Bump the patches group across 1 directory with 7 updates

[dependabot]

Bumps the patches group with 7 updates in the / directory:

Package	From	To
django-guardian	3.3.2	3.3.3
django-polymorphic	4.11.6	4.11.7
markdown	3.10.2	3.10.3
css-inline	0.21.0	0.21.1
coverage	7.15.2	7.15.4
pylint	4.0.6	4.0.7
prek	0.4.10	0.4.13

Updates django-guardian from 3.3.2 to 3.3.3

Release notes

Sourced from django-guardian's releases.

3.3.3

What's Changed

• Bump the github-actions group with 2 updates by @​dependabot[bot] in django-guardian/django-guardian#998
• Update configuration.md by @​vvmruder in django-guardian/django-guardian#999
• Bump the github-actions group with 2 updates by @​dependabot[bot] in django-guardian/django-guardian#1001
• Fix generic object_pk bigint cast regression in shortcuts by @​Natgho in django-guardian/django-guardian#990
• Bump actions/setup-python from 6.2.0 to 6.3.0 in the github-actions group by @​dependabot[bot] in django-guardian/django-guardian#1002
• Bump astral-sh/setup-uv from 8.2.0 to 8.3.2 in the github-actions group by @​dependabot[bot] in django-guardian/django-guardian#1003
• The maintainers have been updated by @​Natgho in django-guardian/django-guardian#1005
• Bump version to 3.3.3 by @​Natgho in django-guardian/django-guardian#1006

New Contributors

• @​vvmruder made their first contribution in django-guardian/django-guardian#999

Full Changelog: django-guardian/django-guardian@3.3.2...3.3.3

Commits

• bd5a274 Merge pull request #1006 from django-guardian/version-update-3-3-3
• a73329e Bump version to 3.3.3
• a39dd2c Merge pull request #1005 from django-guardian/1004-lits-of-maintainers-in-pyp...
• 6802c32 Merge pull request #1003 from django-guardian/dependabot/github_actions/githu...
• 209ad03 The maintainers have been updated
• 66ce5bb Bump astral-sh/setup-uv from 8.2.0 to 8.3.2 in the github-actions group
• 2bc6a89 Merge pull request #1002 from django-guardian/dependabot/github_actions/githu...
• 2eddd31 Bump actions/setup-python in the github-actions group
• 63b015c Fix generic object_pk bigint cast regression in shortcuts (#990)
• 4de11eb Merge pull request #1001 from django-guardian/dependabot/github_actions/githu...
• Additional commits viewable in compare view

Updates django-polymorphic from 4.11.6 to 4.11.7

Release notes

Sourced from django-polymorphic's releases.

v4.11.7

What's Changed

• support django 6.1 by @​bckohan in django-commons/django-polymorphic#909
• fix: add kwargs to save method to keep compatability with other tools… by @​hwalinga in django-commons/django-polymorphic#908

New Contributors

• @​hwalinga made their first contribution in django-commons/django-polymorphic#908

Full Changelog: django-commons/django-polymorphic@v4.11.6...v4.11.7

Commits

• f78240b add a regression test for #905
• c1fd7c6 fix: add kwargs to save method to keep compatability with other tools overrid...
• 2b1b76a fix secondary test database 6.1 behavior
• 113d405 exclude django 6.1 postgres <15 tests
• 7051576 fix django 6.1 descriptor get_queryset compat
• 14b9bad support django 6.1
• See full diff in compare view

Updates markdown from 3.10.2 to 3.10.3

Release notes

Sourced from markdown's releases.

Release 3.10.3

Fixed

• Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
• Add AI Policy to Contributing Guide.
• Officially document all included extensions as being in maintenance mode.
• Link the Extension API documentation to the API Reference (#1612).

Changelog

Sourced from markdown's changelog.

[3.10.3] - 2026-07-30

Fixed

• Fix SetextHeaderProcessor regex to prevent mixed = and - chars in setext-style headers (#1606).
• Add AI Policy to Contributing Guide.
• Officially document all included extensions as being in maintenance mode.
• Link the Extension API documentation to the API Reference (#1612).

Commits

• bb50627 Bump version to 3.10.3
• 8453df0 Update Extension API documentation
• 93ac448 Document that all extensions are in maintenance mode
• d38fd4a Create AI Policy
• ddead47 Prevent mixed =/- chars in Setext-style headings
• See full diff in compare view

Updates css-inline from 0.21.0 to 0.21.1

Release notes

Sourced from css-inline's releases.

[C] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

[Java] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

[JavaScript] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

[PHP] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

[Python] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

[Ruby] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

[Rust] Release 0.21.1

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

Changelog

Sourced from css-inline's changelog.

[0.21.1] - 2026-08-08

Fixed

• With keep_at_rules enabled, at-rules without a block (e.g. @import) lost their prelude and terminator, fusing with the following rule (@import@media ...) and producing a stylesheet browsers reject entirely.

Commits

• 0f37b40 chore(c): Release 0.21.1
• 948fe99 chore(python): Release 0.21.1
• e76640a build(deps): bump js-yaml from 3.15.0 to 3.15.1 in /bindings/javascript
• 1f85320 build(deps): bump brace-expansion in /bindings/javascript
• 38f60a9 build(deps): bump soupsieve in /bindings/python/requirements
• 61fe95f build(deps): bump shell-quote in /bindings/javascript
• eb9a9da build(deps): bump tar from 7.5.16 to 7.5.22 in /bindings/javascript
• 28e4106 build(deps): bump quinn-proto in /bindings/ruby/ext/css_inline
• 9aa94d9 build(deps): bump quinn-proto from 0.11.14 to 0.11.16 in /bindings/ruby
• dd3269e build(deps): bump brace-expansion in /bindings/javascript
• Additional commits viewable in compare view

Updates coverage from 7.15.2 to 7.15.4

Release notes

Sourced from coverage's releases.

7.15.4

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn’t escaped where it’s dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare.
• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare.
• Wheels are now provided for Python 3.15.

➡️  PyPI page: coverage 7.15.4. :arrow_right:  To install: python3 -m pip install coverage==7.15.4

7.15.3

Version 7.15.3 — 2026-08-02

• Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han. Closes issue 2200.
• A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios.
• Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios.

➡️  PyPI page: coverage 7.15.3. :arrow_right:  To install: python3 -m pip install coverage==7.15.3

Changelog

Sourced from coverage's changelog.

Version 7.15.4 — 2026-08-06

• Fix: in the HTML report, a source file name containing a double quote (legal on POSIX) wasn't escaped where it's dropped into the href of the index and prev/next links, so it could close the attribute early and inject markup. Page URLs are now escaped. Thanks, Rajath Mohare <pull 2227_>_.

• Fix: the LCOV report wrote file names and other fields into its line-oriented records without neutralizing control characters. A measured file whose name contained a newline (legal on POSIX) could forge extra records, inflating the coverage seen by tools that read the report. Control characters in a field are now replaced. Thanks, Rajath Mohare <pull 2226_>_.

• Wheels are now provided for Python 3.15.

.. _pull 2226: coveragepy/coveragepy#2226 .. _pull 2227: coveragepy/coveragepy#2227

.. _changes_7-15-3:

Version 7.15.3 — 2026-08-02

• Fix: the sysmon core is incompatible with dynamic contexts. Previously, the combination would be prevented when read from the coverage.py configuration. But using the context API as pytest-cov does, contexts would be silently dropped. Now a warning is issued, thanks to Jisang Han <pull 2234_>. Closes issue 2200.

• A performance improvement in the low-level line number bookkeeping when combining data files, thanks to Kevin Turcios <pull 2239_>_.

• Performance improvement in HTML reporting by reducing the number of times files have to be parsed, thanks to Kevin Turcios <pull 2240_>_.

.. _issue 2200: coveragepy/coveragepy#2200 .. _pull 2234: coveragepy/coveragepy#2234 .. _pull 2239: coveragepy/coveragepy#2239 .. _pull 2240: coveragepy/coveragepy#2240

.. _changes_7-15-2:

Commits

• 4c0e7ff docs: sample HTML for 7.15.4
• db4cc32 docs: prep for 7.15.4
• c33085c style: start gradual move to ruff 0.16
• 53a0fd5 fix: neutralize control characters in lcov report fields (#2226)
• b64d53d build: make 3.15 wheels
• 53792ab build: show the python version for kits
• f6b03c7 chore: make upgrade_one package=cibuildwheel
• d9b660a chore: make upgrade
• b128a31 docs: oops, move this entry to the correct place
• a7a2c15 fix: escape filename urls in html report href attributes (#2227)
• Additional commits viewable in compare view

Updates pylint from 4.0.6 to 4.0.7

Commits

• c6768d3 Bump pylint to 4.0.7, update changelog (#11246)
• e96ce2b Stop invalid-name from treating TypedDict instances as classes
• 893294e [Backport maintenance/4.0.x] Fix crash in comparison-with-callable on a proxi...
• 8cd74d4 Fix a crash on calls unpacking dicts with non-string keys
• bc618ad Fix too-many-lines being reported at another module's pragma line
• 3e1ee47 [Backport maintenance/4.0.x] Fix bad-string-format-type false positives for...
• 7ca8116 [Backport maintenance/4.0.x] Fix useless-parent-delegation false positive o...
• 14275a1 [Backport maintenance/4.0.x] Fix literal-comparison suggestion corrupting i...
• a87eaa6 [Backport maintenance/4.0.x] Fix nested-min-max dropping arguments after th...
• bdd017f [Backport maintenance/4.0.x] Fix too-many-locals counting PEP 695 type para...
• Additional commits viewable in compare view

Updates prek from 0.4.10 to 0.4.13

Release notes

Sourced from prek's releases.

0.4.13

Release Notes

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

$ prek exec golangci-lint -- golangci-lint --version

Enhancements

• Add mise language support (#2540)
• Add deny-filename-pattern and require-filename-pattern hooks (#2488)
• Add prek exec for running commands in a hook environment (#2478)
• Add yaml-language-server: comment to YAML sample config (#2486)
• Make prek cache size output terminal-aware (#2508)
• Match file regexes against path bytes (#2541)
• Show hook aliases in run output (#2497)
• Show hook descriptions in run output (#2490)

Performance

• Avoid env cache scans for skipped hooks (#2502)
• Cache Node version queries (#2500)

... (truncated)

Changelog

Sourced from prek's changelog.

0.4.13

Released on 2026-08-10.

Highlights

Manage hook tools with mise

The new language: mise support lets hooks install tools using mise in an isolated environment:

repos:
  - repo: local
    hooks:
      - id: golangci-lint
        name: golangci-lint
        language: mise
        additional_dependencies: ["aqua:golangci/golangci-lint@2"]
        entry: golangci-lint run --fast-only ./...
        pass_filenames: false

Run commands in hook environments

The new prek exec subcommand can run an explicit command in a configured hook's prepared environment. For example, the hook above makes its managed binary available to this command:

$ prek exec golangci-lint -- golangci-lint --version

Enhancements

• Add mise language support (#2540)
• Add deny-filename-pattern and require-filename-pattern hooks (#2488)
• Add prek exec for running commands in a hook environment (#2478)
• Add yaml-language-server: comment to YAML sample config (#2486)
• Make prek cache size output terminal-aware (#2508)
• Match file regexes against path bytes (#2541)
• Show hook aliases in run output (#2497)
• Show hook descriptions in run output (#2490)

Performance

• Avoid env cache scans for skipped hooks (#2502)
• Cache Node version queries (#2500)

Bug fixes

... (truncated)

Commits

• 6204a68 Bump version to 0.4.13 (#2543)
• f1c73c5 Add mise language support (#2540)
• 3f08ed4 Match file regexes against path bytes (#2541)
• 6bc5f06 Update Rust crate serde-saphyr to v1 (#2539)
• b8c5c69 Update Rust crate fancy-regex to 0.19.0 (#2537)
• 2557af9 Update prek hooks (#2528)
• a958731 Update Rust crate http to v1.5.0 (#2538)
• fc8b9a4 Update Rust crate clap to v4.6.5 (#2531)
• 3bacaa1 Update dependency uv to v0.12.1 (#2536)
• 222fc00 Update Rust crate toml to v1.1.4 (#2535)
• Additional commits viewable in compare view