Skip to content

chore(deps): update python-nonmajor#1370

Open
renovate-bot wants to merge 1 commit intoGoogleCloudPlatform:mainfrom
renovate-bot:renovate/python-nonmajor
Open

chore(deps): update python-nonmajor#1370
renovate-bot wants to merge 1 commit intoGoogleCloudPlatform:mainfrom
renovate-bot:renovate/python-nonmajor

Conversation

@renovate-bot
Copy link
Copy Markdown
Contributor

@renovate-bot renovate-bot commented Jan 21, 2026

This PR contains the following updates:

Package Change Age Confidence
SQLAlchemy (changelog) ==2.0.45==2.0.48 age confidence
aiohttp ==3.13.3==3.13.4 age confidence
charset-normalizer (changelog) ==3.4.5==3.4.6 age confidence
filelock ==3.20.3==3.25.2 age confidence
google-auth ==2.47.0==2.49.1 age confidence
platformdirs (changelog) ==4.5.1==4.9.4 age confidence
pytest-cov (changelog) ==7.0.0==7.1.0 age confidence
virtualenv ==20.36.1==20.39.1 age confidence

Release Notes

aio-libs/aiohttp (aiohttp)

v3.13.4: 3.13.4

Compare Source

Features

  • Added max_headers parameter to limit the number of headers that should be read from a response -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub:
    #​11955.

  • Added a dns_cache_max_size parameter to TCPConnector to limit the size of the cache -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub:
    #​12106.

Bug fixes

  • Fixed server hanging indefinitely when chunked transfer encoding chunk-size
    does not match actual data length. The server now raises
    TransferEncodingError instead of waiting forever for data that will
    never arrive -- by :user:Fridayai700.

    Related issues and pull requests on GitHub:
    #​10596.

  • Fixed access log timestamps ignoring daylight saving time (DST) changes. The
    previous implementation used :py:data:time.timezone which is a constant and
    does not reflect DST transitions -- by :user:nightcityblade.

    Related issues and pull requests on GitHub:
    #​11283.

  • Fixed RuntimeError: An event loop is running error when using aiohttp.GunicornWebWorker
    or aiohttp.GunicornUVLoopWebWorker on Python >=3.14.
    -- by :user:Tasssadar.

    Related issues and pull requests on GitHub:
    #​11701.

  • Fixed :exc:ValueError when creating a TLS connection with ClientTimeout(total=0) by converting 0 to None before passing to ssl_handshake_timeout in :py:meth:asyncio.loop.start_tls -- by :user:veeceey.

    Related issues and pull requests on GitHub:
    #​11859.

  • Restored :py:meth:~aiohttp.BodyPartReader.decode as a synchronous method
    for backward compatibility. The method was inadvertently changed to async
    in 3.13.3 as part of the decompression bomb security fix. A new
    :py:meth:~aiohttp.BodyPartReader.decode_iter method is now available
    for non-blocking decompression of large payloads using an async generator.
    Internal aiohttp code uses the async variant to maintain security protections.

    Changed multipart processing chunk sizes from 64 KiB to 256KiB, to better
    match aiohttp internals
    -- by :user:bdraco and :user:Dreamsorcerer.

    Related issues and pull requests on GitHub:
    #​11898.

  • Fixed false-positive :py:class:DeprecationWarning for passing enable_cleanup_closed=True to :py:class:~aiohttp.TCPConnector specifically on Python 3.12.7.
    -- by :user:Robsdedude.

    Related issues and pull requests on GitHub:
    #​11972.

  • Fixed _sendfile_fallback over-reading beyond requested count -- by :user:bysiber.

    Related issues and pull requests on GitHub:
    #​12096.

  • Fixed digest auth dropping challenge fields with empty string values -- by :user:bysiber.

    Related issues and pull requests on GitHub:
    #​12097.

  • ClientConnectorCertificateError.os_error no longer raises :exc:AttributeError
    -- by :user:themylogin.

    Related issues and pull requests on GitHub:
    #​12136.

  • Adjusted pure-Python request header value validation to align with RFC 9110 control-character handling, while preserving lax response parser behavior, and added regression tests for Host/header control-character cases.
    -- by :user:rodrigobnogueira.

    Related issues and pull requests on GitHub:
    #​12231.

  • Rejected duplicate singleton headers (Host, Content-Type,
    Content-Length, etc.) in the C extension HTTP parser to match
    the pure Python parser behaviour, preventing potential host-based
    access control bypasses via parser differentials
    -- by :user:rodrigobnogueira.

    Related issues and pull requests on GitHub:
    #​12240.

  • Aligned the pure-Python HTTP request parser with the C parser by splitting
    comma-separated and repeated Connection header values for keep-alive,
    close, and upgrade handling -- by :user:rodrigobnogueira.

    Related issues and pull requests on GitHub:
    #​12249.

Improved documentation

  • Documented :exc:asyncio.TimeoutError for WebSocketResponse.receive()
    and related methods -- by :user:veeceey.

    Related issues and pull requests on GitHub:
    #​12042.

Packaging updates and notes for downstreams

  • Upgraded llhttp to 3.9.1 -- by :user:Dreamsorcerer.

    Related issues and pull requests on GitHub:
    #​12069.

Contributor-facing changes

  • The benchmark CI job now runs only in the upstream repository -- by :user:Cycloctane.

    It used to always fail in forks, which this change fixed.

    Related issues and pull requests on GitHub:
    #​11737.

  • Fixed flaky performance tests by using appropriate fixed thresholds that account for CI variability -- by :user:rodrigobnogueira.

    Related issues and pull requests on GitHub:
    #​11992.

Miscellaneous internal changes

  • Fixed test_invalid_idna to work with idna 3.11 by using an invalid character (\u0080) that is rejected by yarl during URL construction -- by :user:rodrigobnogueira.

    Related issues and pull requests on GitHub:
    #​12027.

  • Fixed race condition in test_data_file on Python 3.14 free-threaded builds -- by :user:rodrigobnogueira.

    Related issues and pull requests on GitHub:
    #​12170.


jawah/charset_normalizer (charset-normalizer)

v3.4.6

Compare Source

Changed
  • Flattened the logic in charset_normalizer.md for higher performance. Removed eligible(..) and feed(...)
    in favor of feed_info(...).
  • Raised upper bound for mypy[c] to 1.20, for our optimized version.
  • Updated UNICODE_RANGES_COMBINED using Unicode blocks v17.
Fixed
  • Edge case where noise difference between two candidates can be almost insignificant. (#​672)
  • CLI --normalize writing to wrong path when passing multiple files in. (#​702)
Misc
  • Freethreaded pre-built wheels now shipped in PyPI starting with 3.14t. (#​616)
tox-dev/py-filelock (filelock)

v3.25.2

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.25.1...3.25.2

v3.25.1

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.25.0...3.25.1

v3.25.0

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.24.4...3.25.0

v3.24.3

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.24.2...3.24.3

v3.24.2

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.24.1...3.24.2

v3.24.1

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.24.0...3.24.1

v3.24.0

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.23.0...3.24.0

v3.23.0

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.22.0...3.23.0

v3.22.0

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.21.2...3.22.0

v3.21.2

Compare Source

What's Changed

Full Changelog: tox-dev/filelock@3.21.1...3.21.2

v3.21.1

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.21.0...3.21.1

v3.21.0

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.20.3...3.21.0

v3.20.4

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/filelock@3.20.3...3.20.4

googleapis/google-auth-library-python (google-auth)

v2.48.0

Compare Source

Features
Bug Fixes
tox-dev/platformdirs (platformdirs)

v4.9.4

Compare Source

What's Changed

Full Changelog: tox-dev/platformdirs@4.9.3...4.9.4

v4.9.2

Compare Source

What's Changed

Full Changelog: tox-dev/platformdirs@4.9.1...4.9.2

v4.9.1

Compare Source

What's Changed

Full Changelog: tox-dev/platformdirs@4.9.0...4.9.1

v4.9.0

Compare Source

What's Changed

Full Changelog: tox-dev/platformdirs@4.8.0...4.9.0

v4.8.0

Compare Source

What's Changed

Full Changelog: tox-dev/platformdirs@4.7.1...4.8.0

v4.7.1

Compare Source

What's Changed

Full Changelog: tox-dev/platformdirs@4.7.0...4.7.1

v4.7.0

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/platformdirs@4.6.0...4.7.0

v4.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: tox-dev/platformdirs@4.5.1...4.6.0

pytest-dev/pytest-cov (pytest-cov)

v7.1.0

Compare Source

  • Fixed total coverage computation to always be consistent, regardless of reporting settings.
    Previously some reports could produce different total counts, and consequently can make --cov-fail-under behave different depending on
    reporting options.
    See #&#8203;641 <https://github.com/pytest-dev/pytest-cov/issues/641>_.

  • Improve handling of ResourceWarning from sqlite3.

    The plugin adds warning filter for sqlite3 ResourceWarning unclosed database (since 6.2.0).
    It checks if there is already existing plugin for this message by comparing filter regular expression.
    When filter is specified on command line the message is escaped and does not match an expected message.
    A check for an escaped regular expression is added to handle this case.

    With this fix one can suppress ResourceWarning from sqlite3 from command line::

    pytest -W "ignore:unclosed database in <sqlite3.Connection object at:ResourceWarning" ...

  • Various improvements to documentation.
    Contributed by Art Pelling in #&#8203;718 <https://github.com/pytest-dev/pytest-cov/pull/718>_ and
    "vivodi" in #&#8203;738 <https://github.com/pytest-dev/pytest-cov/pull/738>.
    Also closed #&#8203;736 <https://github.com/pytest-dev/pytest-cov/issues/736>
    .

  • Fixed some assertions in tests.
    Contributed by in Markéta Machová in #&#8203;722 <https://github.com/pytest-dev/pytest-cov/pull/722>_.

  • Removed unnecessary coverage configuration copying (meant as a backup because reporting commands had configuration side-effects before coverage 5.0).

pypa/virtualenv (virtualenv)

v20.39.1

Compare Source

What's Changed

Full Changelog: pypa/virtualenv@20.39.0...20.39.1

v20.39.0

Compare Source

What's Changed

Full Changelog: pypa/virtualenv@20.38.0...20.39.0

v20.38.0

Compare Source

What's Changed

New Contributors

Full Changelog: pypa/virtualenv@20.37.0...20.38.0


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot renovate-bot requested a review from a team as a code owner January 21, 2026 19:37
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Jan 21, 2026

/gcbrun

@renovate-bot renovate-bot changed the title chore(deps): update dependency sqlalchemy to v2.0.46 chore(deps): update python-nonmajor Jan 26, 2026
@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from df7408e to 0d0ec3f Compare January 26, 2026 20:08
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Jan 26, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 0d0ec3f to 290e2b9 Compare January 28, 2026 04:27
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Jan 28, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 290e2b9 to d6a8a0a Compare February 10, 2026 19:31
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Feb 10, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from d6a8a0a to 7b96675 Compare February 11, 2026 02:46
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Feb 11, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 7b96675 to 3842c7f Compare February 18, 2026 19:01
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Feb 18, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 3842c7f to 4f38905 Compare February 24, 2026 17:14
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Feb 24, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 4f38905 to a6ba752 Compare March 2, 2026 19:54
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 2, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from a6ba752 to 3c04c36 Compare March 6, 2026 23:07
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 6, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 3c04c36 to a0cd97f Compare March 12, 2026 19:48
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 12, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from a0cd97f to 39b67ae Compare March 16, 2026 16:45
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 16, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 39b67ae to dfabbee Compare March 16, 2026 16:47
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 16, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from dfabbee to cd5a889 Compare March 17, 2026 02:45
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 17, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from cd5a889 to 655348b Compare March 17, 2026 19:32
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 17, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 655348b to f1ef448 Compare March 17, 2026 20:44
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 17, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from f1ef448 to eef6aa7 Compare March 21, 2026 22:49
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 21, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from eef6aa7 to f013c8a Compare March 25, 2026 15:41
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 25, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from f013c8a to c715b43 Compare March 26, 2026 15:15
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 26, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from c715b43 to 3aeb104 Compare March 27, 2026 03:26
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 27, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from 3aeb104 to c885c18 Compare March 28, 2026 18:48
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 28, 2026

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/python-nonmajor branch from c885c18 to b70c988 Compare March 29, 2026 02:20
@dpebot
Copy link
Copy Markdown
Collaborator

dpebot commented Mar 29, 2026

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants