Skip to content

deps(pip): bump the backend-python-runtime group in /backend with 7 updates - #284

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/backend-python-runtime-85b91e5383
Open

deps(pip): bump the backend-python-runtime group in /backend with 7 updates#284
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/backend-python-runtime-85b91e5383

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the backend-python-runtime group in /backend with 7 updates:

Package From To
types-authlib 1.7.2.20260814 1.7.2.20260827
click 8.4.2 8.5.0
cryptography 50.0.0 50.0.1
pypdf 6.16.1 6.16.2
pyspnego 0.12.1 0.12.2
websockets 17.0.1 17.1
platformdirs 4.11.4 4.11.5

Updates types-authlib from 1.7.2.20260814 to 1.7.2.20260827

Commits

Updates click from 8.4.2 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). #3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677
  • The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678
  • unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681
  • Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

  • Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637
  • Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505
  • {class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473
  • confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653
  • Fix test failures when using pytest >= 9.1. {pr}3656
  • {class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642
  • Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). {pr}3581
  • style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677
  • The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678
  • unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681
  • Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641
  • {func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695
  • The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits
  • 8b19813 Release version 8.5.0
  • 2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
  • 131c86a Add FAQ entry about UnicodeEncodeError on Windows
  • e1fd594 Add support of pathlib.Path to edit (#3781)
  • a1d8785 Add support of pathlib.Path to edit
  • 2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
  • a6256bf Forwards all user's parameters set in PAGER
  • 61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
  • 9835b0f Resolve the pager command once, in _pager_contextmanager
  • f36d58b Refactor pager stream handling (#3767)
  • Additional commits viewable in compare view

Updates cryptography from 50.0.0 to 50.0.1

Changelog

Sourced from cryptography's changelog.

50.0.1 - 2026-08-25


* Updated Windows, macOS, and Linux wheels to be compiled with OpenSSL 4.0.2.

.. _v50-0-0:

Commits

Updates pypdf from 6.16.1 to 6.16.2

Release notes

Sourced from pypdf's releases.

Version 6.16.2, 2026-08-23

What's new

Bug Fixes (BUG)

Robustness (ROB)

  • Improve RC4 fallback when cryptography can't provide it (#3853) by @​msylw

Full Changelog

Changelog

Sourced from pypdf's changelog.

Version 6.16.2, 2026-08-23

Bug Fixes (BUG)

  • Make remove_from_tree() work on outline items (#3939)
  • Be more lenient about space width in layout mode text extraction (#3992)
  • Do not scale the text leading by the font size (#3987)
  • Update annotation appearance stream matrix on page transform (#3968)
  • Allow repeated page references (#3959)

Robustness (ROB)

  • Improve RC4 fallback when cryptography can't provide it (#3853)

Full Changelog

Commits
  • 1da0987 REL: 6.16.2
  • f6853cc BUG: Make remove_from_tree() work on outline items (#3939)
  • c6d38af BUG: Type character widths as float (#3996)
  • 882b3b2 STY: Type the XMP stream as StreamObject rather than ContentStream (#3995)
  • 4c8f707 STY: Accept any sequence of fit arguments in Fit (#3990)
  • 2450321 STY: Accept any sequence as the annotation border (#3991)
  • 2dcab8d MAINT: Skip test_appearance_stream_rtl when RTL support is unavailable (#3993)
  • 412975a BUG: Be more lenient about space width in layout mode text extraction (#3992)
  • ddbfea9 BUG: Interpolate the reader in the reset_translation error message (#3981)
  • c646ef2 ROB: Improve RC4 fallback when cryptography can't provide it (#3853)
  • Additional commits viewable in compare view

Updates pyspnego from 0.12.1 to 0.12.2

Release notes

Sourced from pyspnego's releases.

v0.12.2

0.12.2 - 2026-08-26

  • Fix up NTLM single host data unpacking to be less strict making it compatible with newer Windows versions
  • Use canoncial Kerberos client principal from kinit operation, this avoid issues around not being able to find TGT in cache during Kerberos authentication

What's Changed

New Contributors

Full Changelog: jborean93/pyspnego@v0.12.1...v0.12.2

Changelog

Sourced from pyspnego's changelog.

0.12.2 - 2026-08-26

  • Fix up NTLM single host data unpacking to be less strict making it compatible with newer Windows versions
  • Use canoncial Kerberos client principal from kinit operation, this avoid issues around not being able to find TGT in cache during Kerberos authentication
Commits

Updates websockets from 17.0.1 to 17.1

Release notes

Sourced from websockets's releases.

17.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits
  • e87ea9b Release version 17.1.
  • caf68ab Minor whitespace normalization.
  • f4c73b7 Accept pathlib.Path objects in path arguments.
  • b1e4a14 Clarify when the new asyncio implementation became the default.
  • c7cc7ed Move process_exception to the Sans-I/O layer.
  • 2543503 Support reconnecting in the threading implementation.
  • 1c8fb09 Follow redirects in the sync implementation.
  • 1f7f0e5 Deprecate calling connect() directly.
  • c06d5c5 Support overriding host/post in the sync client.
  • 885e69b Add tests for connecting without a context manager.
  • Additional commits viewable in compare view

Updates platformdirs from 4.11.4 to 4.11.5

Release notes

Sourced from platformdirs's releases.

4.11.5

What's Changed

New Contributors

Full Changelog: tox-dev/platformdirs@4.11.4...4.11.5

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

4.11.5 (2026-08-27)

  • Give :func:~platformdirs.user_preference_dir and :func:~platformdirs.user_preference_path the same arguments as :func:~platformdirs.user_config_dir. Added without arguments in :pr:491, they could only return the unscoped base directory even though the property they wrap appends the app name and version. :pr:531
  • Make :func:~platformdirs.site_applications_path return the first entry when multipath=True, matching :func:~platformdirs.site_data_path. On Unix and macOS it passed the whole $XDG_DATA_DIRS list to :class:~pathlib.Path, giving one unusable path such as /first/applications:/second/applications. :pr:532
  • Give :func:~platformdirs.user_applications_dir, :func:~platformdirs.user_applications_path, :func:~platformdirs.site_applications_dir and :func:~platformdirs.site_applications_path the app arguments. Android scopes both applications directories to the app, so without them the functions could only return the unscoped base directory there. On the two site functions they are keyword-only, keeping multipath first positional as it has been since 4.9.0; the two user functions take their boolean options keyword-only. :pr:534
  • Correct the ordering note on the iterator methods. use_site_for_root drops the user directory entirely, so the iterators are documented as yielding the most specific directory first rather than always yielding the user one. :pr:533

4.11.4 (2026-08-24)

  • Stop the iter_*_dirs methods yielding the same directory twice when a site directory resolves to its user equivalent - :pr:520 covered only Unix with use_site_for_root. It also hit :meth:~platformdirs.PlatformDirs.iter_runtime_dirs on Unix with $XDG_RUNTIME_DIR set, on Windows and macOS, and all six iterators on Android. :pr:524
  • Fix the config merging example in the how-to guide. iter_config_paths yields the user directory first, so the config.update loop let the site defaults override the user's config instead of the other way round. :pr:529

4.11.3 (2026-08-13)

  • python -m platformdirs now lists :func:~platformdirs.user_desktop_dir, which was missing from the properties it prints. :pr:523
  • Stop :func:~platformdirs.site_data_dir, :func:~platformdirs.site_config_dir and :func:~platformdirs.site_applications_dir raising IndexError on Unix and macOS when $XDG_DATA_DIRS or $XDG_CONFIG_DIRS holds only separators and whitespace, such as ":". These values now fall back to the platform defaults, and each entry is stripped of surrounding whitespace. :pr:523

4.11.2 (2026-08-10)

... (truncated)

Commits
  • bd77b0d Release 4.11.5
  • 2a3ab96 fix: accept app arguments in user_preference_dir (#531)
  • 56a9bc7 refactor: keyword-only booleans on the applications functions (#535)
  • 8147f77 fix: accept app arguments in the applications functions (#534)
  • 8ea7338 fix: return one site applications path for multipath (#532)
  • 4d4279f docs: fix the iterator order claim in api.rst (#533)
  • babf239 [pre-commit.ci] pre-commit autoupdate (#530)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
deps(pip): bump the backend-python-runtime group
39869b6 
Bumps the backend-python-runtime group in /backend with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [types-authlib](https://github.com/python/typeshed) | `1.7.2.20260814` | `1.7.2.20260827` |
| [click](https://github.com/pallets/click) | `8.4.2` | `8.5.0` |
| [cryptography](https://github.com/pyca/cryptography) | `50.0.0` | `50.0.1` |
| [pypdf](https://github.com/py-pdf/pypdf) | `6.16.1` | `6.16.2` |
| [pyspnego](https://github.com/jborean93/pyspnego) | `0.12.1` | `0.12.2` |
| [websockets](https://github.com/python-websockets/websockets) | `17.0.1` | `17.1` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.11.4` | `4.11.5` |


Updates `types-authlib` from 1.7.2.20260814 to 1.7.2.20260827
- [Commits](https://github.com/python/typeshed/commits)

Updates `click` from 8.4.2 to 8.5.0
- [Release notes](https://github.com/pallets/click/releases)
- [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md)
- [Commits](pallets/click@8.4.2...8.5.0)

Updates `cryptography` from 50.0.0 to 50.0.1
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](pyca/cryptography@50.0.0...50.0.1)

Updates `pypdf` from 6.16.1 to 6.16.2
- [Release notes](https://github.com/py-pdf/pypdf/releases)
- [Changelog](https://github.com/py-pdf/pypdf/blob/main/CHANGELOG.md)
- [Commits](py-pdf/pypdf@6.16.1...6.16.2)

Updates `pyspnego` from 0.12.1 to 0.12.2
- [Release notes](https://github.com/jborean93/pyspnego/releases)
- [Changelog](https://github.com/jborean93/pyspnego/blob/main/CHANGELOG.md)
- [Commits](jborean93/pyspnego@v0.12.1...v0.12.2)

Updates `websockets` from 17.0.1 to 17.1
- [Release notes](https://github.com/python-websockets/websockets/releases)
- [Commits](python-websockets/websockets@17.0.1...17.1)

Updates `platformdirs` from 4.11.4 to 4.11.5
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.11.4...4.11.5)

---
updated-dependencies:
- dependency-name: types-authlib
  dependency-version: 1.7.2.20260827
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-python-runtime
- dependency-name: click
  dependency-version: 8.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-python-runtime
- dependency-name: cryptography
  dependency-version: 50.0.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-python-runtime
- dependency-name: pypdf
  dependency-version: 6.16.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-python-runtime
- dependency-name: pyspnego
  dependency-version: 0.12.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend-python-runtime
- dependency-name: websockets
  dependency-version: '17.1'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend-python-runtime
- dependency-name: platformdirs
  dependency-version: 4.11.5
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: backend-python-runtime
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Dependency update and supply-chain maintenance work. python Changes affecting Python dependencies or tooling. labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Dependency update and supply-chain maintenance work. python Changes affecting Python dependencies or tooling.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants