Skip to content

[pull] master from aio-libs:master - #772

Merged
pull[bot] merged 3 commits into
tj-python:masterfrom
aio-libs:master
Sep 22, 2026
Merged

pull[bot] merged 3 commits into
tj-python:masterfrom
aio-libs:master

Conversation

@pull

@pull pull Bot commented Sep 22, 2026 •

Copy link
Copy Markdown

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

Bumps [blockbuster](https://github.com/cbornet/blockbuster) from 1.5.27
to 1.5.28.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/cbornet/blockbuster/releases">blockbuster's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.28</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix <code>AttributeError</code> on reads from file objects without a
fileno by <a
href="https://github.com/dsfaccini"><code>@​dsfaccini</code></a> in <a
href="https://redirect.github.com/cbornet/blockbuster/pull/70">cbornet/blockbuster#70</a></li>
<li>Fix compatibility with Python 3.15 by <a
href="https://github.com/maxyz"><code>@​maxyz</code></a> in <a
href="https://redirect.github.com/cbornet/blockbuster/pull/71">cbornet/blockbuster#71</a></li>
<li>Support Python 3.15.0rc2 by <a
href="https://github.com/cbornet"><code>@​cbornet</code></a> in <a
href="https://redirect.github.com/cbornet/blockbuster/pull/73">cbornet/blockbuster#73</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/maxyz"><code>@​maxyz</code></a> made
their first contribution in <a
href="https://redirect.github.com/cbornet/blockbuster/pull/71">cbornet/blockbuster#71</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/cbornet/blockbuster/compare/v1.5.27...v1.5.28">https://github.com/cbornet/blockbuster/compare/v1.5.27...v1.5.28</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/cbornet/blockbuster/commit/60f247577220257d170e935750825329fd86da02"><code>60f2475</code></a>
Support Python 3.15.0rc2 (<a
href="https://redirect.github.com/cbornet/blockbuster/issues/73">#73</a>)</li>
<li><a
href="https://github.com/cbornet/blockbuster/commit/d2bc1cd33252b904a2be5d316d08e65e1d96beb4"><code>d2bc1cd</code></a>
Fix compatibility with Python 3.15 (<a
href="https://redirect.github.com/cbornet/blockbuster/issues/71">#71</a>)</li>
<li><a
href="https://github.com/cbornet/blockbuster/commit/be49efd17e01a7c36631a95765ce442dce89975e"><code>be49efd</code></a>
Fix <code>AttributeError</code> on reads from file objects without a
fileno (<a
href="https://redirect.github.com/cbornet/blockbuster/issues/70">#70</a>)</li>
<li>See full diff in <a
href="https://github.com/cbornet/blockbuster/compare/v1.5.27...v1.5.28">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=blockbuster&package-manager=pip&previous-version=1.5.27&new-version=1.5.28)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [virtualenv](https://github.com/pypa/virtualenv) from 21.7.14 to
21.7.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/releases">virtualenv's
releases</a>.</em></p>
<blockquote>
<h2>21.7.16</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>📝 docs(security): add an incident response plan by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3262">pypa/virtualenv#3262</a></li>
<li>📝 docs(security): document both reporting lanes and scope by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3261">pypa/virtualenv#3261</a></li>
<li>🐛 fix(activation): escape csh prompt expansion characters by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3263">pypa/virtualenv#3263</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/virtualenv/compare/21.7.15...21.7.16">https://github.com/pypa/virtualenv/compare/21.7.15...21.7.16</a></p>
<h2>21.7.15</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>🐛 fix(activation): restore empty saved values on deactivate by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3259">pypa/virtualenv#3259</a></li>
<li>🐛 fix(activation): make csh deactivate work without test by <a
href="https://github.com/gaborbernat"><code>@​gaborbernat</code></a> in
