chore(deps): bump the python group across 1 directory with 11 updates

[dependabot]

Bumps the python group with 11 updates in the /tests directory:

Package	From	To
certifi	2025.4.26	2025.6.15
cryptography	45.0.3	45.0.4
google-auth	2.40.2	2.40.3
greenlet	3.2.2	3.2.3
grpcio	1.68.1	1.73.0
grpcio-tools	1.68.1	1.73.0
kubernetes	32.0.1	33.1.0
protobuf	6.30.2	6.31.1
pytest	8.3.5	8.4.0
requests	2.32.3	2.32.4
typing-extensions	4.13.2	4.14.0

Updates certifi from 2025.4.26 to 2025.6.15

Commits

• e767d59 2025.06.15 (#357)
• 3e70765 Bump actions/setup-python from 5.5.0 to 5.6.0
• 9afd2ff Bump actions/download-artifact from 4.2.1 to 4.3.0
• d7c816c remove code that's no longer required that 3.7 is our minimum (#351)
• 1899613 Declare setuptools as the build backend in pyproject.toml (#350)
• c874142 update CI for ubuntu 20.04 deprecation (#348)
• See full diff in compare view

Updates cryptography from 45.0.3 to 45.0.4

Changelog

Sourced from cryptography's changelog.

45.0.4 - 2025-06-09

* Fixed decrypting PKCS#8 files encrypted with SHA1-RC4. (This is not
  considered secure, and is supported only for backwards compatibility.)
.. _v45-0-3:

Commits

• 678c0c5 prepare for 45.0.4 release (#13058)
• See full diff in compare view

Updates google-auth from 2.40.2 to 2.40.3

Release notes

Sourced from google-auth's releases.

v2.40.3

2.40.3 (2025-06-04)

Bug Fixes

• Auth fetch token from default endpoint (#1779) (88891cc)
• Remove unnecessary call to mds service (#1769) (7c61c7d)
• Retry 504 errors (#1767) (554f967)

Changelog

Sourced from google-auth's changelog.

2.40.3 (2025-06-04)

Bug Fixes

• Auth fetch token from default endpoint (#1779) (88891cc)
• Remove unnecessary call to mds service (#1769) (7c61c7d)
• Retry 504 errors (#1767) (554f967)

Commits

• ca94ead chore(main): release 2.40.3 (#1768)
• 88891cc fix: auth fetch token from default endpoint (#1779)
• 0be91e2 Revert "fix: remove unnecessary call to mds service (#1769)" (#1777)
• 25660bc chore: update secret (#1774)
• 7c61c7d fix: remove unnecessary call to mds service (#1769)
• 554f967 fix: retry 504 errors (#1767)
• See full diff in compare view

Updates greenlet from 3.2.2 to 3.2.3

Changelog

Sourced from greenlet's changelog.

3.2.3 (2025-06-05)

• Make greenlet build and run on Python 3.14 beta 2 on Windows amd64.
• Potentially fix build on NetBSD/sparc64. See PR 447 <https://github.com/python-greenlet/greenlet/pull/447>_.

Commits

• f40c095 Preparing release 3.2.3
• f3051e0 Change log for #447
• cfbff33 Merge pull request #447 from alarixnia/sparc
• e00d0a8 Tweaking msvc.
• 0c22f32 Try adding 3.14 to make-manylinux
• c3190ab Hack around more incompatible changes in CPython for 3.14 on Windows.
• 45670b3 appveyor/3.14: Try the extern C trick. I don't actually expect this to work.
• e263d75 appveyor: Try installing 3.14b2
• 7c1d5c0 github actions: bump from 3.14b1 to 3.14b2
• 69bed96 Fix compilation on NetBSD/sparc64
• Additional commits viewable in compare view

Updates grpcio from 1.68.1 to 1.73.0

Release notes

Sourced from grpcio's releases.

Release v1.73.0

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

• [Dep] Update Protobuf to v31.0. (#39392)
• [Core] Added GPR_DISABLE_ABSEIL_SYNC. (#39562)
• [xds_override_host] pass through per-endpoint args when creating subchannels. (#39532)
• Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#39297)
• [URI] fix parsing of user_info in proxy settings. (#39004)
• [EventEngine] Fix busy loop in thread pool when shutting down. (#39258)
• [Dep] Added a flag to build with openssl instead of boringssl. (#39188)
• [EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#39079)

C++

• [OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#39554)

Python

• [Python] Pin Cython to 3.1.1. (#39609)
• [Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#39586)

Ruby

• [Ruby] add remove_unused_artifacts to opt build. (#39593)

Release v1.73.0-pre2

This is a prerelease of gRPC Core 1.73.0 (gradient).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.73.0-pre1

This is a prerelease of gRPC Core 1.73.0 (gradient).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

... (truncated)

Commits

• 95dd243 [Release] Bump version to 1.73.0 (on v1.73.x branch) (#39787)
• 9f9728c [Release] Bump version to 1.73.0-pre2 (on v1.73.x branch) (#39721)
• 481fcfd [xDS] remove env var guards for gRFCs A81, A82, and A83 (#39711)
• 5d0f2c8 Fix Python linux distribtest for aarch64_alpine target and enable for presubm...
• ce0bd2d [Release] Bump version to 1.73.0-pre1 (on v1.73.x branch) (#39643)
• 233368b [Backport][v1.73.x][Python] Fix Python Linux distribtests copy conflicts (#39...
• f71fac7 [Release] Bump core version to 48.0.0 for upcoming release (#39611)
• c19a471 [Python] Pin Cython to 3.1.1 (#39609)
• c8a7a35 [alpn] Inject ALPN Protocols from channel args (#39541)
• a58a5ff [subchannel] stop passing watcher a ref to itself (#39372)
• Additional commits viewable in compare view

Updates grpcio-tools from 1.68.1 to 1.73.0

Release notes

Sourced from grpcio-tools's releases.

Release v1.73.0

This is release 1.73.0 (gradient) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

As of this version, gRPC on MacOS & iOS will utilize Abseil's synchronization features, aligning it with other platforms. Should you encounter any issues due to this update, you can disable it by enabling GPR_DISABLE_ABSEIL_SYNC. If you do this, please report any problems by filing a bug at https://github.com/grpc/grpc.

• [Dep] Update Protobuf to v31.0. (#39392)
• [Core] Added GPR_DISABLE_ABSEIL_SYNC. (#39562)
• [xds_override_host] pass through per-endpoint args when creating subchannels. (#39532)
• Expose GRPC_OPENSSL_CLEANUP_TIMEOUT to control shutdown grace period. (#39297)
• [URI] fix parsing of user_info in proxy settings. (#39004)
• [EventEngine] Fix busy loop in thread pool when shutting down. (#39258)
• [Dep] Added a flag to build with openssl instead of boringssl. (#39188)
• [EventEngine] Cleanup: EventEngine client, listener, and dns experiments are on by default on all platforms. (#39079)

C++

• [OpenCensus] Mark OpenCensus and dependent APIs as deprecated. (#39554)

Python

• [Python] Pin Cython to 3.1.1. (#39609)
• [Python] grpc_tools: make PythonGrpcGenerator handle dot . in proto paths the same way as native Generator/PyiGenerator. (#39586)

Ruby

• [Ruby] add remove_unused_artifacts to opt build. (#39593)

Release v1.73.0-pre2

This is a prerelease of gRPC Core 1.73.0 (gradient).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This prerelease contains refinements, improvements, and bug fixes.

Release v1.73.0-pre1

This is a prerelease of gRPC Core 1.73.0 (gradient).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

... (truncated)

