From 47c962ed675d16de687baaa42c8224d3f5b7748c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 23 Oct 2026 14:57:10 +0000
Subject: [PATCH 1/2] Bump the all-dependencies group with 16 updates

Bumps the all-dependencies group with 16 updates:

| Package | From | To |
| --- | --- | --- |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.4.4` | `3.5.2` |
| [distlib](https://github.com/pypa/distlib) | `0.4.0` | `0.4.4` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.20.3` | `4.2.4` |
| [identify](https://github.com/pre-commit/identify) | `2.6.16` | `2.6.20` |
| [nodeenv](https://github.com/ekalinin/nodeenv) | `1.10.0` | `1.11.0` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.5.1` | `4.13.5` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.5.1` | `4.7.0` |
| [pytest](https://github.com/pytest-dev/pytest) | `9.0.2` | `9.1.1` |
| [pytest-cov](https://github.com/pytest-dev/pytest-cov) | `7.0.0` | `7.1.0` |
| [responses](https://github.com/getsentry/responses) | `0.25.8` | `0.26.3` |
| [virtualenv](https://github.com/pypa/virtualenv) | `20.36.1` | `21.14.11` |
| [certifi](https://github.com/certifi/python-certifi) | `2026.1.4` | `2026.10.19` |
| [cryptography](https://github.com/pyca/cryptography) | `46.0.3` | `50.0.2` |
| [idna](https://github.com/kjd/idna) | `3.11` | `3.20` |
| [requests](https://github.com/psf/requests) | `2.32.5` | `2.34.2` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.6.3` | `2.8.0` |


Updates `charset-normalizer` from 3.4.4 to 3.5.2
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](https://github.com/jawah/charset_normalizer/compare/3.4.4...3.5.2)

Updates `distlib` from 0.4.0 to 0.4.4
- [Release notes](https://github.com/pypa/distlib/releases)
- [Changelog](https://github.com/pypa/distlib/blob/master/CHANGES.rst)
- [Commits](https://github.com/pypa/distlib/compare/0.4.0...0.4.4)

Updates `filelock` from 3.20.3 to 4.2.4
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/py-filelock/compare/3.20.3...4.2.4)

Updates `identify` from 2.6.16 to 2.6.20
- [Commits](https://github.com/pre-commit/identify/compare/v2.6.16...v2.6.20)

Updates `nodeenv` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/ekalinin/nodeenv/releases)
- [Changelog](https://github.com/ekalinin/nodeenv/blob/master/CHANGES)
- [Commits](https://github.com/ekalinin/nodeenv/compare/1.10.0...1.11.0)

Updates `platformdirs` from 4.5.1 to 4.13.5
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](https://github.com/tox-dev/platformdirs/compare/4.5.1...4.13.5)

Updates `pre-commit` from 4.5.1 to 4.7.0
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](https://github.com/pre-commit/pre-commit/compare/v4.5.1...v4.7.0)

Updates `pytest` from 9.0.2 to 9.1.1
- [Release notes](https://github.com/pytest-dev/pytest/releases)
- [Changelog](https://github.com/pytest-dev/pytest/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest/compare/9.0.2...9.1.1)

Updates `pytest-cov` from 7.0.0 to 7.1.0
- [Changelog](https://github.com/pytest-dev/pytest-cov/blob/master/CHANGELOG.rst)
- [Commits](https://github.com/pytest-dev/pytest-cov/compare/v7.0.0...v7.1.0)

Updates `responses` from 0.25.8 to 0.26.3
- [Release notes](https://github.com/getsentry/responses/releases)
- [Changelog](https://github.com/getsentry/responses/blob/master/CHANGES)
- [Commits](https://github.com/getsentry/responses/compare/0.25.8...0.26.3)

Updates `virtualenv` from 20.36.1 to 21.14.11
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](https://github.com/pypa/virtualenv/compare/20.36.1...21.14.11)

Updates `certifi` from 2026.1.4 to 2026.10.19
- [Commits](https://github.com/certifi/python-certifi/compare/2026.01.04...2026.10.19)

Updates `cryptography` from 46.0.3 to 50.0.2
- [Changelog](https://github.com/pyca/cryptography/blob/main/CHANGELOG.rst)
- [Commits](https://github.com/pyca/cryptography/compare/46.0.3...50.0.2)

Updates `idna` from 3.11 to 3.20
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.md)
- [Commits](https://github.com/kjd/idna/compare/v3.11...v3.20)

Updates `requests` from 2.32.5 to 2.34.2
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](https://github.com/psf/requests/compare/v2.32.5...v2.34.2)

Updates `urllib3` from 2.6.3 to 2.8.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](https://github.com/urllib3/urllib3/compare/2.6.3...2.8.0)

---
updated-dependencies:
- dependency-name: charset-normalizer
  dependency-version: 3.5.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: distlib
  dependency-version: 0.4.4
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: filelock
  dependency-version: 4.2.4
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: identify
  dependency-version: 2.6.20
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: nodeenv
  dependency-version: 1.11.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: platformdirs
  dependency-version: 4.13.5
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pre-commit
  dependency-version: 4.7.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pytest
  dependency-version: 9.1.1
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: pytest-cov
  dependency-version: 7.1.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: responses
  dependency-version: 0.26.3
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: virtualenv
  dependency-version: 21.14.11
  dependency-type: direct:development
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: certifi
  dependency-version: 2026.10.19
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: cryptography
  dependency-version: 50.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: idna
  dependency-version: '3.20'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: requests
  dependency-version: 2.34.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
- dependency-name: urllib3
  dependency-version: 2.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 requirements-dev.txt | 22 +++++++++++-----------
 requirements.txt     | 12 ++++++------
 2 files changed, 17 insertions(+), 17 deletions(-)

diff --git a/requirements-dev.txt b/requirements-dev.txt
index 9938ac1..fcd5013 100644
--- a/requirements-dev.txt
+++ b/requirements-dev.txt
@@ -1,19 +1,19 @@
 backports.entry-points-selectable==1.3.0
 bump2version==1.0.1
 cfgv==3.5.0
-charset-normalizer==3.4.4
-distlib==0.4.0
-filelock==3.20.3
-identify==2.6.16
-nodeenv==1.10.0
-platformdirs==4.5.1
-pre-commit==4.5.1
-pytest==9.0.2
-pytest-cov==7.0.0
+charset-normalizer==3.5.2
+distlib==0.4.4
+filelock==4.2.4
+identify==2.6.20
+nodeenv==1.11.0
+platformdirs==4.13.5
+pre-commit==4.7.0
+pytest==9.1.1
+pytest-cov==7.1.0
 PyYAML==6.0.3
-responses==0.25.8
+responses==0.26.3
 six==1.17.0
 toml==0.10.2
-virtualenv==20.36.1
+virtualenv==21.14.11
 
 -r requirements.txt
diff --git a/requirements.txt b/requirements.txt
index 4c03f15..7d17695 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,7 +1,7 @@
 actions-toolkit==0.1.15
-certifi==2026.1.4
-charset-normalizer==3.4.4
-cryptography==46.0.3
-idna==3.11
-requests==2.32.5
-urllib3==2.6.3
+certifi==2026.10.19
+charset-normalizer==3.5.2
+cryptography==50.0.2
+idna==3.20
+requests==2.34.2
+urllib3==2.8.0

From 11fd33d141c296777adc6860d1babb2ca63a05b4 Mon Sep 17 00:00:00 2001
From: Josh Anderson <josh.anderson@contrastsecurity.com>
Date: Fri, 23 Oct 2026 16:09:52 +0100
Subject: [PATCH 2/2] Update certifi version to 2026.10.23

---
 requirements.txt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/requirements.txt b/requirements.txt
index 7d17695..4c48fc8 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -1,5 +1,5 @@
 actions-toolkit==0.1.15
-certifi==2026.10.19
+certifi==2026.10.23
 charset-normalizer==3.5.2
 cryptography==50.0.2
 idna==3.20