Bump the dependencies group in /.config with 6 updates

[dependabot]

Bumps the dependencies group in /.config with 6 updates:

Package	From	To
charset-normalizer	3.4.1	3.4.2
cryptography	44.0.2	44.0.3
importlib-metadata	8.6.1	8.7.0
pymdown-extensions	10.14.3	10.15
termcolor	3.0.1	3.1.0
yamllint	1.37.0	1.37.1

Updates charset-normalizer from 3.4.1 to 3.4.2

Release notes

Sourced from charset-normalizer's releases.

Version 3.4.2

3.4.2 (2025-05-02)

Fixed

• Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
• Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

• Optional mypyc compilation upgraded to version 1.15 for Python >= 3.9

Changelog

Sourced from charset-normalizer's changelog.

3.4.2 (2025-05-02)

Fixed

• Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#591)
• Improved the overall reliability of the detector with CJK Ideographs. (#605) (#587)

Changed

• Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

Commits

• 6422af1 📝 update release date
• 0e60ec1 🔖 Release 3.4.2 (#614)
• f6630ce ⬆️ Bump pypa/cibuildwheel from 2.23.2 to 2.23.3 (#617)
• 677c999 ⬆️ Bump actions/download-artifact from 4.2.1 to 4.3.0 (#618)
• 960ab1e ⬆️ Bump actions/setup-python from 5.5.0 to 5.6.0 (#619)
• 6eb6325 ⬆️ Bump github/codeql-action from 3.28.10 to 3.28.16 (#620)
• c99c0f2 ⬆️ Update coverage requirement from <7.7,>=7.2.7 to >=7.2.7,<7.9 (#606)
• 270f28e ⬆️ Bump actions/setup-python from 5.4.0 to 5.5.0 (#607)
• d4d89a0 ⬆️ Bump pypa/cibuildwheel from 2.22.0 to 2.23.2 (#608)
• 905fcf5 ⬆️ Bump slsa-framework/slsa-github-generator from 2.0.0 to 2.1.0 (#609)
• Additional commits viewable in compare view

Updates cryptography from 44.0.2 to 44.0.3

Changelog

Sourced from cryptography's changelog.

44.0.3 - 2025-05-02

* Fixed compilation when using LibreSSL 4.1.0.
.. _v44-0-2:

Commits

• b92c841 [44.0.x] backports for libressl 4.1.0 support release (#12848)
• 387ca00 Hopefully add Window / MacOS PyPy 3.10 / 3.11 support (#12559)
• See full diff in compare view

Updates importlib-metadata from 8.6.1 to 8.7.0

Changelog

Sourced from importlib-metadata's changelog.

v8.7.0

Features

• .metadata() (and Distribution.metadata) can now return None if the metadata directory exists but not metadata file is present. (#493)

Bugfixes

• Raise consistent ValueError for invalid EntryPoint.value (#518)

Commits

• 708dff4 Finalize
• b3065f0 Merge pull request #519 from python/bugfix/493-metadata-missing
• e4351c2 Add a new test capturing the new expectation.
• 5a65705 Refactor the casting into a wrapper for brevity and to document its purpose.
• 0830c39 Add news fragment.
• 22bb567 Fix type errors where metadata could be None.
• 57f31d7 Allow metadata to return None when there is no metadata present.
• b9c4be4 Merge pull request #518 from python/bugfix/488-bad-ep-value
• 9f8af01 Prefer a cached property, as the property is likely to be retrieved at least ...
• f179e28 Also raise ValueError on construction if the value is invalid.
• Additional commits viewable in compare view

Updates pymdown-extensions from 10.14.3 to 10.15

Release notes

Sourced from pymdown-extensions's releases.

10.15.0

• NEW: SuperFences: Add relaxed_headers option which can tolerate bad content in the fenced code header. When enabled, code blocks with bad content in the header will likely still convert into code blocks, often respecting the specified language.
• NEW: Add type hints to the Blocks interface and a few additional files.
• FIX: Blocks: Fix some corner cases of nested blocks with lists.
• FIX: Tab and Tabbed: Fix a case where tabs could fail if combine_header_slug was enabled and there was no header.

Commits

• d32c6b3 Update changelog
• 9f5c3ca Finish typing the Blocks interface and type additional referenced files (#2652)
• 84a087b add type annotations to block.py (#2634)
• 70e475c Docs: update JS deps
• 0eb2047 Provide option for more relaxed fenced code headers (#2649)
• 677a863 Fix some corner cases with Blocks and nested lists (#2651)
• f655468 Fix a corner case with combine_header_slug and Tab and Tabbed
• 3e8a097 Only show "steps" as direct list items
• f8d7f62 Docs: Mermaid Pie chart is now considered viable and update version used
• 48cda23 Add a note about snippet syntax and XML files
• Additional commits viewable in compare view

Updates termcolor from 3.0.1 to 3.1.0

Release notes

Sourced from termcolor's releases.

Release 3.1.0

Added

• Add true colour RGB option as input arguments (#102) @​icyveins7
• Cache system lookups to save invocation time (#107) @​miketheman
• Advertise typing via classifier (#104) @​miketheman

Changed

• Migrate coverage configuration to pyproject.toml (#105) @​miketheman

Commits

• 1e0ae11 Test free-threaded Python 3.13t and 3.14t (#111)
• 9e3f5bb Test free-threaded Python 3.13t and 3.14t
• 52bf721 Add mutation testing (#109)
• 968cfa5 Add tests for cprint kwargs
• 6048bd5 Add mutation testing
• fd08149 Test code branches (#108)
• b32a006 Test code branches
• 60815d2 Cache system lookups to save invocation time (#107)
• 7e1e892 Complete coverage via added tests (#106)
• e516dd5 Cache system lookups to save invocation time
• Additional commits viewable in compare view

Updates yamllint from 1.37.0 to 1.37.1

Changelog

Sourced from yamllint's changelog.

1.37.1 (2025-05-04)

• Rule comments: tell how many spaces are expected
• Rule quoted-strings: Fix only-when-needed on multiline with backslash
• Config: Report if rules is not a dict
• Fix test_codec_built_in_equivalent() test when run with pytest
• CI: Fix TestPyPI "dev0" versions for master commits on tags
• Docs: Add links to GitHub repository and releases
• Docs: Fix GitLab integration example
• Docs: Fix GitLab integration link
• Fix the tests badge link on the README

Commits

• 79a6b2b yamllint version 1.37.1
• b6fe397 config: Report if 'rules' is not a dict
• 2ec2d7a docs: Fix GitLab integration link
• 1a6542c quoted-strings: Fix only-when-needed on multiline with backslash
• 2d10aaa docs: Fix GitLab integration example
• 263fb88 README: Fix the tests badge link
• a942f5c Rename tests.common.test_codec_built_in_equivalent()
• 639a7c6 comments: Tell how many spaces are expected in 'min-spaces-from-content'
• 0f2fbb0 docs: Add links to GitHub repository and releases
• bce26d6 CI: Fix TestPyPI "dev0" versions for master commits on tags
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions