chore(deps): Bump the all group across 1 directory with 63 updates

[dependabot]

Bumps the all group with 63 updates in the /server directory:

Package	From	To
aiofiles	24.1.0	25.1.0
anthropic	0.50.0	0.75.0
anyio	4.9.0	4.12.0
astroid	3.3.9	4.0.2
billiard	4.2.1	4.2.4
boto3	1.38.8	1.42.4
botocore	1.38.8	1.42.4
celery	5.5.2	5.6.0
certifi	2025.4.26	2025.11.12
charset-normalizer	3.4.2	3.4.4
click	8.1.8	8.3.1
click-plugins	1.1.1	1.1.1.2
dnspython	2.7.0	2.8.0
filelock	3.18.0	3.20.0
fsspec	2025.3.2	2025.12.0
httptools	0.6.4	0.7.1
huggingface-hub	0.30.2	1.2.1
humanize	4.12.3	4.14.0
idna	3.10	3.11
iniconfig	2.1.0	2.3.0
isort	6.0.1	7.0.0
jiter	0.9.0	0.12.0
joblib	1.4.2	1.5.2
kombu	5.5.3	5.6.1
lazy-model	0.2.0	0.4.0
markupsafe	3.0.2	3.0.3
motor	3.7.0	3.7.1
multidict	6.4.3	6.7.0
numpy	2.2.4	2.3.5
openai	1.77.0	2.9.0
pillow	11.2.1	12.0.0
platformdirs	4.3.7	4.5.1
pluggy	1.5.0	1.6.0
polars-lts-cpu	1.29.0	1.33.1
prometheus-client	0.21.1	0.23.1
prompt-toolkit	3.0.51	3.0.52
pydantic	2.11.4	2.12.5
pydantic-core	2.33.2	2.41.5
pylint	3.3.6	4.0.4
pymongo	4.12.1	4.15.5
pytest	8.3.5	9.0.2
pytest-asyncio	0.26.0	1.3.0
python-dotenv	1.1.0	1.2.1
python-engineio	4.12.0	4.12.3
python-socketio	5.13.0	5.15.0
pyyaml	6.0.2	6.0.3
redis	5.2.1	7.1.0
requests	2.32.3	2.32.5
s3transfer	0.12.0	0.16.0
scikit-learn	1.6.1	1.7.2
scipy	1.15.2	1.16.3
setuptools	80.3.0	80.9.0
tokenizers	0.21.1	0.22.1
tomlkit	0.13.2	0.13.3
tornado	6.5.1	6.5.2
tracerite	1.1.1	1.1.3
typing-inspection	0.4.0	0.4.2
typing-extensions	4.13.2	4.15.0
ujson	5.10.0	5.11.0
urllib3	2.5.0	2.6.0
uvloop	0.21.0	0.22.1
wcwidth	0.2.13	0.2.14
wsproto	1.2.0	1.3.2

Updates aiofiles from 24.1.0 to 25.1.0

Release notes

Sourced from aiofiles's releases.

v25.1.0

• Switch to uv + add Python v3.14 support. (#219)
• Add ruff formatter and linter. #216
• Drop Python 3.8 support. If you require it, use version 24.1.0. #204

New Contributors

• @​danielsmyers made their first contribution in Tinche/aiofiles#185
• @​stankudrow made their first contribution in Tinche/aiofiles#192
• @​waketzheng made their first contribution in Tinche/aiofiles#221

Full Changelog: Tinche/aiofiles@v24.1.0...v25.1.0

Changelog

Sourced from aiofiles's changelog.

25.1.0 (2025-10-09)

• Switch to uv + add Python v3.14 support. (#219)
• Add ruff formatter and linter. #216
• Drop Python 3.8 support. If you require it, use version 24.1.0. #204

Commits

• 348f5ef v25.1.0
• 5e1bb8f docs: update readme to use ruff badge (#221)
• 6fdc25c Move to uv. (#219)
• 1989132 set 'function' as a default fixture loop scope value
• 8986452 add the 'asyncio_default_fixture_loop_scope=session' option
• ccab1ff update pytest-asyncio==1.0.0
• 8727c96 add PR #216 into the CHANGELOG
• a9388e5 add TID and ignore TID252
• 7603664 remove [ruff].exclude keyval
• 7c49a5c add final newlines
• Additional commits viewable in compare view

Updates anthropic from 0.50.0 to 0.75.0

Release notes

Sourced from anthropic's releases.

v0.75.0

0.75.0 (2025-11-24)

Full Changelog: v0.74.1...v0.75.0

Features

• api: adds support for Claude Opus 4.5, Effort, Advance Tool Use Features, Autocompaction, and Computer Use v5 (5c3e633)

Bug Fixes

• internal: small fixes (36c82f7)

Chores

• fix lint issues (4f1fd54)

v0.74.1

0.74.1 (2025-11-19)

Full Changelog: v0.74.0...v0.74.1

Bug Fixes

• structured outputs: use correct beta header (e90d347)

Chores

• examples: update model references (e09461d)

v0.74.0

0.74.0 (2025-11-18)

Full Changelog: v0.73.0...v0.74.0

Features

• add Foundry SDK (3ae9e45)

Bug Fixes

• examples/memory: properly add assistant_content to messages (#1049) (9c7141b)
• use posix paths in file collection for cross-platform compatibility (d9c6f40), closes #1051

Chores

... (truncated)

Changelog

Sourced from anthropic's changelog.

0.75.0 (2025-11-24)

Full Changelog: v0.74.1...v0.75.0

Features

• api: adds support for Claude Opus 4.5, Effort, Advance Tool Use Features, Autocompaction, and Computer Use v5 (5c3e633)

Bug Fixes

• internal: small fixes (36c82f7)

Chores

• fix lint issues (4f1fd54)

0.74.1 (2025-11-19)

Full Changelog: v0.74.0...v0.74.1

Bug Fixes

• structured outputs: use correct beta header (e90d347)

Chores

• examples: update model references (e09461d)

0.74.0 (2025-11-18)

Full Changelog: v0.73.0...v0.74.0

Features

• add Foundry SDK (3ae9e45)

Bug Fixes

• examples/memory: properly add assistant_content to messages (#1049) (9c7141b)
• use posix paths in file collection for cross-platform compatibility (d9c6f40), closes #1051

Chores

• internal: remove unnecessary wrapper around external snapshots (19eceac)

... (truncated)

Commits

• 2eb9415 release: 0.75.0
• c243fb4 fix(internal): small fixes
• 115665e chore: fix lint issues
• 9843a8e feat(api): adds support for Claude Opus 4.5, Effort, Advance Tool Use Feature...
• c47c5bd release: 0.74.1
• de22acc chore(examples): update model references
• c94119b fix(structured outputs): use correct beta header
• 49fe6ed release: 0.74.0
• ac3c167 fix(examples/memory): properly add assistant_content to messages (#1049)
• 2a35fc0 docs: explain snapshot update process (#1040)
• Additional commits viewable in compare view

Updates anyio from 4.9.0 to 4.12.0

Release notes

Sourced from anyio's releases.

4.12.0

• Added support for asyncio's task call graphs on Python 3.14 and later when using AnyIO's task groups (#1025)
• Added an asynchronous implementation of the functools module (#1001)
• Added support for uvloop=True on Windows via the winloop implementation (#960; PR by @​Vizonex)
• Added support for use as a context manager to anyio.lowlevel.RunVar (#1003)
• Added __all__ declarations to public submodules (anyio.lowlevel etc.) (#1009)
• Added the ability to set the token count of a CapacityLimiter to zero (#1019; requires Python 3.10 or later when using Trio)
• Added parameters case_sensitive and recurse_symlinks along with support for path-like objects to anyio.Path.glob() and anyio.Path.rglob() (#1033; PR by @​northisup)
• Dropped sniffio as a direct dependency and added the get_available_backends() function (#1021)
• Fixed Process.stdin.send() not raising ClosedResourceError and BrokenResourceError on asyncio. Previously, a non-AnyIO exception was raised in such cases (#671; PR by @​gschaffner)
• Fixed Process.stdin.send() not checkpointing before writing data on asyncio (#1002; PR by @​gschaffner)
• Fixed a race condition where cancelling a Future from BlockingPortal.start_task_soon() would sometimes not cancel the async function (#1011; PR by @​gschaffner)
• Fixed the presence of the pytest plugin causing breakage with older versions of pytest (<= 6.1.2) (#1028; PR by @​saper)
• Fixed a rarely occurring RuntimeError: Set changed size during iteration while shutting down the process pool when using the asyncio backend (#985)

4.11.0

• Added support for cancellation reasons (the reason parameter to CancelScope.cancel()) (#975)
• Bumped the minimum version of Trio to v0.31.0
• Added the ability to enter the event loop from foreign (non-worker) threads by passing the return value of anyio.lowlevel.current_token() to anyio.from_thread.run() and anyio.from_thread.run_sync() as the token keyword argument (#256)
• Added pytest option (anyio_mode = "auto") to make the pytest plugin automatically handle all async tests (#971)
• Added the anyio.Condition.wait_for() method for feature parity with asyncio (#974)
• Changed the default type argument of anyio.abc.TaskStatus from Any to None (#964)
• Fixed TCP listener behavior to guarantee the same ephemeral port is used for all socket listeners when local_port=0 (#857; PR by @​11kkw and @​agronholm)
• Fixed inconsistency between Trio and asyncio where a TCP stream that previously raised a BrokenResourceError on send() would still raise BrokenResourceError after the stream was closed on asyncio, but ClosedResourceError on Trio. They now both raise a ClosedResourceError in this scenario. (#671)

4.10.0

• Added the feed_data() method to the BufferedByteReceiveStream class, allowing users to inject data directly into the buffer
• Added various class methods to wrap existing sockets as listeners or socket streams:
  • SocketListener.from_socket()
  • SocketStream.from_socket()
  • UNIXSocketStream.from_socket()
  • UDPSocket.from_socket()
  • ConnectedUDPSocket.from_socket()
  • UNIXDatagramSocket.from_socket()
  • ConnectedUNIXDatagramSocket.from_socket()
• Added a hierarchy of connectable stream classes for transparently connecting to various remote or local endpoints for exchanging bytes or objects
• Added context manager mix-in classes (anyio.ContextManagerMixin and anyio.AsyncContextManagerMixin) to help write classes that embed other context managers, particularly cancel scopes or task groups (#905; PR by @​agronholm and @​tapetersen)
• Added the ability to specify the thread name in start_blocking_portal() (#818; PR by @​davidbrochart)
• Added anyio.notify_closing to allow waking anyio.wait_readable and anyio.wait_writable before closing a socket. Among other things, this prevents an OSError on the ProactorEventLoop. (#896; PR by @​graingert)
• Incorporated several documentation improvements from the EuroPython 2025 sprint (special thanks to the sprinters: Emmanuel Okedele, Jan Murre, Euxenia Miruna Goia and Christoffer Fjord)
• Added a documentation page explaining why one might want to use AnyIO's APIs instead of asyncio's
• Updated the to_interpreters module to use the public concurrent.interpreters API on Python 3.14 or later
• Fixed anyio.Path.copy() and anyio.Path.copy_into() failing on Python 3.14.0a7
• Fixed return annotation of __aexit__ on async context managers. CMs which can suppress exceptions should return bool, or None otherwise. (#913; PR by @​Enegg)
• Fixed rollover boundary check in SpooledTemporaryFile so that rollover only occurs when the buffer size exceeds max_size (#915; PR by @​11kkw)
• Migrated testing and documentation dependencies from extras to dependency groups
• Fixed compatibility of anyio.to_interpreter with Python 3.14.0b2 (#926; PR by @​hroncok)
• Fixed SyntaxWarning on Python 3.14 about return in finally (#816)
• Fixed RunVar name conflicts. RunVar instances with the same name should not share storage (#880; PR by @​vimfu)
• Renamed the BrokenWorkerIntepreter exception to BrokenWorkerInterpreter. The old name is available as a deprecated alias. (#938; PR by @​ayussh-verma)

... (truncated)

Commits

• bc021b6 Fixed the download-artifact settings to retain the expected behavior
• c6000aa Corrected the format of the version in the changelog
• 9d1bfe0 Bumped up the version
• 77f7ce2 Fixed RuntimeError while shutting down the asyncio process pool (#1039)
• aecc666 [pre-commit.ci] pre-commit autoupdate (#1036)
• e5569ad Bump actions/checkout from 5 to 6 in the github-actions group (#1037)
• dde3ab8 Moved a changelog entry to its correct position
• 250d4f1 Restore compatibility with pytest<=6.1.2 (#1030)
• 3708e22 Fixed a typo in the documentation (#1035)
• 9adbe08 Add new params to Path.glob & Path.rglob introduced since 3.12 (#1034)
• Additional commits viewable in compare view

Updates astroid from 3.3.9 to 4.0.2

Release notes

Sourced from astroid's releases.

v4.0.2

What's New in astroid 4.0.2?

Release date: 2025-11-09

• Handle FunctionDef blockstart_tolineno edge cases correctly.

  Refs #2880

• Add HTTPMethod enum support to brain module for Python 3.11+.

  Refs pylint-dev/pylint#10624 Closes #2877

v4.0.1

What's New in astroid 4.0.1?

Release date: 2025-10-11

• Suppress SyntaxWarning for invalid escape sequences and return in finally on Python 3.14 when parsing modules.

• Assign Import and ImportFrom nodes to module locals if used with global.

  Closes pylint-dev/pylint#10632

v4.0.0

What's New in astroid 4.0.0?

Release date: 2025-10-05

• Support constraints from ternary expressions in inference.

  Closes pylint-dev/pylint#9729

• Handle deprecated bool(NotImplemented) cast in const nodes.

• Add support for boolean truthiness constraints (x, not x) in inference.

  Closes pylint-dev/pylint#9515

• Fix false positive invalid-name on attrs classes with ClassVar annotated variables.

  Closes pylint-dev/pylint#10525

• Prevent crash when parsing deeply nested parentheses causing MemoryError in python's built-in ast.

  Closes #2643

• Fix crash when inferring namedtuple with invalid field name looking like f-string formatting.

... (truncated)

Changelog

Sourced from astroid's changelog.

What's New in astroid 4.0.2?

Release date: 2025-11-09

• Handle FunctionDef blockstart_tolineno edge cases correctly.

  Refs #2880

• Add HTTPMethod enum support to brain module for Python 3.11+.

  Refs pylint-dev/pylint#10624 Closes #2877

What's New in astroid 4.0.1?

Release date: 2025-10-11

• Suppress SyntaxWarning for invalid escape sequences and return in finally on Python 3.14 when parsing modules.

• Assign Import and ImportFrom nodes to module locals if used with global.

  Closes pylint-dev/pylint#10632

What's New in astroid 4.0.0?

Release date: 2025-10-05

• Support constraints from ternary expressions in inference.

  Closes pylint-dev/pylint#9729

• Handle deprecated bool(NotImplemented) cast in const nodes.

• Add support for boolean truthiness constraints (x, not x) in inference.

  Closes pylint-dev/pylint#9515

• Fix false positive invalid-name on attrs classes with ClassVar annotated variables.

  Closes pylint-dev/pylint#10525

• Prevent crash when parsing deeply nested parentheses causing MemoryError in python's built-in ast.

  Closes #2643

• Fix crash when inferring namedtuple with invalid field name looking like f-string formatting.

  Closes #2519

... (truncated)

Commits

• a068430 Bump astroid to 4.0.2, update changelog
• a5ce4b0 Upgrade pylint to 4.0.0, add mypy to the allowlist
• d71bfac [Backport maintenance/4.0.x] Handle FunctionDef blockstart_tolineno edge case...
• e127630 [Backport maintenance/4.0.x] feat: add HTTPMethod enum support to brain_http ...
• 9f17568 Bump astroid to 4.0.1, update changelog (#2858)
• 0403b40 [Backport maintenance/4.0.x] Assign import nodes to module locals if used wit...
• d1bbd35 [Backport maintenance/4.0.x] Suppress SyntaxWarnings for Python 3.14 when par...
• bb38aa4 Bump astroid to 4.0.0, update changelog
• fe0c542 Fix changelog typo
• 0562ce3 Improve conditionals (#2845)
• Additional commits viewable in compare view

Updates billiard from 4.2.1 to 4.2.4

Release notes

Sourced from billiard's releases.

v4.2.4

What's Changed

• Eliminate usage of 'return' in 'finally' blocks by @​torarvid in celery/billiard#438
• Prepare for release: v4.2.4 by @​Nusnus in celery/billiard#439

New Contributors

• @​torarvid made their first contribution in celery/billiard#438

Full Changelog: celery/billiard@v4.2.3...v4.2.4

v4.2.3

What's Changed

• Ensure that task results are delivered during pool shutdown by @​weetster in celery/billiard#435
• Prepare for release: v4.2.3 by @​Nusnus in celery/billiard#436

New Contributors

• @​weetster made their first contribution in celery/billiard#435

Full Changelog: celery/billiard@v4.2.2...v4.2.3

v4.2.2

What's Changed

• Add codespell support (config, workflow to detect/not fix) and make it fix few typos by @​yarikoptic in celery/billiard#416
• initial python 3.13 support by @​auvipy in celery/billiard#421
• Copy code.co_qualname on Python >= 3.11 by @​cjwatson in celery/billiard#423
• Added DeepWiki to README by @​Nusnus in celery/billiard#424
• Fix the failing pre-commit.ci job by @​cclauss in celery/billiard#429
• GitHub Actions: Test on Python 3.14 release candidate 2 by @​cclauss in celery/billiard#428
• Keep GitHub Actions up to date with GitHub's Dependabot by @​cclauss in celery/billiard#430
• Bump the github-actions group with 2 updates by @​dependabot[bot] in celery/billiard#431
• Prepare for release: v4.2.2 by @​Nusnus in celery/billiard#432

New Contributors

• @​yarikoptic made their first contribution in celery/billiard#416
• @​cjwatson made their first contribution in celery/billiard#423
• @​cclauss made their first contribution in celery/billiard#429

Full Changelog: celery/billiard@v4.2.1...v4.2.2

Changelog

Sourced from billiard's changelog.

4.2.4 - 2025-11-30

• Eliminate usage of 'return' in 'finally' blocks (#438)
• Prepare for release: v4.2.4 (#439)

4.2.3 - 2025-11-16

• Ensure that task results are delivered during pool shutdown (#435)
• Prepare for release: v4.2.3 (#436)

4.2.2 - 2025-09-20

• Add codespell support (config, workflow to detect/not fix) and make it fix few typos
• initial python 3.13 support
• Copy code.co_qualname on Python >= 3.11
• Added DeepWiki to README
• Fix the failing pre-commit.ci job
• GitHub Actions: Test on Python 3.14 release candidate 2
• Keep GitHub Actions up to date with GitHub's Dependabot
• Bump the github-actions group with 2 updates
• Prepare for release: v4.2.2

Commits

• 69c2f29 Prepare for release: v4.2.4 (#439)
• 973c773 Eliminate usage of 'return' in 'finally' blocks (#438)
• 5115394 Bump actions/checkout from 5 to 6 in the github-actions group (#437)
• e8f51d1 Prepare for release: v4.2.3 (#436)
• 8603172 Ensure that task results are delivered during pool shutdown (#435)
• 849a3e8 Bump github/codeql-action from 3 to 4 in the github-actions group
• 0642d2e Prepare for release: v4.2.2 (#432)
• a954b74 Bump the github-actions group with 2 updates (#431)
• 57123cb Keep GitHub Actions up to date with GitHub's Dependabot (#430)
• 75d195c GitHub Actions: Test on Python 3.14 release candidate 2
• Additional commits viewable in compare view

Updates boto3 from 1.38.8 to 1.42.4

Commits

• 87d85be Merge branch 'release-1.42.4'
• 2ed62e3 Bumping version to 1.42.4
• 7df80a3 Add changelog entries from botocore
• 3471175 Merge branch 'release-1.42.3'
• dfb22ff Merge branch 'release-1.42.3' into develop
• 2e3d125 Bumping version to 1.42.3
• 04ebd3c Add changelog entries from botocore
• cc95ab6 Merge branch 'release-1.42.2'
• 743b8e4 Merge branch 'release-1.42.2' into develop
• 8f7ba80 Bumping version to 1.42.2
• Additional commits viewable in compare view

Updates botocore from 1.38.8 to 1.42.4

Commits

• 05bdcec Merge branch 'release-1.42.4'
• b04193b Bumping version to 1.42.4
• 6d8692f Update to latest models
• 4e2bde0 Upgrade awscrt to 0.29.2 (#3608)
• c57744c Add retries to handle IAM eventual consistency issues (#3600)
• b71ae76 Merge branch 'release-1.42.3'
• 220c0b0 Merge branch 'release-1.42.3' into develop
• ac07545 Bumping version to 1.42.3
• 68fc097 Update to latest models
• b287796 Merge branch 'release-1.42.2'
• Additional commits viewable in compare view

Updates celery from 5.5.2 to 5.6.0

Release notes

Sourced from celery's releases.

v5.6.0

Celery v5.6.0 is now available.

Key Highlights

See What's new in Celery 5.6 for a complete overview or read the main highlights below.

Python 3.9 Minimum Version

Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python version is now 3.9. Users still on Python 3.8 must upgrade their Python version before upgrading to Celery 5.6.0.

Additionally, this release includes initial support for Python 3.14.

SQS: Reverted to pycurl from urllib3

The switch from pycurl to urllib3 for the SQS transport (introduced in Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS users.

Contributed by @​auvipy in celery/celery#9620.

Security Fix: Broker Credential Leak Prevention

Fixed a security issue where broker URLs containing passwords were being logged in plaintext by the delayed delivery mechanism. Broker credentials are now properly sanitized in all log output.

Contributed by @​giancarloromeo in celery/celery#9997.

Memory Leak Fixes

Two significant memory leaks have been fixed in this release:

Exception Handling Memory Leak: Fixed a critical memory leak in task exception handling that was particularly severe on Python 3.11+ due to enhanced traceback data. The fix properly breaks reference cycles in tracebacks to allow garbage collection.

Contributed by @​jaiganeshs21 in celery/celery#9799.

Pending Result Memory Leak: Fixed a memory leak where AsyncResult subscriptions were not being cleaned up when results were forgotten.

Contributed by @​tsoos99dev in celery/celery#9806.

ETA Task Memory Limit

New configuration option worker_eta_task_limit to prevent out-of-memory crashes when workers fetch large numbers of ETA or countdown tasks. Previously, workers could exhaust available memory when the broker contained many scheduled tasks.

Example usage:

app.conf.worker_eta_task_limit = 1000

Contributed by @​sashu2310 in celery/celery#9853.

Queue Type Selection for Auto-created Queues

... (truncated)

Changelog

Sourced from celery's changelog.

5.6.0

:release-date: 2025-11-30 :release-by: Tomer Nosrati

Celery v5.6.0 is now available.

Key Highlights

See :ref:`whatsnew-5.6` for a complete overview or read the main highlights below.
Python 3.9 Minimum Version
Celery 5.6.0 drops support for Python 3.8 (EOL). The minimum required Python
version is now 3.9. Users still on Python 3.8 must upgrade their Python version
before upgrading to Celery 5.6.0.
Additionally, this release includes initial support for Python 3.14.
SQS: Reverted to pycurl from urllib3
The switch from pycurl to urllib3 for the SQS transport (introduced in
Celery 5.5.0 via Kombu) has been reverted due to critical issues affecting SQS
users:

Processing throughput dropped from ~100 tasks/sec to ~3/sec in some environments
UnknownOperationException errors causing container crash loops
Silent message processing failures with no error logs

Users of the SQS transport must ensure pycurl is installed. If you removed
pycurl after upgrading to Celery 5.5.0, you will need to reinstall it.
Contributed by @auvipy <https://github.com/auvipy>_ in
[#9620](https://github.com/celery/celery/issues/9620) <https://github.com/celery/celery/pull/9620>_.
Security Fix: Broker Credential Leak Prevention
Fixed a security issue where broker URLs containing passwords were being logged
in plaintext by the delayed delivery mechanism. Broker credentials are now
properly sanitized in all log output.
Contributed by @giancarloromeo <https://github.com/giancarloromeo>_ in
[#9997](https://github.com/celery/celery/issues/9997) <https://github.com/celery/celery/pull/9997>_.
Memory Leak Fixes
</tr></table>

... (truncated)

Commits

• cca1116 Prepare for release: v5.6.0 (#10010)
• 1133f22 Bump mypy from 1.14.1 to 1.19.0 (#10008)
• 0932d2c [pre-commit.ci] pre-commit autoupdate (#10007)
• b446910 Prepare for (pre) release: v5.6.0rc2 (#10005)
• 3f0f0fe asynpool: Don't return from inside a finally block (#10000)
• 95d0552 Bump actions/checkout from 5 to 6 (#10003)
• f32b92f Add Py39-314t to CI (#9999)
• 63c1910 Don't fail task on timeout during cold shutdown (#9678)
• 30649db Fix log leaking broker credentials (#9997)
• 929412e Remove Python 4.0 version condition for pytest dependencies (#9993)
• Additional commits viewable in compare view

Updates certifi from 2025.4.26 to 2025.11.12

Commits

• 37ea150 2025.11.12 (#375)
• 2fa50bb Bump actions/upload-artifact from 4.6.2 to 5.0.0 (#374)
• 6cadb53 Bump actions/download-artifact from 5.0.0 to 6.0.0 (#373)
• fb14ac4 2025.10.05 (#371)
• 2c7c7ee Add Python 3.14 classifier in setup.py
• 1a5cb7b Bump actions/setup-python from 5.6.0 to 6.0.0 (#367)
• dea5960 Bump pypa/gh-action-pypi-publish from 1.12.4 to 1.13.0 (#366)
• 83566b7 Bump actions/checkout from 4.2.2 to 5.0.0
• ca2e121 Bump actions/download-artifact from 4.3.0 to 5.0.0
• a97d9ad 2025.08.03 (#362)
• Additional commits viewable in compare view

Updates charset-normalizer from 3.4.2 to 3.4.4

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.4

3.4.4 (2025-10-13)

Changed

• Bound setuptools to a specific constraint setuptools>=68,<=81.
• Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

• setuptools-scm as a build dependency.

Misc

• Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
• Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
• Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

Version 3.4.3

3.4.3 (2025-08-09)

Changed

• mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
• automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

• Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
• Support for Python 3.14

Fixed

• sdist archive contained useless directories.
• automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

• SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
• Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Changelog

Sourced from charset-normalizer's changelog.

3.4.4 (2025-10-13)

Changed

• Bound setuptools to a specific constraint setuptools>=68,<=81.
• Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

• setuptools-scm as a build dependency.

Misc

• Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
• Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
• Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

3.4.3 (2025-08-09)

Changed

• mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#595) (#583)
• automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#391)

Added

• Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
• Support for Python 3.14

Fixed

• sdist archive contained useless directories.
• automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#633)

Misc

• SBOM are automatically published to the relevant GitHub release to comply with regulatory changes. Each published wheel comes with its SBOM. We choose CycloneDX as the format.
• Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

Commits

• b30ffdc 🔧 fix checksum step in cd.yml
• d3fbfcf 🔧 fix cd.yml
• dafbb95 Release 3.4.4 (#658)
• 1f18ffa ⬆️ raise mypy upper bound to 1.18.2
• ef4ac69 Merge branch 'release-3.4.4' of github.com:jawah/charset_normalizer into rele...
• 4b35dda 📝 write changelog for 3.4.4
• 0ec6452 🔧 update cd.yml workflow (add riscv64, s390x and armv7l)

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}