Commits

• 95dd243 [Release] Bump version to 1.73.0 (on v1.73.x branch) (#39787)
• 9f9728c [Release] Bump version to 1.73.0-pre2 (on v1.73.x branch) (#39721)
• 481fcfd [xDS] remove env var guards for gRFCs A81, A82, and A83 (#39711)
• 5d0f2c8 Fix Python linux distribtest for aarch64_alpine target and enable for presubm...
• ce0bd2d [Release] Bump version to 1.73.0-pre1 (on v1.73.x branch) (#39643)
• 233368b [Backport][v1.73.x][Python] Fix Python Linux distribtests copy conflicts (#39...
• f71fac7 [Release] Bump core version to 48.0.0 for upcoming release (#39611)
• c19a471 [Python] Pin Cython to 3.1.1 (#39609)
• c8a7a35 [alpn] Inject ALPN Protocols from channel args (#39541)
• a58a5ff [subchannel] stop passing watcher a ref to itself (#39372)
• Additional commits viewable in compare view

Updates kubernetes from 32.0.1 to 33.1.0

Release notes

Sourced from kubernetes's releases.

Kubernetes Python Client v33.1.0 Stable Release

Getting started:

pip install --pre --upgrade kubernetes

Or from source, download attached zip file, then

unzip client-python-v33.1.0.zip
cd client-python-v33.1.0
python setup.py install

Then follow examples in https://github.com/kubernetes-client/python/tree/release-33.0/examples

Changelog: https://github.com/kubernetes-client/python/blob/release-33.0/CHANGELOG.md

Kubernetes Python Client v33.1.0 Beta 1 Release

Getting started:

pip install --pre --upgrade kubernetes

Or from source, download attached zip file, then

unzip client-python-v33.1.0b1.zip
cd client-python-v33.1.0b1
python setup.py install

Then follow examples in https://github.com/kubernetes-client/python/tree/release-33.0/examples

Changelog: https://github.com/kubernetes-client/python/blob/release-33.0/CHANGELOG.md

Kubernetes Python Client v33.1.0 Alpha 1 Release

Getting started:

pip install --pre --upgrade kubernetes

Or from source, download attached zip file, then

unzip client-python-v33.1.0a1.zip
cd client-python-v33.1.0a1
</tr></table> 

... (truncated)

Changelog

Sourced from kubernetes's changelog.

v33.1.0

Kubernetes API Version: v1.33.1

v33.1.0b1

Kubernetes API Version: v1.33.1

v33.1.0a1

Kubernetes API Version: v1.33.1

API Change

• A new alpha feature gate, MutableCSINodeAllocatableCount, has been introduced.

  When this feature gate is enabled, the CSINode.Spec.Drivers[*].Allocatable.Count field becomes mutable, and a new field, NodeAllocatableUpdatePeriodSeconds, is available in the CSIDriver object. This allows periodic updates to a node's reported allocatable volume capacity, preventing stateful pods from becoming stuck due to outdated information that kube-scheduler relies on. (kubernetes/kubernetes#130007, @​torredil) [SIG Apps, Node, Scheduling and Storage]

• Added feature gate DRAPartitionableDevices, when enabled, Dynamic Resource Allocation support partitionable devices allocation. (kubernetes/kubernetes#130764, @​cici37) [SIG API Machinery, Architecture, Auth, CLI, Cloud Provider, Cluster Lifecycle, Instrumentation, Network, Node, Scheduling, Storage and Testing]

• Added DRA support for a "one-of" prioritized list of selection criteria to satisfy a device request in a resource claim. (kubernetes/kubernetes#128586, @​mortent) [SIG API Machinery, Apps, Etcd, Node, Scheduling and Testing]

• Added a /flagz endpoint for kubelet endpoint (kubernetes/kubernetes#128857, @​zhifei92) [SIG Architecture, Instrumentation and Node]

• Added a new tolerance field to HorizontalPodAutoscaler, overriding the cluster-wide default. Enabled via the HPAConfigurableTolerance alpha feature gate. (kubernetes/kubernetes#130797, @​jm-franc) [SIG API Machinery, Apps, Autoscaling, Etcd, Node, Scheduling and Testing]

• Added support for configuring custom stop signals with a new StopSignal container lifecycle (kubernetes/kubernetes#130556, @​sreeram-venkitesh) [SIG API Machinery, Apps, Node and Testing]

• Added support for in-place vertical scaling of Pods with sidecars (containers defined within initContainers where the restartPolicy is set to Always). (kubernetes/kubernetes#128367, @​vivzbansal) [SIG API Machinery, Apps, CLI, Node, Scheduling and Testing]

• CPUManager Policy Options support is GA (kubernetes/kubernetes#130535, @​ffromani) [SIG API Machinery, Node and Testing]

• Changed the Pod API to support hugepage resources at spec level for pod-level resources. (kubernetes/kubernetes#130577, @​KevinTMtz) [SIG Apps, CLI, Node, Scheduling, Storage and Testing]

• DRA API: The maximum number of pods that can use the same ResourceClaim is now 256 instead of 32. Downgrading a cluster where this relaxed limit is in use to Kubernetes 1.32.0 is not supported, as version 1.32.0 would refuse to update ResourceClaims with more than 32 entries in the status.reservedFor field. (kubernetes/kubernetes#129543, @​pohly) [SIG API Machinery, Node and Testing]

• DRA: CEL expressions using attribute strings exceeded the cost limit because their cost estimation was incomplete. (kubernetes/kubernetes#129661, @​pohly) [SIG Node]

• DRA: Device taints enable DRA drivers or admins to mark device as unusable, which prevents allocating them. Pods may also get evicted at runtime if a device becomes unusable, depending on the severity of the taint and whether the claim tolerates the taint. (kubernetes/kubernetes#130447, @​pohly) [SIG API Machinery, Apps, Architecture, Auth, Etcd, Instrumentation, Node, Scheduling and Testing]

• DRA: Starting Kubernetes 1.33, only users with access to an admin namespace with the kubernetes.io/dra-admin-access label are authorized to create ResourceClaim or ResourceClaimTemplate objects with the adminAccess field in this admin namespace if they want to and only they can reference these ResourceClaims or ResourceClaimTemplates in their pod or deployment specs. (kubernetes/kubernetes#130225, @​ritazh) [SIG API Machinery, Apps, Auth, Node and Testing]

• DRA: when asking for "All" devices on a node, Kubernetes <= 1.32 proceeded to schedule pods onto nodes with no devices by not allocating any devices for those pods. Kubernetes 1.33 changes that to only picking nodes which have at least one device. Users who want the "proceed with scheduling also without devices" semantic can use the upcoming prioritized list feature with one sub-request for "all" devices and a second alternative with "count: 0". (kubernetes/kubernetes#129560, @​bart0sh) [SIG API Machinery and Node]

• Expanded the on-disk kubelet credential provider configuration to allow an optional tokenAttribute field to be configured. When it is set, the kubelet will provision a token with the given audience bound to the current pod and its service account. This KSA token along with required annotations on the KSA defined in configuration will be sent to the credential provider plugin via its standard input (along with the image information that is already sent today). The KSA annotations to be sent are configurable in the kubelet credential provider configuration. (kubernetes/kubernetes#128372, @​aramase) [SIG API Machinery, Auth, Node and Testing]

• Fixed the example validation rule in godoc:

  When configuring a JWT authenticator:

  If username.expression uses 'claims.email', then 'claims.email_verified' must be used in username.expression or extra[].valueExpression or claimValidationRules[].expression. An example claim validation rule expression that matches the validation automatically applied when username.claim is set to 'email' is 'claims.?email_verified.orValue(true) == true'. By explicitly comparing the value to true, we let type-checking see the result will be a boolean, and to make sure a non-boolean email_verified claim will be caught at runtime. (kubernetes/kubernetes#130875, @​aramase) [SIG Auth and Release]

• For the InPlacePodVerticalScaling feature, the API server will no longer set the resize status to Proposed upon receiving a resize request. (kubernetes/kubernetes#130574, @​natasha41575) [SIG Apps, Node and Testing]

• Graduate the MatchLabelKeys (MismatchLabelKeys) feature in PodAffinity (PodAntiAffinity) to GA (kubernetes/kubernetes#130463, @​sanposhiho) [SIG API Machinery, Apps, Node, Scheduling and Testing]

• Graduated image volume sources to beta:

  • Allowed subPath/subPathExpr for image volumes
  • Added kubelet metrics kubelet_image_volume_requested_total, kubelet_image_volume_mounted_succeed_total and kubelet_image_volume_mounted_errors_total (kubernetes/kubernetes#130135, @​saschagrunert) [SIG API Machinery, Apps, Node and Testing]

• Implemented a new status field, .status.terminatingReplicas, for Deployments and ReplicaSets to track terminating pods. The new field is present when the DeploymentPodReplacementPolicy feature gate is enabled. (kubernetes/kubernetes#128546, @​atiratree) [SIG API Machinery, Apps and Testing]

• Implemented validation for NodeSelectorRequirement values in Kubernetes when creating pods. (kubernetes/kubernetes#128212, @​AxeZhan) [SIG Apps and Scheduling]

• Improved how the API server responds to list requests where the response format negotiates to Protobuf. List responses in Protobuf are marshalled one element at the time, drastically reducing memory needed to serve large collections. Streaming list responses can be disabled via the StreamingCollectionEncodingToProtobuf feature gate. (kubernetes/kubernetes#129407, @​serathius) [SIG API Machinery, Apps, Architecture, Auth, CLI, Cloud Provider, Network, Node, Release, Scheduling, Storage and Testing]

... (truncated)

Commits

• 8f5578e Merge pull request #2412 from yliaog/automated-release-of-33.1.0-upstream-rel...
• 5a367e9 updated compatibility matrix and maintenance status
• f00d2b7 generated client change
• 9d712b4 update changelog
• 45eb341 update version constants for 33.1.0 release
• 58551e4 Merge pull request #2408 from yliaog/automated-release-of-33.1.0b1-upstream-r...
• bd6c752 updated compatibility matrix
• de8ee89 generated client change
• fec5585 update changelog
• 78aee45 update version constants for 33.1.0b1 release
• Additional commits viewable in compare view

Updates protobuf from 6.30.2 to 6.31.1

Commits

• 74211c0 Updating version.json and repo version numbers to: 31.1
• 63fa9ab Merge pull request #21978 from shaod2/31.1-cp
• bec5b5a Add missing copts attribute (#21982)
• 96a9ef6 Fix cmake staleness test
• 3419598 Support allowing late injection of language feature set defaults from Feature...
• 0fe099a python pyi print "import datetime" for Duration/Timestamp field (#21885)
• f156008 Merge pull request #21861 from shaod2/py-cp-31
• a3921fb Add recursion depth limits to pure python
• ac94456 Merge pull request #21744 from protocolbuffers/31.x-202505141617
• f275995 Updating version.json and repo version numbers to: 31.1-dev
• Additional commits viewable in compare view

Updates pytest from 8.3.5 to 8.4.0

Release notes

Sourced from pytest's releases.

8.4.0

pytest 8.4.0 (2025-06-02)

Removals and backward incompatible breaking changes

• #11372: Async tests will now fail, instead of warning+skipping, if you don't have any suitable plugin installed.

• #12346: Tests will now fail, instead of raising a warning, if they return any value other than None.

• #12874: We dropped support for Python 3.8 following its end of life (2024-10-07).

• #12960: Test functions containing a yield now cause an explicit error. They have not been run since pytest 4.0, and were previously marked as an expected failure and deprecation warning.

  See the docs <yield tests deprecated>{.interpreted-text role="ref"} for more information.

Deprecations (removal in next major release)

• #10839: Requesting an asynchronous fixture without a [pytest_fixture_setup]{.title-ref} hook that resolves it will now give a DeprecationWarning. This most commonly happens if a sync test requests an async fixture. This should have no effect on a majority of users with async tests or fixtures using async pytest plugins, but may affect non-standard hook setups or autouse=True. For guidance on how to work around this warning see sync-test-async-fixture{.interpreted-text role="ref"}.

New features

• #11538: Added pytest.RaisesGroup{.interpreted-text role="class"} as an equivalent to pytest.raises{.interpreted-text role="func"} for expecting ExceptionGroup{.interpreted-text role="exc"}. Also adds pytest.RaisesExc{.interpreted-text role="class"} which is now the logic behind pytest.raises{.interpreted-text role="func"} and used as parameter to pytest.RaisesGroup{.interpreted-text role="class"}. RaisesGroup includes the ability to specify multiple different expected exceptions, the structure of nested exception groups, and flags for emulating except* <except_star>{.interpreted-text role="ref"}. See assert-matching-exception-groups{.interpreted-text role="ref"} and docstrings for more information.

• #12081: Added capteesys{.interpreted-text role="fixture"} to capture AND pass output to next handler set by --capture=.

• #12504: pytest.mark.xfail{.interpreted-text role="func"} now accepts pytest.RaisesGroup{.interpreted-text role="class"} for the raises parameter when you expect an exception group. You can also pass a pytest.RaisesExc{.interpreted-text role="class"} if you e.g. want to make use of the check parameter.

• #12713: New [--force-short-summary]{.title-ref} option to force condensed summary output regardless of verbosity level.

  This lets users still see condensed summary output of failures for quick reference in log files from job outputs, being especially useful if non-condensed output is very verbose.

• #12749: pytest traditionally collects classes/functions in the test module namespace even if they are imported from another file.

  For example:

  # contents of src/domain.py
  class Testament: ...
  contents of tests/test_testament.py
  from domain import Testament
  def test_testament(): ...

  In this scenario with the default options, pytest will collect the class [Testament]{.title-ref} from [tests/test_testament.py]{.title-ref} because it starts with [Test]{.title-ref}, even though in this case it is a production class being imported in the test module namespace.

  This behavior can now be prevented by setting the new collect_imported_tests{.interpreted-text role="confval"} configuration option to false, which will make pytest collect classes/functions from test files only if they are defined in that file.

... (truncated)

Commits

• 315b3ae Prepare release version 8.4.0
• 1498ba3 Merge pull request #13467 from pytest-dev/towncrier-create
• e4389ac Remove resultlog from the docs (#13465)
• 64b2301 scripts/release: add missing build to towncrier call
• 4c205cf testing/plugins_integration: update Django (#13463)
• 4dcbcc9 Merge pull request #13458 from pytest-dev/dup-param-error
• 5293016 Merge pull request #13459 from pytest-dev/pyright-minor-fixes
• 7a48181 Add pyright configuration
• 9fc6db9 pytester: avoid confusing x self parameter
• 9aa198b mark/expression: fix self -> cls
• Additional commits viewable in compare view

Updates requests from 2.32.3 to 2.32.4

Release notes

Sourced from requests's releases.

v2.32.4

2.32.4 (2025-06-10)

Security

• CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file. (#6965)

Improvements

• Numerous documentation improvements

Deprecations

• Added support for pypy 3.11 for Linux and macOS. (#6926)
• Dropped support for pypy 3.9 following its end of support. (#6926)

Changelog

Sourced from requests's changelog.

2.32.4 (2025-06-10)

Security

• CVE-2024-47081 Fixed an issue where a maliciously crafted URL and trusted environment will retrieve credentials for the wrong hostname/machine from a netrc file.

Improvements

• Numerous documentation improvements

Deprecations

• Added support for pypy 3.11 for Linux and macOS.
• Dropped support for pypy 3.9 following its end of support.

Commits

• 021dc72 Polish up release tooling for last manual release
• 821770e Bump version and add release notes for v2.32.4
• 59f8aa2 Add netrc file search information to authentication documentation (#6876)
• 5b4b64c Add more tests to prevent regression of CVE 2024 47081
• 7bc4587 Add new test to check netrc auth leak (#6962)
• 96ba401 Only use hostname to do netrc lookup instead of netloc
• 7341690 Merge pull request #6951 from tswast/patch-1
• 6716d7c remove links
• a7e1c74 Update docs/conf.py
• c799b81 docs: fix dead links to kenreitz.org
• Additional commits viewable in compare view

Updates typing-extensions from 4.13.2 to 4.14.0

Release notes

Sourced from typing-extensions's releases.

4.14.0

This release adds several new features, including experimental support for inline typed dictionaries (PEP 764) and sentinels (PEP 661), and support for changes in Python 3.14. In addition, Python 3.8 is no longer supported.

Changes since 4.14.0rc1:

• Remove __or__ and __ror__ methods from typing_extensions.Sentinel on Python versions <3.10. PEP 604 was introduced in Python 3.10, and typing_extensions does not generally attempt to backport PEP-604 methods to prior versions.
• Further update typing_extensions.evaluate_forward_ref with changes in Python 3.14.

Changes included in 4.14.0rc1:

• Drop support for Python 3.8 (including PyPy-3.8). Patch by Victorien Plot.
• Do not attempt to re-export names that have been removed from typing, anticipating the removal of typing.no_type_check_decorator in Python 3.15. Patch by Jelle Zijlstra.
• Update typing_extensions.Format, typing_extensions.evaluate_forward_ref, and typing_extensions.TypedDict to align with changes in Python 3.14. Patches by Jelle Zijlstra.
• Fix tests for Python 3.14 and 3.15. Patches by Jelle Zijlstra.

New features:

• Add support for inline typed dictionaries (PEP 764). Patch by Victorien Plot.
• Add typing_extensions.Reader and typing_extensions.Writer. Patch by Sebastian Rittau.
• Add support for sentinels (PEP 661). Patch by Victorien Plot.

4.14.0rc1

Major changes:

• Drop support for Python 3.8 (including PyPy-3.8). Patch by Victorien Plot.
• Do not attempt to re-export names that have been removed from typing, anticipating the removal of typing.no_type_check_decorator in Python 3.15. Patch by Jelle Zijlstra.
• Update typing_extensions.Format, typing_extensions.evaluate_forward_ref, and typing_extensions.TypedDict to align with changes in Python 3.14. Patches by Jelle Zijlstra.
• Fix tests for Python 3.14 and 3.15. Patches by Jelle Zijlstra.

New features:

• Add support for inline typed dictionaries (PEP 764). Patch by Victorien Plot.
• Add typing_extensions.Reader and typing_extensions.Writer. Patch by Sebastian Rittau.
• Add support for sentinels (PEP 661). Patch by

... (truncated)

Changelog

Sourced from typing-extensions's changelog.

Release 4.14.0 (June 2, 2025)

Changes since 4.14.0rc1:

• Remove __or__ and __ror__ methods from typing_extensions.Sentinel on Python versions <3.10. PEP 604 was introduced in Python 3.10, and typing_extensions does not generally attempt to backport PEP-604 methods to prior versions.
• Further update typing_extensions.evaluate_forward_ref with changes in Python 3.14.

Release 4.14.0rc1 (May 24, 2025)

• Drop support for Python 3.8 (including PyPy-3.8). Patch by Victorien Plot.
• Do not attempt to re-export names that have been removed from typing, anticipating the removal of typing.no_type_check_decorator in Python 3.15. Patch by Jelle Zijlstra.
• Update typing_extensions.Format, typing_extensions.evaluate_forward_ref, and typing_extensions.TypedDict to align with changes in Python 3.14. Patches by Jelle Zijlstra.
• Fix tests for Python 3.14 and 3.15. Patches by Jelle Zijlstra.

New features:

• Add support for inline typed dictionaries (PEP 764). Patch by Victorien Plot.
• Add typing_extensions.Reader and typing_extensions.Writer. Patch by Sebastian Rittau.
• Add support for sentinels (PEP 661). Patch by Victorien Plot.

Commits

• b07d245 Prepare release 4.14.0 (#612)
• fcf5265 Backport evaluate_forward_ref() changes (#611)
• fadc1ed Remove PEP-604 methods from Sentinel on Python <3.10 (#605)
• 44de568 Add 3.14 to project classifiers and tox.ini (#604)
• 36cc476 Prepare release 4.14.0rc1 (#603)
• ec1876c More fixes for 3.14 and 3.15 (#602)
• e89d789 Update _caller() implementation (#598)
• 34bfd84 third party: fix typeguard (#600)
• 479dae1 Add support for sentinels (PEP 661) (#594)
• f74a56a Update PEP 649/749 implementation (#596)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[pdabelf5]

pip-compile no longer will generate the requirements.txt due to a change in pip jazzband/pip-tools#2176