[py] Bump dependencies for dev and fix script #16244
Merged
+326
−334
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
User description
💥 What does this PR do?
This PR bumps development dependencies to their latest versions and re-generates dependency hashes.
Notes:
markdown-it-py
transitive dependency is pinned to version3.0.0
because the latest version (4.0.0
) requires Python 3.10 and we need to support 3.9.docutils
transitive dependency is pinned to version0.21.2
because the latest version (0.22
) isn't compatible with the version of sphinx we use.🔄 Types of changes
PR Type
Bug fix, Other
Description
• Fixed regex pattern in dependency update script to correctly parse pip list output
• Bumped multiple Python development dependencies to their latest versions including
certifi
,charset-normalizer
,cryptography
,debugpy
, and others• Regenerated dependency hashes in requirements_lock.txt to match updated versions
• Note:
markdown-it-py
remains pinned to version 3.0.0 for Python 3.9 compatibilityDiagram Walkthrough
File Walkthrough
update_py_dependencies.sh
Fix dependency update script regex pattern
scripts/update_py_dependencies.sh
• Fixed regex pattern in pip list parsing to match "Version" instead
of "Version Latest"
• This corrects the script's ability to properly
identify outdated packages from pip list output
requirements_lock.txt
Bump locked development dependencies to latest versions
py/requirements_lock.txt
• Updated
certifi
from 2025.6.15 to 2025.8.3 with new SHA256 hashes•
Updated
charset-normalizer
from 3.4.2 to 3.4.3 with new SHA256 hashes• Updated
cryptography
from 45.0.5 to 45.0.6 with new SHA256 hashes•
Updated
debugpy
from 1.8.14 to 1.8.16 with new SHA256 hashes• Updated
multiple other dependencies including
distlib
,docutils
,filelock
,jaraco-functools
,multidict
,nh3
,requests
,rich
,tox
, andvirtualenv
requirements.txt
Update development dependencies to latest versions
py/requirements.txt
• Updated multiple development dependencies to their latest versions
•
Key updates include
certifi
,charset-normalizer
,cryptography
,debugpy
,distlib
,docutils
,filelock
, and others• All version bumps
align with the corresponding changes in requirements_lock.txt