[dependabot]

Bumps the pip-dependencies group in /requirements.d with 4 updates: moto, tox, pytest-benchmark and types-pyyaml.

Updates moto from 5.2.4 to 5.2.5

Changelog

Sourced from moto's changelog.

5.2.5

Docker Digest for 5.2.5: sha256:59a1965d845249b04def37a0e2565f9cc6c44543cb89b68e90f28f344b3b0d1a

New Methods:
    * S3Vectors:
        * list_tags_for_resource()
        * tag_resource()
        * untag_resource()
Miscellaneous:

* AutoScaling: delete_autoscaling_group() now correctly succeeds when an attached ELBv2 target group has been deleted

* CloudFormation: get_template_summary() no longer crashes when the optional AWSTemplateFormatVersion-key is not supplied

* CloudFormation: list_stack_resources() now returns the correct LastUpdatedTimestamp-attribute

* CognitoIDP now serves the OpenID Connect discovery document

* Connect: Resources can now be discovered by the ResourceGroupsTagging API

* ECS: list_container_instances() now supports the status-parameter

* Logs: describe_queries() now returns a correctly formatted createTime, enabling support for the Go SDK

* S3: now supports underscores in object metadata keys

* S3: get_object_attributes() now returns the LastModified-attribute in the correct format

* S3: upload_part() now no longer hangs when using ThreadedMotoServer in conjunction with @mock_aws (regression from 5.2.4)

* S3Vectors: create_index() and create_vector_bucket() now support the tag-parameter

* StepFunctions: create_state_machine() now supports the type-parameter

* SQS: send_message_batch() now returns a correctly-formatted 'Failed'-attribute (if appropriate)

* SWF: describe_workflow_execution() and get_workflow_execution_history() now have basic parameter validation

Commits

• 57b3772 Pre-Release: Up Version Number
• ae5c31d Prep release 5.2.5 (#10430)
• db82cbc Make strict adherence to AWS SQS purge queue behaviour optional (#10409)
• d42f047 CloudFormation: allow GetTemplateSummary without AWSTemplateFormatVersion (#1...
• f0a2584 CloudFormation: return LastUpdatedTimestamp in ListStackResources (#10424)
• 96a7b09 StepFunctions: store and return the state machine type (#10405)
• 95cecea aws - connect - add resource groups tagging api support via TaggableResources...
• a42ca27 Wait for the Windows proxy before running its test suite (#10423)
• b26ffd3 Cognito IDP: serve the OpenID Connect discovery document (#10377)
• ec8074c Core: add a dedicated service-model router (#10421)
• Additional commits viewable in compare view

Updates tox from 4.64.3 to 4.64.10

Release notes

Sourced from tox's releases.

v4.64.10

Bug fixes

• Report an invalid configuration value as a one-line error naming the environment and key instead of a traceback, including -x overrides and values set by plugins by @​hfycium. (#4118)
• A command prefixed with ! that exits with 0 now fails the environment with exit code 1; before, tox reported it as a success by @​feiiiiii5. (#4119)
• Recreating an environment or clearing its temporary and log directories removes symlinks to directories, leaving their targets intact by @​gaborbernat. (#4121)
• A command prefixed with ! that cannot start, such as a missing executable, now fails the environment instead of passing by @​feiiiiii5. (#4125)

New Contributors

• @​hfycium made their first contribution in #4120

🐍 PyPI release

📜 Full Changelog

v4.64.9

Bug fixes

• Resolve substitutions and file| entries in set_env overrides passed through -x or TOX_OVERRIDE. Appended blocks replace inherited values while preserving explicit keys in the same or later overrides. Preserve these rules through section references, including native TOML arrays with extend = true. Resolve env-file selectors and values in the consuming environment. Prevent included values from overriding tox's own variables by @​Rodrigo-Palma. (#4116)

🐍 PyPI release

📜 Full Changelog

v4.64.8

Bug fixes

• tox combines --no-binary and --only-binary across the lines of deps and of requirements files the way pip does, where the last line used to replace the earlier ones. With --only-binary :all: and a --no-binary exception, tox passes --only-binary to pip first, so pip keeps the exception. tox config shows the merged values tox passes to pip by @​SulimanAbdulrazzaq. (#4110)
• tox config shows deps with every global option merged the way tox passes it to pip, a later -i replacing an earlier one and repeated flags shown once, and reports the error tox run would raise for invalid deps. constraints shows the configured files instead of the path of tox.ini, and a comment line in constraints no longer fails the run. deps that give pip nothing to install no longer conflict with pylock. set_env includes PIP_USER, TOX_ENV_DIR, TOX_ENV_NAME, TOX_WORK_DIR and VIRTUAL_ENV, the values tox sets for commands by @​gaborbernat. (#4111)
• A TOML ref to another environment's deps, constraints or commands works in tox config and tox run. It used to fail with 'PythonDeps' object is not iterable or Command(args=[...]) is not list by @​gaborbernat. (#4112)
• In INI commands, commands_pre and commands_post, a reference such as pip install {[testenv:x]deps} that shares its line with other text joins the referenced lines into that one command as arguments, as in tox 3. tox used to run each referenced line after the first as a separate command. A reference alone on its line still expands to one command per referenced line. This changes echo {[testenv:x]commands}, which now runs one echo with every referenced command as its arguments by @​gaborbernat. (#4113)
• The JSON schema described requires with the text of provision_tox_env, so editors showed the wrong hover for it by @​gaborbernat. (#4115)

Documentation

• The configuration reference listed wrong defaults for args_are_paths (True), pkg_dir ({env_dir}/dist), skip_missing_interpreters (False), min_version (unset) and requires (tox) by @​Rodrigo-Palma. (#4114)

New Contributors

• @​SulimanAbdulrazzaq made their first contribution in #4110

... (truncated)

Changelog

Sourced from tox's changelog.

########### Changelog ###########

.. towncrier-draft-entries:: Unreleased

.. towncrier release notes start

.. _release-4-67-7:

---

4.67.7 (2026-11-02)

---

.. _release-4-67-7-fixed:

Fixed

• PEP 723 metadata lines with content now require a space after #. Empty blocks count when detecting duplicates, and invalid requires-python values report a configuration error. Previously, malformed content lines could make tox read metadata that other script runners ignored (:pr:4371) by :user:abhishekcpp007 and :user:gaborbernat.

.. _release-4-67-6:

---

4.67.6 (2026-11-02)

---

.. _release-4-67-6-fixed:

Fixed

• Package builds now work under umasks such as 0002 because tox creates new staging directories and missing parents with owner-only access. Existing directories keep their permissions (:pr:4360) by :user:stephenfin and :user:gaborbernat.
• tox config no longer fails with an AssertionError when an environment uses a runner whose plugin is not installed. It skips that environment, as tox run and tox list already do (:pr:4361) by :user:nk-batman21 and :user:gaborbernat.
• Invalid set_env markers now report the key. For INI values, the error explains how to write a literal semicolon as \; (:pr:4364) by :user:faresrafat3 and :user:gaborbernat.
• Restore built-in runner choices for --runner so --runner virtualenv does not fail with an empty choices list (:issue:4365) (:pr:4367) by :user:gaborbernat.
• Compare interpreter implementation names without regard to case when validating base_python against environment names (:pr:4369) by :user:mayankdhingra02 and :user:gaborbernat.
• Accept --config-settings (-C) on requirement lines in requirements files, which pip supports, instead of failing with unrecognized arguments; it is still rejected when written in deps directly, like --hash (:pr:4366) by :user:mmporong and :user:gaborbernat.

... (truncated)

Commits

• 9a068c4 release 4.64.10
• 6d1ca84 🐛 fix(execute): fail a ! command that cannot start (#4125)
• e53d7bf 🐛 fix(config): report bad values from every source without a traceback (#4120)
• a572bde 🐛 fix(execute): fail a ! command that exits 0 (#4119)
• 42fd88b 🐛 fix(path): unlink directory symlinks when clearing env dirs (#4122)
• eb4fc7c 🔧 fix(type): pass ty 0.0.85 (#4123)
• 3faa7eb ci: update pre-commit hooks and fix checks (#4117)
• 7fb5ac1 release 4.64.9
• 09e8ee8 🐛 fix(config): substitute inside set_env override values (#4116)
• e2b0ccb release 4.64.8
• Additional commits viewable in compare view

Updates pytest-benchmark from 5.3.0 to 5.3.1

Changelog

Sourced from pytest-benchmark's changelog.

v5.3.1 (2026-11-01)

• Fixed an AttributeError with pytest's public nodeid attribute by avoiding the removed private node._nodeid attribute (fixes [#321](https://github.com/ionelmc/pytest-benchmark/issues/321) <https://github.com/ionelmc/pytest-benchmark/issues/321>). This adds support for Pytest 9.2. Contributed by Hfycium in [#323](https://github.com/ionelmc/pytest-benchmark/issues/323) <https://github.com/ionelmc/pytest-benchmark/pull/323>.
• Fixed Stats.hd15iqr returning the first datum above the Tukey upper fence instead of the highest datum within it, so the statistic reported the outlier it exists to exclude. ld15iqr was already correct. Contributed by WatchTree-19 in [#320](https://github.com/ionelmc/pytest-benchmark/issues/320) <https://github.com/ionelmc/pytest-benchmark/pull/320>_.
• Added workaround for pygal's broken PluginImportFixer (it's removed from sys.meta_path).

Commits

• 97c52d8 Bump version: 5.3.0 → 5.3.1
• 1031904 Ignore this too.
• b9d2222 Add workaround till Kozea/pygal#532 is released.
• defaee2 Ignore windows deprecation warning (from some notebook thing) and bump pygal ...
• 90204d9 Dump histogram for test_hd15iqr_excludes_high_outliers to a file. Also fix so...
• 154cc0c Update changelog.
• 5b535e1 Fix hd15iqr returning the outlier it is meant to exclude
• f9b57d1 Add python 3.15 and pytest 9.2 in test suite.
• 9f669a3 Fix benchmark fixture for pytest nodeid changes
• See full diff in compare view

Updates types-pyyaml from 6.0.12.20260906 to 6.0.12.20261030

Commits

• See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
tox	[>= 4.49.dev0, < 4.50]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions