Skip to content

Conversation

@pull
Copy link

@pull pull bot commented Feb 3, 2026

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot bot added 4 commits February 3, 2026 00:50
… directory (#12018)

Bumps the pip group with 1 update in the /requirements directory:
[pip](https://github.com/pypa/pip).

Updates `pip` from 25.3 to 26.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pypa/pip/blob/main/NEWS.rst">pip's
changelog</a>.</em></p>
<blockquote>
<h1>26.0 (2026-01-30)</h1>
<h2>Deprecations and Removals</h2>
<ul>
<li>Remove support for non-bare project names in egg fragments. Affected
users should use
the <code>Direct URL requirement syntax
&lt;https://packaging.python.org/en/latest/specifications/version-specifiers/#direct-references&gt;</code><em>.
(<code>[#13157](pypa/pip#13157)
&lt;https://github.com/pypa/pip/issues/13157&gt;</code></em>)</li>
</ul>
<h2>Features</h2>
<ul>
<li>
<p>Display pip's command-line help in colour, if possible.
(<code>[#12134](pypa/pip#12134)
&lt;https://github.com/pypa/pip/issues/12134&gt;</code>_)</p>
</li>
<li>
<p>Support installing dependencies declared with inline script metadata
(:pep:<code>723</code>) with <code>--requirements-from-script</code>.
(<code>[#12891](pypa/pip#12891)
&lt;https://github.com/pypa/pip/issues/12891&gt;</code>_)</p>
</li>
<li>
<p>Add <code>--all-releases</code> and <code>--only-final</code> options
to control pre-release
and final release selection during package installation.
(<code>[#13221](pypa/pip#13221)
&lt;https://github.com/pypa/pip/issues/13221&gt;</code>_)</p>
</li>
<li>
<p>Add <code>--uploaded-prior-to</code> option to only consider packages
uploaded prior to
a given datetime when the <code>upload-time</code> field is available
from a remote index.
(<code>[#13625](pypa/pip#13625)
&lt;https://github.com/pypa/pip/issues/13625&gt;</code>_)</p>
</li>
<li>
<p>Add <code>--use-feature inprocess-build-deps</code> to request that
build dependencies are installed
within the same pip install process. This new mechanism is faster,
supports <code>--no-clean</code>
and <code>--no-cache-dir</code> reliably, and supports prompting for
authentication.</p>
<p>Enabling this feature will also enable <code>--use-feature
build-constraints</code>. This feature will
become the default in a future pip version.
(<code>[#9081](pypa/pip#9081)
&lt;https://github.com/pypa/pip/issues/9081&gt;</code>_)</p>
</li>
<li>
<p><code>pip cache purge</code> and <code>pip cache remove</code> now
clean up empty directories
and legacy files left by older pip versions.
(<code>[#9058](pypa/pip#9058)
&lt;https://github.com/pypa/pip/issues/9058&gt;</code>_)</p>
</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Fix selecting pre-release versions when only pre-releases match.
For example, <code>package&gt;1.0</code> with versions <code>1.0,
2.0rc1</code> now installs
<code>2.0rc1</code> instead of failing.
(<code>[#13746](pypa/pip#13746)
&lt;https://github.com/pypa/pip/issues/13746&gt;</code>_)</li>
<li>Revisions in version control URLs now must be percent-encoded.
For example, use <code>git+https://example.com/repo.git@issue%231</code>
to specify the branch <code>issue#1</code>.
If you previously used a branch name containing a <code>%</code>
character in a version control URL, you now need to replace it with
<code>%25</code> to ensure correct percent-encoding.
(<code>[#13407](pypa/pip#13407)
&lt;https://github.com/pypa/pip/issues/13407&gt;</code>_)</li>
<li>Preserve original casing when a path is displayed.
(<code>[#6823](pypa/pip#6823)
&lt;https://github.com/pypa/pip/issues/6823&gt;</code>_)</li>
<li>Fix bash completion when the <code>$IFS</code> variable has been
modified from its default.
(<code>[#13555](pypa/pip#13555)
&lt;https://github.com/pypa/pip/issues/13555&gt;</code>_)</li>
<li>Precompute Python requirements on each candidate, reducing time of
long resolutions.
(<code>[#13656](pypa/pip#13656)
&lt;https://github.com/pypa/pip/issues/13656&gt;</code>_)</li>
<li>Skip redundant work converting version objects to strings when using
the
<code>importlib.metadata</code> backend.
(<code>[#13660](pypa/pip#13660)
&lt;https://github.com/pypa/pip/issues/13660&gt;</code>_)</li>
<li>Fix <code>pip index versions</code> to honor only-binary/no-binary
options. (<code>[#13682](pypa/pip#13682)
&lt;https://github.com/pypa/pip/issues/13682&gt;</code>_)</li>
<li>Fix fallthrough logic for options, allowing overriding global
options with
defaults from user config.
(<code>[#13703](pypa/pip#13703)
&lt;https://github.com/pypa/pip/issues/13703&gt;</code>_)</li>
<li>Use a path-segment prefix comparison, not char-by-char.
(<code>[#13777](pypa/pip#13777)
&lt;https://github.com/pypa/pip/issues/13777&gt;</code>_)</li>
</ul>
<h2>Vendored Libraries</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/pypa/pip/commit/2f4d4a836ed00076001376fbb0ce6dc4f22cdae2"><code>2f4d4a8</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/13779">#13779</a> from
notatallshaw/fix-26.0-news</li>
<li><a
href="https://github.com/pypa/pip/commit/04307a42261749cfa1c86a5537ad88f44ed2a41a"><code>04307a4</code></a>
fix 26.0 news</li>
<li><a
href="https://github.com/pypa/pip/commit/6ec7b0a488f614a7632442fe7c651957fdb5fc85"><code>6ec7b0a</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/13775">#13775</a> from
notatallshaw/release/26.0</li>
<li><a
href="https://github.com/pypa/pip/commit/4104356cd83d1614af45d203d64cb84705dad9d2"><code>4104356</code></a>
Bump for release</li>
<li><a
href="https://github.com/pypa/pip/commit/58be8836b68814295d33bc5c56c38d3a0659ae81"><code>58be883</code></a>
Update AUTHORS.txt</li>
<li><a
href="https://github.com/pypa/pip/commit/66f2dece5ba9cc0ee9fe7035c46ba4b0756559b5"><code>66f2dec</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/13778">#13778</a> from
ichard26/docs/groups</li>
<li><a
href="https://github.com/pypa/pip/commit/0214103df7d7e6e3de3b8352ce3a3135437124f0"><code>0214103</code></a>
doc: Re-expose package selection group options</li>
<li><a
href="https://github.com/pypa/pip/commit/fdbe7628f3ce5d99ac5962fa9dba9e31f3738fcc"><code>fdbe762</code></a>
Install pip within docs Nox sessions</li>
<li><a
href="https://github.com/pypa/pip/commit/8e227a9be4faa9594e05d02ca05a413a2a4e7735"><code>8e227a9</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/13777">#13777</a> from
sethmlarson/commonpath</li>
<li><a
href="https://github.com/pypa/pip/commit/f5315ad96808c106a5c73936cebd335082be406e"><code>f5315ad</code></a>
Merge pull request <a
href="https://redirect.github.com/pypa/pip/issues/13776">#13776</a> from
ichard26/docs/versionadded</li>
<li>Additional commits viewable in <a
href="https://github.com/pypa/pip/compare/25.3...26.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=pip&package-manager=pip&previous-version=25.3&new-version=26.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/aio-libs/aiohttp/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [gunicorn](https://github.com/benoitc/gunicorn) from 24.1.1 to
25.0.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/benoitc/gunicorn/releases">gunicorn's
releases</a>.</em></p>
<blockquote>
<h2>Gunicorn 25.0.0</h2>
<h2>New Features</h2>
<ul>
<li>
<p><strong>Dirty Arbiters</strong>: Separate process pool for executing
long-running, blocking
operations (AI model loading, heavy computation) without blocking HTTP
workers
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3460">#3460</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3460">benoitc/gunicorn#3460</a>))</p>
<ul>
<li>Inspired by Erlang's dirty schedulers</li>
<li>Asyncio-based with Unix socket IPC</li>
<li>Stateful workers that persist loaded resources</li>
<li>New settings: <code>--dirty-app</code>,
<code>--dirty-workers</code>, <code>--dirty-timeout</code>,
<code>--dirty-threads</code>, <code>--dirty-graceful-timeout</code></li>
<li>Lifecycle hooks: <code>on_dirty_starting</code>,
<code>dirty_post_fork</code>,
<code>dirty_worker_init</code>, <code>dirty_worker_exit</code></li>
</ul>
</li>
<li>
<p><strong>Per-App Worker Allocation for Dirty Arbiters</strong>:
Control how many dirty workers
load each app for memory optimization with heavy models
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3473">#3473</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3473">benoitc/gunicorn#3473</a>))</p>
<ul>
<li>Set <code>workers</code> class attribute on DirtyApp (e.g.,
<code>workers = 2</code>)</li>
<li>Or use config format <code>module:class:N</code> (e.g.,
<code>myapp:HeavyModel:2</code>)</li>
<li>Requests automatically routed to workers with the target app</li>
<li>New exception <code>DirtyNoWorkersAvailableError</code> for graceful
error handling</li>
<li>Example: 8 workers × 10GB model = 80GB → with
<code>workers=2</code>: 20GB (75% savings)</li>
</ul>
</li>
<li>
<p><strong>HTTP/2 Support (Beta)</strong>: Native HTTP/2 (RFC 7540)
support for improved performance
with modern clients ([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3468">#3468</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3468">benoitc/gunicorn#3468</a>))</p>
<ul>
<li>Multiplexed streams over a single connection</li>
<li>Header compression (HPACK)</li>
<li>Flow control and stream prioritization</li>
<li>Works with gthread, gevent, and ASGI workers</li>
<li>New settings: <code>--http-protocols</code>,
<code>--http2-max-concurrent-streams</code>,
<code>--http2-initial-window-size</code>,
<code>--http2-max-frame-size</code>,
<code>--http2-max-header-list-size</code></li>
<li>Requires SSL/TLS and h2 library: <code>pip install
gunicorn[http2]</code></li>
<li>New example: <code>examples/http2_gevent/</code> with Docker and
tests</li>
</ul>
</li>
<li>
<p><strong>HTTP 103 Early Hints</strong>: Support for RFC 8297 Early
Hints to enable browsers to
preload resources before the final response
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3468">#3468</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3468">benoitc/gunicorn#3468</a>))</p>
<ul>
<li>WSGI:
<code>environ['wsgi.early_hints'](https://github.com/benoitc/gunicorn/blob/HEAD/headers)</code>
callback</li>
<li>ASGI: <code>http.response.informational</code> message type</li>
<li>Works with both HTTP/1.1 and HTTP/2</li>
</ul>
</li>
<li>
<p><strong>uWSGI Protocol for ASGI Worker</strong>: The ASGI worker now
supports receiving requests
via the uWSGI binary protocol from nginx
([PR <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3467">#3467</a>](<a
href="https://redirect.github.com/benoitc/gunicorn/pull/3467">benoitc/gunicorn#3467</a>))</p>
</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Fix HTTP/2 ALPN negotiation for gevent and eventlet workers when
<code>do_handshake_on_connect</code> is False (the default). The TLS
handshake is now
explicitly performed before checking
<code>selected_alpn_protocol()</code>.</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/benoitc/gunicorn/commit/617a85ea91a439735b47d991dfbbe706dc2beb0b"><code>617a85e</code></a>
docs: update 25.0.0 release date to 2026-02-01</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/ee933f2e3092557dfe36074aa98f84bd6081622e"><code>ee933f2</code></a>
fix(asgi): quick shutdown on SIGINT/SIGQUIT, graceful on SIGTERM</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/98ef198baa98a359131aa301a44519754c161575"><code>98ef198</code></a>
docs: update security policy for maintained versions 24.1.1 and
25.0.0</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/911e333b4e18ce0cf4c9a4739f96f056153202c6"><code>911e333</code></a>
chore: replace RST with markdown, remove docs-lint and readthedocs
config</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/7ff671bca3b1995b00e0f9703444abf57fb45842"><code>7ff671b</code></a>
chore: replace README.rst with README.md, remove
modernization-plan.md</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/d5ab5dc6c1c117b71a21c354f18e760c320157c1"><code>d5ab5dc</code></a>
Merge pull request <a
href="https://redirect.github.com/benoitc/gunicorn/issues/3473">#3473</a>
from benoitc/feature/per-app-worker-allocation</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/d563a7e436267396b063a04ad76f4a326e6bba4e"><code>d563a7e</code></a>
chore: bump version to 25.0.0</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/86264ef90001f7d92a4dae1b19c832ab87156230"><code>86264ef</code></a>
docs: add per-app worker allocation to 25.0.0 changelog</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/c4fe116d71f55b35bf0865fd9cd806e2f235c746"><code>c4fe116</code></a>
docs: add per-app worker allocation documentation</li>
<li><a
href="https://github.com/benoitc/gunicorn/commit/1af599769f398dbeadbd5f83dabeab79a5d2a37d"><code>1af5997</code></a>
docs: regenerate settings.md</li>
<li>Additional commits viewable in <a
href="https://github.com/benoitc/gunicorn/compare/24.1.1...25.0.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gunicorn&package-manager=pip&previous-version=24.1.1&new-version=25.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [rich](https://github.com/Textualize/rich) from 14.3.1 to 14.3.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Textualize/rich/releases">rich's
releases</a>.</em></p>
<blockquote>
<h2>The ZWJy release</h2>
<p>A fix for <code>cell_len</code> edge cases</p>
<h2>[14.3.2] - 2026-02-01</h2>
<h3>Fixed</h3>
<ul>
<li>Fixed solo ZWJ crash <a
href="https://redirect.github.com/Textualize/rich/pull/3953">Textualize/rich#3953</a></li>
<li>Fixed control codes reporting width of 1 <a
href="https://redirect.github.com/Textualize/rich/pull/3953">Textualize/rich#3953</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Textualize/rich/blob/master/CHANGELOG.md">rich's
changelog</a>.</em></p>
<blockquote>
<h2>[14.3.2] - 2026-02-01</h2>
<h3>Fixed</h3>
<ul>
<li>Fixed solo ZWJ crash <a
href="https://redirect.github.com/Textualize/rich/pull/3953">Textualize/rich#3953</a></li>
<li>Fixed control codes reporting width of 1 <a
href="https://redirect.github.com/Textualize/rich/pull/3953">Textualize/rich#3953</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/Textualize/rich/commit/0752ff047295131d98f24284e1d949300cd6f4c1"><code>0752ff0</code></a>
Merge pull request <a
href="https://redirect.github.com/Textualize/rich/issues/3953">#3953</a>
from Textualize/zwj-fix</li>
<li><a
href="https://github.com/Textualize/rich/commit/54ae0cfbb8d43ccc8f56bf57019b9a22c252eefa"><code>54ae0cf</code></a>
simplify</li>
<li><a
href="https://github.com/Textualize/rich/commit/07edb85f7e09ae76f0a0c9ac4c2059803ce8eb9a"><code>07edb85</code></a>
refine</li>
<li><a
href="https://github.com/Textualize/rich/commit/31930ddc842d9e1cd224327d5f6c22eff4a87f82"><code>31930dd</code></a>
fix test</li>
<li><a
href="https://github.com/Textualize/rich/commit/454fcfc92c66556f9538d420b5bd3ba95b1f57b7"><code>454fcfc</code></a>
stupid comment</li>
<li><a
href="https://github.com/Textualize/rich/commit/13f87a4007f629c00b491286034751d53ae9d63c"><code>13f87a4</code></a>
Fix ZWJ and edge cases</li>
<li><a
href="https://github.com/Textualize/rich/commit/1d402e0c59f8765e420a5a4440eb2fca7465d1ae"><code>1d402e0</code></a>
fix dates</li>
<li>See full diff in <a
href="https://github.com/Textualize/rich/compare/v14.3.1...v14.3.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=rich&package-manager=pip&previous-version=14.3.1&new-version=14.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [tomli](https://github.com/hukkin/tomli) from 2.3.0 to 2.4.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/hukkin/tomli/blob/master/CHANGELOG.md">tomli's
changelog</a>.</em></p>
<blockquote>
<h2>2.4.0</h2>
<ul>
<li>Added
<ul>
<li>TOML v1.1.0 compatibility</li>
<li>Binary wheels for Windows arm64</li>
</ul>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/hukkin/tomli/commit/a678e6fdeffa89bd28e4ecc148b926a4e1bbbc7b"><code>a678e6f</code></a>
Bump version: 2.3.0 → 2.4.0</li>
<li><a
href="https://github.com/hukkin/tomli/commit/b8a1358cd4f3932b910333e0179270093596ce64"><code>b8a1358</code></a>
Tests: remove now needless &quot;TOML
compliance&quot;-&gt;&quot;burntsushi&quot; format conversion</li>
<li><a
href="https://github.com/hukkin/tomli/commit/497937545351e0b4c8afe2299d5ddfb4a7e050cc"><code>4979375</code></a>
Update GitHub actions</li>
<li><a
href="https://github.com/hukkin/tomli/commit/f890dd1719da0e0f4e83cac39218ba2ded61fa94"><code>f890dd1</code></a>
Update pre-commit hooks</li>
<li><a
href="https://github.com/hukkin/tomli/commit/d9c65c3379b8b92dfab52c8c694605b1aea5a65d"><code>d9c65c3</code></a>
Add 2.4.0 change log</li>
<li><a
href="https://github.com/hukkin/tomli/commit/0efe49d88c2d6ee38e3ad21bfcf64249968fe6c4"><code>0efe49d</code></a>
Update README for v2.4.0</li>
<li><a
href="https://github.com/hukkin/tomli/commit/9eb2125ef49071e673d42e383b5221a268665193"><code>9eb2125</code></a>
TOML 1.1: Make seconds optional in Date-Time and Time (<a
href="https://redirect.github.com/hukkin/tomli/issues/203">#203</a>)</li>
<li><a
href="https://github.com/hukkin/tomli/commit/12314bde5b89a8bdc32de7403a2a4cf786187bbc"><code>12314bd</code></a>
TOML 1.1: Add \xHH Unicode escape code to basic strings (<a
href="https://redirect.github.com/hukkin/tomli/issues/202">#202</a>)</li>
<li><a
href="https://github.com/hukkin/tomli/commit/2a2aa62f1bc71b89b74d41dd2ab67b5dd24bc129"><code>2a2aa62</code></a>
TOML 1.1: Allow newlines and trailing comma in inline tables (<a
href="https://redirect.github.com/hukkin/tomli/issues/200">#200</a>)</li>
<li><a
href="https://github.com/hukkin/tomli/commit/38297f82cd0ef067f1afd2ffb8dfa73b65c398da"><code>38297f8</code></a>
Xfail on tests for TOML 1.1 features not yet supported</li>
<li>Additional commits viewable in <a
href="https://github.com/hukkin/tomli/compare/2.3.0...2.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tomli&package-manager=pip&previous-version=2.3.0&new-version=2.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@pull pull bot locked and limited conversation to collaborators Feb 3, 2026
@pull pull bot added the ⤵️ pull label Feb 3, 2026
@pull pull bot merged commit df0d897 into tj-python:master Feb 3, 2026
5 checks passed
@pull pull bot added the ⤵️ pull label Feb 3, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants