[PIP] bump the pip group with 3 updates

[dependabot]

Bumps the pip group with 3 updates: click, pyyaml and virtualenv.

Updates click from 8.2.1 to 8.3.0

Release notes

Sourced from click's releases.

8.3.0

This is the Click 8.3.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.3.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-3-0 Milestone https://github.com/pallets/click/milestone/27

• Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

  • The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)
  • Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value
  • The default parameter can now be any type (bool, None, etc.)
  • Fixes inconsistencies reported in: #1992 #2514 #2610 #3024 #3030

• Allow default to be set on Argument for nargs = -1. #2164 #3030

• Show correct auto complete value for nargs option in combination with flag option #2813

• Show correct auto complete value for nargs option in combination with flag option #2813

• Fix handling of quoted and escaped parameters in Fish autocompletion. #2995 #3013

• Lazily import shutil. #3023

• Properly forward exception information to resources registered with click.core.Context.with_resource(). #2447 #3058

• Fix regression related to EOF handling in CliRunner. #2939 #2940

8.2.2

This is the Click 8.2.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.2.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-2-2 Milestone: https://github.com/pallets/click/milestone/25

• Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables. #2952 #2956
• Fix typing issue in BadParameter and MissingParameter exceptions for the parameter param_hint that did not allow for a sequence of string where the underlying functino _join_param_hints allows for it. #2777 #2990
• Use the value of Enum choices to render their default value in help screen. #2911 #3004
• Fix completion for the Z shell (zsh) for completion items containing colons. #2703 #2846
• Don't include envvar in error hint when not configured. #2971 #2972

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.3.0

Released 2025-09-17

• Improved flag option handling: Reworked the relationship between flag_value and default parameters for better consistency:

  • The default parameter value is now preserved as-is and passed directly to CLI functions (no more unexpected transformations)
  • Exception: flag options with default=True maintain backward compatibility by defaulting to their flag_value
  • The default parameter can now be any type (bool, None, etc.)
  • Fixes inconsistencies reported in: :issue:1992 :issue:2514 :issue:2610 :issue:3024 :pr:3030

• Allow default to be set on Argument for nargs = -1. :issue:2164 :pr:3030

• Show correct auto complete value for nargs option in combination with flag option :issue:2813

• Fix handling of quoted and escaped parameters in Fish autocompletion. :issue:2995 :pr:3013

• Lazily import shutil. :pr:3023

• Properly forward exception information to resources registered with click.core.Context.with_resource(). :issue:2447 :pr:3058

• Fix regression related to EOF handling in CliRunner. :issue:2939 :pr:2940

Version 8.2.2

Released 2025-07-31

• Fix reconciliation of default, flag_value and type parameters for flag options, as well as parsing and normalization of environment variables. :issue:2952 :pr:2956
• Fix typing issue in BadParameter and MissingParameter exceptions for the parameter param_hint that did not allow for a sequence of string where the underlying function _join_param_hints allows for it. :issue:2777 :pr:2990
• Use the value of Enum choices to render their default value in help screen. Refs :issue:2911 :pr:3004
• Fix completion for the Z shell (zsh) for completion items containing colons. :issue:2703 :pr:2846
• Don't include envvar in error hint when not configured. :issue:2971 :pr:2972
• Fix a rare race in click.testing.StreamMixer's finalization that manifested as a ValueError on close in a multi-threaded test session. :issue:2993 :pr:2991

Commits

• 00fadb8 Release version 8.3.0
• 2a0e3ba testing/CliRunner: Fix regression related to EOF introduced in 262bdf0 (#2940)
• e11a1ef Merge branch 'main' into fix-cli-runner-prompt-eof-handling
• 36deba8 Forward exception information to resources registered in a context (#3058)
• f2cae7a #2447 Add summary of PR to changelog for 8.3.x
• 7c7ec36 #2447 Split resource exception handling tests in single and nested
• 92129c5 #2447 Added exception forwarding to context tests
• 555fa9b #2447 Forward exception data to exit stack when calling __exit__
• 16fe802 Add more tests on Enum rendering (#3053)
• d36de6f Add more tests on Enum rendering their item's names and not values
• Additional commits viewable in compare view

Updates pyyaml from 6.0.2 to 6.0.3

Release notes

Sourced from pyyaml's releases.

6.0.3

What's Changed

• Support for Python 3.14 and free-threading (experimental).

Full Changelog: yaml/pyyaml@6.0.2...6.0.3

Changelog

Sourced from pyyaml's changelog.

6.0.3 (2025-09-25)

• yaml/pyyaml#864 -- Support for Python 3.14 and free-threading (experimental)

Commits

• 49790e7 Release 6.0.3 (#889)
• See full diff in compare view

Updates virtualenv from 20.34.0 to 20.35.4

Release notes

Sourced from virtualenv's releases.

20.35.4

What's Changed

• release 20.35.3 by @​gaborbernat in pypa/virtualenv#2981
• fix: Prevent NameError when accessing _DISTUTILS_PATCH during file ov… by @​gracetyy in pypa/virtualenv#2982
• Upgrade pip and fix 3.15 picking old wheel by @​gaborbernat in pypa/virtualenv#2989

New Contributors

• @​gracetyy made their first contribution in pypa/virtualenv#2982

Full Changelog: pypa/virtualenv@20.35.3...20.35.4

20.35.3

What's Changed

• release 20.35.1 by @​gaborbernat in pypa/virtualenv#2976
• Revert out effort to extract discovery by @​gaborbernat in pypa/virtualenv#2978
• release 20.35.2 by @​gaborbernat in pypa/virtualenv#2980
• test_too_many_open_files fails by @​gaborbernat in pypa/virtualenv#2979

Full Changelog: pypa/virtualenv@20.35.1...20.35.3

20.35.2

What's Changed

• release 20.35.1 by @​gaborbernat in pypa/virtualenv#2976
• Revert out effort to extract discovery by @​gaborbernat in pypa/virtualenv#2978

Full Changelog: pypa/virtualenv@20.35.1...20.35.2

20.35.1

What's Changed

• release 20.34.0 by @​gaborbernat in pypa/virtualenv#2954
• refactor: Decouple discovery module by @​esafak in pypa/virtualenv#2956
• feat: ensure creation of python3.exe and python3 on Windows by @​esafak in pypa/virtualenv#2957
• fix: Use getattr for tcl/tk library paths by @​esafak in pypa/virtualenv#2945
• fix: Import fs_is_case_sensitive absolutely in py_info.py by @​esafak in pypa/virtualenv#2960
• Declare 3.14 support by @​gaborbernat in pypa/virtualenv#2970
• release 20.35.0 by @​gaborbernat in pypa/virtualenv#2971
• fix: Patch get_interpreter to handle missing cache and app_data by @​esafak in pypa/virtualenv#2974
• Fix backwards incompatible changes on PythonInfo by @​gaborbernat in pypa/virtualenv#2975

... (truncated)

Changelog

Sourced from virtualenv's changelog.

v20.35.4 (2025-10-28)

Bugfixes - 20.35.4

- Fix race condition in ``_virtualenv.py`` when file is overwritten during import, preventing ``NameError`` when ``_DISTUTILS_PATCH`` is accessed - by :user:`gracetyy`. (:issue:`2969`)
- Upgrade embedded wheels:

pip to 25.3 from 25.2 (:issue:2989)

v20.35.3 (2025-10-10)
Bugfixes - 20.35.3

• Accept RuntimeError in test_too_many_open_files, by :user:esafak (:issue:2935)

v20.35.2 (2025-10-10)

Bugfixes - 20.35.2

- Revert out changes related to the extraction of the discovery module - by :user:`gaborbernat`. (:issue:`2978`)
v20.35.1 (2025-10-09)
Bugfixes - 20.35.1

• Patch get_interpreter to handle missing cache and app_data - by :user:esafak (:issue:2972)
• Fix backwards incompatible changes to PythonInfo - by :user:gaborbernat. (:issue:2975)

v20.35.0 (2025-10-08)

Features - 20.35.0

- Add AppData and Cache protocols to discovery for decoupling - by :user:`esafak`. (:issue:`2074`)
- Ensure python3.exe and python3 on Windows for Python 3 - by :user:`esafak`. (:issue:`2774`)
Bugfixes - 20.35.0

• Replaced direct references to tcl/tk library paths with getattr - by :user:esafak (:issue:2944)
• Restore absolute import of fs_is_case_sensitive - by :user:esafak. (:issue:2955)

Commits

• 0381534 release 20.35.4
• 25207be Merge pull request #2989 from gaborbernat/bump-pip
• d593841 Merge pull request #2984 from pypa/pre-commit-ci-update-config
• f742f8d [pre-commit.ci] pre-commit autoupdate
• 0a644b0 Merge pull request #2982 from gracetyy/fix/distutils_patch
• 2b125eb refactor: fix last commit according to review feedback
• 71d5e09 [pre-commit.ci] auto fixes from pre-commit.com hooks
• fd0a834 refactor: fix last commit according to review feedback
• c5e51d4 refactor: use pytest tmp_path fixture instead of tempfile.TemporaryDirectory
• 629f7b8 Merge branch 'main' into fix/distutils_patch
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[andreclc]

LGTM