build(deps): bump the production-dependencies group across 1 directory with 16 updates

[dependabot]

Bumps the production-dependencies group with 16 updates in the / directory:

Package	From	To
beautifulsoup4	4.14.3	4.15.0
bleach	6.3.0	6.4.0
flask-cors	6.0.2	6.0.5
grpcio	1.80.0	1.83.0
grpcio-testing	1.80.0	1.83.0
grpcio-tools	1.80.0	1.83.0
idna	3.15	3.18
imap-tools	1.13.0	1.14.0
peewee	4.0.5	4.2.6
phonenumbers	9.0.30	9.0.35
pika	1.4.0	1.4.2
pymysql	1.1.3	1.2.0
pyopenssl	26.2.0	26.3.0
tqdm	4.67.3	4.70.0
websockets	16.0	16.1.1
pytest	9.0.3	9.1.1

Updates beautifulsoup4 from 4.14.3 to 4.15.0

Updates bleach from 6.3.0 to 6.4.0

Changelog

Sourced from bleach's changelog.

Version 6.4.0 (June 5th, 2026)

NOTE: 2026-06-05: Bleach is no longer maintained. There will be no future releases including for security issues. See issue: <https://github.com/mozilla/bleach/issues/698>__

Backwards incompatible changes

• Dropped support for pypy 3.10. (#764)

Security fixes

• Fix bug 2023812 / GHSA-8rfp-98v4-mmr6.

  Fix XSS issue with sanitize_uri_value where disallowed schemes with Unicode invisible characters wouldn't be rejected.

  For example::

  import bleach payload1 = 'Click' result1 = bleach.clean(payload1) print(repr(result1))

  outputs::

  'Click'

  See the advisory for details.

• Fix GHSA-gj48-438w-jh9v.

  Fix issue where URI sanitization wasn't happening in formaction attributes.

  See the advisory for details.

Bug fixes

• Add support for pypy 3.11. (#764)

• Drop version max in tinycss2 pin. (#772)

  This removes one of the things we had to keep checking and updating. Users now own the responsibility for correctness with the version of tinycss2 they're using.

Commits

• f0355a7 fix: fix last release date in CHANGES
• ae4e8a2 chore: bleach 6.4.0 and final release
• 970df58 fix: uri-sanitization in formaction attributes
• 7c4867c fix: xss bypass in allowed protocol test using unicode invisible characters
• 913ab75 fix: reduce redundancy in workflow jobs
• 218c15a fix: rework pip caching
• 4f0b097 fix: fix tox platform restrictions
• e95a79d chore: update pytest
• 91539d4 Bump actions/cache from 5.0.3 to 5.0.4
• cd47b4c fix: handle left-angle-bracket that's not a tag (#733)
• Additional commits viewable in compare view

Updates flask-cors from 6.0.2 to 6.0.5

Release notes

Sourced from flask-cors's releases.

6.0.5

Supersedes 6.0.4

What's Changed

• Add MyPy Typing and modernize options parsing by @​corydolphin in corydolphin/flask-cors#409 (this broke strict type checking when using Blueprints)
• Restore Blueprint support in CORS type signatures (#410) by @​corydolphin in corydolphin/flask-cors#411

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.5

6.0.4

What's Changed

• Add MyPy Typing by @​corydolphin in corydolphin/flask-cors#409

Full Changelog: corydolphin/flask-cors@6.0.3...6.0.4

6.0.3

What's Changed

• Derive package version from git tag via setuptools-scm by @​corydolphin in corydolphin/flask-cors#405
• Improve CI/CD security with least privilege and build separation by @​corydolphin in corydolphin/flask-cors#406

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

6.0.3-pre

What's Changed

• Derive package version from git tag via setuptools-scm by @​corydolphin in corydolphin/flask-cors#405
• Improve CI/CD security with least privilege and build separation by @​corydolphin in corydolphin/flask-cors#406

Full Changelog: corydolphin/flask-cors@6.0.2...6.0.3

Commits

• 91ebc49 Typing Hotfix: support blueprints in the type system
• d601665 Add strict MyPy Typing
• c8e8871 Harden release publishing workflow (#406)
• e1d4034 Derive package version from git tag via setuptools-scm (#405)
• See full diff in compare view

Updates grpcio from 1.80.0 to 1.83.0

Release notes

Sourced from grpcio's releases.

Release v1.83.0

This is release 1.83.0 (garden) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [Security] Default to Post-Quantum Cryptography in TLS key exchange. (#42560)
• [authz] don't pass RBAC policy by value when constructing authorization engine. (#42636)

C#

• Migrate CSharp Grpc.Tools to new DotNet Version. (#42661)
• [C#] Tools - Build: Fix protoc SIGSEGV on ARM64 by aligning max-page-size and migrating to manylinux_2_28. (#42590)

Python

• [Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#43001)
• [Python] Add abort_with_status to the aio ServicerContext ABC. (#42733)
• [Python] Update lower bound for protobuf from 6.33.5 to 7.35.1. (#42914)
• [Python] Pyright typeCheckingMode - standard. (#42739)
• [Python] Support Python 3.15 - Upgrade bazel dep rules_python to 2.0.2. (#42637)
• [Python] Hide internal symbols from Python's cygrpc shared object. (#42325)
• [Python] Handle custom Interceptor exceptions in InterceptedCall APIs . (#42593)

Release v1.82.1

This is release gRPC Core 1.82.1 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

• [Backport][v1.82.x][Python] Update lower bound for protobuf from 6.33.5 to 7.35.1 by @​asheshvidyut in grpc/grpc#42920

Full Changelog: grpc/grpc@v1.82.0...v1.82.1

Release v1.82.0

This is release gRPC Core 1.82.0 (glacier).

... (truncated)

Commits

• c876f4d [Release] Bump version to 1.83.0 (on v1.83.x branch) (#43036)
• b5c40cd [Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower boun...
• 9c223f1 [Release] Bump version to 1.83.0-pre1 (on v1.83.x branch) (#42936)
• b215f80 [Release] Bump core version to 56.0.0 for upcoming release (#42934)
• cf95af0 [Python] Add abort_with_status to the aio ServicerContext ABC (#42733)
• 725c173 Automated rollback of commit 8848182a65239ce4a7a26650c82aee3ec7ed1eee.
• 821431b [PH2] Induced Frames and Reset Frames for PH2
• 6d0b58e disable metadata_publish_to_app_tag experiment
• 41d533a Implement Weighted Random Shuffling and CDS Weight Normalization for pick_fir...
• 8848182 [xDS] split up the grpc_xds_client BUILD target (#42872)
• Additional commits viewable in compare view

Updates grpcio-testing from 1.80.0 to 1.83.0

Updates grpcio-tools from 1.80.0 to 1.83.0

Release notes

Sourced from grpcio-tools's releases.

Release v1.83.0

This is release 1.83.0 (garden) of gRPC Core.

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes, with highlights listed below.

Core

• [Security] Default to Post-Quantum Cryptography in TLS key exchange. (#42560)
• [authz] don't pass RBAC policy by value when constructing authorization engine. (#42636)

C#

• Migrate CSharp Grpc.Tools to new DotNet Version. (#42661)
• [C#] Tools - Build: Fix protoc SIGSEGV on ARM64 by aligning max-page-size and migrating to manylinux_2_28. (#42590)

Python

• [Backport][v1.83.x][Python] grpc-status: Relax protobuf dependency lower bound to allow 6.x. (#43001)
• [Python] Add abort_with_status to the aio ServicerContext ABC. (#42733)
• [Python] Update lower bound for protobuf from 6.33.5 to 7.35.1. (#42914)
• [Python] Pyright typeCheckingMode - standard. (#42739)
• [Python] Support Python 3.15 - Upgrade bazel dep rules_python to 2.0.2. (#42637)
• [Python] Hide internal symbols from Python's cygrpc shared object. (#42325)
• [Python] Handle custom Interceptor exceptions in InterceptedCall APIs . (#42593)

Release v1.82.1

This is release gRPC Core 1.82.1 (glacier).

For gRPC documentation, see grpc.io. For previous releases, see Releases.

This release contains refinements, improvements, and bug fixes.

What's Changed

Python

• [Backport][v1.82.x][Python] Update lower bound for protobuf from 6.33.5 to 7.35.1 by @​asheshvidyut in grpc/grpc#42920

Full Changelog: grpc/grpc@v1.82.0...v1.82.1

Release v1.82.0

This is release gRPC Core 1.82.0 (glacier).

... (truncated)

Commits

• c876f4d [Release] Bump version to 1.83.0 (on v1.83.x branch) (#43036)
• 9c223f1 [Release] Bump version to 1.83.0-pre1 (on v1.83.x branch) (#42936)
• 1454079 [Python] Update lower bound for protobuf from 6.33.5 to 7.35.1 (#42914)
• 6953d6a [Python] Remove 3.15 until Python 3.15 RC is released. (#42900)
• b025e18 [Python] Support 3.15 (#42388)
• b6a490e [Python][grpcio-tools] Fix build error when CXX contains spaces (#42742)
• 8a56164 [Core] Upgrade to protobuf@35.1 to get upstream MSVC bug fix. (#42773)
• 95f01e5 [Release] Bump version to 1.83.0-dev (on master branch) (#42638)
• f72dd8c [Python] Trim Python2 backward compatibility syntax - remove "future" (#4...
• 3618643 [Core] Upgrade to protobuf 35 (#42512)
• Additional commits viewable in compare view

Updates idna from 3.15 to 3.18

Changelog

Sourced from idna's changelog.

3.18 (2026-06-02)

• When decoding a domain, add a display argument that will pass through invalid labels rather than raising an exception.

3.17 (2026-05-28)

• Substantial 75% reduction in memory usage through new data structures and some optimization in processing speed.
• Added a general 1024-character input length cap to the public validation, conversion, and codec entry points. This is well above any legitimate domain or label and guards against pathological inputs.

3.16 (2026-05-22)

• Add a command-line interface (python -m idna, also available as the idna script). Encodes or decodes one or more domains supplied as arguments or on standard input, with options to select A-label or U-label output and control error handling.
• Raise the minimum supported Python version to 3.9
• Various code quality improvements

Commits

• f39ea90 Release 3.18
• 40f4e40 Pre-release 3.18rc0
• 1a5bf80 Merge pull request #253 from kjd/lenient-decode
• 5bbb26f Merge branch 'master' into lenient-decode
• c532bae Rename decode() lenient= option to display= (issue #248)
• 0b1758b Merge pull request #252 from kjd/release-3.17
• f48619c Release 3.17
• 7421ba8 Pre-release 3.17rc0
• 22ebb73 Merge pull request #251 from kjd/structure-optimizations
• 2a7ac0a Drop redundant parallel-arrays comment from uts46data
• Additional commits viewable in compare view

Updates imap-tools from 1.13.0 to 1.14.0

Release notes

Sourced from imap-tools's releases.

v1.14.0

• Added: BaseMailBox.fetch arg uid_list: UIDs for fetch. If set: (criteria, charset, sort) will be ignored, SEARCH will not be used.
• Added: BaseMailBox.fetch star in args after charset arg.
• Added: consts.DEFAULT_EMAIL_DATE - useful for detect is date valid or unparsable.
• Added: ruff

Changelog

Sourced from imap-tools's changelog.

1.14.0

• Added: BaseMailBox.fetch arg uid_list: UIDs for fetch. If set: (criteria, charset, sort) will be ignored, SEARCH will not be used.
• Added: BaseMailBox.fetch star in args after charset arg.
• Added: consts.DEFAULT_EMAIL_DATE - useful for detect is date valid or unparsable.
• Added: ruff

Commits

• 2d38445 setup +3.14
• b9b62b4 fetch uid_list, fetch star, DEFAULT_EMAIL_DATE
• 1de3fe4 Small cleanups: dead code, duplicated version branching, packaging metadata (...
• 3736069 +ruff
• See full diff in compare view

Updates peewee from 4.0.5 to 4.2.6

Release notes

Sourced from peewee's releases.

4.2.6

Just tidying up a loose end from the 4.2.4/4.2.5 -- a missed outer join is now cached as an absent relation instead of being written through the foreign-key descriptor. The fk id on the source instance keeps the column's value (previously it was overwritten with None), and accessing the attribute on a non-null fk returns None instead of raising DoesNotExist.

View commits

4.2.5

Fix longstanding bug where anonymous sub-select may keep a stale id()-based hash after clone().

View commits

4.2.4

• Fix derived table joined in an expression subquery losing its FROM alias.
• Fix default Model.select() used as a FROM/JOIN source reduced to its pk.
• Fix compound/subquery SELECT-list column emitting a phantom alias.
• Fix fn.EXISTS(compound) double-parenthesizing.
• Fix x.in_(ValuesList(...)) dropping parens around VALUES.
• Fix two-FK .join(on=...) mis-attaching rows when the fk is on the rhs.
• Fix ON CONFLICT ... DO NOTHING dropping the target/where/constraint.

View commits

4.2.3

Bug hunt wrapped up!

These were all pretty far out there on the edge of edge-cases. Things are looking solid all around.

• Fix a compound select (UNION/INTERSECT/EXCEPT) used as a correlated subquery emitting a phantom alias for the correlated outer table in every branch but the left-most, producing invalid SQL (e.g. no such column: t4.id). The right-hand branch renders in a fresh alias scope that no longer resolved the outer source's existing alias, it now inherits the enclosing scope's aliases while still assigning fresh aliases to its own sources.
• Fix full-text search weights passed as a dict being mis-applied to the wrong columns. For FTS3/4 the implicit docid primary-key was included when building the weight list, shifting every column by one (raising IndexError with the Python ranking UDF, silently mis-scoring with the Cython one), for FTS5, UNINDEXED columns were skipped even though bm25() weights are positional across all columns. The list form of weights was unaffected.
• Fix .cte() clearing the source query's CTE list in place: converting a query that carried a with_cte(...) clause into a CTE stripped the clause from that query, so reusing it afterward referenced an undeclared CTE. The query is now cloned before its CTE list is reset.
• Fix Table.select() with no arguments on a Table declared without columns emitting an empty projection (SELECT FROM ...) instead of SELECT *.
• Fix Table.insert(select_query) with no columns raising TypeError instead of rendering INSERT INTO t SELECT ....
• Fix the MySQL migrator dropping a foreign key's ON DELETE/ON UPDATE action when add_not_null() or rename_column() rebuilds the constraint, silently downgrading e.g. CASCADE to RESTRICT. The actions reported by get_foreign_keys() are now carried through to the rebuilt constraint.
• Fix the legacy postgres_ext JSON contains/contained_by/concat raising AttributeError, and remove() silently rewriting the entire column, when applied to a .path()-chained lookup (e.g. Model.data['a'].path('b')). All four now resolve the root field and full path via _resolve_root(), matching the sibling set/replace/insert/append/update mutators.
• Correct the postgres_ext.JSONField docs: the json-column field does not support the jsonb-based mutation/concatenation builders (they raise ProgrammingError), so the misleading "Postgres casts implicitly" claim was removed and new code is steered to the built-in JSONField.
• Fix the SQLite migrator treating a bare table-level UNIQUE (a, b) constraint as a column when rebuilding a table (add_not_null, drop_column, ...), raising no column named UNIQUE; unique is now recognized as a constraint.
• Fix the SQLite migrator's table rebuild corrupting the CREATE TABLE keywords for a table whose name is a case-insensitive substring of them (e.g. ab, t, tab) -- the table-name substitution is now anchored to the trailing name token.

View commits

4.2.2

• Change Field.__hash__ again... fml. Use (model_cls, field name).

... (truncated)

Changelog

Sourced from peewee's changelog.

4.2.6

• A missed outer join is now cached as an absent relation instead of being written through the foreign-key descriptor. The fk id on the source instance keeps the column's value (previously it was overwritten with None), and accessing the attribute on a non-null fk returns None instead of raising DoesNotExist.

View commits

4.2.5

• Fix anonymous sub-select keeping a stale id()-based hash after clone().

View commits

4.2.4

• Fix derived table joined in an expression subquery losing its FROM alias.
• Fix default Model.select() used as a FROM/JOIN source reduced to its pk.
• Fix compound/subquery SELECT-list column emitting a phantom alias.
• Fix fn.EXISTS(compound) double-parenthesizing.
• Fix x.in_(ValuesList(...)) dropping parens around VALUES.
• Fix two-FK .join(on=...) mis-attaching rows when the fk is on the rhs.
• Fix ON CONFLICT ... DO NOTHING dropping the target/where/constraint.

View commits

4.2.3

• Fix a compound select (UNION/INTERSECT/EXCEPT) used as a correlated subquery emitting a phantom alias for the correlated outer table in every branch but the left-most, producing invalid SQL (e.g. no such column: t4.id). The right-hand branch renders in a fresh alias scope that no longer resolved the outer source's existing alias, it now inherits the enclosing scope's aliases while still assigning fresh aliases to its own sources.
• Fix full-text search weights passed as a dict being mis-applied to the wrong columns. For FTS3/4 the implicit docid primary-key was included when building the weight list, shifting every column by one (raising IndexError with the Python ranking UDF, silently mis-scoring with the Cython one), for FTS5, UNINDEXED columns were skipped even though bm25() weights are positional across all columns. The list form of weights was unaffected.
• Fix .cte() clearing the source query's CTE list in place: converting a query that carried a with_cte(...) clause into a CTE stripped the clause from that query, so reusing it afterward referenced an undeclared CTE. The query is now cloned before its CTE list is reset.
• Fix Table.select() with no arguments on a Table declared without columns emitting an empty projection (SELECT FROM ...) instead of SELECT *.
• Fix Table.insert(select_query) with no columns raising TypeError instead of rendering INSERT INTO t SELECT ....

... (truncated)

Commits

• 65c793b 4.2.6
• 91761fe Avoid stomping fk value when writing None to descriptor
• 02ac7a8 4.2.5
• f850293 Add clone to stub
• 3610121 Add regression test codifying behavior for outer join population
• 0667d1a Ensure we refresh an anonymous subq's hash :|
• 8cee375 4.2.4
• f10df8e Docs cleanup, cont.
• 0f39030 Doc cleanup in sqlite
• fde5817 Fix collation sql w/explicit ASC/DESC
• Additional commits viewable in compare view

Updates phonenumbers from 9.0.30 to 9.0.35

Commits

• 314e40f Prep for 9.0.35 release
• ba1f5b1 Generated files for metadata
• 6245715 Merge metadata changes from upstream 9.0.35
• 671b53f Prep for 9.0.34 release
• b1f3bb2 Generated files for metadata
• 20eecc2 Merge metadata changes from upstream 9.0.34
• fdcad9b README.md: use pyproject-build tool
• 0efec90 Fix lint
• 6400333 Prep for 9.0.33 release
• 4419992 Generated files for metadata
• Additional commits viewable in compare view

Updates pika from 1.4.0 to 1.4.2

Release notes

Sourced from pika's releases.

1.4.2

https://pypi.org/project/pika/1.4.2/ | GitHub milestone

1.4.1

https://pypi.org/project/pika/1.4.1/ | GitHub milestone

Changelog

Sourced from pika's changelog.

1.4.2 (2026-07-23)

Full Changelog

Closed issues:

• Importing pika.adapters can break asyncio subprocesses on Windows #1639

Merged pull requests:

• Stop mutating global asyncio event loop policy on import #1642 (lukebakken)

1.4.1 (2026-05-22)

Merged pull requests:

• Fix Channel.close() for channels with multiple consumers #1596 (gbenson)

Commits

• 3c9b50d Merge pull request #1658 from pika/pika-1.4.2
• c5da6ff pika 1.4.2
• c538d43 Merge pull request #1642 from pika/fix/gh-1639-windows-event-loop-policy-1.4.x
• 79efa49 Fix callLater typing by passing keyword arguments
• 7cb3661 Drain extra loop turn to await Tornado selector bootstrap
• b3b8819 Replace deprecated event loop policy in tests with helper
• c1c9651 Raise clear error when Windows loop lacks selector support
• 978be3b Stop mutating global asyncio event loop policy on import
• 5f0ba9e Merge pull request #1597 from pika/pika-1.4.1
• 31d80a9 pika 1.4.1
• Additional commits viewable in compare view

Updates pymysql from 1.1.3 to 1.2.0

Release notes

Sourced from pymysql's releases.

v1.2.0

What's Changed

• Bump the all-dependencies group with 2 updates by @​dependabot[bot] in PyMySQL/PyMySQL#1232
• Reorganize TLS options: implement PREFERRED/REQUIRED SSL mode behavior by @​Copilot in PyMySQL/PyMySQL#1234
• Support MySQL 8 row/column alias syntax in executemany INSERT regex by @​Copilot in PyMySQL/PyMySQL#1235
• Expose SQLSTATE on MySQL protocol exceptions without changing exception formatting by @​Copilot in PyMySQL/PyMySQL#1236
• Reject non-finite decimal.Decimal query parameters (NaN, sNaN, ±Infinity) by @​Copilot in PyMySQL/PyMySQL#1237
• docs: update outdated requirements and reference links by @​Copilot in PyMySQL/PyMySQL#1239
• Prepare CHANGELOG for v1.2.0 release from v1.1.3 changes by @​Copilot in PyMySQL/PyMySQL#1238
• deprecate db and passwd again by @​methane in PyMySQL/PyMySQL#1240
• deprecate reconnect in Connection.ping() by @​methane in PyMySQL/PyMySQL#1241
• Deprecate Connection.set_charset() at runtime and document warning behavior by @​Copilot in PyMySQL/PyMySQL#1243
• Release v1.2.0 by @​methane in PyMySQL/PyMySQL#1244

New Contributors

• @​Copilot made their first contribution in PyMySQL/PyMySQL#1234

Full Changelog: PyMySQL/PyMySQL@v1.1.3...v1.2.0

Changelog

Sourced from pymysql's changelog.

v1.2.0

Release date: 2026-05-19

Breaking changes

• Connection.ping() change the default to not reconnect and deprecate reconnect argument. Create a new connection if you want to reconnect. (#1241)

• Error classes in Cursor class are removed. (#1240)

• connect() arguments db and passwd now emit DeprecationWarning. Use database and password instead. (#1240)

• Reorganize TLS connection behavior.

  • PyMySQL uses TLS by default when server supports it. Use ssl_disabled=True to prohibit SSL. (#1213)

  • When ssl_verify_cert=True, ssl_verify_identity=True, an ssl.SSLContext is passed, or when any other SSL option is configured, the connection requires SSL and raises OperationalError (CR_SSL_CONNECTION_ERROR) if the server doesn't support it. (#1234)

Other changes

• Support MySQL 8 row/column alias syntax in executemany INSERT regex. (#1235)
• Expose SQLSTATE on MySQL protocol exceptions without changing exception formatting. (#1236)
• Reject non-finite decimal.Decimal query parameters (NaN, sNaN, ±Infinity). (#1237)
• Connection.set_charset(charset) now emits DeprecationWarning.

Commits

• 0f1c324 use ubuntu-latest for pypi publishing
• 53b16b2 Release v1.2.0 (#1244)
• 637fe7e Deprecate Connection.set_charset() at runtime and document warning behavior...
• 23ca04a add AGENTS.md
• 7349a44 deprecate reconnect in Connection.ping() (#1241)
• ad5c50c update CHANGELOG
• c963edb Deprecation and removals (#1240)
• af6b9b4 Prepare CHANGELOG for v1.2.0 release from v1.1.3 changes (#1238)
• c7bf73f docs: update outdated requirements and reference links (#1239)
• c532b8d Reject non-finite decimal.Decimal query parameters (NaN, sNaN, `±Infini...
• Additional commits viewable in compare view

Updates pyopenssl from 26.2.0 to 26.3.0

Changelog

Sourced from pyopenssl's changelog.

26.3.0 (2026-06-12)

Backward-incompatible changes: ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^

• Dropped support for Python 3.8.
• The minimum cryptography version is now 49.0.0.
• Removed deprecated OpenSSL.crypto.X509Req, OpenSSL.crypto.dump_certificate_request, and OpenSSL.crypto.load_certificate_request. cryptography.x509 should be used instead.
• OpenSSL.SSL.Connection.set_session now raises ValueError if the Session was obtained from a Connection that was using a different Context than this one. OpenSSL requires (but does not verify) that sessions only be re-used with a compatible SSL_CTX, so this contract is now enforced.

Deprecations: ^^^^^^^^^^^^^

• Deprecated OpenSSL.crypto.PKey.generate_key and OpenSSL.crypto.PKey.check. The key generation and loading APIs in cryptography should be used instead.
• Deprecated OpenSSL.crypto.dump_privatekey. The serialization APIs on cryptography private key types should be used instead.
• Deprecated all the mutable APIs on OpenSSL.crypto.X509: set_version, set_pubkey, sign, set_serial_number, gmtime_adj_notAfter, gmtime_adj_notBefore, set_notBefore, set_notAfter, set_issuer, and set_subject. cryptography.x509.CertificateBuilder should be used instead.
• Deprecated OpenSSL.SSL.Context.set_passwd_cb. Users should decrypt and load their private keys themselves, with cryptography's key loading APIs, and then call OpenSSL.SSL.Context.use_privatekey.
• Deprecated OpenSSL.crypto.X509Name, as well as the remaining APIs that consume or return it: OpenSSL.crypto.X509.get_issuer, OpenSSL.crypto.X509.get_subject, and OpenSSL.SSL.Context.set_client_ca_list. The APIs in cryptography.x509 should be used instead.

Changes: ^^^^^^^^

• OpenSSL.SSL.Connection.get_client_ca_list now takes an as_cryptography keyword-argument. When True is passed then cryptography.x509.Name are returned, instead of OpenSSL.crypto.X509Name. In the future, passing False (the default) will be deprecated.

Commits

• a34aa1d Prepare 26.3.0 release (#1515)
• 24db880 Deprecate X509Name and the remaining APIs that consume or return it (#1514)
• 1dc08be Add as_cryptography parameter to Connection.get_client_ca_list (#1508)
• 55653a5 Require cryptography 49, drop Python 3.8 (#1513)
• 9bad760 Remove deprecated CSR functionality (#1507)
• 98ca874 Enforce that Session is only re-used with the Context it came from (#1512)
• cbcb1da Deprecate Context.set_passwd_cb (#1511)
• 3b9d07d Deprecate all the mutable APIs on X509 (#1510)
• e096920 Deprecate PKey.generate_key, PKey.check, and dump_privatekey (#1509)
• 7079d6d Fix zizmor findings in GitHub Actions workflows (#1506)
• Additional commits viewable in compare view

Updates tqdm from 4.67.3 to 4.70.0

Release notes

Sourced from tqdm's releases.

tqdm v4.70.0 stable

• contrib.concurrent: major improvements
  • support process_map(mp_context, max_tasks_per_child), thread_map(thread_name_prefix) (#1265)
  • fix total based on shortest iterable length (#1473)
  • use default max_workers (#1543 <- #1530, #1518)
  • support timeout, buffersize (#1576)
  • improve ETA (#1708 <- #1161)
  • update as_completed (#1709 <- #1565)
  • add tqdm.concurrent.intepreter_map (#1777)
• asyncio: support iterables with only __aiter__ (#1714 <- #1686)
• support reset(float("inf")) (#1783 <- #1781, #651)
• framework: test & reduce wheel size (#1782)

tqdm v4.69.1 stable

• contrib.logging: preserve filters (#1775 <- #1581)
• rich: misc fixes (#1773)
  • support generators (without len) (#1391)
  • fix potential AttributeError on exit (#1674)
• fix total=float('inf') (#1781 <- #651)
• fix potential AttributeError on exit (#1778 <- #1668, #1537, #261)
• fix minor docs typos (#1780, #1746)

tqdm v4.69.0 stable

• add tqdm.asyncio.gather(..., return_exceptions=False) (#1776, #1671 <- #1286)
• misc minor framework updates
  • bump workflow actions & pre-commit hooks

tqdm v4.68.4 stable

• trim to ncols even when '{bar}' not in bar_format (#1717, #1767 <- #1658)
• fix tqdm.write when stdout=None (#1768 <- #1654)

tqdm v4.68.3 stable

• utils: delay os.get_terminal_size (#1763 <- #1760)
• autonotebook: support QtConsole, Spyder, JupyterLite (#1763, #1628, #1559 <- #1283, #1098, #512)
• minor docs updates
  • fix typo (#1762)
  • use git-fame
• misc minor framework updates
  • fix & update CI build
  • pre-commit: add docs & metadata generation
  • move tox.ini -> pyproject.toml, move tox-gh-actions -> tox-gh
  • add Python 3.14, drop 3.7 support

tqdm v4.68.2 stable

• revert accidental change to ascii default (fixes #1760)
  • UnicodeEncodeError: 'charmap' codec can't encode characters in position 6-7: character maps to <undefined> can be fixed by installing tqdm!=4.68.0,!=4.68.1
• misc docs updates
  • fix links
  • replace stray rst -> md syntax
  • consistent "progress bar" terminology (#1737)

... (truncated)

Commits

• 96f2e60 Merge pull request #1777 from shermansiu/feat/interpreter-pool
• c27393e misc tidy
• 061c623 Disable tqdm.monitor_interval for subinterpreters because they do not have ...
• 9fc160b Update how we check for interpreter_map support in the tests
• b42463a Ensure that subinterpreters can import tqdm while unpickling the initializer
• 16d5486 Add support for nested progress bars
• 9f5890f Add initial implementation for interpreter_map
• 321f920 Merge pull request #1783 from LuShadowX/reset-inf-total
• 4664b57 minor tidy
• 426a098 Treat inf total as unknown in reset() too
• Additional commits viewable in compare view

Updates websockets from 16.0 to 16.1.1

Release notes

Sourced from websockets's releases.

16.1.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

16.1

See https://websockets.readthedocs.io/en/stable/project/changelog.html for details.

Commits