Bump the python-dependencies group across 1 directory with 43 updates

[dependabot]

Updates the requirements on click, robotframework, flit-core, astroid, build, certifi, charset-normalizer, check-manifest, coverage, dill, docutils, exceptiongroup, idna, importlib-metadata, iniconfig, isort, jaraco-context, jaraco-functools, keyring, markdown-it-py, more-itertools, mypy, mypy-extensions, nh3, packaging, pkginfo, platformdirs, pluggy, pygments, pylint, pytest, pytest-cov, pytest-spec, readme-renderer, requests, rich, ruff, tomli, tomlkit, twine, typing-extensions, urllib3 and zipp to permit the latest version.
Updates click from 8.1.8 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

• Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
• Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
• A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
• echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
• Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
• {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

8.4.1

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.1/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-1 Milestone: https://github.com/pallets/click/milestone/32

• get_parameter_source() is available during eager callbacks and type conversion again. #3458 #3484
• Zsh completion scripts parse correctly on Windows. #3277 # 3466
• Shell completion of Choice Enum values produces a valid completion result. #3015
• Fix empty byte-string handling in echo. #3487
• Fix closed file error with echo_via_pager. #3449

8.4.0

This is the Click 8.4.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our [Version Support Policy][version] on our website.

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

• Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
• Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
• A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
• echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
• Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
• {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

Version 8.4.1

Released 2026-05-21

• get_parameter_source() is available during eager callbacks and type conversion again. {issue}3458 {pr}3484
• Zsh completion scripts parse correctly on Windows. {issue}3277 {pr}3466
• Shell completion of Enum values used as Choice options produces a valid completion result. {issue}3015 {pr}3471
• Fix empty byte-string handling in echo. {issue}3487 {pr}3493
• Fix closed file error with echo_via_pager. {issue}3449 {pr}3482
• Fix open_url on Windows when the file path contains spaces. {issue}2994 {pr}3478

Version 8.4.0

Released 2026-05-17

• {class}ParamType typing improvements. {pr}3371

  • {class}ParamType is now a generic abstract base class,

... (truncated)

Commits

• b2e30a1 Release version 8.4.2
• 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
• bec5928 Fix package_name resolution when top-level module differs from distribution...
• 916883a Fix tests to not rely on -Wdefault option (#3591)
• 09195f6 Fix double-bracketing of choices in synopsis (#3578)
• 1557e26 Check for warning exception with idiomatic context manager
• d9ff133 Static typing improvements in click.shell_completion (#3460)
• 762c97e Fix double-bracketing of choices in synopsis
• 8929d39 Convert changes to markdown. (#3559)
• 237be50 Move changes headings down a level.
• Additional commits viewable in compare view

Updates robotframework from 6.1 to 7.4.2

Release notes

Sourced from robotframework's releases.

Robot Framework 7.4.2

Robot Framework 7.4.2 is the last planned bug fix release in the Robot Framework 7.4.x series. It contains some bug fixes as well as documentation enhancements. The most important change is the deprecation of the built-in Testdoc tool in favor of the external Testdoc tool.

For more details, see the full release notes.

Robot Framework 7.4.1

Robot Framework 7.4.1 is the first bug fix release in the Robot Framework 7.4.x series. It fixes all reported regressions in Robot Framework 7.4.

For more details, see the full release notes.

Robot Framework 7.4

Robot Framework 7.4 is a feature release with support for secret variables, typed standard library keywords, enhancements to working with bytes and various other features and fixes.

Robot Framework 7.4 was released on Friday December 12, 2025. For more information, see the full release notes.

Robot Framework 7.4 release candidate 2

Robot Framework 7.4 is a feature release with support for secret variables, typed standard library keywords, enhancements to working with bytes and various other features and fixes.

Robot Framework 7.4 release candidate 2 was released on Tuesday December 9, 2025. For more information, see the full release notes.

Robot Framework 7.4 release candidate 1

Robot Framework 7.4 is a feature release with support for secret variables, typed standard library keywords, enhancements to working with bytes and various other features and fixes.

Robot Framework 7.4 release candidate 1 was released on Tuesday December 2, 2025. For more information, see the full release notes.

Robot Framework 7.4 beta 2

Robot Framework 7.4 is a feature release with support for secret variables and various other enhancements and bug fixes. This beta release contains the majority of the planned features and it is especially targeted for users interested to test the aforementioned secret variables.

Robot Framework 7.4 beta 2 was released on Saturday November 8, 2025. For more information, see the full release notes.

Robot Framework 7.4 beta 1

Robot Framework 7.4 is a feature release with support for secret variables and various other enhancements and bug fixes. This beta release contains the majority of the planned features and it is especially targeted for users interested to test the aforementioned secret variables.

Robot Framework 7.4 beta 1 was released on Tuesday October 7, 2025. For more information see the full release notes.

Robot Framework 7.3.2

Robot Framework 7.3.2 is the second and the last planned bug fix release in the Robot Framework 7.3.x series. It fixes few regressions in earlier RF 7.3.x releases as well as some issues affecting also earlier releases.

For more details, see the full release notes.

Robot Framework 7.3.1

Robot Framework 7.3.1 is the first bug fix release in the Robot Framework 7.3.x series. It fixes all reported regressions in Robot Framework 7.3.

For more details, see the full release notes.

Robot Framework 7.3

Robot Framework 7.3 is a feature release with variable type conversion, enhancements and fixes related to timeouts, official Python 3.14 compatibility and various other exciting new features and high priority bug fixes.

Robot Framework 7.3 was released on Friday May 30, 2025. For more information see the full release notes.

... (truncated)

Commits

• b30225f Updated version to 7.4.2
• 9e9f889 Release notes for 7.4.2
• 050dd39 formatting
• 3300db1 Merge pull request #5623 from robotframework/dependabot/npm_and_yarn/src/web/...
• 0a2b0b6 Bump actions/upload-artifact from 6 to 7 (#5621)
• cbdbc58 Explicit error if importing by path and module name contains dots
• c745f0c Fix accessing NormalizedDict with non-string keys
• 7dafb73 Better name for keyword used in test
• faaf958 Bump the npm_and_yarn group across 1 directory with 2 updates
• f03e945 Cleanup
• Additional commits viewable in compare view

Updates flit-core to 4.0.2

Changelog

Sourced from flit-core's changelog.

Version 4.0.2

• Fix invalid metadata files with Import-Name (:ghissue:813).

Version 4.0.1

No changes, but a new tag to trigger an upload to PyPI now that twine will accept it.

Version 4.0

This version contains breaking changes, but most projects which are already using the [project] table for metadata shouldn't be affected, and can simply change the flit_core <4 constraint to <5.

• The [tool.flit.metadata] table is no longer used for project metadata (:ghpull:771). Use the newer :ref:[project] table <pyproject_toml_project> instead (or if that is not possible, build with flit_core <4).
• :ref:build_cmd and :ref:publish_cmd no longer include files in the sdist based on what is committed in git or Mercurial (:ghpull:772). These commands now build packages more like Flit does when called as a backend by e.g. python -m build. Specify :ref:sdist include & exclude patterns <pyproject_toml_sdist> instead (Flit can help to generate these), or pass the --use-vcs option to get the old behaviour back.
• flit_core now requires Python 3.8 or above (:ghpull:738)
• The --setup-py option to generate sdists containing a setup.py file is no longer available (:ghpull:776).
• Making typing stubs packages with a -stubs suffix will now work (:ghpull:742).
• The default glob patterns for license files have been extended to include NOTICE* and AUTHORS* (:ghpull:758).
• license-files glob patterns can contain spaces (:ghpull:797).
• Fix a bug where license files could be found twice on Windows (:ghpull:752).
• The new Import-Name and Import-Namespace metadata fields (metadata 2.5) are now supported (:ghpull:774). In most cases no new input is required, as Flit will create this metadata automatically.
• Fix creating RECORD files when file names include commas (:ghpull:744).
• The --use-vcs option now correctly recognises git from inside a git worktree folder (:ghpull:799).
• On Python 3.12 and above, flit build now uses the 'data' filter when extracting the just-created sdist prior to building a wheel (:ghpull:775). This restricts some special features of tar files, but sdists are unlikely to use these features, and they would probably break in other scenarios if you did.
• The vendorised readme_renderer package was updated to version 44.0 (:ghpull:760).

... (truncated)

Commits

• 60c0b3d Merge pull request #814 from pypa/i813
• 58e7f41 Bump version: 4.0.1 → 4.0.2
• 666e3c2 Fix METADATA format issue
• 81ac51d Merge pull request #812 from pypa/prepare-4.0.1
• 41bdff1 Add release note about 4.0.1
• ff5bfad Bump version: 4.0.0 → 4.0.1
• 8faf734 Bump actions/setup-python from 6 to 7 (#807)
• ef7f319 Merge pull request #800 from pypa/prepare-4.0
• 431fbaf Remind people in release notes to allow flit_core <5
• 38297e7 Version number -> 4.0.0
• Additional commits viewable in compare view

Updates astroid from 3.3.7 to 4.3.0

Release notes

Sourced from astroid's releases.

v4.3.0

What's New in astroid 4.3.0?

Release date: 2026-08-07

Version 4.2.0 was skipped: a v4.2.0 tag was created by mistake during an aborted release attempt, so the changes from the 4.2.0 betas are released as 4.3.0.

• Fix a crash on a functional namedtuple whose field name changes under NFKC normalization, such as namedtuple("mu", ["µ"]). Python normalizes identifiers, so the parsed class stores the field under "μ" while the brain looked it up as written, raising KeyError on a definition that namedtuple itself accepts.

  Closes pylint-dev/pylint#8746

• Fix inference of a method's first argument (self or cls) when the method's return value is stored on an unrelated object. This avoids inferring cls as the caller's class when indexing a tuple returned by a classmethod such as A.c()[0].

  Closes pylint-dev/pylint#11101

• super() with no argument now resolves against the class of the object the method was called on, instead of the class the method is written in. One consequence is that a typing.Self return value survives a chain of super() calls.

  Closes #2852 Closes pylint-dev/pylint#10807

• typing.overload stubs no longer shadow the implementation when a special method is looked up in the MRO.

  Closes #2448

• Fix a crash when the field names of a functional Enum or namedtuple call are bytes, as in Enum("", b""). Such a definition is invalid, so inference now falls back to its default instead of raising TypeError.

  Closes #3189

• Fix a crash when the body of a typing.NamedTuple subclass contains an assignment whose target is not a single name, such as cat.color = "black", basket[0] = "apple" or apple, banana = "red", "yellow". The names bound by unpacking are now copied to the inferred class as well.

  Closes #3190

• Fix a crash when a binary operation involves a class whose metaclass is not a

... (truncated)

Changelog

Sourced from astroid's changelog.

What's New in astroid 4.3.0?

Release date: 2026-08-07

Version 4.2.0 was skipped: a v4.2.0 tag was created by mistake during an aborted release attempt, so the changes from the 4.2.0 betas are released as 4.3.0.

• Fix a crash on a functional namedtuple whose field name changes under NFKC normalization, such as namedtuple("mu", ["µ"]). Python normalizes identifiers, so the parsed class stores the field under "μ" while the brain looked it up as written, raising KeyError on a definition that namedtuple itself accepts.

  Closes pylint-dev/pylint#8746

• Fix inference of a method's first argument (self or cls) when the method's return value is stored on an unrelated object. This avoids inferring cls as the caller's class when indexing a tuple returned by a classmethod such as A.c()[0].

  Closes pylint-dev/pylint#11101

• super() with no argument now resolves against the class of the object the method was called on, instead of the class the method is written in. One consequence is that a typing.Self return value survives a chain of super() calls.

  Closes #2852 Closes pylint-dev/pylint#10807

• typing.overload stubs no longer shadow the implementation when a special method is looked up in the MRO.

  Closes #2448

• Fix a crash when the field names of a functional Enum or namedtuple call are bytes, as in Enum("", b""). Such a definition is invalid, so inference now falls back to its default instead of raising TypeError.

  Closes #3189

• Fix a crash when the body of a typing.NamedTuple subclass contains an assignment whose target is not a single name, such as cat.color = "black", basket[0] = "apple" or apple, banana = "red", "yellow". The names bound by unpacking are now copied to the inferred class as well.

  Closes #3190

• Fix a crash when a binary operation involves a class whose metaclass is not a class, as in class C(metaclass=sum) followed by C | None. The type of

... (truncated)

Commits

• a52596a Bump astroid to 4.3.0, update changelog
• 3dfb6ca Rename the 4.2.0 changelog section to 4.3.0
• 941430e Ignore typing.overload stubs in dunder lookup (#3150)
• 1e71c7d Fix crash on a namedtuple field name that changes under NFKC normalization (#...
• 3316637 Fix crash on a dataclass base that annotates init (#3206)
• 8577346 Infer the value of a data descriptor as unknown
• 8666418 Fix crash in has_known_bases() for a non-class metaclass
• 5952c15 Fix crash on non-name assignment targets in typing.NamedTuple body
• 331e9d9 Fix crash on bytes field names in functional Enum/namedtuple
• a68e42c build(deps): bump CodSpeedHQ/action from 4.19.1 to 5.0.1 (#3194)
• Additional commits viewable in compare view

Updates build from 1.2.2.post1 to 1.5.0

Release notes

Sourced from build's releases.

1.5.0

What's Changed

• ci: try to improve release docs by @​henryiii in pypa/build#1051
• feat: drop 3.9, require 3.10+ by @​henryiii in pypa/build#1036
• chore: tox toml by @​henryiii in pypa/build#1033
• fix: api should not ignore installed, only CLI by @​henryiii in pypa/build#1056

Full Changelog: pypa/build@1.4.4...1.5.0

1.4.4

What's Changed

• 🐛 fix(release): generate consistent CHANGELOG heading levels by @​gaborbernat in pypa/build#1032
• docs: move source links by @​henryiii in pypa/build#1034
• revert: drop PEP 660 change by @​henryiii in pypa/build#1039
• fix: ignore installed when running pip by @​henryiii in pypa/build#1040
• fix: revert part of #973 by @​henryiii in pypa/build#1044
• chore: report coverage failure lines by @​henryiii in pypa/build#1046
• tests: fix issue with uv run by @​henryiii in pypa/build#1048
• docs: reorganize testing docs for copy/paste by @​abitrolly in pypa/build#1043
• tests: keep environment from leaking in Python 3.15 by @​henryiii in pypa/build#1049
• docs: fix issue with changelog generation by @​henryiii in pypa/build#1050

Full Changelog: pypa/build@1.4.3...1.4.4

1.4.3

What's Changed

• 🐛 fix(api): resolve thread-safety races in build API by @​gaborbernat in pypa/build#1015
• 🐛 fix(builder): validate backend-path entries exist on disk by @​gaborbernat in pypa/build#1016
• test: cover config settings build paths by @​terminalchai in pypa/build#992
• Add kind=(step, ) for root messages with * by @​abitrolly in pypa/build#973
• fix: correct changelog category ordering by @​gaborbernat in pypa/build#1017
• 🐛 fix(cli): show full dependency chain in missing deps error by @​gaborbernat in pypa/build#1019
• tests: fully annotate by @​henryiii in pypa/build#1020
• chore: lazy imports by @​henryiii in pypa/build#1021
• chore: adding more ruff codes by @​henryiii in pypa/build#1022
• tests: improve annotations by @​henryiii in pypa/build#1023
• 🧪 test(coverage): achieve 100% test coverage by @​gaborbernat in pypa/build#1018
• chore: add ruff PT by @​henryiii in pypa/build#1025
• chore: add ruff PYI by @​henryiii in pypa/build#1026
• chore: add ruff SIM/RET by @​henryiii in pypa/build#1028
• 🐛 fix(env): strip PYTHONPATH from isolated builds by @​gaborbernat in pypa/build#1024
• chore: use ruff ALL by @​henryiii in pypa/build#1029

... (truncated)

Changelog

Sourced from build's changelog.

