From c733e4b35e1bbdb361120bbc03bb5f5e2c5f3f5e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 11 May 2026 16:30:45 +0000 Subject: [PATCH 1/2] Bump propcache from 0.4.1 to 0.5.2 (#12502) Bumps [propcache](https://github.com/aio-libs/propcache) from 0.4.1 to 0.5.2.
Release notes

Sourced from propcache's releases.

0.5.2

0.5.0 and 0.5.1 were tagged earlier today but never reached PyPI: 0.5.0's deploy failed at cibuildwheel's post-build pytest on free-threaded armv7l musllinux (SIGBUS under QEMU emulation while importing the C extension), and 0.5.1's deploy hit a transient sigstore Rekor 502 during the attestation step. 0.5.2 is the first of the three to actually publish.

Features

Removals and backward incompatible breaking changes

Packaging updates and notes for downstreams

... (truncated)

Changelog

Sourced from propcache's changelog.

0.5.2

(2026-05-08)

No significant changes.

0.5.1

(2026-05-08)

No significant changes.

0.5.0

(2026-05-08)

Features

Removals and backward incompatible breaking changes

Packaging updates and notes for downstreams

... (truncated)

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=propcache&package-manager=pip&previous-version=0.4.1&new-version=0.5.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/base-ft.txt | 2 +- requirements/base.txt | 2 +- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/runtime-deps.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 8 files changed, 8 insertions(+), 8 deletions(-) diff --git a/requirements/base-ft.txt b/requirements/base-ft.txt index f1e4c3d4acc..2834ebfb7ca 100644 --- a/requirements/base-ft.txt +++ b/requirements/base-ft.txt @@ -32,7 +32,7 @@ multidict==6.7.1 # yarl packaging==26.2 # via gunicorn -propcache==0.4.1 +propcache==0.5.2 # via # -r requirements/runtime-deps.in # yarl diff --git a/requirements/base.txt b/requirements/base.txt index 7d733bde1cb..7f639a1a99b 100644 --- a/requirements/base.txt +++ b/requirements/base.txt @@ -32,7 +32,7 @@ multidict==6.7.1 # yarl packaging==26.2 # via gunicorn -propcache==0.4.1 +propcache==0.5.2 # via # -r requirements/runtime-deps.in # yarl diff --git a/requirements/constraints.txt b/requirements/constraints.txt index d9f3bf4051e..97f87cc5a86 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -163,7 +163,7 @@ pluggy==1.6.0 # pytest-cov pre-commit==4.6.0 # via -r requirements/lint.in -propcache==0.4.1 +propcache==0.5.2 # via # -r requirements/runtime-deps.in # aiohttp diff --git a/requirements/dev.txt b/requirements/dev.txt index 7bbccc6e139..af14998b66b 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -160,7 +160,7 @@ pluggy==1.6.0 # pytest-cov pre-commit==4.6.0 # via -r requirements/lint.in -propcache==0.4.1 +propcache==0.5.2 # via # -r requirements/runtime-deps.in # aiohttp diff --git a/requirements/lint.txt b/requirements/lint.txt index b8eb0c7d394..4eb12185474 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -93,7 +93,7 @@ pluggy==1.6.0 # via pytest pre-commit==4.6.0 # via -r requirements/lint.in -propcache==0.4.1 +propcache==0.5.2 # via # aiohttp # yarl diff --git a/requirements/runtime-deps.txt b/requirements/runtime-deps.txt index 9193a03b08a..8d0850c963f 100644 --- a/requirements/runtime-deps.txt +++ b/requirements/runtime-deps.txt @@ -28,7 +28,7 @@ multidict==6.7.1 # via # -r requirements/runtime-deps.in # yarl -propcache==0.4.1 +propcache==0.5.2 # via # -r requirements/runtime-deps.in # yarl diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 9d153f5aa1f..4aea2b079d0 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -97,7 +97,7 @@ pluggy==1.6.0 # via # pytest # pytest-cov -propcache==0.4.1 +propcache==0.5.2 # via # -r requirements/runtime-deps.in # aiohttp diff --git a/requirements/test.txt b/requirements/test.txt index e330060e3e7..96bbbe6ed9b 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -97,7 +97,7 @@ pluggy==1.6.0 # via # pytest # pytest-cov -propcache==0.4.1 +propcache==0.5.2 # via # -r requirements/runtime-deps.in # aiohttp From 9bc498b1d77a45e9253ae0a77a3b300abc0d875a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 11 May 2026 17:02:23 +0000 Subject: [PATCH 2/2] Bump librt from 0.10.0 to 0.11.0 (#12504) Bumps [librt](https://github.com/mypyc/librt) from 0.10.0 to 0.11.0.
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=librt&package-manager=pip&previous-version=0.10.0&new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- requirements/constraints.txt | 2 +- requirements/dev.txt | 2 +- requirements/lint.txt | 2 +- requirements/test-common.txt | 2 +- requirements/test-ft.txt | 2 +- requirements/test.txt | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/requirements/constraints.txt b/requirements/constraints.txt index 97f87cc5a86..a6808a413a0 100644 --- a/requirements/constraints.txt +++ b/requirements/constraints.txt @@ -118,7 +118,7 @@ jinja2==3.1.6 # via # sphinx # towncrier -librt==0.10.0 +librt==0.11.0 # via mypy markdown-it-py==4.2.0 # via rich diff --git a/requirements/dev.txt b/requirements/dev.txt index af14998b66b..60b94c1f7e3 100644 --- a/requirements/dev.txt +++ b/requirements/dev.txt @@ -116,7 +116,7 @@ jinja2==3.1.6 # via # sphinx # towncrier -librt==0.10.0 +librt==0.11.0 # via mypy markdown-it-py==4.2.0 # via rich diff --git a/requirements/lint.txt b/requirements/lint.txt index 4eb12185474..8a0112164a7 100644 --- a/requirements/lint.txt +++ b/requirements/lint.txt @@ -65,7 +65,7 @@ iniconfig==2.3.0 # via pytest isal==1.7.2 # via -r requirements/lint.in -librt==0.10.0 +librt==0.11.0 # via mypy markdown-it-py==4.2.0 # via rich diff --git a/requirements/test-common.txt b/requirements/test-common.txt index de9d62a88a3..c84a5e8c041 100644 --- a/requirements/test-common.txt +++ b/requirements/test-common.txt @@ -54,7 +54,7 @@ iniconfig==2.3.0 # via pytest isal==1.8.0 ; python_version < "3.14" # via -r requirements/test-common.in -librt==0.10.0 +librt==0.11.0 # via mypy markdown-it-py==4.2.0 # via rich diff --git a/requirements/test-ft.txt b/requirements/test-ft.txt index 4aea2b079d0..25a70841aab 100644 --- a/requirements/test-ft.txt +++ b/requirements/test-ft.txt @@ -70,7 +70,7 @@ iniconfig==2.3.0 # via pytest isal==1.8.0 ; python_version < "3.14" # via -r requirements/test-common.in -librt==0.10.0 +librt==0.11.0 # via mypy markdown-it-py==4.2.0 # via rich diff --git a/requirements/test.txt b/requirements/test.txt index 96bbbe6ed9b..e97f60eefca 100644 --- a/requirements/test.txt +++ b/requirements/test.txt @@ -70,7 +70,7 @@ iniconfig==2.3.0 # via pytest isal==1.7.2 ; python_version < "3.14" # via -r requirements/test-common.in -librt==0.10.0 +librt==0.11.0 # via mypy markdown-it-py==4.2.0 # via rich