deps(deps): bump humanize from 4.12.3 to 4.13.0 in /requirements

[dependabot]

Bumps humanize from 4.12.3 to 4.13.0.

Release notes

Sourced from humanize's releases.

4.13.0

Changed

• Optimise naturalsize algorithm by using math.log (#253) @​Zaczero

Fixed

• Fix precisedelta rounding (#254) @​dangillet

Commits

• 0e02705 Update config (#262)
• 288a7a7 Test free-threaded Python 3.13t and 3.14t (#261)
• 0f5d294 Precisedelta rounding (#254)
• 58d10b4 Update docs/requirements.txt (#260)
• 18105e3 Update dependency mypy to v1.17.1 (#259)
• 1227264 [pre-commit.ci] pre-commit autoupdate (#258)
• 3f29964 Update dependency pymdown-extensions to v10.16 (#257)
• 96ff3a7 Update dependency mypy to v1.16.1 (#256)
• cf0e75b Update dependency mypy to v1.16.0 (#255)
• bb99238 Optimize naturalsize algorithm by using math.log (#253)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Important

Bump humanize from 4.12.3 to 4.13.0 in requirements.txt, optimizing naturalsize and fixing precisedelta rounding.

• Dependencies:
  • Bump humanize from 4.12.3 to 4.13.0 in requirements.txt.
  • Optimized naturalsize algorithm using math.log.
  • Fixed precisedelta rounding issue.

^{This description was created by for e5d06b0. You can customize this summary. It will automatically update as commits are pushed.}

[dependabot]

Labels

The following labels could not be found: auto-merge-candidate. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[ellipsis-dev]

Important

Looks good to me! 👍

Reviewed everything up to e5d06b0 in 1 minute and 44 seconds. Click for details.

• Reviewed 123 lines of code in 1 files
• Skipped 0 files when reviewing.
• Skipped posting 2 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. requirements/requirements.txt:21

• Draft comment:
  The Click version was changed from 8.2.1 to 8.1.8. Please confirm this downgrade is intentional.
• Reason this comment was not posted:
  Decided after close inspection that this draft comment was likely wrong and/or not actionable: usefulness confidence = 0% vs. threshold = 50% This is a dependency version change. The rules explicitly state "Do NOT comment on dependency changes, library versions that you don't recognize, or anything else related to dependencies." Additionally, the file was autogenerated by a dependency management tool (uv), so the version changes are likely intentional and managed by the tool. Maybe version downgrades could introduce breaking changes that need attention? Maybe this is a special case that warrants keeping the comment? No - the rules are very clear about not commenting on dependency changes. Additionally, asking for confirmation violates the rule about not asking authors to verify their intentions. Delete the comment as it violates multiple rules: no commenting on dependencies and no asking authors to confirm their intentions.

2. requirements/requirements.txt:70

• Draft comment:
  Markdown-it-py was downgraded from version 4.0.0 to 3.0.0. Verify if this is an intended change.
• Reason this comment was not posted:
  Comment looked like it was already resolved.

Workflow ID: wflow_rG7PueeGH2dQM1ib

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}

[cursor]

Bug: Unexpected Dependency Downgrades Cause Concern

This PR unexpectedly downgrades click from 8.2.1 to 8.1.8 and markdown-it-py from 4.0.0 to 3.0.0. These changes appear as a side effect of updating humanize, suggesting a dependency conflict. Such downgrades could introduce breaking changes or reintroduce bugs, especially with markdown-it-py being a major version downgrade.

Additional Locations (1)

• requirements/requirements.txt#L20-L22

 

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.