[dependabot]

Bumps the production-dependencies group with 8 updates in the / directory:

Package	From	To
boto3	1.43.98	1.43.108
botocore	1.43.103	1.43.114
ast-serialize	0.11.2	0.12.1
charset-normalizer	3.5.1	3.5.2
coverage	7.16.1	7.16.2
librt	0.15.0	0.16.0
markupsafe	3.0.3	3.0.4
platformdirs	4.11.11	4.12.3

Updates boto3 from 1.43.98 to 1.43.108

Commits

• e19423d Merge branch 'release-1.43.108'
• 3bc7624 Bumping version to 1.43.108
• fcf08ca Add changelog entries from botocore
• 402e09c Merge branch 'release-1.43.107'
• 65340de Merge branch 'release-1.43.107' into develop
• 4d32164 Bumping version to 1.43.107
• e6738b9 Add changelog entries from botocore
• c2a321b Bump https://github.com/astral-sh/ruff-pre-commit (#4855)
• 88630f8 Merge branch 'release-1.43.106'
• fac0859 Merge branch 'release-1.43.106' into develop
• Additional commits viewable in compare view

Updates botocore from 1.43.103 to 1.43.114

Commits

• fca45a8 Merge branch 'release-1.43.114'
• d178cb7 Bumping version to 1.43.114
• b7ed9a9 Update endpoints model
• cd68b6e Update to latest models
• 44a636c Raise the Request/Response Syntax doc section limit to 2,000 lines (#3823)
• 5f4e0c0 Merge branch 'release-1.43.113'
• 42f5cfb Merge branch 'release-1.43.113' into develop
• 0bc9a33 Bumping version to 1.43.113
• d7ce073 Update endpoints model
• 6b11f3e Update to latest models
• Additional commits viewable in compare view

Updates ast-serialize from 0.11.2 to 0.12.1

Commits

• 8d0a5c6 Bump version to 0.12.1
• a7f11b1 Fix parsing plain None type in a string (#96)
• bcf707f Bump version to 0.12.0
• 89b6e83 Allow colon in error codes (#94)
• See full diff in compare view

Updates charset-normalizer from 3.5.1 to 3.5.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.5.2

3.5.2 (2026-09-29)

Changed

• Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

• Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
• Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)

Changelog

Sourced from charset-normalizer's changelog.

3.5.2 (2026-09-29)

Changed

• Raised the Cython upper bound to <3.4 for native builds. The bound remains <3.3 for abi3 builds to preserve compatibility with the Python 3.7 Limited API.

Fixed

• Valid UTF-8 Chinese JSON incorrectly detected as PTCP154 due to excessive noise penalties for uncommon CJK characters. (#796)
• Supported encodings without aliases failing name resolution or being ignored in charset declarations. (#800)

Commits

• 935c29a Release 3.5.2 (#805)
• 9d3238a test: disable traefik in downstream niquests
• b4c0368 docs: write changelog entry for 3.5.2
• 717da31 chore: bump version to 3.5.2
• 264895d chore: update pypa/cibuildwheel and pypa/gh-action-pypi-publish
• 41e28b6 chore: raise Cython upper bound to 3.3
• b130b7d Fix valid UTF-8 Chinese JSON misdetected as PTCP154 (#796)
• f6afd31 Make the IANA_NO_ALIASES encodings resolvable by name (#800)
• See full diff in compare view

Updates coverage from 7.16.1 to 7.16.2

Release notes

Sourced from coverage's releases.

7.16.2

Version 7.16.2 — 2026-09-27

• Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168.
• Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289.
• Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923.

➡️  PyPI page: coverage 7.16.2. :arrow_right:  To install: python3 -m pip install coverage==7.16.2

Changelog

Sourced from coverage's changelog.

Version 7.16.2 — 2026-09-27

• Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168_.

• Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289_.

• Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923_.

.. _issue 1923: coveragepy/coveragepy#1923 .. _issue 2168: coveragepy/coveragepy#2168 .. _issue 2289: coveragepy/coveragepy#2289

.. _changes_7-16-1:

Commits

• 5643ae7 docs: prep for 7.16.2
• a3e969f fix: dynamic_context for @​staticmethod and @​classmethod tests (issue 1923) (#...
• 8ad7236 fix: stop counting the try/else line when a with statement raises (#2301)
• c6dab1f fix(debug): debug output doesn't mis-handle odd line separators #2296
• 08fbc32 style: Protocols should use ... for method bodies
• bc7b0e3 refactor: positional-only args are better than pragmas
• 52afd6b Document parallel tox coverage data files (#2284)
• f653aae fix: loop completion arcs on Python 3.14 (#2281)
• cc1ced4 test: PyPy still compiles comprehensions as functions
• 85a9088 chore: make upgrade
• Additional commits viewable in compare view

Updates librt from 0.15.0 to 0.16.0

Commits

• b250806 Sync mypy and bump version
• See full diff in compare view

Updates markupsafe from 3.0.3 to 3.0.4

Release notes

Sourced from markupsafe's releases.

3.0.4

This is the MarkupSafe 3.0.4 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/MarkupSafe/3.0.4/ Changes: https://markupsafe.palletsprojects.com/page/changes/#version-3-0-4 Milestone: https://github.com/pallets/markupsafe/milestone/17?closed=1

• Build Python 3.15, armv7l, ppc64le, Android, and iOS wheels.
• Improve performance of striptags. #521

Changelog

Sourced from markupsafe's changelog.

Version 3.0.4

Released 2026-10-02

• Build Python 3.15, armv7l, ppc64le, Android, and iOS wheels.
• Improve performance of striptags. :issue:521

Commits

• ece2607 release version 3.0.4
• 620bc80 split archs
• 73c3be1 fix wheel builds (#536)
• d8ae19e fix wheel builds
• ff1eaff Build Android and iOS wheels (#516)
• 87e64f9 build Android and iOS wheels
• bc33c55 Build ppc64le wheels (#518)
• 0ddd6ea build ppc64le wheels
• 3e07758 Build armv7l wheels (#514)
• 39b9aae build armv7l wheels
• Additional commits viewable in compare view

Updates platformdirs from 4.11.11 to 4.12.3

Release notes

Sourced from platformdirs's releases.

4.12.3

• Place files from place_config_file and place_data_file in the first site directory for root on Unix with use_site_for_root=True and multipath=True, where find_config_file and find_data_file look for them. #607

PyPI release

Full Changelog: tox-dev/platformdirs@4.12.2...4.12.3

4.12.2

• Keep os.pathsep in site_applications_path under multipath=True on platforms with one applications directory. #604

PyPI release

Full Changelog: tox-dev/platformdirs@4.12.1...4.12.2

4.12.1

• Avoid PytestAssertRewriteWarning when importing platformdirs before invoking pytest. #601

PyPI release

Full Changelog: tox-dev/platformdirs@4.12.0...4.12.1

4.12.0

• Add place_*_file methods that return a file path under a user directory and create its missing parents with mode 0o700. #585
• Add find_<kind>_file and find_<kind>_files to look up an existing file across the user and site directories of each kind that has an iter_<kind>_paths method. #586
• Add isolated_dirs and the platformdirs_isolated pytest fixture to resolve every directory under one test root. #590
• Emit RuntimeDirWarning when the Unix user_runtime_dir falls back from XDG_RUNTIME_DIR. #599
• Read user_templates_dir, user_publicshare_dir and user_bin_dir on Windows from their known folders. #587
• Create missing user app directories and their parents with mode 0700 under ensure_exists on POSIX platforms. #588
• Raise RuntimeError for a Unix or macOS directory under the home when no home resolves, and read the password database for an empty HOME. #589
• Skip an XDG_RUNTIME_DIR or /run/user/<uid> that is not a private directory of the user, and reject a symlink or file as the runtime-<uid> fallback. #599
• Use the app container layout on iOS, such as ~/Library/Application Support for data. #600
• Document that a Homebrew Python puts the Homebrew prefix first in the macOS shared directories, with or without multipath. #591
• Document that the macOS media directories honor the XDG_*_DIR variables. #592
• Document the WIN_PD_OVERRIDE_COMMON_PROGRAMS variable. #593
• Document /usr/local/share/applications as the Linux site_applications_dir default. #594
• Correct the BSD user_runtime_dir defaults and describe the temporary directory fallback. #595
• Describe how platformdirs detects Android, finds the app folder and places the shared folders. #596
• Document that Microsoft Store Python redirects only new files and folders under AppData. #597

... (truncated)

Changelog

Sourced from platformdirs's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

---

4.13.5 (2026-10-19)

---

• Publish a GitHub Release with changelog notes, a PyPI link, and a version comparison after each PyPI release. :pr:631

---

4.13.4 (2026-10-17)

---

• Require a complete files path segment when locating Android app directories from sys.path. :pr:621
• Keep root directory tests independent of inherited XDG environment variables. :pr:622
• Raise RuntimeError when iOS cannot resolve the home directory, rather than returning paths rooted at a literal ~. :pr:624
• Keep user directory strings, paths and iterators consistent inside isolated_dirs when Unix root enables use_site_for_root. Restore root redirection when the context exits. :pr:625
• Raise RuntimeError when the Windows Projects directory cannot resolve the home directory, rather than returning a path rooted at a literal ~. :pr:627
• Correct the contributor guide to name ty as the type checker used by the type environment. :pr:623

---

4.13.3 (2026-10-16)

---

---

4.13.2 (2026-10-16)

---

• Normalize user_fonts_dir when XDG_DATA_HOME ends with a separator. :pr:619

---

4.13.1 (2026-10-15)

---

• Free the path buffer from SHGetKnownFolderPath when the known-folder lookup fails. :pr:618
• Preserve literal backslashes before ordinary characters in double-quoted user-dirs.dirs paths instead of removing them.

---

4.13.0 (2026-10-10)

---

... (truncated)

Commits

• 960ff63 Release 4.12.3
• 8047ad5 Place root config and data files in the first site directory (#607)
• af2fc7f Release 4.12.2
• bdafa67 ♻️ refactor(api): share use_site iteration (#606)
• d5ff75c 🐛 fix(api): keep os.pathsep in site_applications_path (#604)
• d545744 build(deps): bump astral-sh/setup-uv from 10.1.0 to 10.2.0 in the all group (...
• 9fd89a7 [pre-commit.ci] pre-commit autoupdate (#603)
• 0a50795 Release 4.12.1
• 72e93ff fix(pytest): allow import before pytest startup (#602)
• ea7be87 Release 4.12.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[teknogeek0]

Dep bump approved