<a
href="https://redirect.github.com/pypa/virtualenv/pull/3260">pypa/virtualenv#3260</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pypa/virtualenv/compare/21.7.14...21.7.15">https://github.com/pypa/virtualenv/compare/21.7.14...21.7.15</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst">virtualenv's
changelog</a>.</em></p>
<blockquote>
<h1>Bugfixes - 21.7.16</h1>
<ul>
<li>Fix <code>activate.csh</code> rendering the venv's prompt text wrong
when it contains <code>!</code> (csh and tcsh both expand it) or
<code>%</code> (tcsh only, since plain csh has no <code>%</code> prompt
escape at all). (:issue:<code>3263</code>)</li>
</ul>
<hr />
<p>v21.7.15 (2026-09-18)</p>
<hr />
<h1>Bugfixes - 21.7.15</h1>
<ul>
<li>Restore an empty <code>PATH</code> on <code>deactivate</code> in the
bash and fish activators, and stop bash leaving the prompt in
<code>PS1</code> when it was unset before activation.
(:issue:<code>3259</code>)</li>
<li>Fix <code>activate.csh</code> failing to restore <code>PATH</code>
and other saved variables on <code>deactivate</code> when
<code>PATH</code> was already
empty. (:issue:<code>3260</code>)</li>
</ul>
<hr />
<p>v21.7.14 (2026-09-18)</p>
<hr />
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/virtualenv/commit/4c946c2555260b87d94b2f8ede45215e2f75e70b"><code>4c946c2</code></a>
release 21.7.16</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/630ae100ca873e619ff7dad2174ea25dc3b9454e"><code>630ae10</code></a>
🐛 fix(activation): escape csh prompt expansion characters (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3263">#3263</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/496e8c903d695051f8a4e27de481e25c9c42d865"><code>496e8c9</code></a>
📝 docs(security): document both reporting lanes and scope (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3261">#3261</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/85606520d3f56bf6eaefd1233f177119dd8dbb00"><code>8560652</code></a>
📝 docs(security): add an incident response plan (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3262">#3262</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/502d383b4e1af50fb66486b2666eac31ff5c4537"><code>502d383</code></a>
release 21.7.15</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/fc2f35f51d563c495564f4709ec1a22f0c686352"><code>fc2f35f</code></a>
🐛 fix(activation): make csh deactivate work without test (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3260">#3260</a>)</li>
<li><a
href="https://github.com/pypa/virtualenv/commit/ee55cc271542fdbfd2d38151196ca18019282736"><code>ee55cc2</code></a>
🐛 fix(activation): restore empty saved values on deactivate (<a
href="https://redirect.github.com/pypa/virtualenv/issues/3259">#3259</a>)</li>
<li>See full diff in <a
href="https://github.com/pypa/virtualenv/compare/21.7.14...21.7.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=virtualenv&package-manager=pip&previous-version=21.7.14&new-version=21.7.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [platformdirs](https://github.com/tox-dev/platformdirs) from
4.11.10 to 4.11.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/platformdirs/releases">platformdirs's
releases</a>.</em></p>
<blockquote>
<h2>4.11.11</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<ul>
<li>fix: reject app arguments that leave the base directory by <a
href="https://github.com/Pitchfork-and-Torch"><code>@​Pitchfork-and-Torch</code></a>
in <a
href="https://redirect.github.com/tox-dev/platformdirs/pull/552">tox-dev/platformdirs#552</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/Pitchfork-and-Torch"><code>@​Pitchfork-and-Torch</code></a>
made their first contribution in <a
href="https://redirect.github.com/tox-dev/platformdirs/pull/552">tox-dev/platformdirs#552</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/tox-dev/platformdirs/compare/4.11.10...4.11.11">https://github.com/tox-dev/platformdirs/compare/4.11.10...4.11.11</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst">platformdirs's
changelog</a>.</em></p>
<blockquote>
<p>###########
Changelog
###########</p>
<p>.. towncrier-draft-entries:: Unreleased</p>
<p>.. towncrier release notes start</p>
<hr />
<p>4.11.12 (2026-09-22)</p>
<hr />
<ul>
<li>Ignore relative paths in the XDG user directory environment
variables, so <code>XDG_DOCUMENTS_DIR=Documents</code> no longer
makes :func:<code>~platformdirs.user_documents_dir</code> and the other
media directories return a path relative to the working
directory. They now fall back to the platform default like the XDG Base
Directory variables, and like the same keys
read from <code>user-dirs.dirs</code> - by
:user:<code>darrenhuai</code>. :pr:<code>554</code></li>
<li>Copy nested directories in the versioned data migration recipe.
:pr:<code>553</code></li>
<li>Exclude sphinx-llm 1.1.0 from documentation dependencies because its
Markdown builder emits unknown-node warnings.
:pr:<code>556</code></li>
</ul>
<hr />
<p>4.11.11 (2026-09-19)</p>
<hr />
<ul>
<li>Reject <code>appname</code>, <code>appauthor</code> and
<code>version</code> values that leave the platform base directory (a
<code>..</code> segment, a
leading separator, a drive or a UNC share) with <code>ValueError</code>,
so <code>ensure_exists</code> cannot create directories outside
it - by :user:<code>Pitchfork-and-Torch</code>.
:pr:<code>552</code></li>
</ul>
<hr />
<p>4.11.10 (2026-09-18)</p>
<hr />
<ul>
<li>With <code>ensure_exists</code>, the <code>site_*_dir</code> and
<code>site_*_path</code> properties and the <code>iter_*_dirs</code>
iterators only
create the site directories they return or yield, instead of every entry
in the site list - by :user:<code>darrenhuai</code>.
:pr:<code>550</code></li>
</ul>
<hr />
<p>4.11.9 (2026-09-16)</p>
<hr />
<ul>
<li>Accept <code>multipath</code> in
:func:<code>~platformdirs.site_cache_dir</code> and
:func:<code>~platformdirs.site_cache_path</code>. Without it,
the function API could not return the Homebrew cache prefix that
:attr:<code>~platformdirs.macos.MacOS.site_cache_dir</code> adds
under <code>multipath</code> - by :user:<code>darrenhuai</code>.
:pr:<code>544</code></li>
<li>Parse Unix <code>user-dirs.dirs</code> line by line like
<code>xdg-user-dir</code>. The INI parser raised on a repeated key or a
line
without <code>=</code>, and returned trailing comments and backslash
escapes inside :func:<code>~platformdirs.user_documents_dir</code>
and the other media directories. The last valid assignment now wins, and
platformdirs unescapes the quoted value and
ignores text after the closing quote - by :user:<code>darrenhuai</code>.
:pr:<code>545</code></li>
<li>Read <code>PUBLIC</code> before the home directory in
:func:<code>~platformdirs.user_publicshare_dir</code> on Windows, so it
no longer
raises <code>RuntimeError</code> when <code>PUBLIC</code> is set and the
home directory cannot be determined - by :user:<code>emme1t</code>.
:pr:<code>546</code></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/tox-dev/platformdirs/commit/321e35ad6fe7a72a2975d5eeed7f7b5dfed08a11"><code>321e35a</code></a>
Release 4.11.11</li>
<li><a
href="https://github.com/tox-dev/platformdirs/commit/902c268c99193b0513be03ef7a7f897dd8e83912"><code>902c268</code></a>
fix: reject app arguments that leave the base directory (<a
href="https://redirect.github.com/tox-dev/platformdirs/issues/552">#552</a>)</li>
<li>See full diff in <a
href="https://github.com/tox-dev/platformdirs/compare/4.11.10...4.11.11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=platformdirs&package-manager=pip&previous-version=4.11.10&new-version=4.11.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull Bot locked and limited conversation to collaborators Sep 22, 2026
@pull pull Bot added the ⤵️ pull label Sep 22, 2026
@pull
pull Bot merged commit 214dcae into tj-python:master Sep 22, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants