chore(deps): bump the runtime-minor-patch group across 1 directory with 7 updates by dependabot[bot] · Pull Request #205 · get2knowio/maverick

dependabot · 2026-09-14T13:11:41Z

Bumps the runtime-minor-patch group with 7 updates in the / directory:

Package	From	To
anyio	`4.14.2`	`4.15.1`
click	`8.4.2`	`8.5.0`
gitpython	`3.1.59`	`3.1.62`
pydantic	`2.13.4`	`2.13.5`
pygithub	`2.9.1`	`2.10.0`
python-dotenv	`1.2.2`	`1.2.3`
tiktoken	`0.13.0`	`0.14.0`

Updates anyio from 4.14.2 to 4.15.1

Release notes

Sourced from anyio's releases.

4.15.1

Implemented a compatibility fix for supporting direct access of anyio.* submodules from the main package even when those submodules were not directly imported first (#1311 <agronholm/anyio#1311)

4.15.0

Added support for the newer keyword-only arguments on anyio.Path methods to match the standard library pathlib.Path:

follow_symlinks on exists() (Python 3.12+)

follow_symlinks on is_dir() (Python 3.13+)

follow_symlinks on is_file() (Python 3.13+)

follow_symlinks on owner() (Python 3.13+)

follow_symlinks on group() (Python 3.13+)

newline on read_text() (Python 3.13+)

(#1286, #1293; PR by @jaideeppyne)

Added amap, gather, and as_completed utility functions to simplify common patterns (#1173; PR by @Graeme22)

Added --anyio-mode command-line option as an alternative to the anyio_mode ini setting, and fix the pytest plugin's auto mode detection to recognize the mode when set via either mechanism(e.g: pytest_asyncio). (#1242; PR by @EmmanuelNiyonshuti)

Added the anyio.Future synchronization primitive which behaves similar to asyncio.Future, allowing tasks to wait for a value (or exception) from another task (#1146; PR by @Vizonex)

Added guidance for managing multiple memory object stream producers and consumers with cloned streams (#330; PR by @nightcityblade)

Added StapledObjectStream.send_nowait() that delegates to the underlying ObjectSendStream, if it implements it (#1241; PR by @davidbrochart)

Added the move_on_at() and fail_at() functions to complement move_on_after() and fail_after()

Changed the default name for a task spawned with TaskGroup.create_task(func()) to match the default task name for the analogous task spawned with TaskGroup.start_soon(func) or TaskGroup.start(func) in more situations. Previously, the default name of a TaskGroup.create_task task never included the module name. (The default name for a task spawned with TaskGroup.start_soon or TaskGroup.start typically includes the module name.) (#1234; PR by @gschaffner)

Changed the anyio and anyio.abc modules to lazily (much like 810) import the necessary submodules. This is done by parsing the AST of the module and building a lookup table from the if TYPE_CHECKING: block. A fallback mode has been provided for installations where the source code is unavailable (e.g. PyInstaller). (#1169)

Fixed free-threading compatibility issues arising from the fact that on Python 3.14 free-threading builds, newly created threads inherit the current context by default, causing AnyIO to behave erroneously in relation to start_blocking_portal() and anyio.to_thread.run_sync() (#1224; PR by @EmmanuelNiyonshuti)

Fixed SpooledTemporaryFile.readinto() and readinto1() reading twice before rollover, so the destination buffer was overwritten by the second read and the file position advanced twice, silently losing data (#1215; PR by @c-tonneslan)

Added a reason parameter to fail_after (and the new fail_at) allowing for added exception context when raising TimeoutError (#1227; PR by @Graeme22)

Fixed the default TaskHandle.name missing part of the task name for tasks started with TaskGroup.start on Trio (#1231; PR by @gschaffner)

Fixed anyio.run leaking, or at least, delaying collection of loop and root_task due to the root task being cached in a RunVar. (#1203; PR by @tapetersen)

Fixed anyio.Path.with_stem() silently producing a wrong path (e.g. Path(".txt")) instead of raising ValueError when given an empty stem on a path with a non-empty suffix, unlike pathlib.PurePath.with_stem (#1200; PR by @Sanjays2402)

Fixed UNIXSocketStream.aclose() raising asyncio.InvalidStateError when a concurrent receive or send operation had just been cancelled on the asyncio backend (#1267; PR by @alloutflo)

Fixed the pytest plugin importing the deprecated _pytest.python.CallSpec2 alias, which triggers PytestRemovedIn10Warning on pytest>=9.2 and crashes pytest at startup when filterwarnings = error is configured (#1271; PR by @matthewfeickert)

Fixed an asyncio worker thread race that could raise RuntimeError when the event loop closed between checking its state and scheduling the worker result (#1265; PR by @hansu650)

Fixed CapacityLimiter on the asyncio backend over-granting tokens when total_tokens was raised while the limiter was over-subscribed (#1223; PR by @zelinewang)

... (truncated)

Commits

ffcd154 Bumped up the version
0ecf5ed Added a workaround for third party code accessing unimported submodules (#1309)
9283662 Bumped up the version
d137692 Improved the instructions for AI agents
033fc52 Shield TemporaryDirectory cleanup from cancellation (#1304)
942e9a6 [pre-commit.ci] pre-commit autoupdate (#1305)
b825c3b Fixed pyproject.toml changes not triggering the test suite
9727dc5 Fixed start inconsistencies between trio and asyncio (#1198)
b05fe6d Fixed wrong type in move_on_after (#1297)
44d0c93 Fixed asyncio task group coroutine cleanup (#1275)
Additional commits viewable in compare view

Updates click from 8.4.2 to 8.5.0

Release notes

Sourced from click's releases.

8.5.0

This is the Click 8.5.0 feature release. A feature release may include new features, remove previously deprecated code, add new deprecation, or introduce potentially breaking changes.

We encourage everyone to upgrade. You can read more about our Version Support Policy on our website.

PyPI: https://pypi.org/project/click/8.5.0/ Changes: https://click.palletsprojects.com/page/changes/#version-8-5-0 Milestone https://github.com/pallets/click/milestone/33

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. #2672 #3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. #2986 #3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. #2983 #3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when #2969 began writing the prompt with input() directly. #3572 #3653

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. #2877 #3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). #3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. #3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). #2819 #3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. #3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call

... (truncated)

Changelog

Sourced from click's changelog.

Version 8.5.0

Released 2026-08-24

Add built-in shell completion support for PowerShell (Windows PowerShell 5.1+ and pwsh 7+) alongside the existing bash, zsh, and fish completers. Use _FOO_BAR_COMPLETE=powershell_source foo-bar to generate the completion script. {issue}2672 {pr}3637

Supported versions of Windows enable ANSI terminal styles by default. Colorama is no longer a dependency and is not used. {issue}2986 {pr}3505

{class}Argument accepts a help parameter, and help output includes a Positional arguments section when argument help is available. {issue}2983 {pr}3473

confirm() and prompt() strip ANSI color and style codes from the prompt when the output stream does not support them, matching echo(). This stripping was lost in 8.4.0 when {pr}2969 began writing the prompt with input() directly. {issue}3572 {pr}3653

Fix test failures when using pytest >= 9.1. {pr}3656

{class}Path with allow_dash=True no longer triggers a BytesWarning, an error under python -bb, when checking a value against the - convention. {issue}2877 {pr}3642

Add {func}custom_version_option, a --version option whose output is produced by a callback, covering cases {func}version_option intentionally does not. The feature set of {func}version_option is now frozen; see [discussion #3527](`@version_option` future direction pallets/click#3527). {pr}3581

style() and secho() no longer silently drop the 256-color index 0 (black) passed as fg or bg, and now validate color arguments. Invalid colors raise a ValueError instead of a TypeError. {pr}3677

The automatic help option stores its value under the reserved name _click_default_help instead of help, so a parameter named help no longer breaks parsing. The new name is visible in {meth}Command.to_info_dict output. Parameters that overwrite each other's value trigger a warning: an argument sharing its name with another parameter, or any parameter claiming the reserved name. Options may still share a name to compete for the same value (feature switches). {issue}2819 {pr}3678

unstyle and the ANSI handling behind help-text wrapping now strip the full CSI escape-sequence grammar. {pr}3681

Streamline Option flag handling: the flag-kind, type, lazy-default and validation steps in Option.__init__ move into focused helpers, and flag_value and default keep their unset sentinel at construction (resolved lazily on read) so is UNSET reliably tells a user-supplied value from an auto-derived one. Runtime behavior is unchanged, but {meth}Parameter.to_info_dict now resolves default=True on a feature switch to its flag_value, matching what the function receives at call time. {pr}3641

{func}get_binary_stream and {func}get_text_stream are deprecated and will be removed in Click 9.0. {issue}3481 {pr}3695

The following click.utils names were never intentionally public and are now private (_-prefixed). The old names remain available with a DeprecationWarning until Click 9.0: LazyFile, KeepOpenFile,

... (truncated)

Commits

8b19813 Release version 8.5.0
2c8cd3a Add FAQ entry about UnicodeEncodeError on Windows (#3778)
131c86a Add FAQ entry about UnicodeEncodeError on Windows
e1fd594 Add support of pathlib.Path to edit (#3781)
a1d8785 Add support of pathlib.Path to edit
2103e15 Forward all user's parameters set in PAGER and improve flag detection (#3777)
a6256bf Forwards all user's parameters set in PAGER
61b69e9 Resolve the pager command once, in _pager_contextmanager (#3776)
9835b0f Resolve the pager command once, in _pager_contextmanager
f36d58b Refactor pager stream handling (#3767)
Additional commits viewable in compare view

Updates gitpython from 3.1.59 to 3.1.62

Release notes

Sourced from gitpython's releases.

3.1.62

What's Changed

prepare next release by @Byron in gitpython-developers/GitPython#2222

Keep bare-repository worktrees non-bare by @Byron in gitpython-developers/GitPython#2224

Reject unsafe submodule checkout paths by @Byron in gitpython-developers/GitPython#2225

build(deps): bump https://github.com/astral-sh/ruff-pre-commit from v0.16.0 to 0.16.5 in the pre-commit group by @dependabot[bot] in gitpython-developers/GitPython#2226

fix: join backslash line continuations when reading config values by @nkbeast in gitpython-developers/GitPython#2227

New Contributors

@nkbeast made their first contribution in gitpython-developers/GitPython#2227

Full Changelog: gitpython-developers/GitPython@3.1.61...3.1.62

3.1.61

Fix accidental removal of exploitable regex in Actor by bringing it back, and deprecating it.

What's Changed

Fix repository discovery precedence by @Byron in gitpython-developers/GitPython#2218

fix: wait for git daemon to listen before connecting by @Vogtinator in gitpython-developers/GitPython#2219

fix: restore Actor.name_email_regex by @Byron in gitpython-developers/GitPython#2221

New Contributors

@Vogtinator made their first contribution in gitpython-developers/GitPython#2219

Full Changelog: gitpython-developers/GitPython@3.1.60...3.1.61

3.1.60 Security

What's Changed

prepare changelog prior to release by @Byron in gitpython-developers/GitPython#2212

Preserve Git config escape semantics by @Byron in gitpython-developers/GitPython#2213

Harden diff path and actor identity parsing by @Byron in gitpython-developers/GitPython#2215

Require explicit opt-in for filesystem diffs by @Byron in gitpython-developers/GitPython#2217

Full Changelog: gitpython-developers/GitPython@3.1.59...3.1.60

Commits

db47516 prepare new release
10ec385 get better commit messages from agents
b754897 test: cover subdirectory discovery and pathspec commands in bare-repo worktre...
9ebf8b6 Merge pull request #2227 from nkbeast/fix-config-backslash-continuation
a15f791 fix: parse joined config values as a whole
60dd946 fix: ignore continuation markers in config comments
075a664 fix: join backslash line continuations when reading config values
62d1e2f Merge pull request #2226 from gitpython-developers/dependabot/pre_commit/pre-...
23d0e92 build(deps): bump https://github.com/astral-sh/ruff-pre-commit
8a14adc Merge pull request #2225 from gitpython-developers/submodule-path-hardening
Additional commits viewable in compare view

Updates pydantic from 2.13.4 to 2.13.5

Release notes

Sourced from pydantic's releases.

v2.13.5 (2026-08-28)

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

Changelog

Sourced from pydantic's changelog.

v2.13.5 (2026-08-28)

GitHub release

What's Changed

Fixes

Allow reuse of validators when plugins are set by @Viicos in #13535

Fix missing GC traversal on some pydantic-core struct fields by @Viicos in #13624

Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer by @Viicos in #13629

Count validated model fields once in smart unions by @tamird in #13731

Commits

001dea0 Bump pypa/gh-action-pypi-publish action to v1.14.2
558379f Bump twine to v7.0.0
2cfd5d3 Do not check for docs build
a735bee Fix more Clippy lints
7eed4a1 Fix Clippy 0.1.95 warnings
b353bbb Prepare release v2.13.5
63d2ccc Count validated model fields once in smart unions
a53ec2e Speed up PyPy CI tests
d65e0f9 Workaround circular import error in Mypy
47a6dbf Fix missing GC traversal in pydantic-core for GeneralFieldsSerializer
Additional commits viewable in compare view

Updates pygithub from 2.9.1 to 2.10.0

Release notes

Sourced from pygithub's releases.

2.10.0

Notable changes

Drop Python 3.9 support due to End-of-Life

Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features

Allow to specify the Github API version by @EnricoMi in PyGithub/PyGithub#3480

Add issue dependency endpoints by @james-geiger in PyGithub/PyGithub#3477

Improvements

Add incomplete_results property to PaginatedList by @Felixoid in PyGithub/PyGithub#3396

Add WorkflowRun.get_attempt and Repository.get_workflow_job functions by @cecheta in PyGithub/PyGithub#3401

Add support for head_repo when creating pull request by @shannon in PyGithub/PyGithub#3479

Add max_rate_limit_wait to GithubRetry to cap rate limit backoff by @tanistheta in PyGithub/PyGithub#3540

Add return_run_details parameter to Workflow.create_dispatch by @SebastienSyd in PyGithub/PyGithub#3471

Update SecurityAndAnalysis by @EnricoMi in PyGithub/PyGithub#3503

Bug Fixes

Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() by @Krishnachaitanyakc in PyGithub/PyGithub#3472

Fix GithubException.__str__ decoding bytes data by @SAY-5 in PyGithub/PyGithub#3494

Fixing OrganizationVariable.value by properly using base class by @EnricoMi in PyGithub/PyGithub#3507

Parse only the query string for PaginatedList.totalCount by @Noethix55555 in PyGithub/PyGithub#3518

Encode boolean query parameters as lowercase by @Noethix55555 in PyGithub/PyGithub#3516

Fix doubled slash in request path for base_url with trailing slash by @Noethix55555 in PyGithub/PyGithub#3537

Fix WorkflowRun schema suggestion by @EnricoMi in PyGithub/PyGithub#3559

Fix OAuth2 authorization state / code_verifier parameters by @TheoGoudout in PyGithub/PyGithub#3440

Allow creating custom property with values_editable_by param by @chawlajay9 in PyGithub/PyGithub#3548

Fix OrganizationSecret.edit() to seal the value and use PUT by @Noethix55555 in PyGithub/PyGithub#3529

Fix lazy retrieval of latest tag name by @sathieu in PyGithub/PyGithub#3487

Fix typing and typos by @EnricoMi in PyGithub/PyGithub#3485

Maintenance

Add support for Python 3.15 and drop EOL 3.9 by @hugovk in PyGithub/PyGithub#3551

Move self-link awareness into CompletableGithubObject by @EnricoMi in PyGithub/PyGithub#3432

Add documentation for agents, add Claude skills by @EnricoMi in PyGithub/PyGithub#3509

Add sphinx-copybutton for code blocks by @DivyanshiGautam31 in PyGithub/PyGithub#3493

Add support to OpenAPI script for applying schema to methods by @EnricoMi in PyGithub/PyGithub#3374

Improve OpenAPI apply properties and methods by @EnricoMi in PyGithub/PyGithub#3495

Fix OpenAPI method verb detection by @EnricoMi in PyGithub/PyGithub#3496

Add OpenAPI script tests by @EnricoMi in PyGithub/PyGithub#3489

Fix OpenAPI apply method by @EnricoMi in PyGithub/PyGithub#3498

Reordering OpenAPI test sequence by @EnricoMi in PyGithub/PyGithub#3500

Apply typing convention by @EnricoMi in PyGithub/PyGithub#3504

Bump mypy Python version to 3.12 by @EnricoMi in PyGithub/PyGithub#3505

Use @overload to type get_user by @xmo-odoo in PyGithub/PyGithub#3502

Add overload type annotations by @EnricoMi in PyGithub/PyGithub#3506

Simplify OrganizationVariable by @EnricoMi in PyGithub/PyGithub#3508

Add OpenAPI script filename option to create class by @EnricoMi in PyGithub/PyGithub#3512

OpenAPI script improvements by @EnricoMi in PyGithub/PyGithub#3511

... (truncated)

Changelog

Sourced from pygithub's changelog.

Version 2.10.0 (August 20, 2026)

Notable changes ^^^^^^^^^^^^^^^

Drop Python 3.9 support due to End-of-Life """""""""""""""""""""""""""""""""""""""""" Python 3.9 reached its end-of-life October 31, 2025. Support has been removed with this release.

New Features ^^^^^^^^^^^^

Allow to specify the Github API version ([#3480](https://github.com/pygithub/pygithub/issues/3480) <https://github.com/PyGithub/PyGithub/pull/3480>) (546b0ee7e <https://github.com/PyGithub/PyGithub/commit/546b0ee7e>)

Add issue dependency endpoints ([#3477](https://github.com/pygithub/pygithub/issues/3477) <https://github.com/PyGithub/PyGithub/pull/3477>) (b0ee6e0c7 <https://github.com/PyGithub/PyGithub/commit/b0ee6e0c7>)

Improvements ^^^^^^^^^^^^

Add incomplete_results property to PaginatedList ([#3396](https://github.com/pygithub/pygithub/issues/3396) <https://github.com/PyGithub/PyGithub/pull/3396>) (7806e7dcc <https://github.com/PyGithub/PyGithub/commit/7806e7dcc>)

Add WorkflowRun.get_attempt and Repository.get_workflow_job functions ([#3401](https://github.com/pygithub/pygithub/issues/3401) <https://github.com/PyGithub/PyGithub/pull/3401>) (fdf9ed869 <https://github.com/PyGithub/PyGithub/commit/fdf9ed869>)

Add support for head_repo when creating pull request ([#3479](https://github.com/pygithub/pygithub/issues/3479) <https://github.com/PyGithub/PyGithub/pull/3479>) (8ddfd6b11 <https://github.com/PyGithub/PyGithub/commit/8ddfd6b11>)

Add max_rate_limit_wait to GithubRetry to cap rate limit backoff ([#3540](https://github.com/pygithub/pygithub/issues/3540) <https://github.com/PyGithub/PyGithub/pull/3540>) (8b50a098f <https://github.com/PyGithub/PyGithub/commit/8b50a098f>)

Add return_run_details parameter to Workflow.create_dispatch ([#3471](https://github.com/pygithub/pygithub/issues/3471) <https://github.com/PyGithub/PyGithub/pull/3471>) (162ce9d0e <https://github.com/PyGithub/PyGithub/commit/162ce9d0e>)

Update SecurityAndAnalysis ([#3503](https://github.com/pygithub/pygithub/issues/3503) <https://github.com/PyGithub/PyGithub/pull/3503>) (9674c5799 <https://github.com/PyGithub/PyGithub/commit/9674c5799>)

Bug Fixes ^^^^^^^^^

Fix duplicated URL in OrganizationVariable.edit() and OrganizationSecret.edit() ([#3472](https://github.com/pygithub/pygithub/issues/3472) <https://github.com/PyGithub/PyGithub/pull/3472>) (a2e76eb8e <https://github.com/PyGithub/PyGithub/commit/a2e76eb8e>)

Fix GithubException.__str__ decoding bytes data ([#3494](https://github.com/pygithub/pygithub/issues/3494) <https://github.com/PyGithub/PyGithub/pull/3494>) (7a3b22ed6 <https://github.com/PyGithub/PyGithub/commit/7a3b22ed6>)

Fixing OrganizationVariable.value by properly using base class ([#3507](https://github.com/pygithub/pygithub/issues/3507) <https://github.com/PyGithub/PyGithub/pull/3507>) (39a7464ff <https://github.com/PyGithub/PyGithub/commit/39a7464ff>)

Parse only the query string for PaginatedList.totalCount ([#3518](https://github.com/pygithub/pygithub/issues/3518) <https://github.com/PyGithub/PyGithub/pull/3518>) (645d2a2e8 <https://github.com/PyGithub/PyGithub/commit/645d2a2e8>)

Encode boolean query parameters as lowercase ([#3516](https://github.com/pygithub/pygithub/issues/3516) <https://github.com/PyGithub/PyGithub/pull/3516>) (f4e29299e <https://github.com/PyGithub/PyGithub/commit/f4e29299e>)

Fix doubled slash in request path for base_url with trailing slash ([#3537](https://github.com/pygithub/pygithub/issues/3537) <https://github.com/PyGithub/PyGithub/pull/3537>) (c15572f23 <https://github.com/PyGithub/PyGithub/commit/c15572f23>)

Fix WorkflowRun schema suggestion ([#3559](https://github.com/pygithub/pygithub/issues/3559) <https://github.com/PyGithub/PyGithub/pull/3559>) (5f707d64b <https://github.com/PyGithub/PyGithub/commit/5f707d64b>)

Fix OAuth2 authorization state / code_verifier parameters ([#3440](https://github.com/pygithub/pygithub/issues/3440) <https://github.com/PyGithub/PyGithub/pull/3440>) (4785224bc <https://github.com/PyGithub/PyGithub/commit/4785224bc>)

Allow creating custom property with values_editable_by param ([#3548](https://github.com/pygithub/pygithub/issues/3548) <https://github.com/PyGithub/PyGithub/pull/3548>) (134f38a63 <https://github.com/PyGithub/PyGithub/commit/134f38a63>)

Fix OrganizationSecret.edit() to seal the value and use PUT ([#3529](https://github.com/pygithub/pygithub/issues/3529) <https://github.com/PyGithub/PyGithub/pull/3529>) (4f8674b72 <https://github.com/PyGithub/PyGithub/commit/4f8674b72>)

Fix lazy retrieval of latest tag name ([#3487](https://github.com/pygithub/pygithub/issues/3487) <https://github.com/PyGithub/PyGithub/pull/3487>) (33071b35d <https://github.com/PyGithub/PyGithub/commit/33071b35d>)

Fix typing and typos ([#3485](https://github.com/pygithub/pygithub/issues/3485) <https://github.com/PyGithub/PyGithub/pull/3485>) (fd7abf6a7 <https://github.com/PyGithub/PyGithub/commit/fd7abf6a7>)

Maintenance ^^^^^^^^^^^

Add support for Python 3.15 and drop EOL 3.9 ([#3551](https://github.com/pygithub/pygithub/issues/3551) <https://github.com/PyGithub/PyGithub/pull/3551>) (5e2de3144 <https://github.com/PyGithub/PyGithub/commit/5e2de3144>)

Move self-link awareness into CompletableGithubObject ([#3432](https://github.com/pygithub/pygithub/issues/3432) <https://github.com/PyGithub/PyGithub/pull/3432>) (92ec3fab0 <https://github.com/PyGithub/PyGithub/commit/92ec3fab0>)

Add documentation for agents, add Claude skills ([#3509](https://github.com/pygithub/pygithub/issues/3509) <https://github.com/PyGithub/PyGithub/pull/3509>) (28f140d10 <https://github.com/PyGithub/PyGithub/commit/28f140d10>)

Add sphinx-copybutton for code blocks ([#3493](https://github.com/pygithub/pygithub/issues/3493) <https://github.com/PyGithub/PyGithub/pull/3493>_)

Add support to OpenAPI script for applying schema to methods ([#3374](https://github.com/pygithub/pygithub/issues/3374) <https://github.com/PyGithub/PyGithub/pull/3374>) (b7a6d2324 <https://github.com/PyGithub/PyGithub/commit/b7a6d2324>)

Improve OpenAPI apply properties and methods ([#3495](https://github.com/pygithub/pygithub/issues/3495) <https://github.com/PyGithub/PyGithub/pull/3495>_)

Fix OpenAPI method verb detection ([#3496](https://github.com/pygithub/pygithub/issues/3496) <https://github.com/PyGithub/PyGithub/pull/3496>_)

Add OpenAPI script tests ([#3489](https://github.com/pygithub/pygithub/issues/3489) <https://github.com/PyGithub/PyGithub/pull/3489>) (09242d9b0 <https://github.com/PyGithub/PyGithub/commit/09242d9b0>)

Fix OpenAPI apply method ([#3498](https://github.com/pygithub/pygithub/issues/3498) <https://github.com/PyGithub/PyGithub/pull/3498>) (8f8697235 <https://github.com/PyGithub/PyGithub/commit/8f8697235>)

... (truncated)

Commits

5cdf6ab Release 2.10.0 (#3560)
33071b3 Fix lazy retrieval of latest tag name (#3487)
4f8674b Fix OrganizationSecret.edit() to seal the value and use PUT (#3529)
c63d09e docs: add example for uploading multiple files in a single commit (#3545)
4785224 Fix OAuth2 authorization state / code_verifier parameters (#3440)
134f38a Allow creating custom property with values_editable_by param (#3548)
5f707d6 Fix WorkflowRun schema suggestion (#3559)
8280929 docs: add exception handling example (#3543)
c15572f Fix doubled slash in request path for base_url with trailing slash (#3537)
162ce9d Add return_run_details parameter to Workflow.create_dispatch (#3471)
Additional commits viewable in compare view

Updates python-dotenv from 1.2.2 to 1.2.3

Release notes

Sourced from python-dotenv's releases.

v1.2.3

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Changelog

Sourced from python-dotenv's changelog.

[1.2.3] - 2026-08-16

Fixed

Strip a leading UTF-8 BOM from .env file contents so the first variable is no longer silently lost when the file is saved with BOM (e.g. by some JetBrains IDEs on Windows) by [@h1whelan] in #640

set_key now escapes backslashes, so values containing them (Windows paths, regular expressions) survive a write/read round-trip. Quoted values ending in an escaped backslash are no longer mis-parsed as an escaped quote, which used to swallow the following lines by [@dchaudhari7177] in #680

dotenv run now prints a friendly error instead of a traceback when no command is given by [@bbc2] in #606

Cache the parsed result for empty .env files so repeated dotenv_values/load_dotenv calls no longer re-read the file by [@ReinerBRO] in #638

Commits

49515af Bump version: 1.2.2 → 1.2.3
8ac846f chore: add release runbook (RELEASING.md) and make release target
bb31c94 docs: add 1.2.3 release notes (#606, #638, #680)
f7b18d9 fix: round-trip backslashes through set_key (#680)
751f8c1 ci(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions gro...
f1937b6 chore(deps): update mkdocs-include-markdown-plugin requirement from >=6.0.0 t...
45b9372 chore(deps): update pytest requirement from >=3.9 to >=9.0.3 (#653)
72896e9 docs: fix broken mkdocs link in CONTRIBUTING.md (#636)
72754a1 ci(deps): bump peaceiris/actions-gh-pages from 4.0.0 to 4.1.0 in the github-a...
078325e ci(security): harden CI/CD supply chain with SHA pinning and least-privilege ...
Additional commits viewable in compare view

Updates tiktoken from 0.13.0 to 0.14.0

Changelog

Sourced from tiktoken's changelog.

[v0.14.0]

Build wheels for Python 3.15

Support looking up more GPT-5 series models

Upgrade dependencies

Commits

4e71bbe Release 0.14.0 (#597)
212b893 Fail open for GPT-5 model tokenisers (#596)
4187ba3 Upgrade dependencies (#595)
92a8255 Remove test-skip comment for macOS arm64 (#562)
674f5e6 Build Python 3.15 (#594)
dbea866 Remove deprecated freethreading build
f678224 Update cibuildwheel
08a5f3b ci: use static artifact name for sdist build job (#535)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
`@dependabot ignore <depe...

