Bump zope-interface from 8.0.1 to 8.6

[dependabot]

Bumps zope-interface from 8.0.1 to 8.6.

Changelog

Sourced from zope-interface's changelog.

8.6 (2026-08-20)

• Add support for Python 3.15.

8.5 (2026-05-26)

• Build and upload free-threaded (cp314t, cp315t) wheels for all platforms. Expand CI testing for free-threaded Python 3.14t from Linux-only to all platforms (macOS, Windows), and add 3.15t CI. See issue 374 <https://github.com/zopefoundation/zope.interface/issues/374>_.

• Replace all remaining PyDict_GetItem() calls in the C extension with exception-safe alternatives (PyDict_Contains, PyDict_GetItemWithError). PyDict_GetItem silently swallows exceptions from __hash__/__eq__, causing isOrExtends() to return False instead of raising TypeError for unhashable objects. Also use PyType_GetDict() on Python 3.13+ for free-threading safety when accessing the type dict. See issue 357 <https://github.com/zopefoundation/zope.interface/issues/357>_.

8.4 (2026-04-25)

• Add support for automatically building and publishing Windows/ARM64 wheels.

8.3 (2026-04-10)

• Add support for free-threaded Python 3.14t: declare Py_mod_gil_not_used in C extension, replace borrowed-reference PyDict_GetItem() with strong- reference PyDict_GetItemRef() in cache lookups, and use Py_TYPE() macro instead of direct ob_type struct access.

• Add CI testing for free-threaded Python 3.14t (Linux).

• Guard 4 unprotected PyErr_Clear() calls in the C extension with PyErr_ExceptionMatches checks, matching the pattern already used at 7 other sites in the same file. Without the guard, KeyboardInterrupt, MemoryError, and SystemExit are silently swallowed in implementedBy and providedBy. See issue 358 <https://github.com/zopefoundation/zope.interface/issues/358>_.

8.2 (2026-01-09)

... (truncated)

Commits

• 0a49a16 Prepare release 8.6
• 1a3dab7 Declare support for Python 3.15
• 79f2615 Configuring for c-code (#379)
• 1e8f7ba Upgrade pip via python -m pip in CI (#378)
• b0ddabd Back to development: 8.6
• d981d50 Preparing release 8.5
• d94554c Build and test free-threaded Python on all platforms (#375)
• c8412a2 Configuring for c-code (#376)
• df9c83f Fix tests for Python 3.15. (#373)
• 117eefa Merge pull request #364 from bluedynamics/fix-pydict-getitem-exception-swallo...
• Additional commits viewable in compare view

[cjwatson]

This is wrong; we should update the `python_version >= '3.13'" side instead. Is there some way to get dependabot to DTRT here, or should we just fix it manually and move on?

[glyph]

When I've looked into it, everything I have found has involved configuring Dependabot around a specific "dependency" named elsewhere.

https://docs.github.com/en/code-security/how-tos/secure-your-supply-chain/manage-your-dependency-security/controlling-dependencies-updated

Maybe if we put the pinned dependency in a different file, in a different location, and use the directories key to exclude a requirements-old/ directory?

[cjwatson]

I think it might also be possible to create a .python-version file, of which I found mention in dependabot/dependabot-core#1455. But this is underdocumented to the point that I wonder if things have changed since then, and I found it very difficult to track down how it actually behaves in the dependabot codebase.

[cjwatson]

Also, creating .python-version might change the behaviour of other tools for developers, I guess? This might be good or bad.