#################### 1.5.0 (2026-04-30) ####################

---

Features

---

• Drop Python 3.9 support - by :user:henryiii (:issue:1036)

---

Bugfixes

---

• Make --ignore-installed opt-in from the API via fresh=True - by :user:henryiii (:issue:1056)

---

Miscellaneous

---

• :issue:1033

#################### 1.4.4 (2026-04-22) ####################

---

Bugfixes

---

• Fix release pipeline generating CHANGELOG.rst entries with inconsistent heading levels, which broke sphinx -W and pinned Read the Docs stable at 1.4.0 - by :user:gaborbernat. (:issue:1031)
• Revert :pr:1039 from build 1.4.3, no longer check direct_url (for now) - by :user:henryiii (:issue:1039)
• Add --ignore-installed to pip install command to prevent issues with packages already present in the isolated build environment - by :user:henryiii (:issue:1037) (:issue:1040)
• Partial revert of :pr:973, keeping log messages in one entry, multiple lines. (:issue:1044)

---

Miscellaneous

---

• :issue:1048, :issue:1049

#################### 1.4.3 (2026-04-10) ####################

---

Features

---

... (truncated)

Commits

• 615d04c chore: prepare for 1.5.0
• 776f702 fix: api should not ignore installed, only CLI (#1056)
• 42da4c4 pre-commit: bump repositories (#1055)
• b445cd2 chore: tox toml (#1033)
• c44c143 feat: drop 3.9, require 3.10+ (#1036)
• a9bb456 build(deps): bump astral-sh/setup-uv from 8.0.0 to 8.1.0 in the actions group...
• cb33511 ci: try to improve release docs (#1051)
• 70666a2 chore: prepare for 1.4.4
• 653d865 docs: fix issue with changelog generation (#1050)
• 373b9ee tests: keep environment from leaking in Python 3.15 (#1049)
• Additional commits viewable in compare view

Updates certifi from 2024.12.14 to 2026.7.22

Commits

• f4bc676 2026.07.22 (#428)
• 4c91f9c Bump actions/setup-python from 6.3.0 to 7.0.0 (#427)
• 01a66c5 Bump actions/checkout from 7.0.0 to 7.0.1 (#426)
• eb355f4 Bump pypa/gh-action-pypi-publish from 1.14.0 to 1.14.1 (#425)
• 474e6fc Include tests in the source distribution (#424)
• a31ef39 Bump actions/setup-python from 6.2.0 to 6.3.0 (#420)
• 98eb2c7 Bump actions/checkout from 6.0.3 to 7.0.0 (#419)
• d0ac52f 2026.06.17 (#418)
• d46de62 Bump actions/checkout from 6.0.2 to 6.0.3 (#417)
• 6c183ec fix: update Requests docs link to canonical URL (#415)
• Additional commits viewable in compare view

Updates charset-normalizer from 3.4.0 to 3.4.9

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.9

3.4.9 (2026-07-07)

Fixed

• Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

Version 3.4.8

3.4.8 (2026-07-06)

Fixed

• Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)
• Unnecessary json import at runtime (#753)
• Inverse capitalization not seen by noise detector (#731)

Changed

• No longer holding a global cache for our noise / coherence measurements. Relax RSS memory usage.
• Micro-optimizations in our noise / coherence measurements.
• No longer using regex search by default for our preemptive charset mark algorithm.
• Raised upperbound of setuptools to v83.
• Raised upperbound of mypy(c) to v2.1.

Removed

• Redundant UTF7 BOM marker (#730)

Version 3.4.7

3.4.7 (2026-04-02)

Changed

• Pre-built optimized version using mypy[c] v1.20.
• Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

• Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

Version 3.4.6

3.4.6 (2026-03-15)

Changed

• Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...) in favor of feed_info(...).
• Raised upper bound for mypy[c] to 1.20, for our optimized version.
• Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

• Edge case where noise difference between two candidates can be almost insignificant. (#672)
• CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

• Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

... (truncated)

Changelog

Sourced from charset-normalizer's changelog.

3.4.9 (2026-07-07)

Fixed

• Regression in our fallback path leading to a decode error. (#771) We've yanked 3.4.8 as a result of that bug.

3.4.8 (2026-07-06)

Fixed

• Wall import time due to cascade codec imports for our multibyte first sort of iana supported codecs (#742)
• Unnecessary json import at runtime (#753)
• Inverse capitalization not seen by noise detector (#731)

Changed

• No longer holding a global cache for our noise / coherence measurements. Relax RSS memory usage.
• Micro-optimizations in our noise / coherence measurements.
• No longer using regex search by default for our preemptive charset mark algorithm.
• Raised upperbound of setuptools to v83.
• Raised upperbound of mypy(c) to v2.1.

Removed

• Redundant UTF7 BOM marker (#730)

3.4.7 (2026-04-02)

Changed

• Pre-built optimized version using mypy[c] v1.20.
• Relax setuptools constraint to setuptools>=68,<82.1.

Fixed

• Correctly remove SIG remnant in utf-7 decoded string. (#718) (#716)

3.4.6 (2026-03-15)

Changed

• Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...) in favor of feed_info(...).
• Raised upper bound for mypy[c] to 1.20, for our optimized version.
• Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.

Fixed

• Edge case where noise difference between two candidates can be almost insignificant. (#672)
• CLI --normalize writing to wrong path when passing multiple files in. (#702)

Misc

• Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#616)

3.4.5 (2026-03-06)

Changed

... (truncated)

Commits

• cc68407 Merge pull request #772 from jawah/fix-regression-fallback-path
• 152b923 chore: release 3.4.9
• 2bc2607 fix: unicodedecodeerror in fallback path
• be252d7 chore(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#767)
• 71c7bdd chore(deps): bump actions/setup-python from 6.2.0 to 6.3.0 (#768)
• aeea391 chore(deps): bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#758)
• a6f8feb Merge pull request #770 from jawah/unblock-ci
• 528e16c chore: add osv-scanner.toml
• 5993498 chore: ast_serialize musl missing prebuilt riscv,s390x,ppc64le
• aa2ddd8 Release 3.4.8 (#766)
• Additional commits viewable in compare view

Updates check-manifest from 0.50 to 0.51

Changelog

Sourced from check-manifest's changelog.

0.51 (2025-10-15)

• Add Python 3.14 support.
• Drop Python 3.7 support.

Commits

• 61edb75 Preparing release 0.51
• 396b822 Merge pull request #173 from mgedmin/py314
• 93159b9 Python script to update branch protection rules
• 6a97f2e Revert "Why not go for broke? Let's try breezy"
• 0ccbcda Why not go for broke? Let's try breezy
• 950a047 Giving up
• 3f69fa0 Let's also detect TTYs please
• a59a82d Print more debug info
• 4848c16 Move OS-level installs back to top
• 304f15e Sort VCSes alphabetically
• Additional commits viewable in compare view

Updates coverage from 7.6.9 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
• Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

7.15.3

Version 7.15.3 — 2026-08-02

• Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
• A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
• Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

7.15.2

Version 7.15.2 — 2026-07-15

• Fix: one of the performance improvements in 7.15.1 (pull 2215) dramatically increased memory use during reporting for large projects. Now we use a different approach that is both faster and slimmer than 7.15.0. Fixes issue 2229.

➡️  PyPI page: coverage 7.15.2. :arrow_right:  To install: python3 -m pip install coverage==7.15.2

7.15.1

Version 7.15.1 — 2026-07-12

• Fix: in the HTML report with show_contextsDescription has been truncated