Description has been truncated

…th 7 updates Bumps the runtime-minor-patch group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [anyio](https://github.com/agronholm/anyio) | `4.14.2` | `4.15.1` | | [click](https://github.com/pallets/click) | `8.4.2` | `8.5.0` | | [gitpython](https://github.com/gitpython-developers/GitPython) | `3.1.59` | `3.1.62` | | [pydantic](https://github.com/pydantic/pydantic) | `2.13.4` | `2.13.5` | | [pygithub](https://github.com/pygithub/pygithub) | `2.9.1` | `2.10.0` | | [python-dotenv](https://github.com/theskumar/python-dotenv) | `1.2.2` | `1.2.3` | | [tiktoken](https://github.com/openai/tiktoken) | `0.13.0` | `0.14.0` | Updates `anyio` from 4.14.2 to 4.15.1 - [Release notes](https://github.com/agronholm/anyio/releases) - [Commits](agronholm/anyio@4.14.2...4.15.1) Updates `click` from 8.4.2 to 8.5.0 - [Release notes](https://github.com/pallets/click/releases) - [Changelog](https://github.com/pallets/click/blob/main/CHANGES.md) - [Commits](pallets/click@8.4.2...8.5.0) Updates `gitpython` from 3.1.59 to 3.1.62 - [Release notes](https://github.com/gitpython-developers/GitPython/releases) - [Changelog](https://github.com/gitpython-developers/GitPython/blob/main/CHANGES) - [Commits](gitpython-developers/GitPython@3.1.59...3.1.62) Updates `pydantic` from 2.13.4 to 2.13.5 - [Release notes](https://github.com/pydantic/pydantic/releases) - [Changelog](https://github.com/pydantic/pydantic/blob/v2.13.5/HISTORY.md) - [Commits](pydantic/pydantic@v2.13.4...v2.13.5) Updates `pygithub` from 2.9.1 to 2.10.0 - [Release notes](https://github.com/pygithub/pygithub/releases) - [Changelog](https://github.com/PyGithub/PyGithub/blob/main/doc/changes.rst) - [Commits](PyGithub/PyGithub@v2.9.1...v2.10.0) Updates `python-dotenv` from 1.2.2 to 1.2.3 - [Release notes](https://github.com/theskumar/python-dotenv/releases) - [Changelog](https://github.com/theskumar/python-dotenv/blob/main/CHANGELOG.md) - [Commits](theskumar/python-dotenv@v1.2.2...v1.2.3) Updates `tiktoken` from 0.13.0 to 0.14.0 - [Release notes](https://github.com/openai/tiktoken/releases) - [Changelog](https://github.com/openai/tiktoken/blob/main/CHANGELOG.md) - [Commits](openai/tiktoken@0.13.0...0.14.0) --- updated-dependencies: - dependency-name: anyio dependency-version: 4.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: click dependency-version: 8.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: gitpython dependency-version: 3.1.62 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-minor-patch - dependency-name: pydantic dependency-version: 2.13.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-minor-patch - dependency-name: pygithub dependency-version: 2.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch - dependency-name: python-dotenv dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: runtime-minor-patch - dependency-name: tiktoken dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: runtime-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-09-14T13:11:42Z

Labels

The following labels could not be found: dependencies, python. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

Navigation Menu

Uh oh!

chore(deps): bump the runtime-minor-patch group across 1 directory with 7 updates - #205

chore(deps): bump the runtime-minor-patch group across 1 directory with 7 updates#205
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/runtime-minor-patch-dea7ed2283

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026

4.15.1

4.15.0

8.5.0

Version 8.5.0

3.1.62

What's Changed

New Contributors

3.1.61

What's Changed

New Contributors

3.1.60 Security

What's Changed

v2.13.5 (2026-08-28)

What's Changed

Fixes

v2.13.5 (2026-08-28)

What's Changed

Fixes

2.10.0

Notable changes

Drop Python 3.9 support due to End-of-Life

New Features

Improvements

Bug Fixes

Maintenance

Version 2.10.0 (August 20, 2026)

v1.2.3

Fixed

[1.2.3] - 2026-08-16

Fixed

[v0.14.0]

Uh oh!

dependabot Bot commented on behalf of github Sep 14, 2026

Labels

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants