Update dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
bokeh	==3.4.0 -> ==3.8.1				minor
build (changelog)	==1.2.1 -> ==1.3.0				minor
cachetools	==5.3.3 -> ==5.5.2				minor
certifi	==2024.2.2 -> ==2024.12.14				minor
cffi (changelog)	==1.16.0 -> ==1.17.1				minor
charset-normalizer (changelog)	==3.3.2 -> ==3.4.4				minor
codecov/codecov-action	v4.0.1 -> v4.6.0			action	minor
contourpy (changelog)	==1.2.1 -> ==1.3.3				minor
coverage	==7.4.4 -> ==7.11.3				minor
cryptography (changelog)	==42.0.5 -> ==42.0.8				patch
decorator	==5.1.1 -> ==5.2.1				minor
distlib	==0.3.8 -> ==0.4.0				minor
docutils (changelog)	==0.20.1 -> ==0.22.3				minor
executing	==2.0.1 -> ==2.2.1				minor
filelock	==3.13.3 -> ==3.20.0				minor
idna (changelog)	==3.6 -> ==3.11				minor
importlib-metadata	==7.1.0 -> ==7.2.1				minor
iniconfig	==2.0.0 -> ==2.3.0				minor
ipython	==8.23.0 -> ==8.37.0				minor
jaraco-context	==5.2.0 -> ==5.3.0				minor
jaraco-functools	==4.0.0 -> ==4.3.0				minor
jedi	==0.19.1 -> ==0.19.2				patch
jeepney	==0.8.0 -> ==0.9.0				minor
jinja2 (changelog)	==3.1.3 -> ==3.1.6				patch
keyring	==25.1.0 -> ==25.6.0				minor
matplotlib-inline	==0.1.6 -> ==0.2.1				minor
more-itertools	==10.2.0 -> ==10.8.0				minor
mypy (changelog)	==1.9.0 -> ==1.18.2				minor
mypy-extensions	==1.0.0 -> ==1.1.0				minor
nh3	==0.2.17 -> ==0.3.2				minor
packaging	==24.0 -> ==24.2				minor
pandas	==2.2.1 -> ==2.3.3				minor
pandas-stubs	==2.2.1.240316 -> ==2.3.2.250926				minor
parso	==0.8.4 -> ==0.8.5				patch
pillow (changelog)	==10.3.0 -> ==10.4.0				minor
pip (changelog)	==24.0 -> ==24.3.1				minor
pkginfo	==1.10.0 -> ==1.12.1.2				minor
platformdirs (changelog)	==4.2.0 -> ==4.5.0				minor
pluggy	==1.4.0 -> ==1.6.0				minor
prompt-toolkit	==3.0.43 -> ==3.0.52				patch
pure-eval	==0.2.2 -> ==0.2.3				patch
pycparser	==2.22 -> ==2.23				minor
pygments (changelog)	==2.17.2 -> ==2.19.2				minor
pynmeagps (changelog)	==1.0.35 -> ==1.0.55				patch
pyproj (changelog)	==3.6.1 -> ==3.7.2				minor
pyproject-api (changelog)	==1.6.1 -> ==1.10.0				minor
pyproject-hooks (changelog)	==1.0.0 -> ==1.2.0				minor
pyrtcm (changelog)	==1.0.17 -> ==1.1.9				minor
pytest (changelog)	==8.1.1 -> ==8.4.2				minor
python	3.12 -> 3.14			uses-with	minor
pytz	==2024.1 -> ==2024.2				minor
pyubx2 (changelog)	==1.2.39 -> ==1.2.59				patch
pyyaml (source)	==6.0.1 -> ==6.0.3				patch
requests (source, changelog)	==2.31.0 -> ==2.32.5				minor
rich	==13.7.1 -> ==13.9.4				minor
secretstorage	==3.3.3 -> ==3.4.0				minor
six	==1.16.0 -> ==1.17.0				minor
tornado (source)	==6.4 -> ==6.5.2				minor
tox (changelog)	==4.14.2 -> ==4.32.0				minor
traitlets	==5.14.2 -> ==5.14.3				patch
twine	==5.0.0 -> ==5.1.1				minor
types-colorama (changelog)	==0.4.15.20240311 -> ==0.4.15.20250801				patch
types-decorator (changelog)	==5.1.8.20240310 -> ==5.2.0.20251101				minor
types-docutils (changelog)	==0.20.0.20240406 -> ==0.22.2.20251006				minor
types-openpyxl (changelog)	==3.1.0.20240402 -> ==3.1.5.20250919				patch
types-pillow (changelog)	==10.2.0.20240406 -> ==10.2.0.20240822				patch
types-pycurl (changelog)	==7.45.2.20240311 -> ==7.45.7.20251101				patch
types-pygments (changelog)	==2.17.0.20240310 -> ==2.19.0.20250809				minor
types-pytz (changelog)	==2024.1.0.20240203 -> ==2024.2.0.20241221				minor
types-pyyaml (changelog)	==6.0.12.20240311 -> ==6.0.12.20250915				patch
types-setuptools (changelog)	==69.2.0.20240317 -> ==69.5.0.20240522				minor
types-six (changelog)	==1.16.21.20240311 -> ==1.17.0.20251009				minor
typing-extensions (changelog)	==4.11.0 -> ==4.15.0				minor
tzdata	==2024.1 -> ==2024.2				minor
urllib3 (changelog)	==2.2.1 -> ==2.5.0				minor
virtualenv	==20.25.1 -> ==20.35.4				minor
wcwidth	==0.2.13 -> ==0.2.14				patch
xyzservices	==2024.4.0 -> ==2024.9.0				minor
zipp	==3.18.1 -> ==3.23.0				minor

---

Release Notes

bokeh/bokeh (bokeh)

v3.8.1

Compare Source

v3.8.0

Compare Source

v3.7.3

Compare Source

v3.7.2

Compare Source

v3.7.1

Compare Source

v3.7.0

Compare Source

v3.6.3

Compare Source

v3.6.2

Compare Source

v3.6.1

Compare Source

v3.6.0

Compare Source

v3.5.2

Compare Source

v3.5.1

Compare Source

v3.5.0

Compare Source

v3.4.3

Compare Source

v3.4.2

Compare Source

v3.4.1

Compare Source

pypa/build (build)

v1.3.0

Compare Source

==================

• Add --config-json
  (PR :pr:916, fixes issue :issue:900)
• Drop Python 3.8
  (PR :pr:891)
• Test on Python 3.14, colorful help on 3.14+
  (PR :pr:895)
• Fix ModuleNotFoundError when pip is not installed
  (PR :pr:898)
• Disable use of pip install --python for debundled pip
  (PR :pr:861)
• Don't pass no-wheel to virtualenv if it would warn
  (PR :pr:892)
• Optimize our tests to run faster
  (PR :pr:871, :pr:872, :pr:738)
• Allow running our tests without virtualenv
  (PR :pr:911)
• Fix issues in our tests
  (PR :pr:824, :pr:918, :pr:870, :pr:915, :pr:862, :pr:863, :pr:899, :pr:896, :pr:854)
• Use SPDX identifiers for our license metadata
  (PR :pr:914)
• Use dependency-groups for our development
  (PR :pr:880)
• Mention conda and update uv mention in README/docs
  (PR :pr:842, :pr:816, :pr:917)

v1.2.2.post1

Compare Source

This release only makes metadata (Python 3.13 classifier), docs, and test suite changes.

What's Changed

• ci: add Python 3.13 by @​henryiii in #​815
• docs: mention conda-forge name in README by @​henryiii in #​816
• docs: add a missing ` in README by @​SigureMo in #​817
• tests: fix under pyproject-hooks 1.2 by @​layday in #​824
• ci: add PyPI attestations by @​henryiii in #​821
• chore: 1.2.2.post1 by @​henryiii in #​820

New Contributors

• @​SigureMo made their first contribution in #​817

Full Changelog: pypa/build@1.2.2...1.2.2.post1

v1.2.2

Compare Source

==================

• Add editable to builder.get_requries_for_build's static types
  (PR :pr:764, fixes issue :issue:763)
• Include artifact attestations in our release
  (PR :pr:782)
• Fix typing compatibility with typed pyproject-hooks
  (PR :pr:788)
• Mark more tests with network
  (PR :pr:808)
• Add more intersphinx links to docs
  (PR :pr:804)
• Make uv optional for tests
  (PR :pr:807 and :pr:813)

tkem/cachetools (cachetools)

v5.5.2

Compare Source

===================

• Reduce number of @cached lock/unlock operations.

• Improve documentation.

• Update CI environment.

v5.5.1

Compare Source

===================

• Add documentation regarding caching of exceptions.

• Officially support Python 3.13.

• Update CI environment.

v5.5.0

Compare Source

===================

• TTLCache.expire() returns iterable of expired (key, value)
  pairs.

• TLRUCache.expire() returns iterable of expired (key, value)
  pairs.

• Documentation improvements.

• Update CI environment.

v5.4.0

Compare Source

===================

• Add the keys.typedmethodkey decorator.

• Deprecate MRUCache class.

• Deprecate @func.mru_cache decorator.

• Update CI environment.

certifi/python-certifi (certifi)

v2024.12.14

Compare Source

v2024.8.30

Compare Source

v2024.7.4

Compare Source

v2024.6.2

Compare Source

python-cffi/cffi (cffi)

v1.17.1

Compare Source

• Fix failing distutils.msvc9compiler imports under Windows (#​118).
• ffibuilder.emit_python_code() and ffibuiler.emit_c_code() accept file-like objects (#​115).
• ffiplatform calls are bypassed by ffibuilder.emit_python_code() and ffibuilder.emit_c_code() (#​81).

Full Changelog: python-cffi/cffi@v1.17.0...v1.17.1

v1.17.0

Compare Source

• Add support for Python 3.13.
  • Free-threaded CPython builds (i.e. python3.13t and the 3.13t ABI) are not currently supported.
• In API mode, when you get a function from a C library by writing
  fn = lib.myfunc, you get an object of a special type for performance
  reasons, instead of a <cdata 'C-function-type'>. Before version 1.17
  you could only call such objects. You could write
  ffi.addressof(lib, "myfunc") in order to get a real <cdata> object,
  based on the idea that in these cases in C you'd usually write &myfunc
  instead of myfunc. In version 1.17, the special object
  lib.myfunc can now be passed in many places where CFFI expects
  a regular <cdata> object. For example, you can now pass
  it as a callback to a C function call, or write it inside a C
  structure field of the correct pointer-to-function type, or use
  ffi.cast() or ffi.typeof() on it.

Full Changelog: python-cffi/cffi@v1.16.0...v1.17.0

jawah/charset_normalizer (charset-normalizer)

v3.4.4

Compare Source

Changed

• Bound setuptools to a specific constraint setuptools>=68,<=81.
• Raised upper bound of mypyc for the optional pre-built extension to v1.18.2

Removed

• setuptools-scm as a build dependency.

Misc

• Enforced hashes in dev-requirements.txt and created ci-requirements.txt for security purposes.
• Additional pre-built wheels for riscv64, s390x, and armv7l architectures.
• Restore multiple.intoto.jsonl in GitHub releases in addition to individual attestation file per wheel.

v3.4.3

Compare Source

Changed

• mypy(c) is no longer a required dependency at build time if CHARSET_NORMALIZER_USE_MYPYC isn't set to 1. (#​595) (#​583)
• automatically lower confidence on small bytes samples that are not Unicode in detect output legacy function. (#​391)

Added

• Custom build backend to overcome inability to mark mypy as an optional dependency in the build phase.
• Support for Python 3.14

Fixed

• sdist archive contained useless directories.
• automatically fallback on valid UTF-16 or UTF-32 even if the md says it's noisy. (#​633)

Misc

• SBOM are automatically published to the relevant GitHub release to comply with regulatory changes.
  Each published wheel comes with its SBOM. We choose CycloneDX as the format.
• Prebuilt optimized wheel are no longer distributed by default for CPython 3.7 due to a change in cibuildwheel.

v3.4.2

Compare Source

Fixed

• Addressed the DeprecationWarning in our CLI regarding argparse.FileType by backporting the target class into the package. (#​591)
• Improved the overall reliability of the detector with CJK Ideographs. (#​605) (#​587)

Changed

• Optional mypyc compilation upgraded to version 1.15 for Python >= 3.8

v3.4.1

Compare Source

Changed

• Project metadata are now stored using pyproject.toml instead of setup.cfg using setuptools as the build backend.
• Enforce annotation delayed loading for a simpler and consistent types in the project.
• Optional mypyc compilation upgraded to version 1.14 for Python >= 3.8

Added

• pre-commit configuration.
• noxfile.

Removed

• build-requirements.txt as per using pyproject.toml native build configuration.
• bin/integration.py and bin/serve.py in favor of downstream integration test (see noxfile).
• setup.cfg in favor of pyproject.toml metadata configuration.
• Unused utils.range_scan function.

Fixed

• Converting content to Unicode bytes may insert utf_8 instead of preferred utf-8. (#​572)
• Deprecation warning "'count' is passed as positional argument" when converting to Unicode bytes on Python 3.13+

v3.4.0

Compare Source

Added

• Argument --no-preemptive in the CLI to prevent the detector to search for hints.
• Support for Python 3.13 (#​512)

Fixed

• Relax the TypeError exception thrown when trying to compare a CharsetMatch with anything else than a CharsetMatch.
• Improved the general reliability of the detector based on user feedbacks. (#​520) (#​509) (#​498) (#​407) (#​537)
• Declared charset in content (preemptive detection) not changed when converting to utf-8 bytes. (#​381)

codecov/codecov-action (codecov/codecov-action)

v4.6.0

Compare Source

What's Changed

• build(deps): bump github/codeql-action from 3.25.8 to 3.25.10 by @​dependabot in #​1481
• build(deps): bump actions/checkout from 4.1.6 to 4.1.7 by @​dependabot in #​1480
• build(deps-dev): bump ts-jest from 29.1.4 to 29.1.5 by @​dependabot in #​1479
• build(deps-dev): bump @​typescript-eslint/parser from 7.13.0 to 7.13.1 by @​dependabot in #​1485
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.13.0 to 7.13.1 by @​dependabot in #​1484
• build(deps-dev): bump typescript from 5.4.5 to 5.5.2 by @​dependabot in #​1490
• build(deps-dev): bump @​typescript-eslint/parser from 7.13.1 to 7.14.1 by @​dependabot in #​1493
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.13.1 to 7.14.1 by @​dependabot in #​1492
• build(deps): bump github/codeql-action from 3.25.10 to 3.25.11 by @​dependabot in #​1496
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.14.1 to 7.15.0 by @​dependabot in #​1501
• build(deps-dev): bump typescript from 5.5.2 to 5.5.3 by @​dependabot in #​1500
• build(deps-dev): bump @​typescript-eslint/parser from 7.14.1 to 7.15.0 by @​dependabot in #​1499
• build(deps): bump actions/upload-artifact from 4.3.3 to 4.3.4 by @​dependabot in #​1502
• build(deps-dev): bump ts-jest from 29.1.5 to 29.2.0 by @​dependabot in #​1504
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.15.0 to 7.16.0 by @​dependabot in #​1503
• build(deps-dev): bump ts-jest from 29.2.0 to 29.2.2 by @​dependabot in #​1507
• build(deps-dev): bump @​typescript-eslint/parser from 7.15.0 to 7.16.0 by @​dependabot in #​1505
• build(deps): bump github/codeql-action from 3.25.11 to 3.25.12 by @​dependabot in #​1509
• chore(ci): restrict scorecards to codecov/codecov-action by @​thomasrockhu-codecov in #​1512
• build(deps-dev): bump @​typescript-eslint/eslint-plugin from 7.16.0 to 7.16.1 by @​dependabot in #​1514
• build(deps-dev): bump @​typescript-eslint/parser from 7.16.0 to 7.16.1 by @​dependabot in #​1513
• test: versionInfo by @​marcobiedermann in #​1407
• build(deps-dev): bump ts-jest from 29.2.2 to 29.2.3 by @​dependabot in #​1515
• build(deps): bump github/codeql-action from 3.25.12 to 3.25.13 by @​dependabot in #​1516
• build(deps-dev): bump typescript from 5.5.3 to 5.5.4 by @​dependabot in #​1521
• build(deps-dev): bump @​typescript-eslint/parser from 7.16.1 to 7.17.0 by @​dependabot in #​1520
• build(deps-dev): bump @​typescript-eslint/parser from 7.17.0 to 7.18.0 by @​dependabot in #​1528
• build(deps): bump github/codeql-action from 3.25.13 to

---

Configuration

📅 Schedule: Branch creation - "before 1pm on Monday" in timezone Europe/Helsinki, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️