Skip to content

Bump the development-version-updates group with 8 updates - #226

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/development-version-updates-90a69ef758
Aug 1, 2026
Merged

Bump the development-version-updates group with 8 updates#226
github-actions[bot] merged 1 commit into
mainfrom
dependabot/pip/development-version-updates-90a69ef758

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps the development-version-updates group with 8 updates:

Package From To
pylint-django 2.7.0 2.8.0
pre-commit 4.6.0 4.6.1
tomlkit 0.15.0 0.15.1
filelock 3.29.4 3.32.0
platformdirs 4.10.0 4.11.0
python-discovery 1.4.2 1.5.0
tzdata 2026.2 2026.3
virtualenv 21.5.1 21.7.0

Updates pylint-django from 2.7.0 to 2.8.0

Release notes

Sourced from pylint-django's releases.

Version 2.8.0 (11 Jul 2026)

New checks

  • Added format-html-interpolation (W5150) and mark-safe-interpolation (W5151) checks which warn when the format string of format_html() / format_html_join() or the argument of mark_safe() is built with an f-string, str.format(), %-formatting or + concatenation. Such values bypass Django's HTML escaping; pass them as arguments instead.

Other

  • CI now tests against Django 6.0
Changelog

Sourced from pylint-django's changelog.

Version 2.8.0

New checks


- Added ``format-html-interpolation`` (W5150) and ``mark-safe-interpolation`` (W5151) checks
  which warn when the format string of ``format_html()`` / ``format_html_join()`` or the
  argument of ``mark_safe()`` is built with an f-string, ``str.format()``, ``%``-formatting or
  ``+`` concatenation. Such values bypass Django's HTML escaping; pass them as arguments instead.

Other



- CI now tests against Django 6.0
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>

<ul>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/9cd335fa7cf85b44ad66f39876baaad11368f516&quot;&gt;&lt;code&gt;9cd335f&lt;/code&gt;&lt;/a> Updating release notes</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/39dbb5c3d3ca8eaac686b809d33f082e99222724&quot;&gt;&lt;code&gt;39dbb5c&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/20ecf099f5d6e861ec5317740c56b2344e599265&quot;&gt;&lt;code&gt;20ecf09&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/bf641aaff84ce2cbc5ecd1a52885734fd5002ab4&quot;&gt;&lt;code&gt;bf641aa&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/8b7953df366ace9edaad0b4b97821a89583c07b8&quot;&gt;&lt;code&gt;8b7953d&lt;/code&gt;&lt;/a> Updating testing matrix</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/3fdb2c01478650f9fccdcd1a3ebe7e36d15c5573&quot;&gt;&lt;code&gt;3fdb2c0&lt;/code&gt;&lt;/a> [pre-commit.ci] pre-commit autoupdate</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/f01056452f5998c1fcd5ca0c81425b0fcf5127f0&quot;&gt;&lt;code&gt;f010564&lt;/code&gt;&lt;/a> Added Django references</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/75c59ff30b8e9351d0a196d30c5e0148ec0e33b4&quot;&gt;&lt;code&gt;75c59ff&lt;/code&gt;&lt;/a> Added format-html-interpolation and mark-safe-interpolation checkers</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/4d1ff7b570bcdde68787b0a646415cdd8fa1f84d&quot;&gt;&lt;code&gt;4d1ff7b&lt;/code&gt;&lt;/a> [pre-commit.ci] auto fixes from pre-commit.com hooks</li>

<li><a href="https://github.com/pylint-dev/pylint-django/commit/ece47862d9a87a1e111dd37b3d65518abd6f46a2&quot;&gt;&lt;code&gt;ece4786&lt;/code&gt;&lt;/a> [pre-commit.ci] pre-commit autoupdate</li>

<li>See full diff in <a href="https://github.com/pylint-dev/pylint-django/compare/v2.7.0...v2.8.0&quot;&gt;compare view</a></li>

</ul>

</details>


<br />


Updates pre-commit from 4.6.0 to 4.6.1



Release notes

Sourced from pre-commit's releases.




pre-commit v4.6.1


Fixes








Changelog

Sourced from pre-commit's changelog.




4.6.1 - 2026-07-21


Fixes








Commits

    

  • 242ce8a v4.6.1
    • 

  • 766e550 Merge pull request #3727 from pre-commit/dedupe
    • 

  • 1558d06 Merge pull request #3726 from pre-commit/exists-faster
    • 

  • 8a1c47a avoid duplicate files in --all-files during conflict
    • 

  • 2e01c99 faster check of rev existing locally as a commit
    • 

  • 3613bf2 Merge pull request #3701 from pre-commit/autoupdate-repos
    • 

  • 1d811d9 Return an error for invalid --repo
    • 

  • 374d354 Merge pull request #3711 from damonbayer/dmb_JULIA_DEPOT_PATH
    • 

  • 1e7994f set JULIA_DEPOT_PATH
    • 

  • b2b9119 Merge pull request #3719 from pre-commit/npm-unknown-options
    • 

  • Additional commits viewable in compare view
    • 







Updates tomlkit from 0.15.0 to 0.15.1



Release notes

Sourced from tomlkit's releases.




0.15.1


What's Changed






... (truncated)





Changelog

Sourced from tomlkit's changelog.




[0.15.1] - 2026-07-17


Changed


    

  • Speed up membership tests (key in ...) on Container, Table and InlineTable with native __contains__ implementations, avoiding the inherited MutableMapping round-trip through __getitem__ (which resolves the value and builds an exception on every absent key). (#483)
    • 

  • Speed up parsing by making Source index-based: it now tracks an integer position over the input string instead of materializing a list of (index, char) tuples up front, so construction is O(1) and state save/restore no longer copies an iterator. (#489)
    • 

  • Speed up parsing by scanning character runs in bulk: Source.advance_while/advance_until consume a whole run of whitespace, bare-key or number characters in a single pass over the input string instead of one inc() call per character. (#490)
    • 

  • Speed up parsing of single-line strings by bulk-appending the run of ordinary characters up to the next delimiter, backslash or control character in one pass, instead of one character at a time. (#491)
    • 

  • Speed up parsing by removing the internal TOMLChar wrapper: the parser now reads plain str characters from Source and detects end-of-input positionally, avoiding a per-character object construction and method dispatch. (#492)
    • 

  • Speed up parsing by comparing StringType members by identity (is) instead of building a set on every is_basic/is_literal/is_singleline/is_multiline call, avoiding millions of enum hashes while parsing. (#502)
    • 

  • Speed up merging super tables by merging in place instead of deep-copying the growing target on every merge, turning the parse of documents with many subtables under a shared super table (e.g. consecutive [a.b.c] / [a.b.d] headers) from O(n²) into O(n). (#503)
    • 

  • Speed up membership tests (key in ...) on out-of-order tables with a native OutOfOrderTableProxy.__contains__, completing #483 for the last mapping type that still inherited the slow MutableMapping mixin (which resolves the value and builds an exception on every absent key). (#515)
    • 

  • Speed up parsing documents with many dotted keys or table headers sharing a prefix by validating out-of-order tables incrementally: each new fragment is merged into a cached validation container once, instead of re-merging (and deep-copying) every earlier fragment on each append, turning a super-cubic worst case into linear time (80 shared-prefix dotted keys: ~8 s → ~10 ms). (#479)
    • 

  • Speed up parsing of arrays that close right after a value (e.g. the files = [...] blocks that dominate lock files): the parser no longer attempts to read a value while sitting on the closing ], which previously built an UnexpectedCharError just to discard it — and constructing that exception eagerly computes a line/column by scanning the whole document, making it O(document size) per such array. (#517)
    • 

  • Speed up parsing of multiline strings by bulk-appending the run of ordinary characters — across raw line feeds and tabs — up to the next delimiter, backslash, carriage return or control character, instead of one character at a time. This extends to """/''' bodies the single-line fast path added in #491; a \r still stops the scan so \r\n stays validated and byte-for-byte preserved. (#518)
    • 

  • Speed up unwrap() (converting a parsed document to a plain dict) by resolving each key directly from the container's key map instead of iterating the inherited MutableMapping view, which rebuilt a SingleKey from the bare string for every key just to re-look-up the value. Out-of-order tables still resolve through their proxy, so their validation is unchanged. (#521)
    • 

  • Speed up rendering (as_string() / dumps()) of inline tables with many keys by precomputing the last-key and last-deleted-element indices in a single pass, instead of rescanning the remaining body on every separator comma — turning an O(n²) render into O(n). (#525)
    • 

  • Raise on malformed array element instead of dropping it, (#527)
    • 



Fixed


    

  • Fix string() dropping a leading newline of a multiline string on round-trip: a value beginning with a newline is now rendered with an extra leading newline (the one the parser trims after the opening delimiter) so it survives re-parsing.
    • 

  • Fix invalid serialization with a duplicated comma when removing a non-edge element from a parsed inline table. (#486)
    • 

  • Fix invalid serialization with a duplicated comma when appending or inserting into a comma-first formatted array. (#499)
    • 

  • Fix ParseError when a sub-table extends the last element of an array of tables after an unrelated table. (#261)
    • 

  • Fix unparseable serialization when adding a key to a dotted-key table inside an inline table. (#500)
    • 

  • Fix a table replaced by a plain value being serialized inside the preceding table's body when other tables follow; the value now moves before the first table like other root-level values. (#504)
    • 

  • Fix assigning a table over a dotted key (e.g. doc["a"] = {...} where a came from a.b = ...): the dotted prefix was duplicated onto the new [a] header, and the header then swallowed any sibling that follows it on round-trip. The replacement now renders as a plain table and, when needed, moves before the inline entries (values and dotted keys) it would otherwise capture. (#513, #524)
    • 

  • Restore dumps() rendering mapping-like wrappers around a parsed document (e.g. dotty_dict's Dotty) through their delegated as_string, preserving the original table order and layout instead of re-encoding through a plain dict — a 0.15.0 regression. (#482)
    • 

  • Fix uncontrolled recursion when parsing deeply nested documents: crafted input could crash the process with a RecursionError. Values nested more than 100 levels deep and keys with more than 100 dotted fragments now raise ParseError. (#459)
    • 

  • Fix comment() producing invalid TOML for a multiline string by prefixing every line with #, not just the first. (#449)
    • 

  • Fix the separator comma being swallowed by a trailing comment when appending a key to a multiline inline table, leaving the new key without a separator so the result no longer round-trips. (#512)
    • 

  • Fix a KeyAlreadyPresent error when parsing or accessing an out-of-order table whose array-of-tables elements are split across the table's parts. (#505)
    • 

  • Out-of-order value-vs-table and dotted-key-vs-table redefinitions are now rejected at parse time instead of being silently accepted or raising only on access. The parser also detects when a non-dotted key is a prefix of an existing dotted key, matching the stdlib tomllib behaviour. (#523)
    • 

  • Reject tables inserted into inline tables instead of serializing invalid TOML. (#531)
    • 

  • Fix assigning an array of tables over a dotted key (e.g. doc["a"] = aot(...) where a came from a.b = ...): the new [[a]] header kept the dotted key's inline position and swallowed the following dotted sibling on round-trip. The array of tables now renders past the inline entries it would otherwise capture, mirroring the table fix for #513. (#542)
    • 

  • Fix a new top-level scalar being captured by a table rendered from a dotted key: appending a scalar after a dotted-key entry (e.g. a.b = 1) whose table had gained a [a.c]-style child placed the scalar inside that table's scope, silently re-nesting it on round-trip. Scalars now move before such an entry, like they do before regular tables. (#543)
    • 

  • Fix invalid serialization with a duplicated [table] header when adding a key to an out-of-order table whose concrete header is declared after its sub-tables; the new key now lands in the existing concrete part instead of giving the header-less super part a second header. (#545)
    • 

  • Fix a table's display name (its exact header spelling, including whitespace and quoting) being normalised when the table is assigned onto itself, e.g. doc[k] = doc[k] rewriting [keys .'a'.'c'] to [keys.a.'c']. (#291)
    • 

  • Fix missing newlines when appending a key after a dotted inline table, including when the original document has no trailing newline. (#533)
    • 

  • Preserve trailing whitespace when replacing a super table, including assigning it onto itself. (#534)
    • 

  • Fix str() and repr() of out-of-order table proxies to show their merged values. (#536)
    • 

  • Reject decimal integer literals that exceed Python's integer-string conversion limit instead of coercing them to infinity. (#538)
    • 








Commits

    

  • 1bd7e3b chore: release 0.15..1
    • 

  • 94e62fb Float is not a sequence  (#563)
    • 

  • 495a42e Fix top-level scalar captured by a table rendered from a dotted key (#550)
    • 

  • 21a4942 reject a comment containing line breaks in Item.comment and add_line (#544)
    • 

  • 8cd44f5 fix: preserve leading newline of multiline string built with string() (#551)
    • 

  • 67d3e86 Fix array of tables replacing a dotted key swallowing the next sibling (#542)...
    • 

  • e23a254 fix: avoid duplicate table header when adding a key to an out-of-order table ...
    • 

  • 34e51e2 Update CHANGELOG.md to reflect recent fixes and enhancements
    • 

  • b48c094 reject overlong decimal integer instead of coercing to inf (#538)
    • 

  • cc05afa Represent out-of-order table proxies with merged values (#536)
    • 

  • Additional commits viewable in compare view
    • 







Updates filelock from 3.29.4 to 3.32.0



Release notes

Sourced from filelock's releases.




3.32.0



What's Changed



Full Changelog: https://github.com/tox-dev/filelock/compare/3.31.2...3.32.0


3.31.2



What's Changed



Full Changelog: https://github.com/tox-dev/filelock/compare/3.31.1...3.31.2


3.31.1



What's Changed



Full Changelog: https://github.com/tox-dev/filelock/compare/3.31.0...3.31.1


3.31.0



What's Changed



Full Changelog: https://github.com/tox-dev/filelock/compare/3.30.3...3.31.0


3.30.3



What's Changed



New Contributors



Full Changelog: https://github.com/tox-dev/filelock/compare/3.30.2...3.30.3





... (truncated)





Changelog

Sourced from filelock's changelog.




###########
Changelog
###########


.. towncrier-draft-entries:: Unreleased


.. towncrier release notes start




3.32.2 (2026-07-29)




    

  • A SoftReadWriteLock or SoftFileLease acquire whose heartbeat thread fails to start now unlinks its marker and
hands the claim back, instead of leaving an unrefreshed marker a peer takes while the caller believes it still holds
the lock. :pr:691
    • 





3.32.1 (2026-07-26)




    

  • Canceling an AsyncSoftReadWriteLock acquire now releases the claim instead of leaking a marker whose heartbeat
wedges every contender. :pr:686
    • 





3.32.0 (2026-07-21)




    

  • SoftReadWriteLock closes the directory handle it opens to scan for readers as soon as a scan stops early, rather
than holding it until the generator is collected. :pr:685
    • 

  • Declare support for Python 3.15 and run the test suite against it and its free-threaded build, both currently in beta. :pr:683
    • 

  • The source distribution ships the capability probes the tests import, and reading one no longer needs coverage
installed, so the suite runs from an unpacked sdist instead of failing on a missing coverage_pragmas. :pr:685
    • 





3.31.2 (2026-07-21)




    

  • filelock imports again on runtimes whose errno omits ENOTSUP, such as GraalPy, where importing the package
raised ImportError. It probes the code instead, preferring ENOTSUP, falling back to EOPNOTSUPP where that
name is absent, and dropping to ENOSYS/EXDEV where neither exists. Platforms defining ENOTSUP keep their
behavior. :pr:681
    • 





3.31.1 (2026-07-20)




    

  • A SoftFileLease acquired on one thread keeps its claim when another thread fails to acquire the same lease object,
so its heartbeat carries on refreshing the marker instead of being torn down and letting a peer take the live claim. :pr:680
    • 








... (truncated)





Commits

    

  • 76525e6 Release 3.32.0
    • 

  • 9824d15 🐛 fix(packaging): let an unpacked sdist run the test suite (#685)
    • 

  • f6c41e9 👷 ci: add Python 3.15 to the test matrix (#683)
    • 

  • caeb1c9 Release 3.31.2
    • 

  • 60eda0f 🐛 fix(strict): tolerate an errno without ENOTSUP (#681)
    • 

  • c1b2e6f Release 3.31.1
    • 

  • 9fd7de5 scope a lease's claim to the context that acquired it (#680)
    • 

  • 2b3ad2c ♻️ refactor(coverage): key exclusions on probed capability (#679)
    • 

  • 3b66fdc Release 3.31.0
    • 

  • 166b2b5 ✨ feat(platform): support Termux/Android (#678)
    • 

  • Additional commits viewable in compare view
    • 







Updates platformdirs from 4.10.0 to 4.11.0



Release notes

Sourced from platformdirs's releases.




4.11.0



What's Changed



Full Changelog: https://github.com/tox-dev/platformdirs/compare/4.10.1...4.11.0


4.10.1



What's Changed



Full Changelog: https://github.com/tox-dev/platformdirs/compare/4.10.0...4.10.1







Changelog

Sourced from platformdirs's changelog.




###########
Changelog
###########


.. towncrier-draft-entries:: Unreleased


.. towncrier release notes start




4.11.0 (2026-07-21)




    

  • Declare support for Python 3.15 and run the test suite against it, currently in beta. :pr:512
    • 





4.10.1 (2026-07-18)




    

  • Stop leaking memory on repeated Windows folder lookups. get_win_folder_via_ctypes defined a fresh ctypes
structure on every call, and each one registered a pointer type that was never released; the resolver is now built
once and reused. :pr:507
    • 





4.10.0 (2026-05-28)




    

  • Add :func:~platformdirs.user_publicshare_dir, :func:~platformdirs.user_templates_dir,
:func:~platformdirs.user_fonts_dir, and :func:~platformdirs.user_preference_dir :pr:491
    • 

  • Add :func:~platformdirs.user_projects_dir backed by $XDG_PROJECTS_DIR :pr:490
    • 

  • Return only the first path from :func:~platformdirs.site_config_path on macOS when multipath is set :pr:488 -
by :user:lphuc2250gma
    • 





4.9.6 (2026-04-09)




    

  • Fix macOS XDG variables leaking across :func:~platformdirs.user_config_dir, :func:~platformdirs.user_data_dir, and
:func:~platformdirs.user_state_dir when only some are set :pr:473 - by :user:Goddesen
    • 

  • Avoid duplicate site directories in Unix :meth:~platformdirs.PlatformDirs.iter_config_dirs and
:meth:~platformdirs.PlatformDirs.iter_data_dirs when use_site_for_root is active :pr:469 - by :user:viccie30
    • 





4.9.4 (2026-03-05)




    

  • Respect XDG_CONFIG_HOME when reading the user-dirs configuration :pr:453 - by :user:bysiber
    • 

  • Create the directory in Android :func:~platformdirs.user_log_dir and :func:~platformdirs.user_runtime_dir when
ensure_exists is set :pr:452 - by :user:bysiber
    • 








... (truncated)





Commits

    

  • 2140495 Release 4.11.0
    • 

  • a562df9 👷 ci: run the test suite against Python 3.15 (#512)
    • 

  • 7c764c4 [pre-commit.ci] pre-commit autoupdate (#511)
    • 

  • 2e74013 Release 4.10.1
    • 

  • 3076722 📝 docs(changelog): rebuild against release history (#510)
    • 

  • 42751ce 🚀 ci(release): towncrier changelog + publish on tag push (#509)
    • 

  • d2e5756 fix(windows): stop leaking ctypes pointer types on repeated calls (#507)
    • 

  • 4f52c4f build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 in the all group (#506)
    • 

  • f68e56f build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 in the all group (#504)
    • 

  • 806560b build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 in the all group (#502)
    • 

  • Additional commits viewable in compare view
    • 







Updates python-discovery from 1.4.2 to 1.5.0



Release notes

Sourced from python-discovery's releases.




v1.5.0



What's Changed



Full Changelog: https://github.com/tox-dev/python-discovery/compare/1.4.4...1.5.0


v1.4.4



What's Changed



New Contributors



Full Changelog: https://github.com/tox-dev/python-discovery/compare/1.4.3...1.4.4


v1.4.3



What's Changed



Full Changelog: https://github.com/tox-dev/python-discovery/compare/1.4.2...1.4.3







Changelog

Sourced from python-discovery's changelog.




Packaging updates and notes for downstreams - 1.5.0


    

  • Declare support for Python 3.15 and run the test suite against it, currently in beta. (:issue:104)
    • 





v1.4.4 (2026-07-08)




Bug fixes - 1.4.4


    

  • Parse the debug build flag in interpreter specs - python3.13d and Debian's python3.13-dbg /
python3.13-debug now select a Py_DEBUG interpreter instead of being misread as an ISA named dbg.
Resolving a virtualenv to its base interpreter also checks the free-threaded and debug ABI flags, so a debug or
free-threaded environment no longer resolves to a release build of the same version - by :user:gaborbernat. (:issue:96)
    • 





v1.4.3 (2026-07-03)




Packaging updates and notes for downstreams - 1.4.3


    

  • Constrain the hatchling build requirement per Python version so sdist builds resolve a compatible backend on the
declared >=3.8 floor - hatchling>=1.28 dropped Python 3.9, leaving 3.8/3.9 unbuildable from source - by
:user:gaborbernat. (:issue:92)
    • 





v1.4.2 (2026-06-11)









Commits

    

  • 7889874 release 1.5.0
    • 

  • cb3ccb6 👷 ci: add Python 3.15 to the test matrix (#104)
    • 

  • 3dc250f [pre-commit.ci] pre-commit autoupdate (#103)
    • 

  • 6603012 📦 build: move dev extras to PEP 735 dependency groups (#102)
    • 

  • 8df9588 Replace prettier with mdformat and yamlfmt (#101)
    • 

  • de863fa build(deps): bump astral-sh/setup-uv from 8.3.1 to 8.3.2 (#100)
    • 

  • 61ffbc0 build(deps): bump astral-sh/setup-uv from 8.3.0 to 8.3.1 (#99)
    • 

  • 1ea2dcf [pre-commit.ci] pre-commit autoupdate (#98)
    • 

  • 8c8293a build(deps): bump astral-sh/setup-uv from 8.2.0 to 8.3.0 (#97)
    • 

  • 02a5c6e release 1.4.4
    • 

  • Additional commits viewable in compare view
    • 







Updates tzdata from 2026.2 to 2026.3



Release notes

Sourced from tzdata's releases.




2026.3: Release of upstream tzdata 2026c


Version 2026.3


Upstream version 2026c released 2026-07-08T17:23:58+00:00


Briefly:


Alberta moved to permanent -06 on 2026-06-18. Morocco moves to permanent +00 on
2026-09-20. More integer overflow bugs have been fixed in zic.


Changes to future timestamps


Alberta’s 2026-03-08 spring forward was its last foreseeable clock change, as it
moved to permanent -06 thereafter.  (Thanks to Roozbeh Pournader and others.)
Model this with its traditional abbreviation CST.  Although the change to
permanent -06 legally took place on 2026-06-18, temporarily model the change to
occur on 2026-11-01 at 02:00 instead, for the same reason we introduced a
similarly temporary hack for British Columbia in 2026b.


Although another TZDB release will likely be needed soon because Northwest
Territories will likely follow Alberta, the legal formalities have not yet taken
place.


Morocco plans to move back to permanent UTC, without daylight saving time
transitions, on 2026-09-20 at 02:00.  This also affects Western Sahara.


Changes to commentary


Northwest Territories is expected to move to permanent -06 prior to 2026-11-01
02:00, when clocks would otherwise fall back.  (Thanks to Tim Parenti and James
Bellaire.)  Model this with its traditional abbreviation CST.  Unfortunately the
change is not yet official, so it is currently present only as comments that can
be uncommented as needed.







Changelog

Sourced from tzdata's changelog.




Version 2026.3


Upstream version 2026c released 2026-07-08T17:23:58+00:00


Briefly:


Alberta moved to permanent -06 on 2026-06-18. Morocco moves to permanent +00 on
2026-09-20. More integer overflow bugs have been fixed in zic.


Changes to future timestamps


Alberta’s 2026-03-08 spring forward was its last foreseeable clock change, as it
moved to permanent -06 thereafter.  (Thanks to Roozbeh Pournader and others.)
Model this with its traditional abbreviation CST.  Although the change to
permanent -06 legally took place on 2026-06-18, temporarily model the change to
occur on 2026-11-01 at 02:00 instead, for the same reason we introduced a
similarly temporary hack for British Columbia in 2026b.


Although another TZDB release will likely be needed soon because Northwest
Territories will likely follow Alberta, the legal formalities have not yet taken
place.


Morocco plans to move back to permanent UTC, without daylight saving time
transitions, on 2026-09-20 at 02:00.  This also affects Western Sahara.


Changes to commentary


Northwest Territories is expected to move to permanent -06 prior to 2026-11-01
02:00, when clocks would otherwise fall back.  (Thanks to Tim Parenti and James
Bellaire.)  Model this with its traditional abbreviation CST.  Unfortunately the
change is not yet official, so it is currently present only as comments that can
be uncommented as needed.









Commits

@dependabot
Bump the development-version-updates group with 8 updates
e0cf4a0 
Bumps the development-version-updates group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [pylint-django](https://github.com/pylint-dev/pylint-django) | `2.7.0` | `2.8.0` |
| [pre-commit](https://github.com/pre-commit/pre-commit) | `4.6.0` | `4.6.1` |
| [tomlkit](https://github.com/python-poetry/tomlkit) | `0.15.0` | `0.15.1` |
| [filelock](https://github.com/tox-dev/py-filelock) | `3.29.4` | `3.32.0` |
| [platformdirs](https://github.com/tox-dev/platformdirs) | `4.10.0` | `4.11.0` |
| [python-discovery](https://github.com/tox-dev/python-discovery) | `1.4.2` | `1.5.0` |
| [tzdata](https://github.com/python/tzdata) | `2026.2` | `2026.3` |
| [virtualenv](https://github.com/pypa/virtualenv) | `21.5.1` | `21.7.0` |


Updates `pylint-django` from 2.7.0 to 2.8.0
- [Release notes](https://github.com/pylint-dev/pylint-django/releases)
- [Changelog](https://github.com/pylint-dev/pylint-django/blob/master/CHANGELOG.rst)
- [Commits](pylint-dev/pylint-django@v2.7.0...v2.8.0)

Updates `pre-commit` from 4.6.0 to 4.6.1
- [Release notes](https://github.com/pre-commit/pre-commit/releases)
- [Changelog](https://github.com/pre-commit/pre-commit/blob/main/CHANGELOG.md)
- [Commits](pre-commit/pre-commit@v4.6.0...v4.6.1)

Updates `tomlkit` from 0.15.0 to 0.15.1
- [Release notes](https://github.com/python-poetry/tomlkit/releases)
- [Changelog](https://github.com/python-poetry/tomlkit/blob/master/CHANGELOG.md)
- [Commits](python-poetry/tomlkit@0.15.0...0.15.1)

Updates `filelock` from 3.29.4 to 3.32.0
- [Release notes](https://github.com/tox-dev/py-filelock/releases)
- [Changelog](https://github.com/tox-dev/filelock/blob/main/docs/changelog.rst)
- [Commits](tox-dev/filelock@3.29.4...3.32.0)

Updates `platformdirs` from 4.10.0 to 4.11.0
- [Release notes](https://github.com/tox-dev/platformdirs/releases)
- [Changelog](https://github.com/tox-dev/platformdirs/blob/main/docs/changelog.rst)
- [Commits](tox-dev/platformdirs@4.10.0...4.11.0)

Updates `python-discovery` from 1.4.2 to 1.5.0
- [Release notes](https://github.com/tox-dev/python-discovery/releases)
- [Changelog](https://github.com/tox-dev/python-discovery/blob/main/docs/changelog.rst)
- [Commits](tox-dev/python-discovery@1.4.2...1.5.0)

Updates `tzdata` from 2026.2 to 2026.3
- [Release notes](https://github.com/python/tzdata/releases)
- [Changelog](https://github.com/python/tzdata/blob/master/NEWS.md)
- [Commits](python/tzdata@2026.2...2026.3)

Updates `virtualenv` from 21.5.1 to 21.7.0
- [Release notes](https://github.com/pypa/virtualenv/releases)
- [Changelog](https://github.com/pypa/virtualenv/blob/main/docs/changelog.rst)
- [Commits](pypa/virtualenv@21.5.1...21.7.0)

---
updated-dependencies:
- dependency-name: pylint-django
  dependency-version: 2.8.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: development-version-updates
- dependency-name: pre-commit
  dependency-version: 4.6.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-version-updates
- dependency-name: tomlkit
  dependency-version: 0.15.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: development-version-updates
- dependency-name: filelock
  dependency-version: 3.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: development-version-updates
- dependency-name: platformdirs
  dependency-version: 4.11.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: development-version-updates
- dependency-name: python-discovery
  dependency-version: 1.5.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: development-version-updates
- dependency-name: tzdata
  dependency-version: '2026.3'
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: development-version-updates
- dependency-name: virtualenv
  dependency-version: 21.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: development-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update Python code labels Aug 1, 2026
@github-actions
github-actions Bot enabled auto-merge August 1, 2026 20:26
@codacy-production

codacy-production Bot commented Aug 1, 2026

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity · 0 duplication

Metric Results
Complexity 0
Duplication 0

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@github-actions
github-actions Bot merged commit 4d72128 into main Aug 1, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/pip/development-version-updates-90a69ef758 branch August 1, 2026 20:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@github-actions github-actions[bot] github-actions[bot] approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file python Pull requests that update Python code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants