Bump the uv-minor-and-patch group across 1 directory with 18 updates

[dependabot]

Bumps the uv-minor-and-patch group with 18 updates in the /service directory:

Package	From	To
alembic	1.18.4	1.19.1
fastapi	0.136.3	0.141.1
genson	1.3.0	1.4.0
json-repair	0.60.1	0.63.4
pandas	3.0.3	3.0.5
tiktoken	0.13.0	0.14.0
uvicorn	0.49.0	0.52.4
ruff	0.15.17	0.16.5
ty	0.0.49	0.0.75
pytest	9.0.3	9.1.1
charset-normalizer	3.5.0	3.5.1
idna	3.18	3.19
linkify-it-py	2.1.0	2.1.1
lxml	6.1.1	6.1.2
posthog	7.39.1	7.44.2
pydantic-core	2.46.4	2.48.0
httpcore2	2.10.0	2.12.0
httpx2	2.10.0	2.12.0

Updates alembic from 1.18.4 to 1.19.1

Release notes

Sourced from alembic's releases.

1.19.1

Released: August 8, 2026

bug

• [bug] [autogenerate] Fixed bug in the check constraint detection implemented in #508 that failed to take into account column bound check constraints, leading to wrong autogenerate detections.

  References: #1842

1.19.0

Released: August 4, 2026

changed

• [changed] [installation] Environmental updates:

  -   Trove classifiers now include Python 3.15 which is now part of CI
      integration
  
  
  Python 3.14 is also added to trove classifiers which had been previously
  omitted
  
  
  Implemented PEP 604 style unions in type annotations
  

feature

• [feature] [autogenerate] Autogenerate now detects the addition and removal of named CHECK constraints, as part of the default autogenerate behavior. Detection is name-based only; a constraint whose name is unchanged is presumed equivalent regardless of its expression text, as reliably normalizing SQL expressions across backends for comparison purposes is not generally feasible. This behavior is implemented as a plugin named alembic.autogenerate.checkconstraint_byname, and may be disabled if not desired by excluding it from the EnvironmentContext.configure.autogenerate_plugins list. Pull request courtesy Francois van Kempen.

  References: #508

bug

... (truncated)

Commits

• See full diff in compare view

Updates fastapi from 0.136.3 to 0.141.1

Release notes

Sourced from fastapi's releases.

0.141.1

Fixes

• 🐛 Fix support for background tasks and headers from dependencies in app.frontend(). PR #16105 by @​tiangolo.

Docs

• 📝 Document FASTAPI_ENV in FastAPI CLI guide. PR #16104 by @​tiangolo.

0.141.0

Features

• ✨ Add app.frontend(check_dir="auto"), to make local development more convenient with fastapi dev. PR #16102 by @​tiangolo.

0.140.13

Fixes

• 🐛 Fix status_code being ignored for SSE and JSONL streaming endpoints. PR #15937 by @​SAURABHSALVE.

Docs

• 📝 Fix format_sse_event docstring rendering of \n\n terminator. PR #15613 by @​AshNicolus.
• 📝 Add API reference page for fastapi.sse. PR #15930 by @​SAURABHSALVE.

0.140.12

Fixes

• 🐛 Fix line splitting in format_sse_event to comply with SSE spec. PR #15515 by @​Zawwarsami16.

0.140.11

Fixes

• 🐛 Fix response_model_* params ignored for non-generator endpoints with Iterable[..] return type. PR #15093 by @​YuriiMotov.

0.140.10

Fixes

• 🐛 Fix handling sequences with nested Annotated types. PR #14874 by @​YuriiMotov.

Internal

• 🐛 Accept any base test failure as regression. PR #16092 by @​tiangolo.
• 🐛 Preserve pytest exit code in regression check. PR #16091 by @​tiangolo.
• ✅ Test PR regressions against base code. PR #16090 by @​tiangolo.

0.140.9

Fixes

• 🐛 Fix exclude_defaults not propagated to dict keys and values in jsonable_encoder. PR #16043 by @​MBGrao.

... (truncated)

Commits

• 95f8322 🔖 Release version 0.141.1 (#16106)
• f137944 📝 Update release notes
• d623544 🐛 Fix support for background tasks and headers from dependencies in `app.fron...
• 1d211b9 📝 Update release notes
• 8a1f876 📝 Document FASTAPI_ENV in FastAPI CLI guide (#16104)
• c7e7b65 🔖 Release version 0.141.0 (#16103)
• 6bceb84 📝 Update release notes
• 5429fed ✨ Add app.frontend(check_dir="auto"), to make local development more conven...
• 628663f 🔖 Release version 0.140.13 (#16096)
• 0b54fd0 📝 Update release notes
• Additional commits viewable in compare view

Updates genson from 1.3.0 to 1.4.0

Changelog

Sourced from genson's changelog.

1.4.0

• add enum support, activated per node by seed schemas (PR #82 — thanks @​tokarenko; closes #46, #81)
• Performance: strategy deduplication when defining custom SchemaBuilder classes is now O(n) instead of O(n²) (PR #91 — thanks @​Bitshifter-9; fixes #90)
• include the complete, runnable test suite in the source distribution (PR #94 — thanks @​mgorny)
• Bugfix: fix "noting to do" typo in the CLI error message and remove dead code (PR #93 — thanks @​est)
• Docs: document the required-dropping behavior and the builder-merge gotcha (#78, #25); explain why same-type inputs merge rather than producing anyOf; add a NoRequiredObject example for suppressing required (#37, #60)
• declare python_requires >= 3.10, matching the tested Python versions

1.3.1

• Bugfix: include the genson.schema subpackage in the package build; installing v1.3.0 from a wheel failed with ModuleNotFoundError (fixes #80, #92)
• Bugfix: call super().add_object() in the Number strategy so subclass hooks run (PR #79)
• add Python 3.13 and 3.14 to the test matrix and classifiers; drop EOL Python 3.7–3.9 (the package itself is unchanged and older Pythons may still work, but they are no longer tested)
• migrate CI from Travis to GitHub Actions; releases are now published via PyPI trusted publishing
• Tests: CLI integration tests use sys.executable (PR #84) and no longer depend on the test runner having an interactive stdin

Commits

• f305b73 Release 1.4.0
• 1e57625 Tweak the merge gotcha description and frame it as a rule tradeoff example.
• d466b37 Merge branch 'prep-1.4.0': docs integration and 1.4.0rc1 release prep
• 8a4877c Prepare release 1.4.0 (rc1)
• 1782226 Fold merge-behavior and no-required docs into existing sections
• f6e300c Merge pull request #94 from mgorny/fix-sdist
• d63edf3 Merge branch 'fix/pr-91': O(n) strategy dedup from PR #91
• acb6921 Merge master (required-dropping docs) into fix/pr-91
• f3aac34 Keep the empty-tuple padding; take only the dedup fix from PR #91
• 74a87e8 Merge branch 'docs/required-dropping': document required-dropping behavior (#78)
• Additional commits viewable in compare view

Updates json-repair from 0.60.1 to 0.63.4

Release notes

Sourced from json-repair's releases.

Release 0.63.4

Fixed

• Fix #220 preserve leading quotes when a later valid delimiter closes the string

Support this project

json_repair is maintained as a side project and stays free for everyone.

If it saves you debugging time, helps you handle LLM-generated JSON, or is part of your production workflow, please consider:

• starring the repository to help more developers find it
• sharing it with teams working with unreliable JSON output
• sponsoring the project here: https://github.com/sponsors/mangiucugna

Sponsorship helps justify the time spent fixing edge cases, improving performance, and keeping the library reliable.

Release 0.63.3

Fixed

• Fix #213 preserve valid JSON with trailing garbage

Support this project

json_repair is maintained as a side project and stays free for everyone.

If it saves you debugging time, helps you handle LLM-generated JSON, or is part of your production workflow, please consider:

• starring the repository to help more developers find it
• sharing it with teams working with unreliable JSON output
• sponsoring the project here: https://github.com/sponsors/mangiucugna

Sponsorship helps justify the time spent fixing edge cases, improving performance, and keeping the library reliable.

Release 0.63.2

Fixed

• Fix #212, the heuristic to detect array boundaries nested inside objects needed some refinement. Now it is a bit smarter.

Support this project

json_repair is maintained as a side project and stays free for everyone.

If it saves you debugging time, helps you handle LLM-generated JSON, or is part of your production workflow, please consider:

• starring the repository to help more developers find it
• sharing it with teams working with unreliable JSON output
• sponsoring the project here: https://github.com/sponsors/mangiucugna

Sponsorship helps justify the time spent fixing edge cases, improving performance, and keeping the library reliable.

Release 0.63.1

Fixed

• Fix #211, Python-style tuple support didn't mix well with the new feature release in 0.63.0

Support this project

... (truncated)

Commits

• 41737bc Fix #220 preserve leading quotes when a later valid delimiter closes the string
• 014707d Fix some CI that got broken after updating the actions
• 7eb2cab Merge pull request #216 from mangiucugna/dependabot/github_actions/pypa/gh-ac...
• b936bca Merge pull request #215 from mangiucugna/dependabot/github_actions/astral-sh/...
• f6b7bf4 Merge branch 'main' into dependabot/github_actions/pypa/gh-action-pypi-publis...
• be5274e Merge pull request #217 from mangiucugna/dependabot/github_actions/astral-sh/...
• bf7076e Merge branch 'main' into dependabot/github_actions/astral-sh/setup-uv-37802ad...
• d82f61e Merge pull request #218 from mangiucugna/dependabot/github_actions/actions/se...
• ab20874 Merge pull request #219 from mangiucugna/dependabot/github_actions/actions/ch...
• 13e869e Bump actions/checkout from 7.0.0 to 7.0.1
• Additional commits viewable in compare view

Updates pandas from 3.0.3 to 3.0.5

Release notes

Sourced from pandas's releases.

pandas 3.0.5

We are pleased to announce the release of pandas 3.0.5. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

pandas 3.0.4

We are pleased to announce the release of pandas 3.0.4. This is a patch release in the 3.0.x series and includes some regression fixes and bug fixes. We recommend that all users of the 3.0.x series upgrade to this version.

See the full whatsnew for a list of all the changes.

Pandas 3.0 supports Python 3.11 and higher. The release can be installed from PyPI:

python -m pip install --upgrade pandas==3.0.*

Or from conda-forge

conda install -c conda-forge pandas=3.0

Please report any issues with the release on the pandas issue tracker.

Thanks to all the contributors who made this release possible.

Commits

• e68db09 RLS: 3.0.5
• 0697623 Backport PR #66428: DOC: update whatsnew for 3.0.5 (#66430)
• 5d846d0 Backport PR #66090 on branch 3.0.x (BLD: exclude numpy 2.5.0 when building wh...
• bef7a2b Backport PR #66169 on branch 3.0.x (CI: Fix pyarrow-nightly job (stale nightl...
• 8188eb1 RLS: 3.0.4 (#66079)
• bd35f15 [3.0.x] BUG: fix CoW issue in eval() (#66072)
• 6195872 [backport 3.0.x] BUG: anchor whole alternation in Series.str.match for PyArro...
• 70313be Backport PR #66051 on branch 3.0.x (BUG: fix regression in DataFrame setitem ...
• 57ed3e2 [backport 3.0.x] Bump pypa/cibuildwheel from 3.4.1 to 4.1.0 (#65934) (#66026)
• f9693fc [backport 3.0.x] BUG(pandas 3.0 regression): drop(index=...) doesn't accept N...
• Additional commits viewable in compare view

Updates tiktoken from 0.13.0 to 0.14.0

Changelog

Sourced from tiktoken's changelog.

[v0.14.0]

• Build wheels for Python 3.15
• Support looking up more GPT-5 series models
• Upgrade dependencies

Commits

• 4e71bbe Release 0.14.0 (#597)
• 212b893 Fail open for GPT-5 model tokenisers (#596)
• 4187ba3 Upgrade dependencies (#595)
• 92a8255 Remove test-skip comment for macOS arm64 (#562)
• 674f5e6 Build Python 3.15 (#594)
• dbea866 Remove deprecated freethreading build
• f678224 Update cibuildwheel
• 08a5f3b ci: use static artifact name for sdist build job (#535)
• See full diff in compare view

Updates uvicorn from 0.49.0 to 0.52.4

Release notes

Sourced from uvicorn's releases.

Version 0.52.4

Fixed

• Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

Full Changelog: Kludex/uvicorn@0.52.3...0.52.4

Version 0.52.3

Changed

• Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

Full Changelog: Kludex/uvicorn@0.52.2...0.52.3

Version 0.52.2

Fixed

• Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

Full Changelog: Kludex/uvicorn@0.52.1...0.52.2

Version 0.52.1

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

Full Changelog: Kludex/uvicorn@0.52.0...0.52.1

Version 0.52.0

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

Full Changelog: Kludex/uvicorn@0.51.0...0.52.0

Version 0.51.0

What's Changed

• Restart workers with overlap on SIGHUP for near-zero-downtime reloads by @​Kludex in Kludex/uvicorn#3025

... (truncated)

Changelog

Sourced from uvicorn's changelog.

0.52.4 (August 18, 2026)

Fixed

• Remove duplicate Date headers from accepted WebSocket handshakes with websockets-sansio (#3078)

0.52.3 (August 13, 2026)

Changed

• Update zttp to 0.0.24 and use its combined receive path, improving HTTP/1.1 request parsing performance (#3067)

0.52.2 (August 13, 2026)

Fixed

• Update zttp to 0.0.22, fixing bodyless request receives and improving HTTP/1 request parsing performance (#3063)

0.52.1 (August 1, 2026)

Fixed

• Complete the closing handshake on server-initiated WebSocket closes in the websockets-sansio and wsproto implementations, waiting for the client's close reply with a 10 second timeout instead of resetting the connection (#3053)
• Add missing write flow control to the websockets-sansio implementation, preventing data truncation on server-initiated closes with large in-flight payloads (#3048)
• Handle connection loss while a WebSocket write is waiting on backpressure (#3050)
• Remove duplicate Content-Type and Content-Length headers from WebSocket denial responses on the websockets-sansio implementation, and deliver non-UTF-8 denial bodies intact (#3041)

0.52.0 (July 29, 2026)

This release adds an experimental HTTP/1.1 implementation backed by zttp, a sans-IO HTTP parser I've been developing on the side: a core written in Zig, with bindings to Python. It has been running under a fuzzer for some weeks now, and has been through multiple rounds of security auditing.

It is still experimental, so don't put it in front of production traffic yet. Try it with --http zttp, and please send any feedback to the issue tracker.

Added

• Add an experimental zttp HTTP/1.1 implementation, selectable with --http zttp (#2979)

Fixed

• Keep non-ASCII WebSocket request headers intact with websockets 17.0, which encodes them with ISO-8859-1 (#3036)

0.51.0 (July 8, 2026)

Added

• Restart workers one at a time on SIGHUP, bringing each replacement up before retiring the old worker, so reloads no longer drop requests (#3025)

Removed

• Remove colorama from the standard extra (#3027)

... (truncated)

Commits

• 8988c23 Stabilize macOS Python 3.13 signal shutdown tests (#3084)
• 898ddca Update PyPI publish action to version 1.14.2 (#3083)
• 3869f8a Restore Mermaid diagram rendering (#3080)
• 64148a9 Version 0.52.4 (#3079)
• 9e9e569 docs: correct release example PR number (#3072)
• b783dac Remove duplicate Date header from SansIO WebSocket handshakes (#3078)
• 27019b2 chore(deps): bump the python-packages group across 1 directory with 11 update...
• 1b64273 Fix a typo in index.md (#3006)
• a68da60 Version 0.52.3 (#3068)
• 6e3bb4c Use zttp 0.0.24 fast receive path (#3067)
• Additional commits viewable in compare view

Updates ruff from 0.15.17 to 0.16.5

Release notes

Sourced from ruff's releases.

0.16.5

Release Notes

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

Install ruff 0.16.5

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://releases.astral.sh/github/ruff/releases/download/0.16.5/ruff-installer.ps1 | iex"

Download ruff 0.16.5

... (truncated)

Changelog

Sourced from ruff's changelog.

0.16.5

Released on 2026-08-27.

Preview features

• Allow rules without codes (#28049)
• Introduce category selectors (#27666)
• Update preview default rules and categories (#27877)

Bug fixes

• [flake8-async] Detect blocking generic HTTP requests (ASYNC210) (#28024)
• [flake8-datetimez] Allow timezone-safe strptime chains (DTZ007) (#28023)
• [flake8-simplify] Respect side effects in lambda defaults (SIM401) (#28000)

Server

• Fix duplicated "of" in ClientOptions doc comment (#27978)

Documentation

• Document rule acceptance guidelines (#27910)
• Document the new category selectors (#27906)

Contributors

• @​AlexWaygood
• @​sharkdp
• @​jelle-openai
• @​charliermarsh
• @​ntBre
• @​aarushkandukoori

0.16.4

Released on 2026-08-20.

Preview features

• [flake8-use-pathlib] Add autofix for PTH116 (#26460)
• [refurb] Restrict delete-full-slice to lists (FURB131) (#27711)
• [refurb] Skip FURB101 and FURB103 when the open argument is a file descriptor (#27643)

Bug fixes

• Fix InvalidInstruction on Windows CPUs that do not support POPCNT (#27803)
• [pyflakes] Emit semantic syntax errors in string type definitions as F722 (#27835)
• [pylint] Allow os._exit imports in import-private-name (PLC2701) (#27738)

... (truncated)

Commits

• 9e4938c Bump 0.16.5 (#28110)
• aad0e90 Allow rules without codes (#28049)
• 5fdab73 Update preview default rules and categories (#27877)
• 29c8e5b Document rule acceptance guidelines (#27910)
• 50a4d7f Document the new category selectors (#27906)
• ada8795 Introduce category selectors (#27666)
• d894723 [ty] Infer lambda parameters through callable type aliases (#28109)
• 2685fde [ty] Narrow functional enum members in == and match (#28103)
• efcffd2 [ty] Intersection simplifications with subtype-related generic specialization...
• eb78048 [ty] Bump ecosystem-analyzer for HTML escaping (#28104)
• Additional commits viewable in compare view

Updates ty from 0.0.49 to 0.0.75

Release notes

Sourced from ty's releases.

0.0.75

Release Notes

Released on 2026-08-26.

Preview features

• Initialize PEP 723 script environments in the CLI (#27544)
• Refresh PEP 723 script environments in watch mode (#27617)
• Run PEP 723 script synchronization on bounded workers (#27615)

Bug fixes

• Specialize Self bounds of inherited methods (#27990)

LSP server

• Add "Go to Definition" support for pytest fixtures (#27444)

Documentation

• Fix documented Python package build command (#4384)
• Link untyped-call tracking issue in migration guide (#4382)

Library support

• Resolve imported pytest fixture exposures (#27539)
• Resolve installed core pytest fixture providers (#27770)
• Resolve pytest fixtures through conftest (#27540)

Diagnostics

• Add more autofixes (#28029)
• Add a dedicated missing-slot diagnostic (#28039)
• Explain missing storage for declared slotted attributes (#27969)
• Improve diagnostic spans for unpacked variable assignments (#28041)

Core type checking

• Account for known subclasses in equality inference (#28005)
• Expand ParamSpec signatures inferred from bound receivers (#28020)
• Fix Self binding in ParamSpec protocols (#28016)
• Fix TypedDict variance inference (#28052)
• Fix unsound narrowing through branch-assigned conditions (#28006)
• Ignore inconsistent binding decorators on overloads (#28036)
• Infer yield from send/return types from the iterator returned by __iter__ (#27987)
• Infer tuple type parameters from union arguments (#28062)
• Infer variance through nonrecursive protocol references (#28065)
• Preserve bounds of non-literal metaclasses (#28046)
• Preserve correlated generic-call inference (#28043)

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.75

Released on 2026-08-26.

Preview features

• Initialize PEP 723 script environments in the CLI (#27544)
• Refresh PEP 723 script environments in watch mode (#27617)
• Run PEP 723 script synchronization on bounded workers (#27615)

Bug fixes

• Specialize Self bounds of inherited methods (#27990)

LSP server

• Add "Go to Definition" support for pytest fixtures (#27444)

Documentation

• Fix documented Python package build command (#4384)
• Link untyped-call tracking issue in migration guide (#4382)

Library support

• Resolve imported pytest fixture exposures (#27539)
• Resolve installed core pytest fixture providers (#27770)
• Resolve pytest fixtures through conftest (#27540)

Diagnostics

• Add more autofixes (#28029)
• Add a dedicated missing-slot diagnostic (#28039)
• Explain missing storage for declared slotted attributes (#27969)
• Improve diagnostic spans for unpacked variable assignments (#28041)

Core type checking

• Account for known subclasses in equality inference (#28005)
• Expand ParamSpec signatures inferred from bound receivers (#28020)
• Fix Self binding in ParamSpec protocols (#28016)
• Fix TypedDict variance inference (#28052)
• Fix unsound narrowing through branch-assigned conditions (#28006)
• Ignore inconsistent binding decorators on overloads (#28036)
• Infer yield from send/return types from the iterator returned by __iter__ (#27987)
• Infer tuple type parameters from union arguments (#28062)
• Infer variance through nonrecursive protocol references (#28065)
• Preserve bounds of non-literal metaclasses (#28046)
• Preserve correlated generic-call inference (#28043)
• Preserve invariant materialization constraints (#28047)

... (truncated)

Commits

• a553dcc Bump version to 0.0.75 (#4396)
• 26b1b50 Update prek dependencies (#4392)
• 73d226e Fix documented Python package build command (#4384)
• 5e264da Link untyped-call tracking issue in migration guide (#4382)
• 00199f0 Bump version to 0.0.74 (#4351)
• 5769062 Update mypy/pyright comparison table (#4165)
• 4fcb060 Remove Zulip from the PGO training (#4336)
• a7a7064 Use the versions bot's ruleset bypass when merging (#4333)
• 01b0fab Update prek dependencies (#4325)
• deef42f Update dependency python to 3.14 (#4326)
• Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

• #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

  If this is undesirable, move the fixture definition to a conftest.py file if possible.

  Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

• #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

  See 10819 and 14011.

• #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

  See dynamic-fixture-request-during-teardown for details.

• #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

  These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

  See parametrize-iterators for details and suggestions.

• #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

  See config-inicfg for more details.

• #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.