[dependabot]

Updates the requirements on python-fsutil, python-slugify, python-benedict, coverage, mypy, pytest and tox to permit the latest version.
Updates python-fsutil from 0.16.1 to 0.18.0

Release notes

Sourced from python-fsutil's releases.

0.18.0

• Add read_file_yaml and write_file_yaml (requires the optional PyYAML dependency). #196 (thanks to @​Gonghan-Princess)
• Add support for compressed tar archives in extract_tar_file. #193 (thanks to @​Gonghan-Princess)
• Fix read_file_lines ranges and negative indexes for UTF-16 and UTF-32 encoded files. #195 (thanks to @​Gonghan-Princess)
• Bump requirements and pre-commit hooks.

0.17.0

• Add support for file-like objects in get_file_hash.
• Fix IndexError in convert_size_bytes_to_string for sizes >= 1024 YB. #186 (thanks to @​SAY-5)
• Harden Content-Disposition filename sanitization in download_file to prevent path traversal. #181
• Bump requirements and pre-commit hooks.

Changelog

Sourced from python-fsutil's changelog.

0.18.0 - 2026-10-08

• Add read_file_yaml and write_file_yaml (requires the optional PyYAML dependency). #196 (thanks to @​Gonghan-Princess)
• Add support for compressed tar archives in extract_tar_file. #193 (thanks to @​Gonghan-Princess)
• Fix read_file_lines ranges and negative indexes for UTF-16 and UTF-32 encoded files. #195 (thanks to @​Gonghan-Princess)
• Bump requirements and pre-commit hooks.

0.17.0 - 2026-07-07

• Add support for file-like objects in get_file_hash.
• Fix IndexError in convert_size_bytes_to_string for sizes >= 1024 YB. #186 (thanks to @​SAY-5)
• Harden Content-Disposition filename sanitization in download_file to prevent path traversal. #181
• Bump requirements and pre-commit hooks.

Commits

• 707a030 Update CHANGELOG and version.
• 7402935 Refactor io tests.
• 4b8bee6 Merge branch 'main' of https://github.com/fabiocaccamo/python-fsutil
• b75e695 Improve YAML helpers defaults, tests and docs.
• 835d190 Improve YAML helpers defaults, tests and docs.
• 6386924 Add safe YAML file reading and writing (#196)
• 380a47f Run pre-commit.
• 8dac57b Don't run black on readme.
• ff3f6e0 Bump pre-commit hooks.
• 7ed66a8 Decode line ranges using the requested text encoding (#195)
• Additional commits viewable in compare view

Updates python-slugify from 8.0.4 to 9.1.3

Release notes

Sourced from python-slugify's releases.

9.1.3

Patch for the modern algorithm. Legacy output is unchanged and remains the permanent default.

• Modern mode only: preserve repeated and leading post-replacement delimiters during word-boundary truncation, instead of collapsing them to a single separator. Legacy output and public smart_truncate are unchanged (aarush, #204).
• Add tests for CLI interruption and legacy backend error contracts. No output change (dyda5505-cloud, #203).

Full Changelog: un33k/python-slugify@v9.1.2...v9.1.3

🚀 Generated with Dojo ⛩️

9.1.2

Performance improvement with unchanged output under both algorithms. Legacy output is unchanged and remains the permanent default.

• Skip the transliteration backend for ASCII-only input under both algorithms, avoiding the ~3 MB text-unidecode table import for the common ASCII case. Output is unchanged, including the frozen legacy differential (Rafael Borja, #201).

Full Changelog: un33k/python-slugify@v9.1.1...v9.1.2

🚀 Generated with Dojo ⛩️

9.1.1

Bug fix in the modern algorithm. Legacy output is unchanged and remains the permanent default.

• Modern mode only: avoid emitting a trailing separator when a hard cut truncates through repeated post-replacement delimiters, keeping the delimiter run with the next word that fits. Legacy output and public smart_truncate are unchanged (曾楚笑, #200).

Full Changelog: un33k/python-slugify@v9.1.0...v9.1.1

🚀 Generated with Dojo ⛩️

9.1.0

Modern-algorithm improvements and fixes. Legacy output is unchanged and remains the permanent default.

• Modern mode only: decode uppercase &#X..; hexadecimal references as HTML allows, in addition to lowercase &#x..; (Rupayon Haldar, #195).
• Modern mode only: preserve post-replacement output when the whole slug already fits max_length, so intentional repeated/trailing delimiters are not collapsed at the length limit. Public smart_truncate is unchanged (emme1t, #193).
• Fix add_uppercase_char to apply insertions atomically, leaving the input list unchanged if iteration fails. Built-in transliteration tables are unaffected (Cristian Ramirez, #194).
• Modern mode only: validate argument types up front, raising TypeError for a bool/non-int max_length or a non-str separator. Legacy behavior is unchanged (Jon Bailey, #196).

Internal: the legacy pipeline is now frozen in slugify/_legacy.py with the public slugify() dispatching by algorithm; tests reorganized under tests/.

Full Changelog: un33k/python-slugify@v9.0.0...v9.1.0

🚀 Generated with Dojo ⛩️

9.0.0

Highlights

• Preserve legacy slug output by default while adding explicit algorithm="modern" opt-in behavior.
• Add explicit transliteration backend and replacement-stage controls, with matching CLI options.
• Add opt-in AnyASCII support while preserving existing dependency and backend-selection behavior.
• Fix CLI regex-pattern forwarding and modern-mode handling for entities, iterables, separators, and delimiters.
• Add Python 3.14 support, packaging modernization, expanded compatibility checks, and migration guidance.

... (truncated)

Changelog

Sourced from python-slugify's changelog.

9.1.3

• Modern mode only: preserve repeated and leading post-replacement delimiters during word-boundary truncation, instead of collapsing them to a single separator. Legacy output and public smart_truncate are unchanged (aarush, #204).
• Add tests for CLI interruption and legacy backend error contracts. No output change (dyda5505-cloud, #203).

9.1.2

• Skip the transliteration backend for ASCII-only input under both algorithms, avoiding the ~3 MB text-unidecode table import for the common ASCII case. Output is unchanged, including the frozen legacy differential (Rafael Borja, #201).

9.1.1

• Modern mode only: avoid emitting a trailing separator when a hard cut truncates through repeated post-replacement delimiters, keeping the delimiter run with the next word that fits. Legacy output and public smart_truncate are unchanged (曾楚笑, #200).

9.1.0

• Modern mode only: decode uppercase &#X..; hexadecimal references as HTML allows, in addition to lowercase &#x..;. Legacy output is unchanged (Rupayon Haldar, #195).
• Modern mode only: preserve post-replacement output when the whole slug already fits max_length, so intentional repeated/trailing delimiters are not collapsed at the length limit. Public smart_truncate is unchanged (emme1t, #193).
• Fix add_uppercase_char to apply insertions atomically, leaving the input list unchanged if iteration fails. Built-in transliteration tables are unaffected (Cristian Ramirez, #194).
• Modern mode only: validate argument types up front, raising TypeError for a bool/non-int max_length (bool is an int subclass) or a non-str separator. Legacy behavior is unchanged and still treats max_length=True as its historical single-character truncation (Jon Bailey, #196).

9.0.0 — unreleased

• Add keyword-only algorithm='legacy' (permanent default) and explicit algorithm='modern' opt-in, plus CLI --algorithm. Preserve historical default entity ordering, numeric handling, iterator consumption, separator truncation, and public smart_truncate behavior.

• Preserve legacy auto backend selection and two-pass replacement defaults; add explicit backend and replacement_stage keyword-only options and matching CLI flags.

• Add opt-in AnyASCII extra without removing or changing the base text-unidecode dependency.

• Forward CLI --regex-pattern (Jacobo de Vera, #176; report by @​peter-bloomfield, #175).

• Modern mode only: decode entities before transliteration; handle invalid numeric references per match, including surrogate references (#178, #181, #187).

• Modern mode only: materialize replacement rules and stopword iterables consistently; preserve bytes/bytearray UTF-8 input with clear rejection of unsupported types (#183, #190).

• Modern mode only: budget internal tokens using emitted separator widths, support empty separators, and preserve literal word characters that match delimiters. Public smart_truncate remains unchanged (#47, #185, #186).

• Add regression coverage for whitespace, ordinals, backend-specific output, replacement stages, CLI execution, and installed artifacts.

• Move package metadata to pyproject.toml, retain the typed marker and source tests, and remove the unsafe publish/upload/tag shortcut.

• Document output changes, backend license distinctions, compatibility limits, and migration precautions in docs/release-9/migration.md.

• Support Python 3.14.

• Drop support for Python 3.9 and lower.

• Use tox for local test runs and in CI.

• Test the project against both unidecode and text_unidecode.

• Fix type annotation issues identified by mypy.

• Run CI against pull requests.

• Fix package build warnings.

Commits

• f0010f9 Release 9.1.3: preserve modern word-boundary replacement delimiters (#206)
• 007ddd7 Add the missing blank lines in the new contributor tests (#205)
• c9e9698 Preserve modern word-boundary replacement delimiters (#204)
• b910814 Add tests for CLI interruption and legacy backend error contracts (#203)
• 866401e Rename DOJO.md to AGENTS.md and ignore local build artifacts (#202)
• 18a28da Release 9.1.2: skip transliteration backend for ASCII input (#201)
• cf6cd3d Skip the transliteration backend for ASCII text (#201)
• 2fe6cec Reword Dojo badge to 'maintained with' for a 15-year-old library
• bbfdff2 Recolor Dojo badge to dark slate for readability
• 87ce191 Add 'Built with Dojo' badge to README
• Additional commits viewable in compare view

Updates python-benedict from 0.36.0 to 0.39.0

Release notes

Sourced from python-benedict's releases.

0.39.0

• Forward missing overwrite argument in move method. #602
• Fix clean recursive cleaning of nested collections (when collections=True). (by @​x0Lazarus)
• Fix query-string parsing: keep empty values instead of dropping the key. (by @​Master-Norna in #604)
• Read current wrapped keys when iterating in reverse. (by @​x0Lazarus in #607)
• Honor dictionary wrappers and freezing in popitem method. (by @​vitalivo in #601)
• Preserve falsy parent keys when flattening dictionaries. (by @​rastagan-git in #600)
• Compare current wrapped contents when checking inequality. (by @​x0Lazarus in #606)
• Preserve wrapper identity during in-place dictionary union. (by @​Gonghan-Princess in #598)
• Prevent RecursionError when a dict contains itself. #592 (by @​dualfroz in #597)
• Bump requirements, GitHub actions and pre-commit hooks.

0.38.0

• Fix keylists / keypaths to handle non-string dict keys holding lists. (by @​Sanjays2402 in #583)
• Fix match to anchor string patterns and consume the full keypath. (by @​gaoflow in #579)
• Fix query-string serializer to accept array/bracketed keys and trailing &. (#586)
• Reject empty keypath_separator. (by @​CodingFeng101 in #580)
• Fix int parsing to catch OverflowError. #578 (#584)
• Bump requirements and pre-commit hooks.

0.37.0

• Add optional schema kwarg support (python-benedict[schema] with pydantic v2) to all from_* and to_* I/O methods. (#565)
• Add indexes=True option to flatten / unflatten for list/tuple flattening with round-trip support. (#561)
• Add deep argument support to filter method to apply the predicate recursively to all nested dicts.
• Add deep argument support to remove method to remove the key(s) at every nesting level.
• Add deep argument support to rename method to rename the key at every nesting level.
• Reduce dependencies making the core installation super lightweight. #567
• Swap uiri/toml encoder for tomli_w. #439
• Fix yaml serializer to use safe_dump and add pickle security warning (CWE-502). (#563)
• Fix orjson and requests requirements to address CVE-2025-67221 and CVE-2024-27454. (#562)
• Add CONTRIBUTING.md.
• Bump requirements and pre-commit hooks.

Changelog

Sourced from python-benedict's changelog.

0.39.0 - 2026-09-29

• Forward missing overwrite argument in move method. #602
• Fix clean recursive cleaning of nested collections (when collections=True). (by @​x0Lazarus)
• Fix query-string parsing: keep empty values instead of dropping the key. (by @​Master-Norna in #604)
• Read current wrapped keys when iterating in reverse. (by @​x0Lazarus in #607)
• Honor dictionary wrappers and freezing in popitem method. (by @​vitalivo in #601)
• Preserve falsy parent keys when flattening dictionaries. (by @​rastagan-git in #600)
• Compare current wrapped contents when checking inequality. (by @​x0Lazarus in #606)
• Preserve wrapper identity during in-place dictionary union. (by @​Gonghan-Princess in #598)
• Prevent RecursionError when a dict contains itself. #592 (by @​dualfroz in #597)
• Bump requirements, GitHub actions and pre-commit hooks.

0.38.0 - 2026-07-07

• Fix keylists / keypaths to handle non-string dict keys holding lists. (by @​Sanjays2402 in #583)
• Fix match to anchor string patterns and consume the full keypath. (by @​gaoflow in #579)
• Fix query-string serializer to accept array/bracketed keys and trailing &. (#586)
• Reject empty keypath_separator. (by @​CodingFeng101 in #580)
• Fix int parsing to catch OverflowError. #578 (#584)
• Bump requirements and pre-commit hooks.

0.37.0 - 2026-05-09

• Add optional schema kwarg support (python-benedict[schema] with pydantic v2) to all from_* and to_* I/O methods. (#565)
• Add indexes=True option to flatten / unflatten for list/tuple flattening with round-trip support. (#561)
• Add deep argument support to filter method to apply the predicate recursively to all nested dicts.
• Add deep argument support to remove method to remove the key(s) at every nesting level.
• Add deep argument support to rename method to rename the key at every nesting level.
• Reduce dependencies making the core installation super lightweight. #567
• Swap uiri/toml encoder for tomli_w. #439
• Fix yaml serializer to use safe_dump and add pickle security warning (CWE-502). (#563)
• Fix orjson and requests requirements to address CVE-2025-67221 and CVE-2024-27454. (#562)
• Add CONTRIBUTING.md.
• Bump requirements and pre-commit hooks.

Commits

• e9641ec Update CHANGELOG and version.
• a61064c Run pre-commit.
• e731d0b Update .pre-commit-config.yaml
• 98c75d0 Forward missing overwrite argument in move method. #602
• c79796d Bump the python-requirements group with 9 updates (#610)
• 39603ba Bump the github-actions group with 2 updates (#609)
• f33736a Fix clean recursive cleaning of nested collections (when collections=True).
• 5cb4922 Fix query-string parsing: keep empty values instead of dropping the key. (#604)
• c36e48c Read current wrapped keys when iterating in reverse. (#607)
• a7519b4 Honor dictionary wrappers and freezing in popitem method. (#601)
• Additional commits viewable in compare view

Updates coverage to 7.16.2

Release notes

Sourced from coverage's releases.

7.16.2

Version 7.16.2 — 2026-09-27

• Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168.
• Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289.
• Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923.

➡️  PyPI page: coverage 7.16.2. :arrow_right:  To install: python3 -m pip install coverage==7.16.2

Changelog

Sourced from coverage's changelog.

Version 7.16.2 — 2026-09-27

• Fix: on Python 3.14 and later, a for loop completing immediately before a function return could mistakenly report an uncovered branch. This is now fixed, closing issue 2168_.

• Fix: on Python 3.14 and later, the else clause of a try whose body is a with statement could incorrectly be reported as covered when the with raised. This is now fixed, closing issue 2289_.

• Fix: with dynamic_context = test_function, test methods written as @staticmethod or @classmethod were not given a context of their own. Now they are, on Python 3.11 and later. Closes issue 1923_.

.. _issue 1923: coveragepy/coveragepy#1923 .. _issue 2168: coveragepy/coveragepy#2168 .. _issue 2289: coveragepy/coveragepy#2289

.. _changes_7-16-1:

Version 7.16.1 — 2026-09-13

• Fix: when the body of an irrefutable case (like case _:) is entirely excluded, the case line is now excluded too, just as an excluded else: body removes the else: line. Previously the case line was left behind and reported as missing. Closes issue 1563_ with pull 2269_.

• Fix: using :meth:.CoverageData.update twice on an in-memory database would fail, as described in issue 2279_. This is now fixed.

.. _issue 1563: coveragepy/coveragepy#1563 .. _pull 2269: coveragepy/coveragepy#2269 .. _issue 2279: coveragepy/coveragepy#2279

.. _changes_7-16-0:

Version 7.16.0 — 2026-08-28

• When combining files, now path separator slashes will automatically be converted to the local file system style. This makes it less necessary to define [paths] configuration to combine data across operating systems. Fixes issue 2266_.

• The :meth:.Coverage.switch_context method now returns the previous context.

• Fix: previously, a [paths] pattern would be replaced everywhere in a file

... (truncated)

Commits

• 5643ae7 docs: prep for 7.16.2
• a3e969f fix: dynamic_context for @​staticmethod and @​classmethod tests (issue 1923) (#...
• 8ad7236 fix: stop counting the try/else line when a with statement raises (#2301)
• c6dab1f fix(debug): debug output doesn't mis-handle odd line separators #2296
• 08fbc32 style: Protocols should use ... for method bodies
• bc7b0e3 refactor: positional-only args are better than pragmas
• 52afd6b Document parallel tox coverage data files (#2284)
• f653aae fix: loop completion arcs on Python 3.14 (#2281)
• cc1ced4 test: PyPy still compiles comprehensions as functions
• 85a9088 chore: make upgrade
• Additional commits viewable in compare view

Updates mypy to 2.4.0

Changelog

Sourced from mypy's changelog.

Mypy Release Notes

Next Release

Mypy 2.4

We've just uploaded mypy 2.4.0 to the Python Package Index (PyPI). Mypy is a static type checker for Python. This release includes new features, performance improvements and bug fixes. You can install it as follows:

python3 -m pip install -U mypy

You can read the full documentation for this release on Read the Docs.

Python 3.15 Support

Mypy 2.4 supports running on Python 3.15 and type checking most Python 3.15 features. This includes the new builtin sentinel type for sentinel values (PEP 661), which mypy now supports (see below for details). Lazy imports (PEP 810) and unpacking in comprehensions (PEP 798) are also supported. Closed TypedDicts (PEP 728) have been supported since mypy 2.2, but the extra_items TypedDict argument, also introduced in PEP 728, is still unsupported. Support for extra_items will be added in a future mypy release.

Native Parser Enabled by Default

Mypy now uses the new native parser by default. It's based on the Ruff parser, and it's significantly faster than the legacy parser, which uses the stdlib ast module. The native parser also has other benefits:

• You can target newer Python versions and use recent Python syntax even when running mypy on an older Python version. For example, you can use --python-version 3.15 when running mypy on Python 3.14.
• Stub files can use syntax that is newer than the target Python version. For example, stubs can use the PEP 695 generic class syntax (class Box[T]: ...) when running on or targeting Python 3.10.
• Parallel type checking requires the native parser.

The legacy parser is still available through --no-native-parser, or native_parser = False in the config file (native_parser = false under [tool.mypy] in pyproject.toml). We are planning to remove the legacy parser in early 2027. If you run into a problem with the native parser, please report it on the issue tracker.

Unlike the legacy parser, the native parser doesn't support type comments for variables defined by for and with statements. These type comments are silently ignored, and the types of the variables are

... (truncated)

Commits

• 935ba8a Bump version to 2.4.0
• 334a678 Add link for PR 22066 in mypy 2.4 changelog (#22082)
• fe69660 Finalize mypy 2.4 changelog (#22080)
• 541fd87 Various mypy 2.4 changelog updates (#22077)
• b231182 Update native parser docs (#22078)
• 04fe42c Initial Changelog for Mypy 2.4 (#22071)
• 0617494 Quick fix for non UTF-8 encodings with new parser (#22066)
• b2f9b60 Bump librt to 0.16.0 (#22067)
• 9d798dc Sync typeshed (#22054)
• 0861bb6 Reduce max protocol stack size to 20 (#22053)
• Additional commits viewable in compare view

Updates pytest to 9.1.1

Release notes

Sourced from pytest's releases.

9.1.1

pytest 9.1.1 (2026-06-19)

Bug fixes

• #14220: Fixed a logic bug in pytest.RaisesGroup which would might cause it to display incorrect "It matches FooError() which was paired with BarError" messages.
• #14591: Fixed a regression in pytest 9.1.0 which caused overriding a parametrized fixture with an indirect @​pytest.mark.parametrize to fail with "duplicate parametrization of '<fixture name>'".
• #14606: Fixed list-item typing errors from mypy in @pytest.mark.parametrize <pytest.mark.parametrize ref> argvalues parameter.
• #14608: Fixed a regression in pytest 9.1.0 where conftest.py files located in <invocation dir>/test* were no longer loaded as initial conftests when invoked without arguments. This could cause certain hooks (like pytest_addoption) in these files to not fire.

Commits

• cf470ec Prepare release version 9.1.1
• e0c8ce6 Merge pull request #14625 from pytest-dev/patchback/backports/9.1.x/a07c31a97...
• 1b82d16 Merge pull request #14624 from pytest-dev/patchback/backports/9.1.x/b375b79ec...
• 501c4bc Merge pull request #14596 from bluetech/doc-classmethod
• b61f588 Merge pull request #14622 from chrisburr/fix-14608-initial-conftest-test-subdir
• 9a567e0 [automated] Update plugin list (#14617) (#14618)
• ef8b299 Merge pull request #14620 from pytest-dev/patchback/backports/9.1.x/680f9f3ed...
• 66abd07 Merge pull request #14220 from bysiber/fix-stale-iexp-raisesgroup
• 79fbf93 Merge pull request #14612 from pytest-dev/patchback/backports/9.1.x/974ed48b6...
• 0d312eb Merge pull request #14611 from bluetech/parametrize-argvalues-typing
• Additional commits viewable in compare view

Updates tox to 4.65.2

Release notes

Sourced from tox's releases.

v4.65.2

What's Changed

• 🐛 fix(python): fail a dependency_groups run with no pyproject.toml to read by @​feiiiiii5 in tox-dev/tox#4142

Full Changelog: tox-dev/tox@4.65.1...4.65.2

Changelog

Sourced from tox's changelog.

Bug fixes - 4.65.2

• A dependency_groups run whose package root has no pyproject.toml now fails with the path it looked at, instead of installing none of the requested groups and reporting success - by :user:feiiiiii5. (:issue:4142)

---

v4.65.1 (2026-10-10)

---

Bug fixes - 4.65.1

• tox removes read-only files on Windows when it empties an environment's tmp or log directory, or the whole environment on recreate - by :user:SulimanAbdulrazzaq.

  • A read-only file in the directory itself used to stop every later run with internal error.
  • A read-only file in a sub-directory used to stay behind without a warning. (:issue:4138)

Packaging updates and notes for downstreams - 4.65.1

• Use Python 3.15 for development and automation. (:issue:4139)
• Include the plugin documentation in source distributions so downstream packagers can run the plugin example tests. (:issue:4140)

---

v4.65.0 (2026-10-09)

---

Features - 4.65.0

• Bump the default maximum CPython minor version to 3.15 in generative environment lists. (:issue:4136)

Bug fixes - 4.65.0

• --result-json and tox config -o create the missing parent directory of the output file instead of crashing - by :user:SulimanAbdulrazzaq. (:issue:4126)
• A set_env env file that is a directory or not UTF-8 fails the environment with a configuration error instead of a traceback, and a leading UTF-8 byte order mark no longer ends up in the first key - by :user:SulimanAbdulrazzaq. (:issue:4127)
• A reused environment with commands = [] clears env_log_dir at the start of the run instead of keeping logs from the previous run - by :user:glaziermag. (:issue:4130)

Improved documentation - 4.65.0

• Drop @impl from the tox_append_version_info plugin doc examples, since it made tox skip the inline plugin - by

... (truncated)

Commits

• 71d6dd3 release 4.65.2
• ef19f77 🐛 fix(python): fail a dependency_groups run with no pyproject.toml to read (#...
• 655d771 release 4.65.1
• 4a71f79 fix(packaging): include plugin docs in sdist (#4141)
• 55ee489 feat(python): require 3.11 and default to 3.15 (#4139)
• e1dcb89 🐛 fix(path): remove read-only files when emptying an environment directory (#...
• 21d7b51 release 4.65.0
• fbe1248 feat: bump default maximum Python minor to 3.15 (#4136)
• c6dabc2 📝 docs(plugins): drop @​impl from tox_append_version_info examples (#4135)
• 5cec382 👷 ci: fix the cancelled() check that broke check.yaml (#4134)
• Additional commits viewable in compare view

[fabiocaccamo]

@dependabot rebase

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.