chore(deps): bump the dependencies group across 3 directories with 53 updates

[dependabot]

Bumps the dependencies group with 1 update in the /contrib/dev_reqs directory: jc.
Bumps the dependencies group with 1 update in the /docs directory: mkdocs-git-revision-date-localized-plugin.
Bumps the dependencies group with 51 updates in the /src/backend directory:

Package	From	To
certifi	2026.5.20	2026.6.17
click	8.4.1	8.4.2
coverage	7.14.0	7.14.3
django	5.2.14	6.0.6
django-stubs	6.0.4	6.0.6
django-stubs-ext	6.0.4	6.0.6
idna	3.16	3.18
pip	26.1.1	26.1.2
prek	0.4.1	0.4.5
pytest	9.0.3	9.1.1
ty	0.0.1a21	0.0.54
bleach	4.1.0	6.4.0
blessed	1.42.0	1.44.0
boto3	1.43.14	1.43.36
botocore	1.43.14	1.43.36
django-allauth	65.14.3	65.18.0
django-js-asset	3.1.2	4.0.1
django-markdownify	0.9.1	0.9.7
django-money	3.6.0	3.6.1
django-oauth-toolkit	3.2.0	3.3.0
django-otp	1.3.0	1.7.0
django-redis	6.0.0	7.0.0
django-structlog	10.0.0	10.1.0
docutils	0.22.4	0.23
dulwich	1.2.5	1.2.6
grpcio	1.80.0	1.81.1
icalendar	7.1.2	7.2.0
jwcrypto	1.5.7	1.5.8
nh3	0.3.5	0.3.6
opentelemetry-exporter-otlp-proto-common	1.42.1	1.43.0
opentelemetry-exporter-otlp-proto-grpc	1.42.1	1.43.0
opentelemetry-exporter-otlp-proto-http	1.42.1	1.43.0
opentelemetry-instrumentation	0.63b1	0.64b0
opentelemetry-instrumentation-dbapi	0.63b1	0.64b0
opentelemetry-proto	1.42.1	1.43.0
opentelemetry-semantic-conventions	0.63b1	0.64b0
opentelemetry-util-http	0.63b1	0.64b0
platformdirs	4.9.6	4.10.0
prettytable	3.17.0	3.18.0
protobuf	6.33.6	7.35.1
pypdf	6.12.1	6.14.2
redis	7.4.0	8.0.1
rpds-py	0.30.0	2026.5.1
s3transfer	0.17.0	0.19.0
sentry-sdk	2.60.0	2.63.0
structlog	25.5.0	26.1.0
tqdm	4.67.3	4.68.3
wcwidth	0.7.0	0.8.1
weasyprint	68.1	69.0
wrapt	1.17.3	2.2.2
zopfli	0.4.1	0.4.3

Updates jc from 1.25.6 to 1.25.7

Release notes

Sourced from jc's releases.

JC version 1.25.7

• Add csv-ih, tsv, and tsv-ih file parsers for CSV files without headers, TSV files, and TSV files without headers. Note that these are standard and not streaming parsers so the entire CSV/TSV will be loaded into memory. For lazy loading equivalents, see below.
• Add csv-ih-s, tsv-s, and tsv-ih-s streaming file parsers for CSV files without headers, TSV files, and TSV files without headers. These streaming parsers will lazily load the data into memory and may be more suitable for extremely large files.
• Add typeset and declare Bash internal command parser to convert variables simple arrays, and associative arrays along with object metadata
• Enhance pip-show command parser to add -f show files support
• Enhance rsync and rsync-s parsers to add --stats or --info=stats[1-3] fields
• Fix certbot command parser to allow parsing of named certs
• Fix dir command parser for incorrect stripping of the D: drive letter
• Fix hashsum command parser to correctly parse the mode indicator
• Fix ifconfig command parser for incorrect stripping of leading zeros in some hex numbers
• Fix iptables command parser when Target is blank and verbose output is used
• Fix lsattr command parser for filenames with spaces (newlines in filenames are still not supported)
• Fix proc-pid-smaps proc parser when unknown VmFlags are output
• Fix jc.utils.timestamp function and tests for behavior change in python 3.15
• Fix ufw command parser to support rule logging. A new boolean log field is introduced

Changelog

Sourced from jc's changelog.

jc changelog

20260617 v1.25.7

• Add csv-ih, tsv, and tsv-ih file parsers for CSV files without headers, TSV files, and TSV files without headers. Note that these are standard and not streaming parsers so the entire CSV/TSV will be loaded into memory. For lazy loading equivalents, see below.
• Add csv-ih-s, tsv-s, and tsv-ih-s streaming file parsers for CSV files without headers, TSV files, and TSV files without headers. These streaming parsers will lazily load the data into memory and may be more suitable for extremely large files.
• Add typeset and declare Bash internal command parser to convert variables simple arrays, and associative arrays along with object metadata
• Enhance pip-show command parser to add -f show files support
• Enhance rsync and rsync-s parsers to add --stats or --info=stats[1-3] fields
• Fix certbot command parser to allow parsing of named certs
• Fix dir command parser for incorrect stripping of the D: drive letter
• Fix hashsum command parser to correctly parse the mode indicator
• Fix ifconfig command parser for incorrect stripping of leading zeros in some hex numbers
• Fix iptables command parser when Target is blank and verbose output is used
• Fix lsattr command parser for filenames with spaces (newlines in filenames are still not supported)
• Fix proc-pid-smaps proc parser when unknown VmFlags are output
• Fix jc.utils.timestamp function and tests for behavior change in python 3.15
• Fix ufw command parser to support rule logging. A new boolean log field is introduced

20251012 v1.25.6

• Add net-localgroup Windows command parser
• Add net-user Windows command parser
• Add route-print Windows command parser
• Add traceroute-s streaming command parser
• Add max_hops and data_bytes fields to traceroute command parser
• Add x509-crl file parser to support Certificate Revocation List PEM and DER files
• Add yay as a magic command for the pacman command parser
• Fix bluetoothctl command parser to support output with the cable_pairing attribute
• Fix nmcli command parser to support blank team.config JSON value and team-port.config JSON value
• Fix top command parsers to correct memory size field parsing. Several new unit and byte conversion fields have been added
• Fix who command parser to support the process field on Debian13

20250503 v1.25.5

• Add amixer command parser
• Enhance iptables command parser to add default policy statistics fields
• Fix bluetoothctl parser failing to parse controllers with power state prop
• Fix lsblk command parser to support multiple mountpoints. Also, added byte conversions for size fields.
• Fix nmcli command parser to support team.config JSON field
• Fix time command parser for output that does not contain centiseconds
• Fix x509-cert parser to handle IDNA2008 encoded email addresses with a warning
• Fix typing for upcoming python v3.14

... (truncated)

Commits

• 8290734 Merge pull request #712 from kellyjonbrazil/dev
• 9d11e1f doc update
• 3a2946b add streaming csv-ih, tsv, and tsv-ih parsers with doc fixes
• 22ff0e3 fix for python 3.15 behavior changes
• fab550e docs: fix typos (#711)
• 6e79f08 Add TSV alias and CSV/TSV "No Header" alias (#709)
• 900aed5 fix tests and update docs
• 676695e Merge pull request #701 from jeffdyke/feature/certs-with-cert-name
• 30c7507 doc update
• 7d801f3 doc update
• Additional commits viewable in compare view

Updates mkdocs-git-revision-date-localized-plugin from 1.5.2 to 1.5.3

Release notes

Sourced from mkdocs-git-revision-date-localized-plugin's releases.

v1.5.3

What's Changed

• Fix paths in MANIFEST.in by @​mitya57 in timvink/mkdocs-git-revision-date-localized-plugin#211

New Contributors

• @​mitya57 made their first contribution in timvink/mkdocs-git-revision-date-localized-plugin#211

Full Changelog: timvink/mkdocs-git-revision-date-localized-plugin@v1.5.2...v1.5.3

Commits

• 30e5876 Bump version to 1.5.3
• d58c5be Merge pull request #211 from mitya57/fix-manifest
• 6da0b4e Fix paths in MANIFEST.in
• aa0d4a3 Constrain mkdocs to <2
• See full diff in compare view

Updates certifi from 2026.5.20 to 2026.6.17

Commits

• d0ac52f 2026.06.17 (#418)
• d46de62 Bump actions/checkout from 6.0.2 to 6.0.3 (#417)
• 6c183ec fix: update Requests docs link to canonical URL (#415)
• 36e3568 Bump dessant/lock-threads from 6.0.0 to 6.0.2
• See full diff in compare view

Updates click from 8.4.1 to 8.4.2

Release notes

Sourced from click's releases.

8.4.2

This is the Click 8.4.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.

PyPI: https://pypi.org/project/click/8.4.2/ Changes: https://click.palletsprojects.com/page/changes/#version-8-4-2 Milestone: https://github.com/pallets/click/milestone/34

• Fix Fish shell completion broken in 8.4.0 by #3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. #3502 #3043 #3504 #3508
• Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. #3509
• A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. #3059 #3507
• echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. #3242 #2542 #3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from #3482. #3449 #3533
• Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. #3578
• {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. #2331 #1884 #3125 #3582

Changelog

Sourced from click's changelog.

Version 8.4.2

Released 2026-06-24

• Fix Fish shell completion broken in 8.4.0 by {pr}3126. Newlines and tabs in option help text are now escaped, keeping the original completion format while still supporting multi-line help. {issue}3502 {issue}3043 {pr}3504 {pr}3508
• Deprecated commands and options with empty or missing help text no longer render a stray leading space before the (DEPRECATED) label. {pr}3509
• A {class}Group with invoke_without_command=True marks its subcommand as optional in the usage help, showing [COMMAND] instead of COMMAND. {issue}3059 {pr}3507
• echo_via_pager flushes after each write, so passing a generator streams output to the pager incrementally instead of staying hidden until the pipe buffer fills. {issue}3242 {issue}2542 {pr}3534
• echo_via_pager and get_pager_file no longer close a borrowed stdout stream when no external pager runs, completing the partial I/O operation on closed file fix from {pr}3482. {issue}3449 {pr}3533
• Fix CLI usage symopsis for optional arguments producing double square brackets [[a|b|c]]... whose type already brackets their metavar. {pr}3578
• {func}version_option resolves a package_name that does not match an installed distribution as an import (top-level module) name via {func}importlib.metadata.packages_distributions. Packages whose top-level module name differs from their distribution name (PIL vs Pillow, jwt vs PyJWT) no longer raise RuntimeError out of the box. {issue}2331 {issue}1884 {issue}3125 {pr}3582

Commits

• b2e30a1 Release version 8.4.2
• 7a16b20 Fix package_name resolution when module differs from distribution name (#3582)
• bec5928 Fix package_name resolution when top-level module differs from distribution...
• 916883a Fix tests to not rely on -Wdefault option (#3591)
• 09195f6 Fix double-bracketing of choices in synopsis (#3578)
• 1557e26 Check for warning exception with idiomatic context manager
• d9ff133 Static typing improvements in click.shell_completion (#3460)
• 762c97e Fix double-bracketing of choices in synopsis
• 8929d39 Convert changes to markdown. (#3559)
• 237be50 Move changes headings down a level.
• Additional commits viewable in compare view

Updates coverage from 7.14.0 to 7.14.3

Changelog

Sourced from coverage's changelog.

Version 7.14.3 — 2026-06-22

• Fix: the default ... exclusion rule now also matches function bodies whose closing return-type bracket is on its own line (for example, after a long -> dict[ ... ] annotation that a formatter has split over multiple lines). Closes issue 2185, thanks Mengjia Shang <pull 2196_>.

• Fix: On 3.13t, we incorrectly issued Couldn't import C tracer errors. We can't import the C tracer because in 7.14.2 we stopped shipping compiled wheels for 3.13t. Thanks, Hugo van Kemenade <pull 2203_>_.

.. _issue 2185: coveragepy/coveragepy#2185 .. _pull 2196: coveragepy/coveragepy#2196 .. _pull 2203: coveragepy/coveragepy#2203

.. _changes_7-14-2:

Version 7.14.2 — 2026-06-20

• Fix: some messages were being written to stdout, making coverage json -o - useless for capturing JSON output. Now messages are written to stderr, fixing issue 2197_.

• Fix: CoverageData kept one SQLite connection per thread that recorded coverage, but never closed them when those threads terminated. On long runs with many short-lived threads this leaked one file descriptor per dead thread, eventually failing with OSError: [Errno 24] Too many open files. Connections belonging to terminated threads are now closed and dropped. Fixes issue 2192. Thanks, Matthew Lloyd <pull 2193_>.

• Fix: when using sys.monitoring, we were assuming we could use the COVERAGE_ID tool id. But other tools might also assume they could use that id. Pre-allocated ids don't really make sense, so now we search for a usable one instead. Fixes issue 2187_.

• Following the advice of cibuildwheel <no-13t_>_, we no longer distribute wheels for Python 3.13 free-threaded.

.. _issue 2187: coveragepy/coveragepy#2187 .. _issue 2192: coveragepy/coveragepy#2192 .. _pull 2193: coveragepy/coveragepy#2193 .. _issue 2197: coveragepy/coveragepy#2197 .. _no-13t: https://py-free-threading.github.io/ci/#building-free-threaded-wheels-with-cibuildwheel

.. _changes_7-14-1:

... (truncated)

Commits

• 22f13ea docs: sample HTML for 7.14.3
• 2ca4e5f docs: prep for 7.14.3
• 01d714e docs: add changelog entry for #2203
• f36248d fix: don't emit 'Couldn't import C tracer' warning for 3.13t (#2203)
• 86d73d1 docs: thanks, Mengjia Shang
• 3d4ae3c docs: add the #2196 pr link to CHANGES
• f4b2b4d fix: exclude ... bodies after multi-line return-type annotations (#2185) (#...
• 1980ed0 chore: bump sigstore/gh-action-sigstore-python (#2201)
• bca3217 build: since we don't ship 3.13t, don't test it
• 77550d8 docs: oops, mismatched pull requests
• Additional commits viewable in compare view

Updates django from 5.2.14 to 6.0.6

Commits

• ee93f65 [6.0.x] Bumped version for 6.0.6 release.
• 1721035 [6.0.x] Fixed CVE-2026-48587 -- Ignored whitespace padding when checking Vary...
• 664652f [6.0.x] Fixed CVE-2026-35193 -- Varied on Authorization when caching non-publ...
• b433025 [6.0.x] Fixed CVE-2026-8404 -- Used Cache-Control directives case-insensitive...
• 625a670 [6.0.x] Fixed CVE-2026-7666 -- Delayed setting SMTP connection until fully co...
• c807d9c [6.0.x] Fixed CVE-2026-6873 -- Prevented signed cookie salt namespace collisi...
• 98a75e3 [6.0.x] Included commit hash in checksum file when building artifacts for rel...
• dd895d6 [6.0.x] Updated translations from Transifex.
• 49ca2db [6.0.x] Updated links to severity levels in release notes.
• c9f32a2 [6.0.x] Added stub release notes and release date for 6.0.6 and 5.2.15.
• Additional commits viewable in compare view

Updates django-stubs from 6.0.4 to 6.0.6

Commits

• c1d968a Version 6.0.6 (#3445)
• c78e106 Typecheck save()/asave() update_fields against model fields (#3444)
• 9110cd4 Update int128/hide-comment-action action to v1.62.0 (#3442)
• 2e6023a [pre-commit.ci] pre-commit autoupdate (#3441)
• 9088416 Update dependency pytest to v9.1.1 (#3440)
• 4ffe717 Update dependency ty to v0.0.51 (#3439)
• 0caf5de Update dependency pyrefly to v1.1.1 (#3438)
• 6b0170d Update dependency ty to v0.0.50 (#3437)
• a257acd Update actions/checkout action to v7 (#3436)
• dc012ea Update dependency pyrefly to v1.1.0 (#3435)
• Additional commits viewable in compare view

Updates django-stubs-ext from 6.0.4 to 6.0.6

Commits

• c1d968a Version 6.0.6 (#3445)
• c78e106 Typecheck save()/asave() update_fields against model fields (#3444)
• 9110cd4 Update int128/hide-comment-action action to v1.62.0 (#3442)
• 2e6023a [pre-commit.ci] pre-commit autoupdate (#3441)
• 9088416 Update dependency pytest to v9.1.1 (#3440)
• 4ffe717 Update dependency ty to v0.0.51 (#3439)
• 0caf5de Update dependency pyrefly to v1.1.1 (#3438)
• 6b0170d Update dependency ty to v0.0.50 (#3437)
• a257acd Update actions/checkout action to v7 (#3436)
• dc012ea Update dependency pyrefly to v1.1.0 (#3435)
• Additional commits viewable in compare view

Updates idna from 3.16 to 3.18

Changelog

Sourced from idna's changelog.

3.18 (2026-06-02)

• When decoding a domain, add a display argument that will pass through invalid labels rather than raising an exception.

3.17 (2026-05-28)

• Substantial 75% reduction in memory usage through new data structures and some optimization in processing speed.
• Added a general 1024-character input length cap to the public validation, conversion, and codec entry points. This is well above any legitimate domain or label and guards against pathological inputs.

Commits

• f39ea90 Release 3.18
• 40f4e40 Pre-release 3.18rc0
• 1a5bf80 Merge pull request #253 from kjd/lenient-decode
• 5bbb26f Merge branch 'master' into lenient-decode
• c532bae Rename decode() lenient= option to display= (issue #248)
• 0b1758b Merge pull request #252 from kjd/release-3.17
• f48619c Release 3.17
• 7421ba8 Pre-release 3.17rc0
• 22ebb73 Merge pull request #251 from kjd/structure-optimizations
• 2a7ac0a Drop redundant parallel-arrays comment from uts46data
• Additional commits viewable in compare view

Updates pip from 26.1.1 to 26.1.2

Changelog

Sourced from pip's changelog.

26.1.2 (2026-05-31)

Bug Fixes

• Reject console_scripts and gui_scripts entry points whose name would install a script outside the scripts directory. ([#14000](https://github.com/pypa/pip/issues/14000) <https://github.com/pypa/pip/issues/14000>_)
• Fix installation incorrectly failing when the target path contains a doubled slash, such as with pip install --root //.... ([#14001](https://github.com/pypa/pip/issues/14001) <https://github.com/pypa/pip/issues/14001>_)
• Send a consistent Accept-Encoding header to avoid a spurious Cache entry deserialization failed warning. ([#14012](https://github.com/pypa/pip/issues/14012) <https://github.com/pypa/pip/issues/14012>_)

Commits

• 31d7d16 Bump for release
• 79f348c Update AUTHORS.txt
• 237a925 Merge pull request #14001 from notatallshaw/fix-is-within-directory
• 34d0285 Merge pull request #14006 from laymonage/fix-requirements_from_scripts-space-...
• 09d3e07 Merge pull request #14012 from notatallshaw/stable-accept-encoding
• fa7854f Use is_within_directory for entry point check
• d01b46c NEWS ENTRY
• 7ff8bdd Fix is_within_directory for doubled-slash roots
• 7ea3466 NEWS ENTRY
• 85673ea Fix Accept-Encoding to gzip, deflate
• Additional commits viewable in compare view

Updates prek from 0.4.1 to 0.4.5

Release notes

Sourced from prek's releases.

0.4.5

Release Notes

Released on 2026-06-15.

✨Highlights

0.4.5 completes prek's pre-commit language coverage. With R, Conda, Perl, and coursier now supported, prek supports every language available in pre-commit, plus prek-only modern languages such as Bun and Deno.

This is full feature parity with pre-commit. The last major compatibility gap is closed, and prek is now on the path to 1.0.

💚 Sponsorship

If prek saves time for you or your team, please consider sponsoring the project on GitHub Sponsors. It helps keep new features, performance work, and maintenance moving.

Enhancements

• Add Perl language support (#2201)
• Add R language support (#2206)
• Add Conda language support (#2203)
• Add coursier language support (#2194)
• Add group filters to list (#2152)
• Remove legacy repo path support (#2150)
• Skip cloning fully filtered remote repos (#2151)

Performance

• Avoid building JSON trees in syntax hooks (#2156)
• Scan mixed line endings without line vector (#2160)
• Skip file scan for always-run no-filename hooks (#2155)
• Use fixed buffer for EOF scan (#2163)
• Use fixed buffer for private key scan (#2164)

Bug fixes

• Fix pretty-format-json CRLF handling (#2210)
• Handle missing blobs in diff snapshots (#2211)
• Ignore coursier channel from working repo (#2202)

Contributors

• @​j178

Install prek 0.4.5

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.5

Released on 2026-06-15.

✨Highlights

0.4.5 completes prek's pre-commit language coverage. With R, Conda, Perl, and coursier now supported, prek supports every language available in pre-commit, plus prek-only modern languages such as Bun and Deno.

This is full feature parity with pre-commit. The last major compatibility gap is closed, and prek is now on the path to 1.0.

💚 Sponsorship

If prek saves time for you or your team, please consider sponsoring the project on GitHub Sponsors. It helps keep new features, performance work, and maintenance moving.

Enhancements

• Add Perl language support (#2201)
• Add R language support (#2206)
• Add Conda language support (#2203)
• Add coursier language support (#2194)
• Add group filters to list (#2152)
• Remove legacy repo path support (#2150)
• Skip cloning fully filtered remote repos (#2151)

Performance

• Avoid building JSON trees in syntax hooks (#2156)
• Scan mixed line endings without line vector (#2160)
• Skip file scan for always-run no-filename hooks (#2155)
• Use fixed buffer for EOF scan (#2163)
• Use fixed buffer for private key scan (#2164)

Bug fixes

• Fix pretty-format-json CRLF handling (#2210)
• Handle missing blobs in diff snapshots (#2211)
• Ignore coursier channel from working repo (#2202)

Contributors

• @​j178

0.4.4

Released on 2026-06-04.

... (truncated)

Commits

• bb31082 Update README.md
• fa4e2dc Bump version to 0.4.5 (#2221)
• e9336fa Add R language support (#2206)
• 97a5a15 Update Rust crate which to v8.0.3 (#2219)
• 20a519a Update Rust crate ignore to v0.4.26 (#2218)
• 88f0e2b Update dependency uv to v0.11.19 (#2214)
• 7bd4300 Update GitHub Actions to v7 (#2220)
• 48ed5cc Update Rust crate async_zip to 0.0.18 (#2217)
• 257e98a Update pre-commit to v1.47.2 (#2216)
• 0c04602 Update GitHub Actions (#2215)
• Additional commits viewable in compare view

Updates pytest from 9.0.3 to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

9.1.0

pytest 9.1.0 (2026-06-13)

Removals and backward incompatible breaking changes

• #14533: When using --doctest-modules, autouse fixtures with module, package or session scope that are defined inline in Python test modules (not plugins or conftests) will now possibly execute twice.

  If this is undesirable, move the fixture definition to a conftest.py file if possible.

  Technical explanation for those interested: When using --doctest-modules, pytest possibly collects Python modules twice, once as pytest.Module and once as a DoctestModule (depending on the configuration). Due to improvements in pytest's fixture implementation, if e.g. the DoctestModule collects a fixture, it is now visible to it only, and not to the Module. This means that both need to register the fixtures independently.

Deprecations (removal in next major release)

• #10819: Added a deprecation warning for class-scoped fixtures defined as instance methods (without @classmethod). Such fixtures set attributes on a different instance than the test methods use, leading to unexpected behavior. Use @classmethod decorator instead -- by yastcher.

  See 10819 and 14011.

• #12882: Calling request.getfixturevalue() <pytest.FixtureRequest.getfixturevalue> during teardown to request a fixture that was not already requested is now deprecated and will become an error in pytest 10.

  See dynamic-fixture-request-during-teardown for details.

• #13409: Using non-~collections.abc.Collection iterables (such as generators, iterators, or custom iterable objects) for the argvalues parameter in @pytest.mark.parametrize <pytest.mark.parametrize ref> and metafunc.parametrize <pytest.Metafunc.parametrize> is now deprecated.

  These iterables get exhausted after the first iteration, leading to tests getting unexpectedly skipped in cases such as running pytest.main() multiple times, using class-level parametrize decorators, or collecting tests multiple times.

  See parametrize-iterators for details and suggestions.

• #13946: The private config.inicfg attribute is now deprecated. Use config.getini() <pytest.Config.getini> to access configuration values instead.

  See config-inicfg for more details.

• #14004: Passing baseid to ~pytest.FixtureDef or nodeid strings to fixture registration APIs is now deprecated. These are internal pytest APIs that are used by some plugins.

... (truncated)

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
• 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
• 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
• Additional commits viewable in compare view

Updates ty from 0.0.1a21 to 0.0.54

Release notes

Sourced from ty's releases.

0.0.54

Release Notes

Released on 2026-06-25.

Bug fixes

• Avoid duplicate configuration error output (#26375)
• Avoid stack overflows in reachability analysis (#26272)
• Fix divergent recursive tuple cycle handling in ty (#26316)
• Fix panic from relation queries during cycle recovery (#26335)
• Fix panics by reverting recursive TypeOf cycle recovery (#26339)
• Support basic usages of __class__ closure cells in methods (#26329)

LSP server

• Fix typealias token classification inconsistency (#26255)
• Implement rust-analyzer's "Click for full compiler diagnostic" feature (#26269)

Performance

• Co-locate retained definition usage state (#26019)
• Use never-change durability for immutable file inputs (#26353)

Diagnostics

• Reject undeclared protocol instance attributes (#26336)

Core type checking

• Allow replacing ordinary methods with compatible functions (#26158)
• Distinguish typing.TypedDict from typing_extensions.TypedDict (#25843)
• Don't treat non-empty ranges as single-valued (#26351)
• Handle TypeVar bounds over type[...] in attribute lookup (#26146)
• Infer definite equality comparison results (#26337)
• Infer mismatched literal comparisons (#26313)
• match statements: make class-pattern fallthrough member-aware (#26283)
• match statements: prove TypedDict structural patterns exhaustive (#26285)
• match statements: resolve positional class-pattern exhaustiveness (#26284)
• Model non-exhaustive enum member sets (enum.Flags) (#26277)
• Reduce retained definition map storage (#26348)
• Reuse equality semantics for membership compatibility (#25955)
• Sync vendored typeshed stubs to support builtins.sentinel (#26341)
• Treat non-empty range calls as non-empty for reachability (#25220)
• Use assignability for divergent constraints (#26334)
• Widen inferred class-valued instance attributes (#26338)

Contributors

• @​carljm

... (truncated)

Changelog

Sourced from ty's changelog.

0.0.54

Released on 2026-06-25.

Bug fixes

• Avoid duplicate configuration error output (#26375)
• Avoid stack overflows in reachability analysis (#26272)
• Fix divergent recursive tuple cy...

  Description has been truncated

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.