[dependabot]

Bumps the patch group with 7 updates:

Package	From	To
tzlocal	5.4.4	5.4.5
griffe-warnings-deprecated	1.1.1	1.1.2
markdown	3.11	3.11.2
mkdocstrings	1.0.6	1.0.8
mypy	2.4.0	2.4.1
pylint	4.1.2	4.1.3
pytest-asyncio	1.4.0	1.4.1

Updates tzlocal from 5.4.4 to 5.4.5

Changelog

Sourced from tzlocal's changelog.

5.4.5 (2026-10-22)

• Recognize timezone file names with multiple slashes in the TZ environment variable.
• Use HTTPS in place of FTP to retrieve tzdata archive.

Commits

• ab833e7 Preparing release 5.4.5
• 148d36d Update mappings
• f84b23e Use HTTPS in place of FTP to retrieve tzdata archive in update_windows_mappin...
• b5349f6 Recognize nested time zone names in TZ file paths (#186)
• 6ef2c29 Back to development: 5.4.5
• See full diff in compare view

Updates griffe-warnings-deprecated from 1.1.1 to 1.1.2

Release notes

Sourced from griffe-warnings-deprecated's releases.

1.1.2

1.1.2 - 2026-10-06

Compare with 1.1.1

Build

• Drop support for Python 3.10 (2cfb851 by Timothée Mazzucotelli).

Changelog

Sourced from griffe-warnings-deprecated's changelog.

1.1.2 - 2026-10-06

Compare with 1.1.1

Build

• Drop support for Python 3.10 (2cfb851 by Timothée Mazzucotelli).

Commits

• cc3a695 chore: Prepare release 1.1.2
• 058211c chore: Template upgrade
• 2cfb851 build: Drop support for Python 3.10
• 138f885 chore: Update sponsors section in README (#10)
• db084e7 chore: Lint
• 8003436 chore: Template upgrade
• 381ffc6 Merge branch 'main' of github.com:mkdocstrings/griffe-typing-deprecated
• c4ed8a1 chore: Template upgrade
• f84bf29 chore: Update sponsors section in README (#9)
• See full diff in compare view

Updates markdown from 3.11 to 3.11.2

Release notes

Sourced from markdown's releases.

Release 3.11.2

Fixed

• Sanitize attribute names in the fenced_code and legacy_attrs extensions so an attribute name cannot break out of its tag and inject markup (#1663).
• For backwards compatibility, revert the enforcement of CommonMark style punctuation rules (#1657).

Release 3.11.1

Fixed

• Update serializer to be non-recursive (#1644).
• Improve ancestor handling in the inline Treeprocessor (#1646).
• Keep a raw HTML comment inside an inline HTML element that closes in the same paragraph, instead of splitting the paragraph around it (#1643).
• Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#1647).
• Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#1651).
• Complete rework of emphasis handling to improve nested emphasis handling better (#1632).

Changelog

Sourced from markdown's changelog.

[3.11.2] - 2026-10-19

Fixed

• Sanitize attribute names in the fenced_code and legacy_attrs extensions so an attribute name cannot break out of its tag and inject markup (#1663).
• For backwards compatibility, revert the enforcement of CommonMark style punctuation rules (#1657).

[3.11.1] - 2026-10-13

Fixed

• Update serializer to be non-recursive (#1644).
• Improve ancestor handling in the inline Treeprocessor (#1646).
• Keep a raw HTML comment inside an inline HTML element that closes in the same paragraph, instead of splitting the paragraph around it (#1643).
• Fix issue where inline HTML attributes were rejected if they had < or > in the attribute (#1647).
• Fix issue where an unterminated end tag (</foo) could cause all remaining content to be dropped (#1651).
• Complete rework of emphasis handling to improve nested emphasis handling better (#1632).

[3.11.0] - 2026-09-25

Changed

• Inline processors now resume searching after the previous match, improving performance for repeated inline patterns (#1619).
• Officially support Python 3.15 and drop support for Python 3.10
• Walk backtick runs in BacktickInlineProcessor without a regex (#1620).
• Switch static site generator for documentation from MkDocs to Zensical (#1627, #1635, #1637, and #1638).

Fixed

• Ensure removing Abbreviations does not raise an error (#1634).
• Fix an issue with excessive backtracking when matching inline code blocks (#1617).
• md_in_html now honors tags added to Markdown.block_level_elements after the extension is loaded (#1246).
• Fix quadratic-time regex backtracking in ReferenceProcessor when a link reference definition has no URL, e.g. a line consisting only of [id]: followed by many trailing spaces (#798).
• Document attr_list usage for def_list (#1123).

[3.10.3] - 2026-07-30

Fixed

• Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
• Add AI Policy to Contributing Guide.
• Officially document all included extensions as being in maintenance mode.

... (truncated)

Commits

• b41e0aa Bump version to 3.11.2
• 934c53e Add checklist of parts to PR template
• 2249ffd Update AI Policy
• a27428b Sanitize attribute names in fenced_code and legacy_attrs
• 90cdcf5 Add fixed category to changelog
• 97233ef Revert enforcement of CommonMark punctuation rules
• 2258b48 Bump version to 3.11.1
• 6f825aa Rewrite emphasis handling
• 0bf535b Keep a comment inside raw inline HTML in the same paragraph
• 3ade80d Add playground to docs
• Additional commits viewable in compare view

Updates mkdocstrings from 1.0.6 to 1.0.8

Release notes

Sourced from mkdocstrings's releases.

1.0.8

1.0.8 - 2026-10-19

Compare with 1.0.7

Bug Fixes

• Prefix code anchor/span IDs to avoid collisions (f402d2c by Timothée Mazzucotelli). Issue-mkdocstrings-python-200

1.0.7

1.0.7 - 2026-10-10

Compare with 1.0.6

Build

• Drop support for Python 3.10 (2c2cbb1 by Timothée Mazzucotelli).

Bug Fixes

• Support pymdownx 12.2 (ff510f2 by Timothée Mazzucotelli). Issue-829

Changelog

Sourced from mkdocstrings's changelog.

1.0.8 - 2026-10-19

Compare with 1.0.7

Bug Fixes

• Prefix code anchor/span IDs to avoid collisions (f402d2c by Timothée Mazzucotelli). Issue-mkdocstrings-python-200

1.0.7 - 2026-10-10

Compare with 1.0.6

Build

• Drop support for Python 3.10 (2c2cbb1 by Timothée Mazzucotelli).

Bug Fixes

• Support pymdownx 12.2 (ff510f2 by Timothée Mazzucotelli). Issue-829

Commits

• df77e42 chore: Prepare release 1.0.8
• cbc4590 chore: Stop testing on Python 3.10
• f402d2c fix: Prefix code anchor/span IDs to avoid collisions
• e9538c4 docs: Link the VBA handler to its published documentation
• 79eefbc chore: Prepare release 1.0.7
• 2c2cbb1 build: Drop support for Python 3.10
• 7275d14 chore: Lint
• ff510f2 fix: Support pymdownx 12.2
• 8b635eb chore: Template upgrade
• e0cf0ed chore: Template upgrade
• Additional commits viewable in compare view

Updates mypy from 2.4.0 to 2.4.1

Changelog

Sourced from mypy's changelog.

Mypy 2.4.1

• Process overloads as a whole in two-phase type checking (Ivan Levkivskyi, PR 22231)
• Skip recursive setup for frame-private nested functions in mypyc (Piotr Sawicki, PR 22187)

Acknowledgements

Thanks to all mypy contributors who contributed to this release:

• A5rocks
• Adam Dangoor
• Alex Waygood
• Ali Hamdan
• Brian Helba
• Chad Dombrova
• David Foster
• dnwpark
• Edgar Ramírez Mondragón
• Giorgos Michas
• Ivan Levkivskyi
• Jelle Zijlstra
• Jukka Lehtosalo
• Marc Mueller
• Michael R. Crusoe
• NIYONSHUTI Emmanuel
• Piotr Sawicki
• Shantanu
• themylogin
• Vaggelis Danias
• Willy Bruns

I'd also like to thank my employer, Dropbox, for supporting mypy development.

Mypy 2.3

We've just uploaded mypy 2.3.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

The Upcoming Switch to the New Native Parser

We are planning to enable the new native parser (--native-parser) by default soon. We recommend that you test the native parser in your projects and report any issues in the mypy issue tracker.

Mypyc Free-threading Memory Safety

... (truncated)

Commits

• ad02a35 Skip test for 2.4.1
• cad7794 Finalize version to 2.4.1
• d9cbcbc Add changelog for Mypy 2.4.1 (#22310)
• 2860baa Process overloads as a whole in two-phase type-checking (#22231)
• 9b3e307 [mypyc] Skip recursive setup for frame-private nested functions (#22187)
• 10ad5f6 Bump ast-serialize to 0.12.1 (#22093)
• 350052f Bump ast-serialize to 0.12.0 (#22087)
• f7d08cf Bump version to 2.4.1+dev
• See full diff in compare view

Updates pylint from 4.1.2 to 4.1.3

Release notes

Sourced from pylint's releases.

v4.1.3

What's new in Pylint 4.1.3?

Release date: 2026-10-11

False Positives Fixed

• Fixed a false positive for attribute-defined-outside-init when an attribute is assigned inside the setter of an old-style, non-decorator property(fget, fset) call. The decorator form (@property / @x.setter) was already exempted by the fix for #409; the classic call form was not.

  Closes #3325

• Fix a false positive for used-before-assignment when a name bound by an earlier target of the same assignment is used by a later target, as in a = b[a] = 0.

  Closes #5955

• Fix a no-member false positive in a comprehension inside a branch that cannot run, such as if sys.platform == "win32": on Linux. Like the rest of the branch, the comprehension is no longer checked for missing members.

  Closes #7240

• Fix a false positive for used-before-assignment when a name bound by a tuple or list target of a with item is used by a later item of the same with statement.

  Closes #7545

• Fix false positives such as not-callable, not-an-iterable, unpacking-non-sequence and no-member on the result of a function whose body is only ..., like @overload and .pyi stubs. Such calls were inferred as returning None. This affected sqlalchemy.func, pydantic.Field, and the torch functions wrapped by _add_docstr, such as torch.linalg.qr.

  Closes #8138 Closes #9218 Closes #9354 Closes #10087

• Fix a false positive for protected-access when a subclass of a subscripted generic base, such as class Child(Parent[T]), accesses a protected member through that base, such as Parent._foo(self).

  Closes #8600

... (truncated)

Commits

• e75de10 Bump pylint to 4.1.3, update changelog (#11637)
• 591f6e2 [Backport maintenance/4.1.x] Fix protected-access false positive through a su...
• a537920 [Backport maintenance/4.1.x] Ignore discard variable type redefinitions (#11635)
• 4a8f61c [Backport maintenance/4.1.x] Fix duplicate-code crash when min-similarity-lin...
• 41fa1c4 [Backport maintenance/4.1.x] [pyreverse] Fix hang/RecursionError with --all-a...
• a05e2f3 [Backport maintenance/4.1.x] Fix used-before-assignment false positive for ...
• ea7996b [Backport maintenance/4.1.x] Error when several output formats write to stdou...
• 479c037 [Backport maintenance/4.1.x] Fix IndexError when Enum init has no argumen...
• e6aa780 [Backport maintenance/4.1.x] Fix unreachable false positive for raising gener...
• fc58d0b [Backport maintenance/4.1.x] Fix pyreverse crash on classes with EmptyNode in...
• Additional commits viewable in compare view

Updates pytest-asyncio from 1.4.0 to 1.4.1

Release notes

Sourced from pytest-asyncio's releases.

pytest-asyncio v1.4.1

1.4.1 - 2026-10-25

Added

• Declared support for Python 3.15 (#1588)

Fixed

• Allow AsyncIterable as a return type for asynchronous generator fixtures decorated with pytest_asyncio.fixture (#1090)

Notes for Downstream Packagers

• Source-tree development dependencies now use PEP 735 dependency groups and uv.lock. (#1518)

Commits

• 6af7f5c chore: Prepare release of v1.4.1.
• 32ccf64 Support 3.15 (#1588)
• 9830071 Build(deps): Bump certifi from 2026.6.17 to 2026.10.19 (#1590)
• 0238023 Build(deps): Bump virtualenv from 21.7.13 to 21.14.13 (#1589)
• 93893ec Build(deps): Bump astral-sh/setup-uv from 10.2.0 to 10.3.0 (#1583)
• f287e5e Build(deps): Bump actions/download-artifact from 8.0.1 to 8.0.2 (#1581)
• b71da4f Build(deps-dev): Bump hypothesis from 6.168.3 to 6.168.5 (#1582)
• d8c51d8 Build(deps): Bump actions/upload-artifact from 7.0.1 to 7.0.2 (#1580)
• b12808b Build(deps): Bump virtualenv from 21.7.12 to 21.7.13 (#1578)
• e0601f0 Build(deps-dev): Bump coverage from 7.16.1 to 7.16.2 (#1577)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions