Skip to content

Bump the python-minor-patch group with 6 updates - #12

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-minor-patch-d83e72f271
Open

Bump the python-minor-patch group with 6 updates#12
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/python-minor-patch-d83e72f271

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 7, 2026

Copy link
Copy Markdown

Bumps the python-minor-patch group with 6 updates:

Package From To
sphinx-rtd-theme 3.0.2 3.1.0
sphinx-design 0.6.1 0.7.0
sphinx-argparse 0.5.2 0.6.1
linkify-it-py 2.0.3 2.2.0
cairosvg 2.7.1 2.9.0
docutils 0.21.2 0.23

Updates sphinx-rtd-theme from 3.0.2 to 3.1.0

Changelog

Sourced from sphinx-rtd-theme's changelog.

3.1.0

  • Added support for docutils 0.22
  • Added support for Sphinx 9.x

.. _release-3.1.0rc2:

3.1.0rc2

  • Added support for docutils 0.22

.. _release-3.1.0rc1:

3.1.0rc1

  • Added support for Sphinx 9.x

.. _release-3.0.2:

Commits

Updates sphinx-design from 0.6.1 to 0.7.0

Release notes

Sourced from sphinx-design's releases.

v0.7.0

What's Changed

New Contributors

Full Changelog: executablebooks/sphinx-design@v0.6.1...v0.7.0

Changelog

Sourced from sphinx-design's changelog.

0.7.0 - 2025-01-19

Dependencies

  • ⬆️ Drop Python 3.9 & 3.10, support Python 3.14 by {user}chrisjsewell in {pr}250
  • ⬆️ Drop Sphinx v6, add Sphinx v9 support by {user}chrisjsewell in {pr}250 and {pr}255
  • ⬆️ Update Material Design Icons to v4.0.0-116-ge9da21 by {user}2bndy5 in {pr}223

Docs

  • 📚 Document muted, white, and black semantic colors by {user}agriyakhetarpal in {pr}216
Commits
  • 2e1bb52 🚀 Release v0.7.0 (#256)
  • 6c906da ⬆️ Add Sphinx 9 support (#255)
  • 6325b6f 🔧 Add commit/pr info to AGENTS.md (#254)
  • 0b9c231 🔧 Add copilot-setup-steps.yml workflow for GitHub Copilot coding agent (#253)
  • f2f1be8 🔧 Remove unintended file (#252)
  • 5f9335a 🔧 Add AGENTS.md (#251)
  • d8daebf ⬆️ Drop Python 3.9 & 3.10, support Python 3.14; Drop sphinx v6 (#250)
  • b3d6edd 📚 Document muted, white, and black semantic colors (#216)
  • 18afa33 ⬆️ Update Material Design Icons to v4.0.0-116-ge9da21 (#223)
  • a726237 🧪 add regression test for available material icons (#224)
  • See full diff in compare view

Updates sphinx-argparse from 0.5.2 to 0.6.1

Release notes

Sourced from sphinx-argparse's releases.

Release v0.6.1

What's Changed

New Contributors

Full Changelog: sphinx-doc/sphinx-argparse@v0.6.0...v0.6.1

Release v0.6.0

What's Changed

Full Changelog: sphinx-doc/sphinx-argparse@v0.5.2...v0.6.0

Changelog

Sourced from sphinx-argparse's changelog.

0.6.1

  • [#98](https://github.com/sphinx-doc/sphinx-argparse/issues/98) <https://github.com/sphinx-doc/sphinx-argparse/issues/98>__ Fixed issue where a parallel sphinx build would fail (mostly relevant in CI)

0.6.0

The following enhancements to the HTML output are described on the :doc:usage page.

  • Optional command index.
  • Optional :index-groups: field to the directive for an command-by-group index.
  • A sphinxarg_full_subcommand_name option to print fully-qualified sub-command headings. This option helps when more than one sub-command offers a create or list or other repeated sub-command.
  • Each command heading is a domain-specific link target. You can link to commands and sub-commands with the :ref: role, but this release adds support for the domain-specific role like :commands:command:`sample-directive-opts A` . The :commands:command: role supports linking from other projects through the intersphinx extension.

Changes

  • Previously, common headings such as Positional Arguments were subject to a process that made them unique by adding a _repeatX suffix to the HREF target. This release continues to support those HREF targets as secondary targets so that bookmarks continue to work. However, this release prefers using fully-qualified HREF targets like sample-directive-opts-positional-arguments as the primary HREF so that customers are less likely to witness the _repeatX link in URLs.
  • [#32](https://github.com/sphinx-doc/sphinx-argparse/issues/32) <https://github.com/sphinx-doc/sphinx-argparse/issues/32>__ Argparse commands are now part of a Sphinx domain
  • [#72](https://github.com/sphinx-doc/sphinx-argparse/issues/72) <https://github.com/sphinx-doc/sphinx-argparse/issues/72>__ Coloring in argparse output can be disabled (default)
  • [#87](https://github.com/sphinx-doc/sphinx-argparse/issues/87) <https://github.com/sphinx-doc/sphinx-argparse/issues/87>__ The :filename: input is now resolved only to the conf.py directory (srcdir in Sphinx)
  • [#89](https://github.com/sphinx-doc/sphinx-argparse/issues/89) <https://github.com/sphinx-doc/sphinx-argparse/pull/89>__ Changed the way mock from autodoc is important to work around a persistent Sphinx bug
Commits
  • 89c7a57 Updated changelog + Bumped to version 0.6.1
  • d54f281 Add missing domain methods (#99)
  • f918d4e Bumped version to 0.6.0
  • 9a74f45 Updated changelog
  • 8959ab6 Dropped Sphinx upper version limit
  • 0341103 Added try-catch for autodoc mock-import
  • 528aa98 Fixed mypy warning from CI
  • abd20c5 Changed mypy python version to 3.13 + Fixed mypy in a test + Re-enabled mypy ...
  • 61b8bf0 Updated changelog
  • de7c367 Removed pass from OSerror
  • Additional commits viewable in compare view

Updates linkify-it-py from 2.0.3 to 2.2.0

Release notes

Sourced from linkify-it-py's releases.

v2.2.0

What's Changed

Full Changelog: tsutsu3/linkify-it-py@v2.1.1...v2.2.0

v2.1.1

What's Changed

Security release: LinkifyIt.match() was quadratic on untrusted input when linkify is enabled (GHSA-8m2q-wq3r-6hq8). Affected: <= 2.1.0. Upgrade to 2.1.1.

  • Fix quadratic complexity in LinkifyIt.match(), port of linkify-it 5.0.1 and 5.0.2 (upstream CVE-2026-48801, CVE-2026-59887) (#82)
  • Match validators at a position instead of slicing the tail, needed because Python 3.10 does not optimize the ^ anchor (#82)
  • Allow ; in the email name, matching linkify-it. Behavior change: a;b@example.com is now linkified (#82)
  • Update port.yml (linkify-it v5.0.2) (#82)

Full Changelog: tsutsu3/linkify-it-py@v2.1.0...v2.1.1

v2.1.0

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from linkify-it-py's changelog.

v2.2.0 (2026-08-29)

  • Fix astral-plane Unicode handling in links, including host names and link terminators (#87)
  • Drop the runtime dependency on uc-micro-py (#87)

v2.1.1 (2026-08-25)

Security release: LinkifyIt.match() was quadratic on untrusted input when linkify is enabled (GHSA-8m2q-wq3r-6hq8).

  • Fix quadratic complexity in LinkifyIt.match(), port of linkify-it 5.0.1 and 5.0.2 (upstream CVE-2026-48801, CVE-2026-59887) (#82)
  • Match validators at a position instead of slicing the tail, needed because Python 3.10 does not optimize the ^ anchor (#82)
  • Allow ; in the email name, matching linkify-it. Behavior change: a;b@example.com is now linkified (#82)
  • Update port.yml (linkify-it v5.0.2) (#82)

v2.1.0 (2026-03-01)

  • Drop support for EOL Python 3.7, 3.8 (bd78752)
  • Drop support for EOL Python 3.9 (#75) by @​hugovk
  • Add support for Python 3.14 (#75) by @​hugovk
  • Migrate to OIDC trusted publishing for PyPI and TestPyPI (#77)
  • Add workflow permissions for security hardening (#77)
  • Bump GitHub Actions dependencies (#71, #73)
Commits
  • 84af472 Release v2.2.0 (#88)
  • 4967167 fix: recognize astral-plane characters, drop uc-micro-py (#87)
  • a2943cf Release v2.1.1 (#84)
  • 16d6447 fix: match validators at a position instead of slicing the tail
  • 5e33fe7 fix: allow ";" in the email name character class
  • f972d8f fix: cap email name and auth scan length (port linkify-it 5.0.2)
  • 5246f8d fix: resolve quadratic complexity in LinkifyIt.match() scan loop
  • 1f9f825 feat: add benchmark for quadratic scan-loop behavior in LinkifyIt.match()
  • 3eee230 Bump the github-actions group across 1 directory with 3 updates (#83)
  • b9ee349 Release v2.1.0 (#79)
  • Additional commits viewable in compare view

Updates cairosvg from 2.7.1 to 2.9.0

Release notes

Sourced from cairosvg's releases.

2.9.0

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

  • Drop support of Python 3.9, add support of Python 3.14

2.8.2

  • Allow both Unicode strings and bytes as input

2.8.1

  • Allow both text- and bytes-based file objects as input

2.8.0

  • Drop support of Python 3.7 and 3.8, add support of Python 3.12 and 3.13
  • Optimize math operations
  • Use pathlib
  • Close paths for ellipses and circles
  • Fix output ratio for SVG surfaces
  • Avoid endless loops when updating def attributes
  • Round PNG size
  • Don’t crash when more than 2 values are given to translate and scale functions
Changelog

Sourced from cairosvg's changelog.

Version 2.9.0 released on 2026-03-13

WARNING: this is a security update.

Using a lot of recursively nested use tags could lead to long rendering times with relatively small inputs. CairoSVG now stops rendering when more than 100k use tags are rendered.

Using the --unsafe option allows to render larger documents.

  • Drop support of Python 3.9, add support of Python 3.14

Version 2.8.2 released on 2025-05-15

  • Allow both Unicode strings and bytes as input

Version 2.8.1 released on 2025-05-14

  • Allow both text- and bytes-based file objects as input

Version 2.8.0 released on 2025-05-12

  • Drop support of Python 3.7 and 3.8, add support of Python 3.12 and 3.13
  • Optimize math operations
  • Use pathlib
  • Close paths for ellipses and circles
  • Fix output ratio for SVG surfaces
  • Avoid endless loops when updating def attributes
  • Round PNG size
  • Don’t crash when more than 2 values are given to translate and scale functions
Commits
  • fe5cae5 Version 2.9.0
  • 6dde868 Abort when more than 100k referenced elements are rendered
  • a6b3a98 Cut long line again
  • ce8b51d Cut long line
  • b7818c9 Clarify unsafe option scope without removing security warning
  • 9e8c6ed Version 2.8.2
  • 1c28b57 De-duplicate input string encoding
  • b4670ec Merge pull request #443 from marcelometal/ensure-bytestring-type-before-gzip
  • 245b3f2 Ensure bytestring is bytes before checking for gzip header
  • e5128ec Version 2.8.1
  • Additional commits viewable in compare view

Updates docutils from 0.21.2 to 0.23

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the python-minor-patch group with 6 updates
03c4e6d 
Bumps the python-minor-patch group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [sphinx-rtd-theme](https://github.com/readthedocs/sphinx_rtd_theme) | `3.0.2` | `3.1.0` |
| [sphinx-design](https://github.com/executablebooks/sphinx-design) | `0.6.1` | `0.7.0` |
| [sphinx-argparse](https://github.com/sphinx-doc/sphinx-argparse) | `0.5.2` | `0.6.1` |
| [linkify-it-py](https://github.com/tsutsu3/linkify-it-py) | `2.0.3` | `2.2.0` |
| [cairosvg](https://github.com/Kozea/CairoSVG) | `2.7.1` | `2.9.0` |
| [docutils](https://github.com/rtfd/recommonmark) | `0.21.2` | `0.23` |


Updates `sphinx-rtd-theme` from 3.0.2 to 3.1.0
- [Changelog](https://github.com/readthedocs/sphinx_rtd_theme/blob/master/docs/changelog.rst)
- [Commits](readthedocs/sphinx_rtd_theme@3.0.2...3.1.0)

Updates `sphinx-design` from 0.6.1 to 0.7.0
- [Release notes](https://github.com/executablebooks/sphinx-design/releases)
- [Changelog](https://github.com/executablebooks/sphinx-design/blob/main/CHANGELOG.md)
- [Commits](executablebooks/sphinx-design@v0.6.1...v0.7.0)

Updates `sphinx-argparse` from 0.5.2 to 0.6.1
- [Release notes](https://github.com/sphinx-doc/sphinx-argparse/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx-argparse/blob/main/docs/changelog.rst)
- [Commits](sphinx-doc/sphinx-argparse@v0.5.2...v0.6.1)

Updates `linkify-it-py` from 2.0.3 to 2.2.0
- [Release notes](https://github.com/tsutsu3/linkify-it-py/releases)
- [Changelog](https://github.com/tsutsu3/linkify-it-py/blob/main/CHANGELOG.md)
- [Commits](tsutsu3/linkify-it-py@v2.0.3...v2.2.0)

Updates `cairosvg` from 2.7.1 to 2.9.0
- [Release notes](https://github.com/Kozea/CairoSVG/releases)
- [Changelog](https://github.com/Kozea/CairoSVG/blob/main/NEWS.rst)
- [Commits](Kozea/CairoSVG@2.7.1...2.9.0)

Updates `docutils` from 0.21.2 to 0.23
- [Changelog](https://github.com/readthedocs/recommonmark/blob/master/CHANGELOG.md)
- [Commits](https://github.com/rtfd/recommonmark/commits)

---
updated-dependencies:
- dependency-name: sphinx-rtd-theme
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: sphinx-design
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: sphinx-argparse
  dependency-version: 0.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: linkify-it-py
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: cairosvg
  dependency-version: 2.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
- dependency-name: docutils
  dependency-version: '0.23'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: python-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Sep 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants