build(deps): bump the dependencies group across 3 directories with 4 updates by dependabot[bot] · Pull Request #5364 · envoyproxy/toolshed

dependabot · 2026-10-02T00:01:21Z

Bumps the dependencies group with 1 update in the /bazel directory: markdown.
Bumps the dependencies group with 1 update in the /ci directory: pyjwt.
Bumps the dependencies group with 3 updates in the /py/deps directory: pyjwt, flake8 and gidgethub.

Updates markdown from 3.10.3 to 3.11

Release notes

Sourced from markdown's releases.

Release 3.11.0

Changed

Inline processors now resume searching after the previous match, improving performance for repeated inline patterns (#1619).

Officially support Python 3.15 and drop support for Python 3.10

Walk backtick runs in BacktickInlineProcessor without a regex (#1620).

Switch static site generator for documentation from MkDocs to Zensical (#1627, #1635, #1637, and #1638).

Fixed

Ensure removing Abbreviations does not raise an error (#1634).

Fix an issue with excessive backtracking when matching inline code blocks (#1617).

md_in_html now honors tags added to Markdown.block_level_elements after the extension is loaded (#1246).

Fix quadratic-time regex backtracking in ReferenceProcessor when a link reference definition has no URL, e.g. a line consisting only of [id]: followed by many trailing spaces (#798).

Document attr_list usage for def_list (#1123).

Changelog

Sourced from markdown's changelog.

title: Changelog toc_depth: 2

Python-Markdown Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to the Python Version Specification. See the Contributing Guide for details.

[Unreleased]

Update serializer to be non-recursive (#1644).

Improve ancestor handling in the inline Treeprocessor (#1646).

[3.11.0] - 2026-09-25

Changed

Inline processors now resume searching after the previous match, improving performance for repeated inline patterns (#1619).

Officially support Python 3.15 and drop support for Python 3.10

Walk backtick runs in BacktickInlineProcessor without a regex (#1620).

Switch static site generator for documentation from MkDocs to Zensical (#1627, #1635, #1637, and #1638).

Fixed

Ensure removing Abbreviations does not raise an error (#1634).

Fix an issue with excessive backtracking when matching inline code blocks (#1617).

md_in_html now honors tags added to Markdown.block_level_elements after the extension is loaded (#1246).

Fix quadratic-time regex backtracking in ReferenceProcessor when a link reference definition has no URL, e.g. a line consisting only of [id]: followed by many trailing spaces (#798).

Document attr_list usage for def_list (#1123).

Commits

0ffbf00 Bump version to 3.11.0
547a934 Show adminitions as rendered examples in contrbuting guide
571f050 Cleanup archived changelog
a5176b0 Ensure py-render codeblock title in properly escaped.
819fff9 Document the use of attr_list with def_list.
36cdbd3 Final cleanup for Zensical transition
8a96db5 Add py-render custom code block formater
5d1363c Fix quadratic-time backtracking when a reference link has no URL
0d6afd1 Add Markdown renderer as superfences formatter
175fb5a Ensure removing Abbreviations does not raise an error.
Additional commits viewable in compare view

Updates pyjwt from 2.14.0 to 2.15.1

Release notes

Sourced from pyjwt's releases.

2.15.1

See the 2.15.1 changelog for complete release details.

2.15.0

See the 2.15.0 changelog for complete release details.

Changelog

Sourced from pyjwt's changelog.

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

Fixed
- Accept trailing Base64URL ``=`` padding when decoding JWS segments, so
  tokens issued by AWS ALB and similar systems verify instead of raising
  ``DecodeError: Invalid crypto padding``. Non-alphabet junk such as
  ``!!!!`` remains rejected (`[#1209](https://github.com/jpadilla/pyjwt/issues/1209) <https://github.com/jpadilla/pyjwt/issues/1209>`__).
v2.15.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0&gt;__
Security
Wrap recursion errors from deeply nested JWT payloads in DecodeError instead of exposing a raw RecursionError.

Added
- Support Python 3.15 by @kytta in `[#1202](https://github.com/jpadilla/pyjwt/issues/1202) <https://github.com/jpadilla/pyjwt/pull/1202>`__
Changed
JWKSetCache now stores the parsed PyJWKSet rather than the raw JWKS payload, so a cache hit no longer re-parses every key. JWKSetCache.put() accepts either form and raises PyJWKSetError for anything else. As a result, PyJWKClient.get_jwk_set() returns the same PyJWKSet instance for as long as it stays cached, rather than a freshly built one per call in [#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>__

PyJWKClient.fetch_data() now raises PyJWKClientError("The JWKS endpoint did not return a JSON object") when the endpoint response is not a JSON object, instead of returning it for get_jwk_set() to reject. Callers reaching the JWKS through get_jwk_set() see the same error as before in [#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>__

Fixed
- Return cached ``PyJWKSet`` values from ``PyJWKClient.get_jwk_set()`` instead
  of raising ``PyJWKClientError("The JWKS endpoint did not return a JSON
  object")``. ``JWKSetCache.put()`` documents ``PyJWKSet`` as the cached value,
  so callers pre-populating the cache to avoid a network round-trip could not
  read it back in `[#914](https://github.com/jpadilla/pyjwt/issues/914) <https://github.com/jpadilla/pyjwt/issues/914>`__ and
  `[#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>`__
</tr></table> 

... (truncated)

Commits

7d5ef55 chore: prepare 2.15.1 release
7bf3252 Accept canonical Base64URL padding in JWT segments (#1216)
1d41a64 chore: prepare 2.15.0 release
9bc0665 fix: make recursive payload tests deterministic
5fde08a fix: normalize recursive JWT payload errors
171062d utils: mention bytes in force_bytes type error (#1173)
c9d4d53 docs/conf: drop duplicate 'and' from read() docstring (#1174)
2763752 Add support for Python 3.15 (#1202)
4adcd02 Catch http.client.HTTPException in PyJWKClient.fetch_data (#1201)
9e501d9 fix: correct docstring typo in _validate_jti (#1179)
Additional commits viewable in compare view

Updates pyjwt from 2.14.0 to 2.15.1

Release notes

Sourced from pyjwt's releases.

2.15.1

See the 2.15.1 changelog for complete release details.

2.15.0

See the 2.15.0 changelog for complete release details.

Changelog

Sourced from pyjwt's changelog.

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

Fixed
- Accept trailing Base64URL ``=`` padding when decoding JWS segments, so
  tokens issued by AWS ALB and similar systems verify instead of raising
  ``DecodeError: Invalid crypto padding``. Non-alphabet junk such as
  ``!!!!`` remains rejected (`[#1209](https://github.com/jpadilla/pyjwt/issues/1209) <https://github.com/jpadilla/pyjwt/issues/1209>`__).
v2.15.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0&gt;__
Security
Wrap recursion errors from deeply nested JWT payloads in DecodeError instead of exposing a raw RecursionError.

Added
- Support Python 3.15 by @kytta in `[#1202](https://github.com/jpadilla/pyjwt/issues/1202) <https://github.com/jpadilla/pyjwt/pull/1202>`__
Changed
JWKSetCache now stores the parsed PyJWKSet rather than the raw JWKS payload, so a cache hit no longer re-parses every key. JWKSetCache.put() accepts either form and raises PyJWKSetError for anything else. As a result, PyJWKClient.get_jwk_set() returns the same PyJWKSet instance for as long as it stays cached, rather than a freshly built one per call in [#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>__

PyJWKClient.fetch_data() now raises PyJWKClientError("The JWKS endpoint did not return a JSON object") when the endpoint response is not a JSON object, instead of returning it for get_jwk_set() to reject. Callers reaching the JWKS through get_jwk_set() see the same error as before in [#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>__

Fixed
- Return cached ``PyJWKSet`` values from ``PyJWKClient.get_jwk_set()`` instead
  of raising ``PyJWKClientError("The JWKS endpoint did not return a JSON
  object")``. ``JWKSetCache.put()`` documents ``PyJWKSet`` as the cached value,
  so callers pre-populating the cache to avoid a network round-trip could not
  read it back in `[#914](https://github.com/jpadilla/pyjwt/issues/914) <https://github.com/jpadilla/pyjwt/issues/914>`__ and
  `[#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>`__
</tr></table> 

... (truncated)

Commits

7d5ef55 chore: prepare 2.15.1 release
7bf3252 Accept canonical Base64URL padding in JWT segments (#1216)
1d41a64 chore: prepare 2.15.0 release
9bc0665 fix: make recursive payload tests deterministic
5fde08a fix: normalize recursive JWT payload errors
171062d utils: mention bytes in force_bytes type error (#1173)
c9d4d53 docs/conf: drop duplicate 'and' from read() docstring (#1174)
2763752 Add support for Python 3.15 (#1202)
4adcd02 Catch http.client.HTTPException in PyJWKClient.fetch_data (#1201)
9e501d9 fix: correct docstring typo in _validate_jti (#1179)
Additional commits viewable in compare view

Updates pyjwt from 2.14.0 to 2.15.1

Release notes

Sourced from pyjwt's releases.

2.15.1

See the 2.15.1 changelog for complete release details.

2.15.0

See the 2.15.0 changelog for complete release details.

Changelog

Sourced from pyjwt's changelog.

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

Fixed
- Accept trailing Base64URL ``=`` padding when decoding JWS segments, so
  tokens issued by AWS ALB and similar systems verify instead of raising
  ``DecodeError: Invalid crypto padding``. Non-alphabet junk such as
  ``!!!!`` remains rejected (`[#1209](https://github.com/jpadilla/pyjwt/issues/1209) <https://github.com/jpadilla/pyjwt/issues/1209>`__).
v2.15.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0&gt;__
Security
Wrap recursion errors from deeply nested JWT payloads in DecodeError instead of exposing a raw RecursionError.

Added
- Support Python 3.15 by @kytta in `[#1202](https://github.com/jpadilla/pyjwt/issues/1202) <https://github.com/jpadilla/pyjwt/pull/1202>`__
Changed
JWKSetCache now stores the parsed PyJWKSet rather than the raw JWKS payload, so a cache hit no longer re-parses every key. JWKSetCache.put() accepts either form and raises PyJWKSetError for anything else. As a result, PyJWKClient.get_jwk_set() returns the same PyJWKSet instance for as long as it stays cached, rather than a freshly built one per call in [#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>__

PyJWKClient.fetch_data() now raises PyJWKClientError("The JWKS endpoint did not return a JSON object") when the endpoint response is not a JSON object, instead of returning it for get_jwk_set() to reject. Callers reaching the JWKS through get_jwk_set() see the same error as before in [#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>__

Fixed
- Return cached ``PyJWKSet`` values from ``PyJWKClient.get_jwk_set()`` instead
  of raising ``PyJWKClientError("The JWKS endpoint did not return a JSON
  object")``. ``JWKSetCache.put()`` documents ``PyJWKSet`` as the cached value,
  so callers pre-populating the cache to avoid a network round-trip could not
  read it back in `[#914](https://github.com/jpadilla/pyjwt/issues/914) <https://github.com/jpadilla/pyjwt/issues/914>`__ and
  `[#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>`__
</tr></table> 

... (truncated)

Commits

7d5ef55 chore: prepare 2.15.1 release
7bf3252 Accept canonical Base64URL padding in JWT segments (#1216)
1d41a64 chore: prepare 2.15.0 release
9bc0665 fix: make recursive payload tests deterministic
5fde08a fix: normalize recursive JWT payload errors
171062d utils: mention bytes in force_bytes type error (#1173)
c9d4d53 docs/conf: drop duplicate 'and' from read() docstring (#1174)
2763752 Add support for Python 3.15 (#1202)
4adcd02 Catch http.client.HTTPException in PyJWKClient.fetch_data (#1201)
9e501d9 fix: correct docstring typo in _validate_jti (#1179)
Additional commits viewable in compare view

Updates flake8 from 7.4.0 to 7.4.1

Commits

7eccf20 Release 7.4.1
fe7311d Merge pull request #2057 from PyCQA/fix-pyflakes-4
819d5e6 fix pyflakes 4.x --builtins integration
See full diff in compare view

Updates gidgethub from 5.4.0 to 6.0.0

Release notes

Sourced from gidgethub's releases.

6.0.0

What's Changed

Fix broken links in docs by @Mariatta in gidgethub/gidgethub#203

Replace flit by flit_core in build-system by @tjni in gidgethub/gidgethub#205

Fix URLs by @brettcannon in gidgethub/gidgethub#208

Add support for Python 3.12-3.13 and drop EOL 3.7 by @hugovk in gidgethub/gidgethub#209

Update changelog by @hugovk in gidgethub/gidgethub#212

Set a maximum version of flit_core for build requirements by @takluyver in gidgethub/gidgethub#211

Add expiration parameter to apps.get_jwt by @jjnesbitt in gidgethub/gidgethub#215

Make gidgethub.abc.GitHubAPI.getiter() iterative by @brettcannon in gidgethub/gidgethub#219

Prepare v5.4.0 release by @Mariatta in gidgethub/gidgethub#220

Post-release update 5.4.0.dev by @Mariatta in gidgethub/gidgethub#222

Test with Python 3.14 by @Mariatta in gidgethub/gidgethub#223

Fix TypeError in 422 error response handling when 'errors' field is a string by @brettcannon with @Copilot in gidgethub/gidgethub#225

Forward of the headers in the HTTPExceptions by @foutoucour in gidgethub/gidgethub#227

Document HTTPException.headers by @brettcannon in gidgethub/gidgethub#230

Tweak sansio.format_url to handle GHES base URLs by @brettcannon in gidgethub/gidgethub#234

Do a bunch of modernization and cleanup by @brettcannon in gidgethub/gidgethub#232

Set up zizmor by @brettcannon in gidgethub/gidgethub#238

Set up trusted publishing by @brettcannon in gidgethub/gidgethub#239

Isolate building from publishing to PyPI by @brettcannon in gidgethub/gidgethub#240

Put the project into maintenance mode by @brettcannon in gidgethub/gidgethub#242

Replace httpx with httpx2 by @Mariatta in gidgethub/gidgethub#236

Modernize GitHub Actions workflows by @brettcannon with @Copilot in gidgethub/gidgethub#243

Move to Pyrefly as the primary type checker by @brettcannon in gidgethub/gidgethub#244

Improve rate limit check by ensuring rate_limit is not None before accessing 'remaining' by @brettcannon in gidgethub/gidgethub#245

Raise minimum supported Python version to 3.10 by @brettcannon with @Copilot in gidgethub/gidgethub#248

Preserve Router.register handler signatures with ParamSpec by @brettcannon with @Copilot in gidgethub/gidgethub#246

Add manage_rate_limit() hook and requests_in_flight tracking to GitHubAPI by @brettcannon with @Copilot in gidgethub/gidgethub#247

Document that graphql() returns the 'data' key value by @brettcannon with @Copilot in gidgethub/gidgethub#249

Document GitHub handling of misnamed GraphQL variables by @brettcannon with @Copilot in gidgethub/gidgethub#251

Handle 422 responses whose errors list contains strings by @brettcannon with @Copilot in gidgethub/gidgethub#250

Add managed GitHub App JWT authentication by @brettcannon with @Copilot in gidgethub/gidgethub#252

Noxfile touch ups by @brettcannon in gidgethub/gidgethub#253

6.0.0 release by @brettcannon in gidgethub/gidgethub#254

New Contributors

@tjni made their first contribution in gidgethub/gidgethub#205

@takluyver made their first contribution in gidgethub/gidgethub#211

@jjnesbitt made their first contribution in gidgethub/gidgethub#215

@brettcannon with @Copilot made their first contribution in gidgethub/gidgethub#225

@foutoucour made their first contribution in gidgethub/gidgethub#227

Full Changelog: gidgethub/gidgethub@v5.3.0...v6.0.0

Changelog

Sourced from gidgethub's changelog.

6.0.0

Add managed GitHub App authentication to :class:gidgethub.abc.GitHubAPI through new app_id and private_key constructor arguments. JWTs are generated, cached, and refreshed automatically while explicit per-request credentials continue to take precedence. This design was inspired by Jonathan Sick's (@jonathansick) earlier implementation in PR [#201](https://github.com/gidgethub/gidgethub/issues/201) <https://github.com/gidgethub/gidgethub/pull/201>_ (Issue [#199](https://github.com/gidgethub/gidgethub/issues/199) <https://github.com/gidgethub/gidgethub/issues/199>_). Generated JWTs now backdate their issue time by 60 seconds to tolerate clock drift, with their expiration measured from that backdated issue time so GitHub's 10 minute limit on the time between issue and expiration is respected.

Handle 422 responses whose errors entries are strings instead of objects, raising :exc:gidgethub.ValidationError instead of :exc:TypeError (Issue [#139](https://github.com/gidgethub/gidgethub/issues/139) <https://github.com/gidgethub/gidgethub/issues/139>_)

Add :meth:gidgethub.abc.GitHubAPI.manage_rate_limit as an overridable hook, along with the :attr:gidgethub.abc.GitHubAPI.requests_in_flight attribute, to let users implement their own rate-limit/backpressure strategies (Issue [#19](https://github.com/gidgethub/gidgethub/issues/19) <https://github.com/gidgethub/gidgethub/issues/19>_)

Add :meth:gidgethub.abc.GitHubAPI.handle_rate_limit_error as an overridable hook, allowing requests that fail with an :exc:~gidgethub.HTTPException to be retried (e.g. after a secondary rate limit or abuse-detection response) (Issue [#19](https://github.com/gidgethub/gidgethub/issues/19) <https://github.com/gidgethub/gidgethub/issues/19>_)

Add :attr:gidgethub.HTTPException.headers attribute (PR [#227](https://github.com/gidgethub/gidgethub/issues/227) <https://github.com/gidgethub/gidgethub/pull/227>_)

Add a trailing / to url and remove any leading / in base_url for :func:gidgethub.sansio.format_url (PR [#234](https://github.com/gidgethub/gidgethub/issues/234) <https://github.com/gidgethub/gidgethub/pull/234>_)

Use httpx2 as a drop-in replacement for httpx backend. The "httpx" extra was updated to use httpx2 and a new httpx2 extra was also added.

Document that :meth:gidgethub.abc.GitHubAPI.graphql returns the value of the "data" key from the JSON response (Issue [#127](https://github.com/gidgethub/gidgethub/issues/127) <https://github.com/gidgethub/gidgethub/issues/127>_)

Add support for Python 3.14 and 3.15, and drop support for Python 3.8 and 3.9. The minimum supported Python version is now 3.10.

Commits

e3755a1 6.0.0 release (#254)
2cb3a93 Add Python version support entry to Unreleased changelog
8a818e7 Noxfile touch ups (#253)
9fc0f84 Add managed GitHub App JWT authentication (#252)
8e63d7d Handle 422 responses whose errors list contains strings (#250)
ece9dd5 Document GitHub handling of misnamed GraphQL variables (#251)
60c2c89 Document that graphql() returns the 'data' key value (#249)
f2e9b7b Add proactive and reactive rate limiting API (#247)
7e4c788 Preserve Router.register handler signatures with ParamSpec (#246)
c026365 Raise minimum Python version to 3.10 (#248)
Additional commits viewable in compare view

Updates pyjwt from 2.14.0 to 2.15.1

Release notes

Sourced from pyjwt's releases.

2.15.1

See the 2.15.1 changelog for complete release details.

2.15.0

See the 2.15.0 changelog for complete release details.

Changelog

Sourced from pyjwt's changelog.

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

Fixed
- Accept trailing Base64URL ``=`` padding when decoding JWS segments, so
  tokens issued by AWS ALB and similar systems verify instead of raising
  ``DecodeError: Invalid crypto padding``. Non-alphabet junk such as
  ``!!!!`` remains rejected (`[#1209](https://github.com/jpadilla/pyjwt/issues/1209) <https://github.com/jpadilla/pyjwt/issues/1209>`__).
v2.15.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0&gt;__
Security
Wrap recursion errors from deeply nested JWT payloads in DecodeError instead of exposing a raw RecursionError.

Added
- Support Python 3.15 by @kytta in `[#1202](https://github.com/jpadilla/pyjwt/issues/1202) <https://github.com/jpadilla/pyjwt/pull/1202>`__
Changed
JWKSetCache now stores the parsed PyJWKSet rather than the raw JWKS payload, so a cache hit no longer re-parses every key. JWKSetCache.put() accepts either form and raises PyJWKSetError for anything else. As a result, PyJWKClient.get_jwk_set() returns the same PyJWKSet instance for as long as it stays cached, rather than a freshly built one per call in [#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>__

PyJWKClient.fetch_data() now raises PyJWKClientError("The JWKS endpoint did not return a JSON object") when the endpoint response is not a JSON object, instead of returning it for get_jwk_set() to reject. Callers reaching the JWKS through get_jwk_set() see the same error as before in [#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>__

Fixed
- Return cached ``PyJWKSet`` values from ``PyJWKClient.get_jwk_set()`` instead
  of raising ``PyJWKClientError("The JWKS endpoint did not return a JSON
  object")``. ``JWKSetCache.put()`` documents ``PyJWKSet`` as the cached value,
  so callers pre-populating the cache to avoid a network round-trip could not
  read it back in `[#914](https://github.com/jpadilla/pyjwt/issues/914) <https://github.com/jpadilla/pyjwt/issues/914>`__ and
  `[#1208](https://github.com/jpadilla/pyjwt/issues/1208) <https://github.com/jpadilla/pyjwt/pull/1208>`__
</tr></table> 

... (truncated)

Commits

7d5ef55 chore: prepare 2.15.1 release
7bf3252 Accept canonical Base64URL padding in JWT segments (#1216)
1d41a64 chore: prepare 2.15.0 release
9bc0665 fix: make recursive payload tests deterministic
5fde08a fix: normalize recursive JWT payload errors
171062d utils: mention bytes in force_bytes type error (#1173)
c9d4d53 docs/conf: drop duplicate 'and' from read() docstring (#1174)
2763752 Add support for Python 3.15 (#1202)
4adcd02 Catch http.client.HTTPException in PyJWKClient.fetch_data (#1201)
9e501d9 fix: correct docstring typo in _validate_jti (#1179)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates Bumps the dependencies group with 1 update in the /bazel directory: [markdown](https://github.com/Python-Markdown/markdown). Bumps the dependencies group with 1 update in the /ci directory: [pyjwt](https://github.com/jpadilla/pyjwt). Bumps the dependencies group with 3 updates in the /py/deps directory: [pyjwt](https://github.com/jpadilla/pyjwt), [flake8](https://github.com/pycqa/flake8) and [gidgethub](https://github.com/gidgethub/gidgethub). Updates `markdown` from 3.10.3 to 3.11 - [Release notes](https://github.com/Python-Markdown/markdown/releases) - [Changelog](https://github.com/Python-Markdown/markdown/blob/master/docs/changelog.md) - [Commits](Python-Markdown/markdown@3.10.3...3.11.0) Updates `pyjwt` from 2.14.0 to 2.15.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.14.0...2.15.1) Updates `pyjwt` from 2.14.0 to 2.15.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.14.0...2.15.1) Updates `pyjwt` from 2.14.0 to 2.15.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.14.0...2.15.1) Updates `flake8` from 7.4.0 to 7.4.1 - [Commits](PyCQA/flake8@7.4.0...7.4.1) Updates `gidgethub` from 5.4.0 to 6.0.0 - [Release notes](https://github.com/gidgethub/gidgethub/releases) - [Changelog](https://github.com/gidgethub/gidgethub/blob/main/docs/changelog.rst) - [Commits](gidgethub/gidgethub@v5.4.0...v6.0.0) Updates `pyjwt` from 2.14.0 to 2.15.1 - [Release notes](https://github.com/jpadilla/pyjwt/releases) - [Changelog](https://github.com/jpadilla/pyjwt/blob/master/CHANGELOG.rst) - [Commits](jpadilla/pyjwt@2.14.0...2.15.1) --- updated-dependencies: - dependency-name: markdown dependency-version: '3.11' dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pyjwt dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pyjwt dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: pyjwt dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: flake8 dependency-version: 7.4.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: gidgethub dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: dependencies - dependency-name: pyjwt dependency-version: 2.15.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

netlify · 2026-10-02T00:01:28Z

✅ Deploy Preview for nifty-bassi-e26446 ready!

Name	Link
🔨 Latest commit	`d5c6d19`
🔍 Latest deploy log	https://app.netlify.com/projects/nifty-bassi-e26446/deploys/6abef45526049e00085ce15c
😎 Deploy Preview	https://deploy-preview-5364--nifty-bassi-e26446.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

To edit notification comments on pull requests, go to your Netlify project configuration.

dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Oct 2, 2026

dependabot Bot mentioned this pull request Oct 2, 2026

build(deps): bump the dependencies group across 3 directories with 4 updates #5350

Closed

Navigation Menu

build(deps): bump the dependencies group across 3 directories with 4 updates - #5364

build(deps): bump the dependencies group across 3 directories with 4 updates#5364
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/bazel/dependencies-5cc49391d3

dependabot Bot commented on behalf of github Oct 2, 2026

`v2.15.0 <https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0>`__

`v2.15.0 <https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0>`__

`v2.15.0 <https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0>`__

`v2.15.0 <https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0>`__

Uh oh!

netlify Bot commented Oct 2, 2026 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 2, 2026

Release 3.11.0

Changed

Fixed

title: Changelog toc_depth: 2

Python-Markdown Changelog

[Unreleased]

[3.11.0] - 2026-09-25

Changed

Fixed

2.15.1

2.15.0

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

v2.15.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0&gt;__

2.15.1

2.15.0

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

v2.15.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0&gt;__

2.15.1

2.15.0

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

v2.15.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0&gt;__

6.0.0

What's Changed

New Contributors

6.0.0

2.15.1

2.15.0

v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>__

v2.15.0 &lt;https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0&gt;__

Uh oh!

netlify Bot commented Oct 2, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Deploy Preview for nifty-bassi-e26446 ready!

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>`__

`v2.15.0 <https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0>`__

`v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>`__

`v2.15.0 <https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0>`__

`v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>`__

`v2.15.0 <https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0>`__

`v2.15.1 <https://github.com/jpadilla/pyjwt/compare/2.15.0...2.15.1>`__

`v2.15.0 <https://github.com/jpadilla/pyjwt/compare/2.14.0...2.15.0>`__

netlify Bot commented Oct 2, 2026 •

edited

Loading