[dependabot]

Bumps the pip-minor-and-patch group in /src with 5 updates:

Package	From	To
azure-monitor-opentelemetry	1.8.11	1.8.12
cachetools	7.2.7	7.3.0
django-gisserver	2.5.0	2.6.0
markdown	3.11.2	3.11.3
ruff	0.17.3	0.17.4

Updates azure-monitor-opentelemetry from 1.8.11 to 1.8.12

Release notes

Sourced from azure-monitor-opentelemetry's releases.

azure-monitor-opentelemetry_1.8.12

1.8.12 (2026-11-05)

Other Changes

• Bump exporter minimum version to 1.0.0b59

Commits

• d7e1261 Distro release 1.8.12 (#49846)
• 77c7ac5 Increment package version after release of azure-monitor-opentelemetry-export...
• d55dd28 [DISTRO] Update to latest otel dependency (#49780)
• e911725 Exporter release 1.0.0b59 (#49824)
• 31a11cf [AutoPR azure-mgmt-monitor]-generated-from-SDK Generation - Python-6996283 (#...
• d56ff79 Update to latest otel dependency (#49777)
• 7c46823 bump genai message attribute length to 4MiB (#49648)
• 1ea3d76 [Monitor] Preserve rate-limited sampler local child span decisions (#49569)
• 2b95412 Add experimental feature flag (#49682)
• d160e76 [AutoPR azure-mgmt-monitorworkspaces]-generated-from-SDK Generation - Python-...
• Additional commits viewable in compare view

Updates cachetools from 7.2.7 to 7.3.0

Changelog

Sourced from cachetools's changelog.

v7.3.0 (2026-11-05)

• Use OrderedDict for defined and faster LFUCache eviction.

• Various unit test improvements.

• Minor type stub improvements.

• Minor documentation improvements.

v7.2.8 (2026-10-31)

• Fix type stubs for TTLCache and TLRUCache with default timer.

• Minor documentation and unit test improvements.

Commits

• 7f6228e Update copilot instructions and review.
• 50c3e71 Release v7.3.0.
• 0c5e094 Drop "master_doc" from Sphinx config.
• eefc753 Minor type stub improvements.
• 3b38fb5 Various test improvements.
• e963102 Fix #461: Use OrderedDict for defined and faster LFUCache eviction.
• 825bf66 Tests for #451: Forward self keyword arguments in cached methods (#458)
• f314dfa Bump actions/setup-python (#453)
• 8c953ab Fix #451: Forward self keyword arguments in cached methods
• ba26e56 Update bug report template.
• Additional commits viewable in compare view

Updates django-gisserver from 2.5.0 to 2.6.0

Changelog

Sourced from django-gisserver's changelog.

2026-10-22 (2.6.0)

• Use uv, ruff and ty

Commits

• 83d23cf Update readme
• 8513ba7 Bump ty from 0.0.92 to 0.0.95 (#93)
• beacae6 Bump pytest from 9.1.1 to 9.2.0 (#92)
• 62b46cd Bump ruff from 0.17.2 to 0.17.3 (#94)
• c4594fc Bump certifi from 2026.7.22 to 2026.10.18 (#91)
• b69835b Bump ruff from 0.16.10 to 0.17.2
• 35a50d7 Bump ty from 0.0.84 to 0.0.92
• 59a7d97 Run ci tests with Django version as a flag
• 85ba5be More uv replacements
• 0e323c4 Fix release date of previous release
• Additional commits viewable in compare view

Updates markdown from 3.11.2 to 3.11.3

Release notes

Sourced from markdown's releases.

Release 3.11.3

Fixed

• Fix cases in new emphasis handling that did not handle long chains of tokens like they should (#1690).
• Fix quadratic-time parsing of many consecutive reference definitions, and of many consecutive footnote definitions in the footnotes extension.
• Support automatic links with URL schemes other than HTTP and FTP, such as <ssh://example.org> (#1244).
• Fix quadratic-time id generation in the toc extension when many headers share the same text.
• Ignore glossary abbreviations with empty definitions after inline elements, consistently with abbreviations before inline elements.
• Strip complete HTML tags with quoted > characters from toc labels and generated heading IDs.
• Fix quadratic-time regex backtracking in attr_list when a block ends with an unclosed attribute list followed by a long run of spaces, e.g. a line consisting only of { and some text with many trailing spaces (#1656).
• Fix quadratic-time regex backtracking in hash headers when a long run of # characters is followed by more text on the same line.
• Fix quadratic time when a document contains many unclosed HTML comments (<!-- with no matching -->).
• Fix regression in BacktickInlineProcessor where text could be lost when opening and closing backticks did not match (#1668).
• Escape the language name in the codehilite extension's non-Pygments output to maintain consistency with Pygments output.
• Preserve attributes without a value in the attr_list extension exactly as provided, rather than rendering them as key="key", so the same source renders consistently under both the html and xhtml output formats (#1501).

Changelog

Sourced from markdown's changelog.

[3.11.3] - 2026-11-05

Fixed

• Fix cases in new emphasis handling that did not handle long chains of tokens like they should (#1690).
• Fix quadratic-time parsing of many consecutive reference definitions, and of many consecutive footnote definitions in the footnotes extension.
• Support automatic links with URL schemes other than HTTP and FTP, such as <ssh://example.org> (#1244).
• Fix quadratic-time id generation in the toc extension when many headers share the same text.
• Ignore glossary abbreviations with empty definitions after inline elements, consistently with abbreviations before inline elements.
• Strip complete HTML tags with quoted > characters from toc labels and generated heading IDs.
• Fix quadratic-time regex backtracking in attr_list when a block ends with an unclosed attribute list followed by a long run of spaces, e.g. a line consisting only of { and some text with many trailing spaces (#1656).
• Fix quadratic-time regex backtracking in hash headers when a long run of # characters is followed by more text on the same line.
• Fix quadratic time when a document contains many unclosed HTML comments (<!-- with no matching -->).
• Fix regression in BacktickInlineProcessor where text could be lost when opening and closing backticks did not match (#1668).
• Escape the language name in the codehilite extension's non-Pygments output to maintain consistency with Pygments output.
• Preserve attributes without a value in the attr_list extension exactly as provided, rather than rendering them as key="key", so the same source renders consistently under both the html and xhtml output formats (#1501).

Commits

• 40eca04 Bump version to 3.11.3
• a198bb3 Apply the CommonMark rule of 3 which we missed.
• 0bfd8c3 Fix quadratic-time parsing of consecutive reference definitions
• 3f2c551 Avoid rescanning for a comment close after unclosed comments
• 8bfb9aa Ignore empty abbreviation definitions in element tails
• 527b81e Recognize additional URL schemes in automatic links
• b97b56c attr_list: preserve valueless attributes as provided
• e76f0b7 Fix quadratic-time id generation in toc extension
• 0f0a860 Fix quadratic-time backtracking in hash header regex
• 5e335ef Fix TOC labels for quoted HTML angle brackets
• Additional commits viewable in compare view

Updates ruff from 0.17.3 to 0.17.4

Release notes

Sourced from ruff's releases.

0.17.4

Release Notes

Released on 2026-11-05.

Preview features

• [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
• [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

• Accept a bare raise before a semicolon (#29761)
• Allow match identifiers after a semicolon (#29760)
• Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
• [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

• Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

• Coalesce source slices when formatting attributes (#29841)
• Collect return statements with a statement-only visitor (#29911)
• [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
• Format node fields directly when comment handling is unnecessary (#29853)
• Reduce formatter source-slice overhead (#29855)
• Reuse a callee's qualified name across lint rules (#29916)
• Skip invalid string character checks when the source contains none (#29883)
• Use a Bloom filter for formatter comment lookups (#29852)
• Use a concrete buffer for ordinary writes (#29819)

CLI

• Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
• Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

• Correct the documented version and src defaults for ruff-action (#29880)
• [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
• [flake8-no-pep420] Document preview behavior (INP001) (#29764)
• [isort] Expand I001 documentation (#29843)

Other changes

• [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.17.4

Released on 2026-11-05.

Preview features

• [flake8-logging-format] Avoid behavior changes and syntax errors in fixes (G004) (#27419)
• [security] Implement tarfile-ignore-zeros-true (#28680)

Bug fixes

• Accept a bare raise before a semicolon (#29761)
• Allow match identifiers after a semicolon (#29760)
• Fix panic on BOM-prefixed files in diagnostic renderer (#30017)
• [flake8-simplify] Report collapsible elif clauses after a multi-statement if branch (SIM102) (#29814)

Rule changes

• Show more nonprinting characters in diagnostic fix diffs (#30062)

Performance

• Coalesce source slices when formatting attributes (#29841)
• Collect return statements with a statement-only visitor (#29911)
• [pyflakes] Defer value comparisons for repeated dictionary keys (F601, F602) (#29739)
• Format node fields directly when comment handling is unnecessary (#29853)
• Reduce formatter source-slice overhead (#29855)
• Reuse a callee's qualified name across lint rules (#29916)
• Skip invalid string character checks when the source contains none (#29883)
• Use a Bloom filter for formatter comment lookups (#29852)
• Use a concrete buffer for ordinary writes (#29819)

CLI

• Give NO_COLOR precedence in Ruff and ty diagnostics (#29898)
• Honor CLICOLOR=0 in Ruff and ty diagnostics (#29910)

Documentation

• Correct the documented version and src defaults for ruff-action (#29880)
• [flake8-bugbear] Make B014 example error out-of-the-box (#29941)
• [flake8-no-pep420] Document preview behavior (INP001) (#29764)
• [isort] Expand I001 documentation (#29843)

Other changes

• [syntax-errors] Extend __debug__ write check to attribute targets (#27908)

Contributors

... (truncated)

Commits

• 05cdc36 Bump version to 0.17.4 (#30073)
• c6b17c2 [ty] Freshen method typevars before owner specialization (#29543)
• 4b0b407 [ty] Preserve unions inferred during fixpoint iteration (#29927)
• 1dd3e9e Show more nonprinting characters in diagnostic fix diffs (#30062)
• 32be8e7 [ty] Skip fixpoint iteration for simple generic calls (#30054)
• 926ccc8 [ty] Handle output errors when generating shell completions (#29997)
• c86652a [ty] Skip active Conda and Pixi environments during discovery if the environm...
• c9150f0 Add project walltime benchmarks for Ruff (#30061)
• 64989ec [ty] Report invalid module globs once per override pattern (#30031)
• 367a563 [ty] Fix conditional type and tuple annotations (#29987)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions