemas ([#3334](https://github.com/pygithub/pygithub/issues/3334) <https://github.com/PyGithub/PyGithub/pull/3334>) (0478d33b <https://github.com/PyGithub/PyGithub/commit/0478d33b>)

Add suggest and create method feature to OpenAPI script ([#3318](https://github.com/pygithub/pygithub/issues/3318) <https://github.com/PyGithub/PyGithub/pull/3318>_)

Fix CI OpenApi apply command ([#3341](https://github.com/pygithub/pygithub/issues/3341) <https://github.com/PyGithub/PyGithub/pull/3341>) (cdc10a27 <https://github.com/PyGithub/PyGithub/commit/cdc10a27>)

Improve OpenAPI scripts ([#3340](https://github.com/pygithub/pygithub/issues/3340) <https://github.com/PyGithub/PyGithub/pull/3340>) (ad278c5f <https://github.com/PyGithub/PyGithub/commit/ad278c5f>)

Improve OpenAPI CI ([#3347](https://github.com/pygithub/pygithub/issues/3347) <https://github.com/PyGithub/PyGithub/pull/3347>) (8165bbc9 <https://github.com/PyGithub/PyGithub/commit/8165bbc9>)

Rework test framework ([#3271](https://github.com/pygithub/pygithub/issues/3271) <https://github.com/PyGithub/PyGithub/pull/3271>) (1b700187 <https://github.com/PyGithub/PyGithub/commit/1b700187>)

Some minor fixes to OpenAPI scripts ([#3350](https://github.com/pygithub/pygithub/issues/3350) <https://github.com/PyGithub/PyGithub/pull/3350>) (a813a945 <https://github.com/PyGithub/PyGithub/commit/a813a945>)

Add manual workflow to fix auto-fixable issues ([#3351](https://github.com/pygithub/pygithub/issues/3351) <https://github.com/PyGithub/PyGithub/pull/3351>) (0e6317d9 <https://github.com/PyGithub/PyGithub/commit/0e6317d9>)

... (truncated)

Commits

ecd4764 Update changelog
4050641 Use default type if known type is not supported (#3365)
18eeb26 Release 2.8.0 (#3360)
17bc4df Fix GitHub breaking API change of maintainers in Organization.create_team...
6f0d6ef Update docs on development (#3352)
12d8d10 Add warning about Checks API in doc-strings (#3229)
6ec3ca2 Upgrade docformatter pre-commit hook (#3359)
9612e61 Revert get_enterprise breaking change (#3358)
0c31f84 Add github_actions label to Maintenance section (#3357)
3234a21 Allow for repo strings in all Team repo methods (#3356)
Additional commits viewable in compare view

Updates pynacl from 1.5.0 to 1.6.0

Changelog

Sourced from pynacl's changelog.

1.6.0 (2025-09-11)

BACKWARDS INCOMPATIBLE: Removed support for Python 3.6 and 3.7.

Added support for the low level AEAD AES bindings.

Added support for crypto_core_ed25519_from_uniform.

Update libsodium to 1.0.20-stable (2025-08-27 build).

Added support for free-threaded Python 3.14.

Added support for Windows on ARM wheels.

Commits

3209bf1 release 1.6.0 (#891)
15bc45d upgrade to libsodium 1.0.20-stable 2025-08-27 build (#890)
ac958e0 fix doc mistake (#892)
593fb5e update changelog and drop support for python 3.7 (#888)
7bc6126 fix var casing in wheel builder (#889)
59f9595 Support Python 3.14 and 3.14t (#880)
2860f98 Bump actions/setup-python from 5 to 6 (#887)
b712d60 Update CI for the new staticnode location (#885)
1780489 Bump actions/checkout from 4.2.2 to 4.3.0 (#883)
e03ffee Bump actions/download-artifact from 4.3.0 to 5.0.0 (#882)
Additional commits viewable in compare view

Updates rpds-py from 0.27.0 to 0.27.1

Release notes

Sourced from rpds-py's releases.

v0.27.1

What's Changed

Include attestations in published artifacts by @EpicWink in crate-py/rpds#160

New Contributors

@EpicWink made their first contribution in crate-py/rpds#160

Full Changelog: crate-py/rpds@v0.27.0...v0.27.1

Commits

7ecc7a5 Merge pull request #165 from EpicWink/pypi-publish-subdir
ab51ff3 Download packages to subdirectory in PyPI publish CI job
d1fd8ac Merge pull request #162 from crate-py/dependabot/github_actions/astral-sh/set...
cfb1867 Merge pull request #163 from crate-py/dependabot/github_actions/github/codeql...
c29352f Merge pull request #161 from EpicWink/pypi-publish-fix-dir
21da625 Bump github/codeql-action from 3.29.10 to 3.29.11
79cbefa Bump astral-sh/setup-uv from 6.5.0 to 6.6.0
c32f229 Specify packages directory for PyPI publish action
09865d3 Tag a release.
16a674d Merge branch 'pypi-publish-action'
Additional commits viewable in compare view

Updates typing-extensions from 4.14.1 to 4.15.0

Release notes

Sourced from typing-extensions's releases.

4.15.0

No user-facing changes since 4.15.0rc1.

New features since 4.14.1:

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

4.15.0rc1

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

Changelog

Sourced from typing-extensions's changelog.

Release 4.15.0 (August 25, 2025)

No user-facing changes since 4.15.0rc1.

Release 4.15.0rc1 (August 18, 2025)

Add the @typing_extensions.disjoint_base decorator, as specified in PEP 800. Patch by Jelle Zijlstra.

Add typing_extensions.type_repr, a backport of annotationlib.type_repr, introduced in Python 3.14 (CPython PR #124551, originally by Jelle Zijlstra). Patch by Semyon Moroz.

Fix behavior of type params in typing_extensions.evaluate_forward_ref. Backport of CPython PR #137227 by Jelle Zijlstra.

Commits

9d1637e Prepare release 4.15.0 (#658)
4bd67c5 Coverage: exclude some noise (#656)
e589a26 Coverage: add detailed report to job summary (#655)
67d37fe Coverage: Implement fail_under (#654)
e9ae26f Don't delete previous coverage comment (#653)
ac80bb7 Add Coverage workflow (#623)
abaaafd Prepare release 4.15.0rc1 (#650)
9810405 Add @disjoint_base (PEP 800) (#634)
7ee9e05 Backport type_params fix from CPython (#646)
1e8eb9c Do not refer to PEP 705 as being experimental (#648)
Additional commits viewable in compare view

Updates zstandard from 0.24.0 to 0.25.0

Release notes

Sourced from zstandard's releases.

0.25.0

PyO3 Rust created upgraded from 0.24 to 0.25. (#273)

We now use Py_REFCNT(obj) instead of accessing (*obj)->ob_refcnt directly. This fixes a nogil / multi-threaded compile error. (#201, #275)

A zstandard commit to fix qsort detection on BSD operating systems has been backported. (#272)

The PYTHON_ZSTANDARD_IMPORT_POLICY environment variable now has leading and trailing whitespace stripped. Values like cffi and cffi are now equivalent to cffi.

The CI jobs for building wheels have been overhauled to always use cibuildwheel and uv (where possible). This change should be backwards compatible. But wheel building for this project has historically been fragile and there may be unwanted changes. We're optimistic that standardizing on uv (except for musllinux ppc64le and s390x where uv isn't available) will lead to more stability over time.

CI now runs tests against the wheels we distribute. Previously, we ran tests against a separate build that was theoretically identical. But the builds may have been subtly different, leading to preventable bugs in our wheels. (Enabling this test coverage did not uncover any failures.)

The pyproject.toml build backend has been switched from setuptools.build_meta:__legacy__ to setuptools.build_meta.

The setuptools build dependency has been upgraded from <69.0.0 to >=77.0.0. Modern versions of setuptools broke --config-settings=--build-option=... as part of implementing PEP 660. A workaround is to use --config-settings=--global-option=... instead. --global-option apparently is deprecated and the setuptools folks have yet to figure out how to thread config settings into setup.py invocations. (--build-option is sent to the build_wheel command but not the build_editable command.)

Python 3.14 wheels are now built with manylinux_2_28 (versus manylinux2014) for older Python versions. This may raise the minimum glibc version, effectively dropping support for Debian 8 and 9, Ubuntu 13.10 through 18.04, Fedora 19 to 28, and RHEL/Centos 7. However, in practice most platforms don't container newer glibc symbols and are still ABI compatible with manylinux2014 and glibc 2.17.

We now require cffi >= 2.0.0b on Python 3.14. <3.14 still requires 1.17. (#274)

The cffi backend is now automatically disabled for free-threaded builds on Python <3.14, as cffi didn't implement free-threaded support until the 2.0 release. (#274)

Added CI coverage for free-threaded CPython 3.13 and 3.14. We do not yet formally support free-threaded builds. (#276)

The C and Rust backends now declare the GIL as unused.

The pythoncapi_compat.h file has been upgraded to the latest version. (#278)

setup.py now depends on packaging and uses packaging.version.Version for version comparisons. This removes some deprecation warnings from usage of legacy distutils Version classes.

Relax run-time libzstd version checking in C extension from exactly 1.5.7 to >=1.5.6. (#254, #267)

C extension types now (correctly) declare their fully qualified type names

... (truncated)

Changelog

Sourced from zstandard's changelog.

0.25.0 (released 2025-09-14)

PyO3 Rust created upgraded from 0.24 to 0.25. (#273)

We now use Py_REFCNT(obj) instead of accessing (*obj)->ob_refcnt directly. This fixes a nogil / multi-threaded compile error. (#201, #275)

A zstandard commit to fix qsort detection on BSD operating systems has been backported. (#272)

The PYTHON_ZSTANDARD_IMPORT_POLICY environment variable now has leading and trailing whitespace stripped. Values like cffi and cffi are now equivalent to cffi.

The CI jobs for building wheels have been overhauled to always use cibuildwheel and uv (where possible). This change should be backwards compatible. But wheel building for this project has historically been fragile and there may be unwanted changes. We're optimistic that standardizing on uv (except for musllinux ppc64le and s390x where uv isn't available) will lead to more stability over time.

CI now runs tests against the wheels we distribute. Previously, we ran tests against a separate build that was theoretically identical. But the builds may have been subtly different, leading to preventable bugs in our wheels. (Enabling this test coverage did not uncover any failures.)

The pyproject.toml build backend has been switched from setuptools.build_meta:__legacy__ to setuptools.build_meta.

The setuptools build dependency has been upgraded from <69.0.0 to >=77.0.0. Modern versions of setuptools broke --config-settings=--build-option=... as part of implementing PEP 660. A workaround is to use --config-settings=--global-option=...`` instead. --global-optionapparently is deprecated and the setuptools folks have yet to figure out how to thread config settings intosetup.py invocations. (`--build-option is sent to the build_wheel command but not the build_editable command.)

Python 3.14 wheels are now built with manylinux_2_28 (versus manylinux2014) for older Python versions. This may raise the minimum glibc version, effectively dropping support for Debian 8 and 9, Ubuntu 13.10 through 18.04, Fedora 19 to 28, and RHEL/Centos 7. However, in practice most platforms don't container newer glibc symbols and are still ABI compatible with manylinux2014 and glibc 2.17.

We now require cffi >= 2.0.0b on Python 3.14. <3.14 still requires 1.17. (#274)

The cffi backend is now automatically disabled for free-threaded builds on Python <3.14, as cffi didn't implement free-threaded support until the 2.0 release. (#274)

Added CI coverage for free-threaded CPython 3.13 and 3.14. We do not yet formally support free-threaded builds. (#276)

The C and Rust backends now declare the GIL as unused.

The pythoncapi_compat.h file has been upgraded to the latest version. (#278)

setup.py now depends on packaging and uses packaging.version.Version for version comparisons. This removes some deprecation warnings from usage of legacy distutils Version classes.

Relax run-time libzstd version checking in C extension from exactly 1.5.7

... (truncated)

Commits

7a77a75 global: release 0.25.0
7935539 rust: cargo upgrade
bc3074c rust: update dependencies

Bumps the python group with 13 updates: | Package | From | To | | --- | --- | --- | | [cffi](https://github.com/python-cffi/cffi) | `1.17.1` | `2.0.0` | | [cryptography](https://github.com/pyca/cryptography) | `45.0.6` | `46.0.1` | | [jsonschema-specifications](https://github.com/python-jsonschema/jsonschema-specifications) | `2025.4.1` | `2025.9.1` | | [pycparser](https://github.com/eliben/pycparser) | `2.22` | `2.23` | | [pygithub](https://github.com/pygithub/pygithub) | `2.7.0` | `2.8.1` | | [pynacl](https://github.com/pyca/pynacl) | `1.5.0` | `1.6.0` | | [rpds-py](https://github.com/crate-py/rpds) | `0.27.0` | `0.27.1` | | [typing-extensions](https://github.com/python/typing_extensions) | `4.14.1` | `4.15.0` | | [zstandard](https://github.com/indygreg/python-zstandard) | `0.24.0` | `0.25.0` | | [mypy](https://github.com/python/mypy) | `1.17.1` | `1.18.1` | | [ruff](https://github.com/astral-sh/ruff) | `0.12.9` | `0.13.0` | | [types-jsonschema](https://github.com/typeshed-internal/stub_uploader) | `4.25.0.20250809` | `4.25.1.20250822` | | [types-pyyaml](https://github.com/typeshed-internal/stub_uploader) | `6.0.12.20250809` | `6.0.12.20250915` | Updates `cffi` from 1.17.1 to 2.0.0 - [Release notes](https://github.com/python-cffi/cffi/releases) - [Commits](python-cffi/cffi@v1.17.1...v2.0.0) Updates `cryptography` from 45.0.6 to 46.0.1 - [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst) - [Commits](pyca/cryptography@45.0.6...46.0.1) Updates `jsonschema-specifications` from 2025.4.1 to 2025.9.1 - [Release notes](https://github.com/python-jsonschema/jsonschema-specifications/releases) - [Commits](python-jsonschema/jsonschema-specifications@v2025.4.1...v2025.9.1) Updates `pycparser` from 2.22 to 2.23 - [Release notes](https://github.com/eliben/pycparser/releases) - [Changelog](https://github.com/eliben/pycparser/blob/main/CHANGES) - [Commits](eliben/pycparser@release_v2.22...release_v2.23) Updates `pygithub` from 2.7.0 to 2.8.1 - [Release notes](https://github.com/pygithub/pygithub/releases) - [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst) - [Commits](PyGithub/PyGithub@v2.7.0...v2.8.1) Updates `pynacl` from 1.5.0 to 1.6.0 - [Changelog](https://github.com/pyca/pynacl/blob/main/CHANGELOG.rst) - [Commits](pyca/pynacl@1.5.0...1.6.0) Updates `rpds-py` from 0.27.0 to 0.27.1 - [Release notes](https://github.com/crate-py/rpds/releases) - [Commits](crate-py/rpds@v0.27.0...v0.27.1) Updates `typing-extensions` from 4.14.1 to 4.15.0 - [Release notes](https://github.com/python/typing_extensions/releases) - [Changelog](https://github.com/python/typing_extensions/blob/main/CHANGELOG.md) - [Commits](python/typing_extensions@4.14.1...4.15.0) Updates `zstandard` from 0.24.0 to 0.25.0 - [Release notes](https://github.com/indygreg/python-zstandard/releases) - [Changelog](https://github.com/indygreg/python-zstandard/blob/main/docs/news.rst) - [Commits](indygreg/python-zstandard@0.24.0...0.25.0) Updates `mypy` from 1.17.1 to 1.18.1 - [Changelog](https://github.com/python/mypy/blob/master/CHANGELOG.md) - [Commits](python/mypy@v1.17.1...v1.18.1) Updates `ruff` from 0.12.9 to 0.13.0 - [Release notes](https://github.com/astral-sh/ruff/releases) - [Changelog](https://github.com/astral-sh/ruff/blob/main/CHANGELOG.md) - [Commits](astral-sh/ruff@0.12.9...0.13.0) Updates `types-jsonschema` from 4.25.0.20250809 to 4.25.1.20250822 - [Commits](https://github.com/typeshed-internal/stub_uploader/commits) Updates `types-pyyaml` from 6.0.12.20250809 to 6.0.12.20250915 - [Commits](https://github.com/typeshed-internal/stub_uploader/commits) --- updated-dependencies: - dependency-name: cffi dependency-version: 2.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python - dependency-name: cryptography dependency-version: 46.0.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: python - dependency-name: jsonschema-specifications dependency-version: 2025.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pycparser dependency-version: '2.23' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pygithub dependency-version: 2.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: pynacl dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: rpds-py dependency-version: 0.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: python - dependency-name: typing-extensions dependency-version: 4.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: zstandard dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: python - dependency-name: mypy dependency-version: 1.18.1 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: ruff dependency-version: 0.13.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: python - dependency-name: types-jsonschema dependency-version: 4.25.1.20250822 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python - dependency-name: types-pyyaml dependency-version: 6.0.12.20250915 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: python ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 1, 2025

zanieb merged commit 7b74774 into main Oct 27, 2025
462 of 463 checks passed

zanieb deleted the dependabot/pip/python-29adb51f22 branch October 27, 2025 14:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Uh oh!

Bump the python group with 13 updates #808

Bump the python group with 13 updates #808

Uh oh!

dependabot bot commented on behalf of github Oct 1, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Bump the python group with 13 updates #808

Bump the python group with 13 updates #808

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 1, 2025

v2.0.0

What's Changed

v2.0.0b1

What's Changed

v2025.9.1

What's Changed

New Contributors

release_v2.23

What's Changed

New Contributors

v2.8.1

What's Changed

Bug Fixes

v2.8.0

What's Changed

New Features

Improvements

Bug Fixes

Maintenance

Version 2.8.1 (September 02, 2025)

Version 2.8.0 (September 02, 2025)

1.6.0 (2025-09-11)

v0.27.1

What's Changed

New Contributors

4.15.0

4.15.0rc1

Release 4.15.0 (August 25, 2025)

Release 4.15.0rc1 (August 18, 2025)

0.25.0

0.25.0 (released 2025-09-14)

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants