Skip to content

Bump the llvm-docs-requirements group in /llvm/docs with 26 updates #1597

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Bump the llvm-docs-requirements group in /llvm/docs with 26 updates #1597

wants to merge 1 commit into from
+234 −231

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 1, 2025

Bumps the llvm-docs-requirements group in /llvm/docs with 26 updates:

Package From To
alabaster 0.7.13 0.7.16
babel 2.14.0 2.17.0
beautifulsoup4 4.12.2 4.13.4
certifi 2023.11.17 2025.4.26
charset-normalizer 3.3.2 3.4.1
docutils 0.20.1 0.21.2
furo 2024.1.29 2024.8.6
idna 3.6 3.10
jinja2 3.1.2 3.1.6
markdown 3.5.1 3.8
markupsafe 2.1.3 3.0.2
mdit-py-plugins 0.4.0 0.4.2
myst-parser 2.0.0 3.0.1
packaging 23.2 25.0
pygments 2.17.2 2.19.1
requests 2.31.0 2.32.3
soupsieve 2.5 2.7
sphinx 7.2.6 7.4.7
sphinx-automodapi 0.17.0 0.19.0
sphinx-reredirects 0.1.2 0.1.6
sphinxcontrib-applehelp 1.0.8 2.0.0
sphinxcontrib-devhelp 1.0.5 2.0.0
sphinxcontrib-htmlhelp 2.0.4 2.1.0
sphinxcontrib-qthelp 1.0.6 2.0.0
sphinxcontrib-serializinghtml 1.1.9 2.0.0
urllib3 2.1.0 2.4.0

Updates alabaster from 0.7.13 to 0.7.16

Release notes

Sourced from alabaster's releases.

Alabaster 0.7.16

Changelog: https://alabaster.readthedocs.io/en/latest/changelog.html

Alabaster 0.7.15

Changelog: https://alabaster.readthedocs.io/en/latest/changelog.html

Alabaster 0.7.14

Changelog: https://alabaster.readthedocs.io/en/latest/changelog.html

Changelog

Sourced from alabaster's changelog.

:git_tag:0.7.16 -- 2024-01-10

  • 🐛215 Do not display logo_name if it is set to False.

:git_tag:0.7.15 -- 2024-01-08

  • :feature:213 Allow an arbitrary string in the logo_name option.
  • :feature:114 Improved sidebar CSS styles.
  • :issue:178 Deprecated canonical_url in favor of html_baseurl.
  • 🐛200 Removed duplicate <meta name="viewport" ... /> tag.
  • 🐛188 Removed underline from whitespace.
  • 🐛164 Removed type="text/javascript" from elements.
  • 🐛161 Replaced &copy; with unicode decimal code entity [#169](https://github.com/sphinx-doc/alabaster/issues/169);.

:git_tag:0.7.14 -- 2024-01-08

  • Dropped support for Python 3.8 and earlier.
  • Dropped support for Sphinx 3.3 and earlier.
  • :issue:198 Fix horizontal scrolling on mobile.
  • :issue:206 Properly support the html_support_sphinx config value.
  • :issue:211 Fix the GitHub 'forkme' banner.
  • Added alabaster_version_info to the HTML template context.
  • Declare support for Python 3.13.
  • Adopt the Ruff linter and formatter.
  • Migrate from CircleCI to GitHub Actions.
Commits

Updates babel from 2.14.0 to 2.17.0

Release notes

Sourced from babel's releases.

v2.17.0

Happy 2025! This release is being made from FOSDEM 2025, in Brussels, Belgium. 🇧🇪

Thank you to all contributors, new and old, and here's to another great year of internationalization and localization!

The changelog below is auto-generated by GitHub.

Please see CHANGELOG.rst for additional details.

What's Changed

New Contributors

... (truncated)

Changelog

Sourced from babel's changelog.

Version 2.17.0

Happy 2025! This release is being made from FOSDEM 2025, in Brussels, Belgium.

Thank you to all contributors, new and old, and here's to another great year of internationalization and localization!

Features


* CLDR: Babel now uses CLDR 46, by @tomasr8 in :gh:`1145`
* Dates: Allow specifying an explicit format in parse_date/parse_time by @tomasr8 in :gh:`1131`
* Dates: More alternate characters are now supported by `format_skeleton`. By @tomasr8 in :gh:`1122`
* Dates: Support short and narrow formats for format_timedelta when using `add_direction`, by @akx in :gh:`1163`
* Messages: .po files now enclose white spaces in filenames like GNU gettext does. By @Dunedan in :gh:`1105`, and @tomasr8 in :gh:`1120`
* Messages: Initial support for `Message.python_brace_format`, by @tomasr8 in :gh:`1169`
* Numbers: LC_MONETARY is now preferred when formatting currencies, by @akx in :gh:`1173`

Bugfixes

  • Dates: Make seconds optional in parse_time time formats by @​tomasr8 in :gh:1141
  • Dates: Replace str.index with str.find by @​tomasr8 in :gh:1130
  • Dates: Strip extra leading slashes in /etc/localtime by @​akx in :gh:1165
  • Dates: Week numbering and formatting of dates with week numbers was repaired by @​jun66j5 in :gh:1179
  • General: Improve handling for locale=None by @​akx in :gh:1164
  • General: Remove redundant assignment in Catalog.__setitem__ by @​tomasr8 in :gh:1167
  • Messages: Fix extracted lineno with nested calls, by @​dylankiss in :gh:1126
  • Messages: Fix of list index out of range when translations is empty, by @​gabe-sherman in :gh:1135
  • Messages: Fix the way obsolete messages are stored by @​tomasr8 in :gh:1132
  • Messages: Simplify read_mo logic regarding catalog.charset by @​tomasr8 in :gh:1148
  • Messages: Use the first matching method & options, rather than first matching method & last options, by @​jpmckinney in :gh:1121

Deprecation and compatibility


* Dates: Fix deprecation warnings for `datetime.utcnow()` by @tomasr8 in :gh:`1119`
* Docs: Adjust docs/conf.py to add compatibility with sphinx 8 by @hrnciar in :gh:`1155`
* General: Import `Literal` from the typing module by @tomasr8 in :gh:`1175`
* General: Replace `OrderedDict` with just `dict` by @tomasr8 in :gh:`1149`
* Messages: Mark `wraptext` deprecated; use `TextWrapper` directly in `write_po` by @akx in :gh:`1140`

Infrastructure



* Add tzdata as dev dependency and sync with tox.ini by @wandrew004 in :gh:`1159`
* Duplicate test code was deleted by @mattdiaz007 in :gh:`1138`
* Increase test coverage of the `python_format` checker by @tomasr8 in :gh:`1176`
* Small cleanups by @akx in :gh:`1160`, :gh:`1166`, :gh:`1170` and :gh:`1172`
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>

<ul>

<li><a href="https://github.com/python-babel/babel/commit/b50a1d2186c20f3359f7e10853d2b2225a46ed40&quot;&gt;&lt;code&gt;b50a1d2&lt;/code&gt;&lt;/a> Prepare for 2.17.0 (<a href="https://redirect.github.com/python-babel/babel/issues/1182&quot;&gt;#1182&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/5f117b2689573aa98acc8a47108c49b99f4d1394&quot;&gt;&lt;code&gt;5f117b2&lt;/code&gt;&lt;/a> Increase test coverage of the <code>python_format</code> checker (<a href="https://redirect.github.com/python-babel/babel/issues/1176&quot;&gt;#1176&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/363ad7531fb5dcdc3e9844573592b0b44afb914b&quot;&gt;&lt;code&gt;363ad75&lt;/code&gt;&lt;/a> Fix dates formatting <code>Y</code>, <code>w</code> and <code>W</code> symbols for week-numbering (<a href="https://redirect.github.com/python-babel/babel/issues/1179&quot;&gt;#1179&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/e9c3ef8d0de3080ca59f7f8dbabf9b52983adc7d&quot;&gt;&lt;code&gt;e9c3ef8&lt;/code&gt;&lt;/a> Merge pull request <a href="https://redirect.github.com/python-babel/babel/issues/1173&quot;&gt;#1173&lt;/a> from python-babel/lc-monetary-2</li>

<li><a href="https://github.com/python-babel/babel/commit/56ef7c7f578a904917464c187e399abb762bd5e3&quot;&gt;&lt;code&gt;56ef7c7&lt;/code&gt;&lt;/a> Prefer LC_MONETARY when formatting currency</li>

<li><a href="https://github.com/python-babel/babel/commit/aee6d698b541dc50439280d7e093092cc0d4b832&quot;&gt;&lt;code&gt;aee6d69&lt;/code&gt;&lt;/a> <code>default_locale</code>: support multiple keys</li>

<li><a href="https://github.com/python-babel/babel/commit/2d8a808864d1aae5d3d02d4f95917c79740c5d35&quot;&gt;&lt;code&gt;2d8a808&lt;/code&gt;&lt;/a> Import <code>Literal</code> &amp; <code>TypedDict</code> from the typing module (<a href="https://redirect.github.com/python-babel/babel/issues/1175&quot;&gt;#1175&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/98b9562c05e5276038c27ec12c12f3e92dc027b6&quot;&gt;&lt;code&gt;98b9562&lt;/code&gt;&lt;/a> Add basic support for <code>Message.python_brace_format</code> (<a href="https://redirect.github.com/python-babel/babel/issues/1169&quot;&gt;#1169&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/0c1091c9de9543e30bc4b845eb10b5bf84516d7b&quot;&gt;&lt;code&gt;0c1091c&lt;/code&gt;&lt;/a> Small test cleanup (<a href="https://redirect.github.com/python-babel/babel/issues/1172&quot;&gt;#1172&lt;/a&gt;)&lt;/li>

<li><a href="https://github.com/python-babel/babel/commit/db4879136a7fbcef475f26b75dbdd65d0ce488f9&quot;&gt;&lt;code&gt;db48791&lt;/code&gt;&lt;/a> Merge pull request <a href="https://redirect.github.com/python-babel/babel/issues/1170&quot;&gt;#1170&lt;/a> from python-babel/small-cleanup</li>

<li>Additional commits viewable in <a href="https://github.com/python-babel/babel/compare/v2.14.0...v2.17.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />




Updates beautifulsoup4 from 4.12.2 to 4.13.4


Updates certifi from 2023.11.17 to 2025.4.26



Commits

    

  • 275c9eb 2025.04.26 (#347)
    • 

  • 3788331 Bump actions/setup-python from 5.4.0 to 5.5.0 (#346)
    • 

  • 9d1f1b7 Bump actions/download-artifact from 4.1.9 to 4.2.1 (#344)
    • 

  • 96b97a5 Bump actions/upload-artifact from 4.6.1 to 4.6.2 (#343)
    • 

  • c054ed3 Bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 (#342)
    • 

  • 44547fc Bump actions/download-artifact from 4.1.8 to 4.1.9 (#341)
    • 

  • 5ea5124 Bump actions/upload-artifact from 4.6.0 to 4.6.1 (#340)
    • 

  • 2f142b7 Bump peter-evans/create-pull-request from 7.0.6 to 7.0.7 (#339)
    • 

  • 80d2ebd Bump actions/setup-python from 5.3.0 to 5.4.0 (#337)
    • 

  • 088f931 2025.01.31 (#336)
    • 

  • Additional commits viewable in compare view
    • 







Updates charset-normalizer from 3.3.2 to 3.4.1



Release notes

Sourced from charset-normalizer's releases.




Version 3.4.1


🚀 We're still raising awareness around HTTP/2, and HTTP/3!


Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...]
Using Requests today is the rough equivalent of using EOL Windows 8!  We promptly invite Python developers to look at the first drop-in replacement for Requests, namely Niquests. Ship with native WebSocket, SSE, Happy Eyeballs, DNS over HTTPS, and so on[...] All of this while remaining compatible with all Requests prior plug-ins / add-ons.


It leverages charset-normalizer in a better way! Check it out, you will gain up to being 3X faster and get a real/respectable support with it.


3.4.1 (2024-12-24)


Changed


    

  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
    • 

  • Enforce annotation delayed loading for a simpler and consistent types in the project.
    • 

  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8
    • 



Added


    

  • pre-commit configuration.
    • 

  • noxfile.
    • 



Removed


    

  • build-requirements.txt as per using pyproject.toml native build configuration.
    • 

  • bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
    • 

  • setup.cfg in favor of pyproject.toml metadata configuration.
    • 

  • Unused utils.range_scan function.
    • 



Fixed


    

  • Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
    • 

  • Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+
    • 



Version 3.4.0


🚀 charset-normalizer is raising awareness around HTTP/2, and HTTP/3!


Did you know that Internet Explorer 11 shipped with an optional HTTP/2 support back in 2013? also libcurl did ship it in 2014[...]
All of this while our community is still struggling to make a firm advancement in HTTP clients. Now, many of you use Requests
as the defacto http client, now, and for many years now, Requests has been frozen. Being left in a vegetative state and not evolving,
this blocked millions of developers from using more advanced features.


We promptly invite Python developers to look at the drop-in replacement for Requests, namely Niquests.
It leverage charset-normalizer in a better way! Check it out, you will be positively surprised! Don't wait another decade.


We are thankful to @​microsoft and involved parties for funding our work through the Microsoft FOSS Fund program.


3.4.0 (2024-10-08)


Added


    

  • Argument --no-preemptive in the CLI to prevent the detector to search for hints.
    • 

  • Support for Python 3.13 (#512)
    • 



Fixed


    

  • Relax the TypeError exception thrown when trying to compare a CharsetMatch with anything else than a CharsetMatch.
    • 






... (truncated)





Changelog

Sourced from charset-normalizer's changelog.




3.4.1 (2024-12-24)


Changed


    

  • Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
    • 

  • Enforce annotation delayed loading for a simpler and consistent types in the project.
    • 

  • Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8
    • 



Added


    

  • pre-commit configuration.
    • 

  • noxfile.
    • 



Removed


    

  • build-requirements.txt as per using pyproject.toml native build configuration.
    • 

  • bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
    • 

  • setup.cfg in favor of pyproject.toml metadata configuration.
    • 

  • Unused utils.range_scan function.
    • 



Fixed


    

  • Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#572)
    • 

  • Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+
    • 



3.4.0 (2024-10-08)


Added


    

  • Argument --no-preemptive in the CLI to prevent the detector to search for hints.
    • 

  • Support for Python 3.13 (#512)
    • 



Fixed


    

  • Relax the TypeError exception thrown when trying to compare a CharsetMatch with anything else than a CharsetMatch.
    • 

  • Improved the general reliability of the detector based on user feedbacks. (#520) (#509) (#498) (#407) (#537)
    • 

  • Declared charset in content (preemptive detection) not changed when converting to utf-8 bytes. (#381)
    • 








Commits

    

  • ffdf7f5 :wrench: fix long description content-type inferred as rst instead of md
    • 

  • c7197b7 :pencil: fix changelog entries (#582)
    • 

  • c390e1f Merge pull request #581 from jawah/refresh-part-2
    • 

  • f9d6b8c :lock: add CODEOWNERS
    • 

  • 7ce1ef1 :wrench: use ubuntu-22.04 for cibuildwheel in continuous deployment workflow
    • 

  • deed205 :wrench: update LICENSE copyright
    • 

  • f11f571 :wrench: include noxfile in sdist
    • 

  • 1ec7c06 :wrench: update changelog
    • 

  • 14b4649 :bug: output(...) replace declarative mark using non iana compliant encoding ...
    • 

  • 1b06bc0 Merge branch 'refresh-part-2' of github.com:jawah/charset_normalizer into ref...
    • 

  • Additional commits viewable in compare view
    • 







Updates docutils from 0.20.1 to 0.21.2


Updates furo from 2024.1.29 to 2024.8.6



Changelog

Sourced from furo's changelog.




Changelog



2024.08.06 -- Energetic Eminence


    

  • ✨ Add support for Sphinx 8
    • 

  • ✨ Add smoother transitions between breakpoints
    • 

  • Increase specificity of table-wrapper selector
    • 

  • Avoid page breaks inside paragraphs
    • 



2024.07.18 -- Dull Denim


    

  • Improve how icons are handled and aligned.
    • 

  • Improve scroll event handler.
    • 

  • Hide the copybutton by default.
    • 

  • Fix source_view_link configuration handling.
    • 

  • Fix close tag on pencil icon.
    • 



2024.05.06 -- Cheerful Cerulean


    

  • ✨ Add new custom icons for auto mode, reflecting the currently active theme.
    • 

  • ✨ Add a view this page button.
    • 

  • ✨ Add colours and highlighting to "version modified" API helpers.
    • 

  • ✨ Add release information to various customisation knobs.
    • 

  • Make all icons bigger and use a thinner stroke with them.
    • 



2024.04.27 -- Bold Burgundy


    

  • Add a skip to content link.
    • 

  • Add --font-stack--headings.
    • 

  • Add :visited colour and enforce uniform contrast between light/dark.
    • 

  • Add an offset of :target to reduce back-to-top overlap.
    • 

  • Improve dark mode colours.
    • 

  • Fix outstanding colour contrast warnings on Firefox.
    • 

  • Fix bad indent in footnotes.
    • 

  • Tweak handling of default configuration options in a more resilient manner.
    • 

  • Tweak length and sizing of API source links.
    • 

  • Stop search engine indexing on search page.
    • 



2024.01.29 -- Amazing Amethyst





... (truncated)





Commits

    

  • 1bbf4ee Prepare release: 2024.08.06
    • 

  • bcb22c3 Update changelog
    • 

  • e633f02 Improve the selector for sidebar
    • 

  • d2fa2e0 [pre-commit.ci] pre-commit autoupdate (#821)
    • 

  • 05a2d63 Add smoother transitions between breakpoints
    • 

  • d261d3b [pre-commit.ci] pre-commit autoupdate (#810)
    • 

  • 2d3b6ba Add support for Sphinx 8
    • 

  • bf98041 Increase specificity of table-wrapper selector
    • 

  • fc6337c Fix the figures
    • 

  • fd3f422 Avoid page breaks inside paragraphs
    • 

  • Additional commits viewable in compare view
    • 







Updates idna from 3.6 to 3.10



Release notes

Sourced from idna's releases.




v3.10


No release notes provided.


v3.9


No release notes provided.


v3.8


What's Changed


    

  • Fix regression where IDNAError exception was not being produced for certain inputs.
    • 

  • Add support for Python 3.13, drop support for Python 3.5 as it is no longer testable.
    • 

  • Documentation improvements
    • 

  • Updates to package testing using Github actions
    • 



Thanks to Hugo van Kemenade for contributions to this release.


Full Changelog: https://github.com/kjd/idna/compare/v3.7...v3.8


v3.7


What's Changed


    

  • Fix issue where specially crafted inputs to encode() could take exceptionally long amount of time to process. [CVE-2024-3651]
    • 



Thanks to Guido Vranken for reporting the issue.


Full Changelog: https://github.com/kjd/idna/compare/v3.6...v3.7







Changelog

Sourced from idna's changelog.




3.10 (2024-09-15)
+++++++++++++++++


    

  • Reverted to Unicode 15.1.0 data. Unicode 16 has some significant changes
to UTS46 processing that will require more work to properly implement.
    • 



3.9 (2024-09-13)
++++++++++++++++


    

  • Update to Unicode 16.0.0
    • 

  • Deprecate setup.cfg in favour of pyproject.toml
    • 

  • Use ruff for code formatting
    • 



Thanks to Waket Zheng for contributions to this release.


3.8 (2024-08-23)
++++++++++++++++


    

  • Fix regression where IDNAError exception was not being produced for
certain inputs.
    • 

  • Add support for Python 3.13, drop support for Python 3.5 as it is no
longer testable.
    • 

  • Documentation improvements
    • 

  • Updates to package testing using Github actions
    • 



Thanks to Hugo van Kemenade for contributions to this release.


3.7 (2024-04-11)
++++++++++++++++


    

  • Fix issue where specially crafted inputs to encode() could
take exceptionally long amount of time to process. [CVE-2024-3651]
    • 



Thanks to Guido Vranken for reporting the issue.







Commits






Updates jinja2 from 3.1.2 to 3.1.6



Release notes

Sourced from jinja2's releases.




3.1.6


This is the Jinja 3.1.6 security release, which fixes security issues but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.


PyPI: https://pypi.org/project/Jinja2/3.1.6/
Changes: https://jinja.palletsprojects.com/en/stable/changes/#version-3-1-6



3.1.5


This is the Jinja 3.1.5 security fix release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes compared to the latest feature release.


PyPI: https://pypi.org/project/Jinja2/3.1.5/
Changes: https://jinja.palletsprojects.com/changes/#version-3-1-5
Milestone: https://github.com/pallets/jinja/milestone/16?closed=1


    

  • The sandboxed environment handles indirect calls to str.format, such as by passing a stored reference to a filter that calls its argument. GHSA-q2x7-8rv6-6q7h
    • 

  • Escape template name before formatting it into error messages, to avoid issues with names that contain f-string syntax. #1792, GHSA-gmj6-6f8f-6699
    • 

  • Sandbox does not allow clear and pop on known mutable sequence types. #2032
    • 

  • Calling sync render for an async template uses asyncio.run. #1952
    • 

  • Avoid unclosed auto_aiter warnings. #1960
    • 

  • Return an aclose-able AsyncGenerator from Template.generate_async. #1960
    • 

  • Avoid leaving root_render_func() unclosed in Template.generate_async. #1960
    • 

  • Avoid leaving async generators unclosed in blocks, includes and extends. #1960
    • 

  • The runtime uses the correct concat function for the current environment when calling block references. #1701
    • 

  • Make |unique async-aware, allowing it to be used after another async-aware filter. #1781
    • 

  • |int filter handles OverflowError from scientific notation. #1921
    • 

  • Make compiling deterministic for tuple unpacking in a {% set ... %} call. #2021
    • 

  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined objects. #2025
    • 

  • Fix copy/pickle support for the internal missing object. #2027
    • 

  • Environment.overlay(enable_async) is applied correctly. #2061
    • 

  • The error message from FileSystemLoader includes the paths that were searched. #1661
    • 

  • PackageLoader shows a clearer error message when the package does not contain the templates directory. #1705
    • 

  • Improve annotations for methods returning copies. #1880
    • 

  • urlize does not add mailto: to values like @a@b. #1870
    • 

  • Tests decorated with @pass_context can be used with the |select filter. #1624
    • 

  • Using set for multiple assignment (a, b = 1, 2) does not fail when the target is a namespace attribute. #1413
    • 

  • Using set in all branches of {% if %}{% elif %}{% else %} blocks does not cause the variable to be considered initially undefined. #1253
    • 



3.1.4


This is the Jinja 3.1.4 security release, which fixes security issues and bugs but does not otherwise change behavior and should not result in breaking changes.


PyPI: https://pypi.org/project/Jinja2/3.1.4/
Changes: https://jinja.palletsprojects.com/en/3.1.x/changes/#version-3-1-4


    

  • The xmlattr filter does not allow keys with / solidus, > greater-than sign, or = equals sign, in addition to disallowing spaces. Regardless of any validation done by Jinja, user input should never be used as keys to this filter, or must be separately validated first. GHSA-h75v-3vvj-5mfj
    • 



3.1.3


This is a fix release for the 3.1.x feature branch.


    

  • Fix for GHSA-h5c8-rqwp-cp95. You are affected if you are using xmlattr and passing user input as attribute keys.
    • 






... (truncated)





Changelog

Sourced from jinja2's changelog.




Version 3.1.6


Released 2025-03-05


    

  • The |attr filter does not bypass the environment's attribute lookup,
allowing the sandbox to apply its checks. :ghsa:cpwx-vrp4-4pq7
    • 



Version 3.1.5


Released 2024-12-21


    

  • The sandboxed environment handles indirect calls to str.format, such as
by passing a stored reference to a filter that calls its argument.
:ghsa:q2x7-8rv6-6q7h
    • 

  • Escape template name before formatting it into error messages, to avoid
issues with names that contain f-string syntax.
:issue:1792, :ghsa:gmj6-6f8f-6699
    • 

  • Sandbox does not allow clear and pop on known mutable sequence
types. :issue:2032
    • 

  • Calling sync render for an async template uses asyncio.run.
:pr:1952
    • 

  • Avoid unclosed auto_aiter warnings. :pr:1960
    • 

  • Return an aclose-able AsyncGenerator from
Template.generate_async. :pr:1960
    • 

  • Avoid leaving root_render_func() unclosed in
Template.generate_async. :pr:1960
    • 

  • Avoid leaving async generators unclosed in blocks, includes and extends.
:pr:1960
    • 

  • The runtime uses the correct concat function for the current environment
when calling block references. :issue:1701
    • 

  • Make |unique async-aware, allowing it to be used after another
async-aware filter. :issue:1781
    • 

  • |int filter handles OverflowError from scientific notation.
:issue:1921
    • 

  • Make compiling deterministic for tuple unpacking in a {% set ... %}
call. :issue:2021
    • 

  • Fix dunder protocol (copy/pickle/etc) interaction with Undefined
objects. :issue:2025
    • 

  • Fix copy/pickle support for the internal missing object.
:issue:2027
    • 

  • Environment.overlay(enable_async) is applied correctly. :pr:2061
    • 

  • The error message from FileSystemLoader includes the paths that were
searched. :issue:1661
    • 

  • PackageLoader shows a clearer error message when the package does not
contain the templates directory. :issue:1705
    • 

  • Improve annotations for methods returning copies. :pr:1880
    • 

  • urlize does not add mailto: to values like @a@b. :pr:1870
    • 






... (truncated)





Commits






Updates markdown from 3.5.1 to 3.8



Release notes

Sourced from markdown's releases.




Release 3.8


Changed


    

  • DRY fix in abbr extension by introducing method create_element (#1483).
    • 

  • Clean up test directory by removing some redundant tests and port
non-redundant cases to the newer test framework.
    • 

  • Improved performance of the raw HTML post-processor (#1510).
    • 



Fixed


    

  • Backslash Unescape IDs set via attr_list on toc (#1493).
    • 

  • Ensure md_in_html processes content inside "markdown" blocks as they are
parsed outside of "markdown" blocks to keep things more consistent for
third-party extensions (#1503).
    • 

  • md_in_html handle tags within inline code blocks better (#1075).
    • 

  • md_in_html fix handling of one-liner block HTML handling (#1074).
    • 

  • Ensure <center> is treated like a block-level element (#1481).
    • 

  • Ensure that abbr extension respects AtomicString and does not process
perceived abbreviations in these strings (#1512).
    • 

  • Ensure smarty extension correctly renders nested closing quotes (#1514).
    • 



Release 3.7


Changed


Refactor abbr Extension


A new AbbrTreeprocessor has been introduced, which replaces the now deprecated
AbbrInlineProcessor. Abbreviation processing now happens after Attribute Lists,
avoiding a conflict between the two extensions (#1460).


The AbbrPreprocessor class has been renamed to AbbrBlockprocessor, which
better reflects what it is. AbbrPreprocessor has been deprecated.


A call to Markdown.reset() now clears all previously defined abbreviations.


Abbreviations are now sorted by length before executing AbbrTreeprocessor
to ensure that multi-word abbreviations are implemented even if an abbreviation
exists for one of those component words. (#1465)


Abbreviations without a definition are now ignored. This avoids applying
abbr tags to text without a title value.


Added an optional glossary configuration option to the abbreviations extension.
This provides a simple and efficient way to apply a dictionary of abbreviations
to every page.


Abbreviations can now be disabled by setting their definition to "" or ''.
This can be useful when using the glossary option.





... (truncated)





Changelog

Sourced from markdown's changelog.




title: Changelog
toc_depth: 2


Python-Markdown Changelog


All notable changes to this project will be documented in this file.


The format is based on Keep a Changelog,
and this project adheres to Semantic Versioning.
See the Contributing Guide for details.


[Unreleased]


Fixed


    

  • Fixed dropped content in md_in_html (#1526).
    • 

  • Fixed HTML handling corner case that prevented some content from not being rendered (#1528).
    • 



[3.8.0] - 2025-04-09


Changed


    

  • DRY fix in abbr extension by introducing method create_element (#1483).
    • 

  • Clean up test directory by removing some redundant tests and port
non-redundant cases to the newer test framework.
    • 

  • Improved performance of the raw HTML post-processor (#1510).
    • 



Fixed


    

  • Backslash Unescape IDs set via attr_list on toc (#1493).
    • 

  • Ensure md_in_html processes content inside "markdown" blocks as they are
parsed outside of "markdown" blocks to keep things more consistent for
third-party extensions (#1503).
    • 

  • md_in_html handle tags within inline code blocks better (#1075).
    • 

  • md_in_html fix handling of one-liner block HTML handling (#1074).
    • 

  • Ensure <center> is treated like a block-level element (#1481).
    • 

  • Ensure that abbr extension respects AtomicString and does not process
perceived abbreviations in these strings (#1512).
    • 

  • Ensure smarty extension correctly renders nested closing quotes (#1514).
    • 



[3.7.0] - 2024-08-16


Changed


    

  • 

    Refactor abbr Extension
    

    A new AbbrTreeprocessor has been introduced, which replaces the now deprecated
AbbrInlineProcessor. Abbreviation processing now happens after Attribute Lists,
avoiding a conflict between the two extensions (#1460).
    

    • 






... (truncated)





Commits

    

  • b34e1d0 Bump version to 3.8
    • 

  • e6b7163 Update deploy workflow to normalize version
    • 

  • bd67d48 Improve changelog validation
    • 

  • e912575 Fix incorrect TOC list structure in docs
    • 

  • 42d4b43 Fix CI badge in README
    • 

  • 1caf028 Optimize raw HTML post-processor (#1510)
    • 

  • f6cfc5c Use PEP 639 license expressions in project metadata
    • 

  • 9c6e39a Add Python 3.13 and drop Python 3.8
    • 

  • 7aae61b Add special case for closing nested quotes
    • 

  • 0ad5b0a Abbr should respect AtomicStrings
    • 

  • Additional commits viewable in compare view
    • 







Updates markupsafe from 2.1.3 to 3.0.2



Release notes

Sourced from markupsafe's releases.




3.0.2


This is the MarkupSafe 3.0.2 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.


PyPI: https://pypi.org/project/MarkupSafe/3.0.2/
Changes: https://markupsafe.palletsprojects.com/en/stable/changes/#version-3-0-2
Milestone: https://github.com/pallets/markupsafe/milestone/14?closed=1


    

  • Fix compatibility when __str__ returns a str subclass. #472
    • 

  • Build requires setuptools >= 70.1. #475
    • 



3.0.1


This is the MarkupSafe 3.0.1 fix release, which fixes bugs but does not otherwise change behavior and should not result in breaking changes.


PyPI: https://...

Description has been truncated

@dependabot
Bump the llvm-docs-requirements group in /llvm/docs with 26 updates
ccbdc52 
Bumps the llvm-docs-requirements group in /llvm/docs with 26 updates:

| Package | From | To |
| --- | --- | --- |
| [alabaster](https://github.com/sphinx-doc/alabaster) | `0.7.13` | `0.7.16` |
| [babel](https://github.com/python-babel/babel) | `2.14.0` | `2.17.0` |
| [beautifulsoup4](https://www.crummy.com/software/BeautifulSoup/bs4/) | `4.12.2` | `4.13.4` |
| [certifi](https://github.com/certifi/python-certifi) | `2023.11.17` | `2025.4.26` |
| [charset-normalizer](https://github.com/jawah/charset_normalizer) | `3.3.2` | `3.4.1` |
| [docutils](https://docutils.sourceforge.io) | `0.20.1` | `0.21.2` |
| [furo](https://github.com/pradyunsg/furo) | `2024.1.29` | `2024.8.6` |
| [idna](https://github.com/kjd/idna) | `3.6` | `3.10` |
| [jinja2](https://github.com/pallets/jinja) | `3.1.2` | `3.1.6` |
| [markdown](https://github.com/Python-Markdown/markdown) | `3.5.1` | `3.8` |
| [markupsafe](https://github.com/pallets/markupsafe) | `2.1.3` | `3.0.2` |
| [mdit-py-plugins](https://github.com/executablebooks/mdit-py-plugins) | `0.4.0` | `0.4.2` |
| [myst-parser](https://github.com/executablebooks/MyST-Parser) | `2.0.0` | `3.0.1` |
| [packaging](https://github.com/pypa/packaging) | `23.2` | `25.0` |
| [pygments](https://github.com/pygments/pygments) | `2.17.2` | `2.19.1` |
| [requests](https://github.com/psf/requests) | `2.31.0` | `2.32.3` |
| [soupsieve](https://github.com/facelessuser/soupsieve) | `2.5` | `2.7` |
| [sphinx](https://github.com/sphinx-doc/sphinx) | `7.2.6` | `7.4.7` |
| [sphinx-automodapi](https://github.com/astropy/sphinx-automodapi) | `0.17.0` | `0.19.0` |
| [sphinx-reredirects](https://github.com/documatt/sphinx-reredirects) | `0.1.2` | `0.1.6` |
| [sphinxcontrib-applehelp](https://github.com/sphinx-doc/sphinxcontrib-applehelp) | `1.0.8` | `2.0.0` |
| [sphinxcontrib-devhelp](https://github.com/sphinx-doc/sphinxcontrib-devhelp) | `1.0.5` | `2.0.0` |
| [sphinxcontrib-htmlhelp](https://github.com/sphinx-doc/sphinxcontrib-htmlhelp) | `2.0.4` | `2.1.0` |
| [sphinxcontrib-qthelp](https://github.com/sphinx-doc/sphinxcontrib-qthelp) | `1.0.6` | `2.0.0` |
| [sphinxcontrib-serializinghtml](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml) | `1.1.9` | `2.0.0` |
| [urllib3](https://github.com/urllib3/urllib3) | `2.1.0` | `2.4.0` |


Updates `alabaster` from 0.7.13 to 0.7.16
- [Release notes](https://github.com/sphinx-doc/alabaster/releases)
- [Changelog](https://github.com/sphinx-doc/alabaster/blob/master/docs/changelog.rst)
- [Commits](sphinx-doc/alabaster@0.7.13...0.7.16)

Updates `babel` from 2.14.0 to 2.17.0
- [Release notes](https://github.com/python-babel/babel/releases)
- [Changelog](https://github.com/python-babel/babel/blob/master/CHANGES.rst)
- [Commits](python-babel/babel@v2.14.0...v2.17.0)

Updates `beautifulsoup4` from 4.12.2 to 4.13.4

Updates `certifi` from 2023.11.17 to 2025.4.26
- [Commits](certifi/python-certifi@2023.11.17...2025.04.26)

Updates `charset-normalizer` from 3.3.2 to 3.4.1
- [Release notes](https://github.com/jawah/charset_normalizer/releases)
- [Changelog](https://github.com/jawah/charset_normalizer/blob/master/CHANGELOG.md)
- [Commits](jawah/charset_normalizer@3.3.2...3.4.1)

Updates `docutils` from 0.20.1 to 0.21.2

Updates `furo` from 2024.1.29 to 2024.8.6
- [Release notes](https://github.com/pradyunsg/furo/releases)
- [Changelog](https://github.com/pradyunsg/furo/blob/main/docs/changelog.md)
- [Commits](pradyunsg/furo@2024.01.29...2024.08.06)

Updates `idna` from 3.6 to 3.10
- [Release notes](https://github.com/kjd/idna/releases)
- [Changelog](https://github.com/kjd/idna/blob/master/HISTORY.rst)
- [Commits](kjd/idna@v3.6...v3.10)

Updates `jinja2` from 3.1.2 to 3.1.6
- [Release notes](https://github.com/pallets/jinja/releases)
- [Changelog](https://github.com/pallets/jinja/blob/main/CHANGES.rst)
- [Commits](pallets/jinja@3.1.2...3.1.6)

Updates `markdown` from 3.5.1 to 3.8
- [Release notes](https://github.com/Python-Markdown/markdown/releases)
- [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md)
- [Commits](Python-Markdown/markdown@3.5.1...3.8)

Updates `markupsafe` from 2.1.3 to 3.0.2
- [Release notes](https://github.com/pallets/markupsafe/releases)
- [Changelog](https://github.com/pallets/markupsafe/blob/main/CHANGES.rst)
- [Commits](pallets/markupsafe@2.1.3...3.0.2)

Updates `mdit-py-plugins` from 0.4.0 to 0.4.2
- [Release notes](https://github.com/executablebooks/mdit-py-plugins/releases)
- [Changelog](https://github.com/executablebooks/mdit-py-plugins/blob/master/CHANGELOG.md)
- [Commits](executablebooks/mdit-py-plugins@v0.4.0...v0.4.2)

Updates `myst-parser` from 2.0.0 to 3.0.1
- [Release notes](https://github.com/executablebooks/MyST-Parser/releases)
- [Changelog](https://github.com/executablebooks/MyST-Parser/blob/master/CHANGELOG.md)
- [Commits](executablebooks/MyST-Parser@v2.0.0...v3.0.1)

Updates `packaging` from 23.2 to 25.0
- [Release notes](https://github.com/pypa/packaging/releases)
- [Changelog](https://github.com/pypa/packaging/blob/main/CHANGELOG.rst)
- [Commits](pypa/packaging@23.2...25.0)

Updates `pygments` from 2.17.2 to 2.19.1
- [Release notes](https://github.com/pygments/pygments/releases)
- [Changelog](https://github.com/pygments/pygments/blob/master/CHANGES)
- [Commits](pygments/pygments@2.17.2...2.19.1)

Updates `requests` from 2.31.0 to 2.32.3
- [Release notes](https://github.com/psf/requests/releases)
- [Changelog](https://github.com/psf/requests/blob/main/HISTORY.md)
- [Commits](psf/requests@v2.31.0...v2.32.3)

Updates `soupsieve` from 2.5 to 2.7
- [Release notes](https://github.com/facelessuser/soupsieve/releases)
- [Commits](facelessuser/soupsieve@2.5...2.7)

Updates `sphinx` from 7.2.6 to 7.4.7
- [Release notes](https://github.com/sphinx-doc/sphinx/releases)
- [Changelog](https://github.com/sphinx-doc/sphinx/blob/v7.4.7/CHANGES.rst)
- [Commits](sphinx-doc/sphinx@v7.2.6...v7.4.7)

Updates `sphinx-automodapi` from 0.17.0 to 0.19.0
- [Release notes](https://github.com/astropy/sphinx-automodapi/releases)
- [Changelog](https://github.com/astropy/sphinx-automodapi/blob/main/CHANGES.rst)
- [Commits](astropy/sphinx-automodapi@v0.17.0...v0.19.0)

Updates `sphinx-reredirects` from 0.1.2 to 0.1.6
- [Changelog](https://github.com/documatt/sphinx-reredirects/blob/main/docs/changelog.rst)
- [Commits](documatt/sphinx-reredirects@v0.1.2...v0.1.6)

Updates `sphinxcontrib-applehelp` from 1.0.8 to 2.0.0
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-applehelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-applehelp/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinxcontrib-applehelp@1.0.8...2.0.0)

Updates `sphinxcontrib-devhelp` from 1.0.5 to 2.0.0
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-devhelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-devhelp/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinxcontrib-devhelp@1.0.5...2.0.0)

Updates `sphinxcontrib-htmlhelp` from 2.0.4 to 2.1.0
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-htmlhelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-htmlhelp/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinxcontrib-htmlhelp@2.0.4...2.1.0)

Updates `sphinxcontrib-qthelp` from 1.0.6 to 2.0.0
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-qthelp/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-qthelp/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinxcontrib-qthelp@1.0.6...2.0.0)

Updates `sphinxcontrib-serializinghtml` from 1.1.9 to 2.0.0
- [Release notes](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml/releases)
- [Changelog](https://github.com/sphinx-doc/sphinxcontrib-serializinghtml/blob/master/CHANGES.rst)
- [Commits](sphinx-doc/sphinxcontrib-serializinghtml@1.1.9...2.0.0)

Updates `urllib3` from 2.1.0 to 2.4.0
- [Release notes](https://github.com/urllib3/urllib3/releases)
- [Changelog](https://github.com/urllib3/urllib3/blob/main/CHANGES.rst)
- [Commits](urllib3/urllib3@2.1.0...2.4.0)

---
updated-dependencies:
- dependency-name: alabaster
  dependency-version: 0.7.16
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: llvm-docs-requirements
- dependency-name: babel
  dependency-version: 2.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: beautifulsoup4
  dependency-version: 4.13.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: certifi
  dependency-version: 2025.4.26
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: llvm-docs-requirements
- dependency-name: charset-normalizer
  dependency-version: 3.4.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: docutils
  dependency-version: 0.21.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: furo
  dependency-version: 2024.8.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: idna
  dependency-version: '3.10'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: jinja2
  dependency-version: 3.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: llvm-docs-requirements
- dependency-name: markdown
  dependency-version: '3.8'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: markupsafe
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: llvm-docs-requirements
- dependency-name: mdit-py-plugins
  dependency-version: 0.4.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: llvm-docs-requirements
- dependency-name: myst-parser
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: llvm-docs-requirements
- dependency-name: packaging
  dependency-version: '25.0'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: llvm-docs-requirements
- dependency-name: pygments
  dependency-version: 2.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: requests
  dependency-version: 2.32.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: soupsieve
  dependency-version: '2.7'
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: sphinx
  dependency-version: 7.4.7
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: sphinx-automodapi
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: sphinx-reredirects
  dependency-version: 0.1.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: llvm-docs-requirements
- dependency-name: sphinxcontrib-applehelp
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: llvm-docs-requirements
- dependency-name: sphinxcontrib-devhelp
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: llvm-docs-requirements
- dependency-name: sphinxcontrib-htmlhelp
  dependency-version: 2.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
- dependency-name: sphinxcontrib-qthelp
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: llvm-docs-requirements
- dependency-name: sphinxcontrib-serializinghtml
  dependency-version: 2.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: llvm-docs-requirements
- dependency-name: urllib3
  dependency-version: 2.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: llvm-docs-requirements
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels May 1, 2025
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github May 6, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/pip/llvm/docs/llvm-docs-requirements-fac9a24a58 branch May 6, 2025 17:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file python Pull requests that update Python code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@bcardosolopes